Privacy Policy

Privacy Policy 

General

This document governs the privacy policy on the velar.ro website (hereinafter referred to as the "website" or "online store").

The data operator of the online store is ALLURE TANSOR SRL, registered with the Trade Register under number J40/24671/19.12.2022, with registered office at Cooperativei Road No.20A, D Building, Ap.DA54, District 5, Bucharest, CUI 36051005.

Personal data collected by the Website Operator are processed in accordance with the provisions of Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR.

The Operator shall make special efforts to protect the data and information provided to it about website users. The Operator shall select and use with due care appropriate technical measures, including IT and organizational measures, which ensure the protection of the data to be processed, in particular the protection of the data against their provision to unauthorized persons, their disclosure, loss and destruction, their unauthorized alteration, as well as their processing in violation of applicable law.

The data controller does not intend to collect data about children under the age of 16.

In the online shop, so-called social plugins and other social media tools such as Facebook.com, X.com., Google.com or LinkedIn.com. offer customers the possibility to connect to the website of the online shop through them and to share or recommend the content of the website. The operator of these services may also process your personal data independently of us. In this case, the responsible party and the social plugin provider are jointly liable.

Personal Data

Responsible person - you can contact the person responsible for this website by:

E-mail: contact@velar.ro

Mail: ALLURE TANSOR SRL, Cooperativei Road No.20A, D Building, Ap.DA54, District 5, Bucuresti, ZIP 052755

Phone: +40735688889 Mon-Fri 10:00-17:00 EET

Objectives and legal basis for processing personal data

The personal data controller processes your personal data for the following purposes and areas:

By taking steps prior to the conclusion of the contract in response to your request (e.g. creation of an account), we process the data provided in the online shop registration form, i.e. your e-mail address and password, your gender; if your registration in the online shop was made using an external authentication service (such as Google, Facebook, X, LinkedIn), also your first and last name.

To provide services that require the creation of an account, such as order history records, order status inquiries, your data provided in the account and at the time of purchase will be processed; 

To provide services that do and do not require the creation of an account - your personal data provided in connection with your activity in the online shop and when placing an order will be processed;

In order to execute the contract for the sale of goods (e.g. delivery of ordered goods), we process the personal data provided by you when purchasing the goods, such as your name and surname, e-mail address, telephone number, delivery address, payment details;

In order to compile statistics on the use of certain functions in the online shop, to facilitate the use of the online shop and to ensure the cyber-security of the online shop, we process your personal data regarding your activity in the online shop and data on the time spent on each subpage of the online shop, search history, location, IP address, device ID, internet browser and operating system data;

To investigate, formulate and enforce claims; in order to defend ourselves in court proceedings and other law enforcement bodies, we may process your personal data provided when you purchased the goods or created your account, as well as other data necessary to prove the existence of a claim or arising from a court judgment or other legal process;

In order to investigate complaints, complaints and requests and to respond to requests, we process the personal data provided by you in the contact form, complaints, complaints and requests or to respond to requests in another form and some of the personal data provided by you in the account, as well as data relating to the order and/or other services provided by us that are the cause of a complaint, complaint or request and data contained in documents attached to complaints, complaints and requests;

For marketing our goods and services as well as the services of our business partners, including remarketing, we process the personal data you have entered when creating and updating your account, data about your activity in the online shop, including orders, which are recorded and stored via cookies, in particular order history, search history, clicks on online shops, login and registration data, your activity related to our communication with you. In the case of remarketing, we use data about your activity to send you marketing information outside of the online shop and use the services of external providers for this purpose. These services consist of displaying our messages on other websites, not just the online shop website. You can find detailed information about this in our cookie policy;

In order to organize contests and loyalty programs, for example, notifications about points earned, win notifications, and to advertise our offer, we use the personal data you provide when you create your account, register for a contest or loyalty program. You will find detailed information on this in the terms and conditions of a particular contest or loyalty program;

To research the market and opinions of us or our business partners, e.g. order information, your data provided in your account or when purchasing goods, e-mail address. Data collected as part of market and opinion research will not be used by us for advertising purposes. You will find the exact tips in the information in the questionnaire or when you enter your data. 

Newsletter: If you subscribe to the newsletter, only the data you provided when registering for the newsletter will be used (consent in accordance with Art. 6 par. 1 p. 1 lit. A GDPR). You can unsubscribe from the newsletter at any time by sending a message to the person responsible or by clicking on the link included in the newsletter. Once unsubscribed, we will remove your e-mail address from our mailing list. Newsletters are sent to you via an external provider - newsman.ro. The privacy policy is available at the link: https://www.newsman.ro/confidentialitate

Personalized advertising and social media plugins

In order to ensure full clarity of our activities, we would like to point out in particular that the controller may use personal data to prepare and present personalized advertising, including through the use of third-party tools and cookies, which will be discussed in more detail in the remainder of this document in relation to cookies.

