GDPR – PERSONAL DATA PROTECTION

Last updated: 10.09.2026

At Gift Art Candle, we respect the right to personal data protection and commit to processing customer and website visitor data responsibly, transparently, and in accordance with applicable legislation, including Regulation (EU) 2016/679 – GDPR.

This page briefly explains how we handle personal data and the rights you have.

1. Who are we?

The personal data controller is:

GIFT ART CANDLE SRL

Registered office: BĂTEȘTI, STR GEO BOGZA NR5, PRAHOVA COUNTY

CUI: 51921743

Trade Register No.: J2025040417009

Email: giftartcandle@gmail.com

Phone: 0727230612

Website: www.giftart-candle.ro

2. What personal data may we collect?

Depending on how you use our website, we may process the following categories of data:

first and last name;
delivery address;
phone number;
email address;
order information;
information about ordered products;
information required for invoicing;
payment information, to the extent communicated by the payment provider;
IP address;
technical information about the device and browser;
information about website usage;
cookie preferences;
other information you voluntarily provide to us.

We do not request or intentionally collect personal data that is not necessary for the purposes for which it is processed.

3. Why do we use your data?

Personal data may be used for:

processing and delivering orders;
customer communication;
order confirmation;
issuing tax documents;
payment processing;
handling requests and complaints;
managing returns and warranties;
improving the website and services;
preventing fraud and ensuring security;
complying with legal obligations;
sending commercial communications, when we have the necessary consent;
analyzing website traffic and performance, in accordance with the law.

4. What is the legal basis?

Personal data processing may be carried out, as appropriate, based on one of the following grounds:

Contract execution – for example, for processing and delivering an order.

Fulfillment of a legal obligation – for example, for keeping accounting and tax documents.

Consent – for example, for certain commercial communications or non-essential cookies.

Legitimate interest – when processing is necessary for the operation and security of our business, respecting the rights and freedoms of data subjects.

5. To whom may we transmit the data?

To process orders and provide requested services, data may be transmitted, as appropriate, to:

courier companies;
payment processors and providers;
IT service providers;
Shopify platform providers;
accounting service providers;
marketing and communication service providers, where applicable;
public authorities, when there is a legal obligation.

Data is not sold to third parties.

6. How long do we keep the data?

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as long as there is a legal obligation to retain it.

The retention period may vary depending on the type of data and the purpose of processing.

After the retention period expires, the data will be deleted or anonymized, to the extent possible.

7. Your Rights

In accordance with GDPR, you have the following rights:

Right of access

You can request information about the personal data we process about you.

Right to rectification

You can request the correction of inaccurate data or the completion of incomplete data.

Right to erasure

You can request the deletion of personal data in situations provided by law.

Right to restriction of processing

You can request the limitation of how we use your data in certain situations.

Right to data portability

Under the conditions provided by GDPR, you can request to receive certain data in a structured, commonly used and machine-readable format.

Right to object

You can object to certain forms of data processing, under the conditions provided by law.

Right to withdraw consent

When processing is based on consent, you can withdraw it at any time.

The withdrawal of consent does not affect the legality of processing performed before its withdrawal.

8. How can you exercise your rights?

To request access, modification, deletion, or other rights provided by GDPR, you can contact us at:

Email: giftartcandle@gmail.com

Phone: 07272670612

In your request, please specify as clearly as possible the right you wish to exercise and the information necessary to identify the request.

We will analyze and resolve the request within the period provided by applicable legislation.

9. Data Security

Gift Art Candle SRL takes reasonable technical and organizational measures to protect personal data against:

unauthorized access;
loss;
destruction;
unauthorized modification;
unauthorized disclosure;
misuse.

Access to data is limited to individuals and suppliers who need this information to perform their duties.

10. Cookies

Our website uses cookies and similar technologies for store operation, memorizing certain preferences, traffic analysis, and, where applicable, for marketing activities.

For detailed information, please consult the Cookie Policy.

11. Marketing and commercial communications

We may send commercial communications, such as offers, news, or promotions, only under the conditions provided by applicable legislation.

When your consent is required, it will be requested accordingly.

You can withdraw your consent for commercial communications at any time.

12. Children's Data

Our website is not specifically intended for children.

We do not intentionally collect personal data from children without the conditions provided by applicable legislation.

13. International Transfers

Depending on the services and applications used on the website, certain data may be processed by providers located outside the European Economic Area.

In such situations, we will ensure compliance with the conditions and guarantees provided by GDPR for international data transfers.

14. Complaints to the Supervisory Authority

If you believe that your data protection rights have been violated, you can contact us to try to resolve the situation.

You also have the right to file a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website: ANSPDCP

15. Modification of this policy

Gift Art Candle SRL reserves the right to update this page when necessary, including as a result of legislative, technological, or operational changes.

The updated version will be published on this page.