Processing of personal data

1. Who we are and how you can contact us

The online store Pantoful Galben is operated by Stema-Verde SRL , a Romanian legal entity with its registered office in Str. Semenic 2, Room 3, Postal Code 307220, Giroc, Timiș, Romania , registered with the Trade Register under no. J35/2730/07.08.2018 , having unique registration code RO39723410 .

For the purposes of data protection legislation, Stema-Verde SRL is a data controller .

For any questions related to the processing of personal data, you can contact us at:

• 📧 Email: pantofulgalbenofficialsite@gmail.com
• 📞 Phone: 0722 840 789
• 📍 Address: Str. Semenic 2, Room 3, 307220 Giroc, Timiș, Romania

2. What categories of data do we collect?

We collect personal data directly from you when you use our website, such as:

• Account data: name, surname, email address, password.
• Delivery and billing data: address, phone number, tax data (if applicable).
• Order data: products ordered, payment method, order value.
• Technical data: IP addresses, browser type, operating system, pages visited, data collected through cookies and similar technologies.

We do not intentionally collect sensitive data and do not wish to collect data from minors under 16 years of age. Authentication is done exclusively through an account created with an email address and password.

3. Purposes and grounds of processing

3.1 Provision of online store services

We process your data to manage your customer account, process orders, deliver products, issue invoices and provide customer support. This processing is necessary for the execution of the contract concluded with you and for the fulfillment of legal obligations (e.g. tax and accounting).

3.2 Improving services

We analyze user behavior on the site to optimize the shopping experience and develop new functionalities. This is based on our legitimate interest in improving and developing our business.

3.3 Marketing and commercial communications

We may send you information about offers, promotions or similar products via email or SMS and may display personalized recommendations on the site. For this we can use data about your behavior on the site (products viewed, added to cart, purchased).

We use marketing and analytics tools such as Meta Pixel (Facebook/Instagram) , TikTok Pixel , Google Analytics and Google Ads , which may act as independent operators.

We process this data based on your consent , which you can withdraw at any time via the unsubscribe link in emails or by contacting us.

3.4 Protection of legitimate interests

We may use the data to protect the security of the site and prevent fraud, to defend our rights, or to respond to legal requirements. The basis is our legitimate interest or applicable legal obligations .

4. How long do we keep data?

As a general rule, data is retained as long as you have an active account on the platform. You can request deletion of your account and data at any time. However, certain information may be retained subsequently, in accordance with legal obligations (e.g. accounting documents) or based on legitimate interest.

5. To whom do we transfer the data?

Your data may be transmitted to the following categories of recipients:

• Payment service providers – payment processors integrated into the Shopify platform.
• Marketing and analytics service providers – Meta, TikTok, Google Analytics, Google Ads.
• IT and hosting providers – for the operation of the site.
• Public authorities – if we are required by law.

6. Data transfers outside the EU/EEA

Generally, your data is stored in the European Economic Area (EEA). Where transferred outside the EEA, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

7. How we protect data

We apply technical and organizational measures to protect data, including encryption of transmissions and secure storage of information. However, transmitting data over the internet may present risks that are beyond our control.

8. Your rights

According to GDPR, you have the following rights:

• Right of access – to find out what data we process about you.
• Right to rectification – to request correction of inaccurate data.
• Right to erasure – to request deletion of data in certain situations.
• Right to restriction – to request limitation of processing.
• The right to portability – to receive data in a commonly used format or to transmit it to another operator.
• The right to object – including to direct marketing.
• The right not to be subject to automated decision-making – if it produces legal effects on you.

To exercise these rights, you can contact us at pantofulgalbenofficialsite@gmail.com .

9. Complaints

You have the right to file a complaint with the National Supervisory Authority for Personal Data Processing :

We recommend that you contact us first to try to resolve the situation amicably.

10. Changes to this policy

We may update this policy at any time. Any changes will be posted on the site and will be effective on the date of posting. We recommend that you periodically check the content of this page.