Due to the use of so-called social plugins, including those that allow the customer to connect to the online shop account with accounts on social and similar websites, such as Facebook.com, Twiter.com or Google.com, as well as to share content with other users of these websites with the provider of an appropriate portal. The providers of these services may also process your personal data as sole data controllers. 

When you visit our online shop, the browser you are using may establish a direct connection to the servers of the service providers who provide these plugins/tools, whereby these providers may receive information about your visit to our website and, among other things, your IP address. Such information may be sent regardless of whether you have an account on such company's website or are currently logged into that company. 

If you have an account with and are logged in to such a provider, this information may also be linked and associated with your social network account. When you use the plugin, particularly when you use your account on the website of an external provider to connect to your account in our store, it is possible that information about this may be sent directly to these providers. Also, certain content may be published as part of your profile on social media sites and may be visible to other users of these portals, in particular to those with whom you connect.

If you do not want plugin/tool/social network providers to link the data collected during your visits to our online shop to your profile with a particular provider, please log out of that social network before visiting our shop website. Please remember that you can also prevent plugins from loading on the site by using the appropriate mechanisms in the browser you are using - depending on its settings.

The operator tries to take care to select only software, including the above plugins, from reputable entities that widely define their personal data protection principles. The purposes, scope and rules of collection and further processing of personal data by these companies can be found in their privacy policies. We recommend that you familiarize yourself with them. You will find them, among others, at the following addresses:

http://www.facebook.com/policy.php

https://twitter.com/en/privacy

https://policies.google.com/privacy

https://www.linkedin.com/legal/privacy-policy

Categories of personal data concerned

The operator processes the following categories of personal data concerned:

     ● Contact details;

     ● Data relating to activity in the online shop;

     ● Data relating to orders in the online shop;

     ● Data relating to complaints, claims and requests;

     ● Data relating to marketing services.

The voluntary nature of providing personal data

Your provision of the requested personal data is voluntary and is a prerequisite for the provision of services by the controller through the website.

Data processing time

Personal data will be processed for the period necessary to fulfill orders, services, marketing activities and other services provided to the user. Personal data are deleted in the following cases:

     ● when the data subject requests erasure or withdraws consent;

     ● where the data subject to whom the data relates has been inactive for more than 10 years (the inactive contact is calculated from January 1 following the date of last contact);

Certain data, such as e-mail address, first name and surname, may be stored for the next 3 years for the purpose of obtaining evidence, investigating complaints, claims and grievances related to the services provided through the website. This data will not be used for marketing purposes. Data relating to paid services, contests and loyalty programs will be stored for a period of 5 years from the end of the calendar year in which the tax period expires.Data relating to non-registered users will be stored for a period equivalent to the lifecycle of cookies stored on devices or until deleted by the user on their device. Your personal data relating to your preferences, behavior, and selection of marketing content may be used as the basis for automated decisions to determine website sales opportunities.

Recipients of personal data

Your personal data will be transmitted by us to the following categories of recipients:

- State bodies, such as public prosecutor's office, police, upon their request,

- service providers we use to operate the website, for example to process your order or payment. Depending on contractual agreements and circumstances, these carriers/companies act on our behalf or determine the purposes and methods of processing themselves.

Provider: DHL with Purpose: Package delivery

Provider: FedEx with Purpose: Package delivery

Provider: Dazoot Software SRL (Newsman.ro) with Purpose: Newsletter marketing system

Provider: Stripe (Stripe.com) with Purpose: Online shop payment processing

Provider: Intelligent IT SRL (Smartbill.ro) with Purpose: Invoicing and management

Personal data may also be transferred to other companies - tool providers whose cookies we use. For information about these providers and the purposes for which they use cookies, please see the "Cookies" section later in this document.

Our providers are mainly based in countries within the European Economic Area (EEA), but also outside the EEA. Your personal data transferred outside of the EEA is protected by appropriate legal safeguards to ensure that our providers offer a high level of protection of personal data. These safeguards derive in particular from an obligation to apply the standard contractual clauses adopted by the Commission (EU) or to participate in the Privacy Shield program established by Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of protection offered by the EU-US Privacy Shield.

Rights of the data subject

Right of access to data (Art. 15 GDPR) - You have the right to obtain information from the controller about the processing of your personal data and, if so, you have the right to have access to your personal data:

Have access to your personal data;

To be informed about the purposes of the processing, the categories of personal data to be processed, the recipients or categories of recipients of such data, the intended storage period of your data or the criteria for determining that period, your rights under the GDPR and the right to lodge a complaint with the supervisory authority, the source of such data, the automated decision-making process, including profiling, and the safeguards applied when transferring such data outside the European Union;

Receive a copy of your personal data.

Right to data rectification (Art. 16 GDPR) - If your personal data are not accurate, you have the right to request the controller to rectify your personal data without delay. You also have the right to request the controller to complete your personal data. If you have a customer account, you can correct or complete your data after logging in. 

