Last updated: June 20, 2025

This policy describes how LE ROSE DI CERA SRL, headquartered in Romania, Timiș County, Lugoj Municipality, Timișorii Street, no. 125, s.a.d. 2, VAT no. 28140489, as data controller, processes personal data of users who access the website www.lerosedicera.ro. The information applies exclusively to this website and does not cover any external links that may be accessed from it.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and the applicable national data protection laws. LE ROSE DI CERA SRL is committed to protecting user privacy and ensuring full transparency regarding the collection, use, and protection of personal data.

The personal data that may be collected include: full name, email address, phone number, billing and shipping addresses, messages submitted via contact forms, as well as technical data such as IP address, browser type, operating system, visited pages, visit duration, and traffic source. If third-party login methods are used, such as Google or Facebook, publicly available data from those accounts may also be collected.

The purposes of processing this data include fulfilling orders and executing contracts, meeting legal obligations (such as accounting records retention), sending commercial communications with the user’s explicit consent, analyzing traffic, and optimizing the website's performance. Data processing is based either on user consent, contract execution, legal obligations, or the legitimate interest of the controller.

Data is processed using automated and manual methods, following the principles of legality, fairness, and transparency. The controller implements all necessary technical and organizational measures to protect data against loss, theft, unauthorized access, or any form of unlawful processing.

Data may be shared with contractual partners providing essential services (such as couriers, hosting providers, online payment services, or email marketing platforms), with public authorities when required by law, or with data processors appointed in accordance with GDPR.

Processing is conducted within Romania and other EU member states. No data is transferred outside the European Economic Area unless adequate safeguards are in place in accordance with European legislation.

Data is stored for the duration of the contractual relationship and for the period required by applicable laws, including tax and accounting regulations. Data processed on the basis of consent will be retained until that consent is withdrawn. Users may withdraw their consent at any time without affecting the legality of prior processing.

Users have the following rights: the right to access their personal data, the right to rectify or erase data, the right to restrict processing, the right to object, the right to data portability, and the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

For any questions regarding personal data processing or to exercise your rights, please contact us at: contact@lerosedicera.ro.

Regarding cookies, the website uses essential cookies required for proper platform functionality, as well as analytical and marketing cookies used with the user's consent. These cookies collect information such as visited pages, navigation time, referral source, or shopping behavior. On first access to the site, users may accept or reject optional cookies. The data collected through cookies may be used to personalize the user experience and improve the provided content.

This privacy policy may be updated periodically. Any significant change will be communicated via a notice on the site. We recommend reviewing this page regularly to stay informed of any updates.