Right to erasure / right to be forgotten (Art. 17 GDPR) - You can ask the operator to do this if:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

You have withdrawn your consent, to the extent personal data was processed on the basis of your consent;

Your personal data has been processed unlawfully;

You have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data relates to direct marketing;

You have objected to the processing of your personal data in connection with processing necessary for the performance of tasks carried out in the public interest or processing necessary for purposes resulting from the legitimate interests of the controller or of third parties. Notwithstanding a request for erasure of personal data, the controller may continue to process your personal data in order to investigate, assert or defend claims. You will be informed of this. 

Right to restriction of processing (blocking of data) (Art. 18 GDPR) - You can request this if:

If you question the accuracy of your personal data - the personal data controller restricts the processing of your personal data for a certain period of time during which the accuracy of your personal data will be verified;

If the processing of your personal data is unlawful and you request that the processing of your personal data be restricted (instead of deleted);

Your personal data is no longer necessary for processing, but is necessary for identifying, asserting or defending your claims;

You have objected to the processing of your personal data - until it is established that the legitimate interests of the controller outweigh the grounds stated in your objection.

Right to object (Art. 21 GDPR) - You may object at any time to processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes resulting from the legitimate interests of the controller or a third party, processing for direct marketing purposes. 

Right to data portability (Art. 20 GDPR) - You have the right to receive your personal data from the controller in a structured, commonly used and machine-readable format and to send it to another controller. You may also request that the controller sends your personal data directly to another controller (if technically feasible).

Right to withdraw your consent - You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of your consent prior to your withdrawal.

Filing a complaint about data protection breaches with supervisory authorities (Art. 77 GDPR) - If you believe that your rights have been violated in relation to the collection, processing or use of your personal data, you can contact the competent data protection supervisory authority, in particular in the Member State where you have your habitual residence, place of work or where the alleged breach took place. 

You may exercise any of your rights by contacting the controller using the contact details provided in this document. The person responsible will inform you immediately - and in any event within one month of receipt of your request - of the action taken on your request. If necessary, the monthly period may be extended by a further two months due to the complexity of the request or the number of other requests. In any event, the personal data controller will inform you of such an extension within one month of receipt of your request, indicating the reasons for the delay.

Cookies

General

When you browse websites, so-called "cookie" files, hereinafter referred to as "cookies", are small files stored by a website on your terminal (computer). They are used to ensure that websites function properly. These files allow you to identify the software you are using and to tailor the website to your needs. In principle, cookies contain the name of the domain from which they come, the length of time they are stored on the device and the value assigned. 

Security

The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or harmful programs to enter your devices through cookies. 

Types of cookies:

We use two types of cookies: 

● Session cookies, which are stored on your device and remain there only until the end of your browsing session. All stored data is then permanently deleted from your device's memory. The mechanism does not allow persistent cookies to collect personal information or confidential information from your device.

● Persistent cookies are stored on your device and remain there until they are deleted. When a particular browser session ends or when your device is turned off, they are not deleted from your device. The persistent cookie mechanism does not allow you to download personal data or confidential information from your device.

Objectives

We also use cookies from external/carrier companies for the following purposes:

Online store setup; 

To generate statistics to help understand how website users use the website, thus enabling the improvement of the website's structure and content by means of analysis tools provided by Google Analytics, whose administrator is Google Inc. based in the USA. The privacy policy is available at the link: https://policies.google.com/privacy?hl=ro

Personalization and display of advertisements through Google Ads tools, administered by Google Inc. based in Ireland.

Login to your customer account through Google, whose responsible party is Google Inc. based in Ireland. The privacy policy is available at the link: https://policies.google.com/privacy?hl=ro

Registration on the site and popularization of the site using the social network - Facebook.com, whose administrator is Facebook Ins. based in the USA or Facebook Ireland based in Ireland. The privacy policy is available at the link: https://www.facebook.com/policies/cookies/ https://www.facebook.com/legal/terms/page_controller_addendum 

Popularization of the website via the social networking site - instagram.com, the responsible party of which is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The privacy policy is available at the link: https://help.instagram.com/519522125107875?helpref=page_content

https://help.instagram.com/581066165581870 

Support and execution of payment processes in the online shop through the systems of the external electronic payment provider Stripe, https://stripe.com/contact. The Privacy Policy is available at the link: https://stripe.com/privacy

Personalized ads

Cookies may be used by web networks, including Google and Facebook, to show you personalized and tailored advertisements. For this purpose, information may be stored, in particular your internet activity, search terms and website usage time.

Personalized ads (so-called interest-based ads) are tools that help to better tailor ads to your interests and preferences.

Edit, deactivate, lock

To edit your preferences, which is processed by Google Web Network, you can use these tools: https://www.google.com/ads/preferences/ and https://policies.google.com/technologies/partner. Using your web browser settings or service configuration, you can independently change cookie settings at any time and set the conditions for storing and accessing cookies on your device. You can change these settings to block the automatic processing of cookies in your web browser settings or to inform you whenever cookies are placed on your device. Detailed information on the options and possibilities to manage cookies can be found in your software (web browser) settings.

ALLURE TANSOR SRL