Protecting the right to personal data protection is a fundamental commitment of kerashop.ro. We therefore dedicate the necessary resources and efforts to processing your data in full accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and any other legislation applicable in Romania. Transparency is one of the essential principles of this legal framework. We have therefore prepared this document to explain how we collect, use, transfer and protect your personal data when you interact with us in connection with our products and services, including through our website or mobile applications.

We reserve the right to update and amend this Privacy Policy periodically to reflect changes in how we process your personal data or changes in legal requirements. If we make such changes, we will display the amended version of the Privacy Policy on our website. Please check this Privacy Policy periodically.

Categories of personal data we process

We generally collect your personal data directly from you, so you control the type of information you provide. For example, when you create an account on kerashop.ro, you provide your email address and first and last name.

On your personal page (My Account) on the Kerashop.ro platform, you can add further information, such as a photograph, gender, nickname, mobile telephone number, landline number, date of birth, education level, delivery addresses, an alternative email address, bank card details and other information. When you place an order, you provide information such as the product you wish to purchase, your first and last name, delivery address, billing details, payment method, telephone number and bank card details.

How long we keep your personal data

As a general rule, we store your personal data for as long as you have an account on the Kerashop.ro platform. You may ask us at any time to delete certain information or close your account. We will comply with these requests, subject to retaining certain information, including after account closure, where applicable law or our legitimate interests require this.

How we protect the security of your personal data

We are committed to securing personal data by implementing appropriate technical and organisational measures in accordance with industry standards. Your personal data is transmitted using state-of-the-art encryption algorithms and stored on secure servers, with data redundancy maintained.

We use the services of the payment processor Netopia Payments to process payments.

Despite the measures taken to protect your personal data, please be aware that transmitting information over the internet or other public networks is not completely secure. There is a risk that unauthorised third parties may view and use the data. We cannot be responsible for vulnerabilities in systems outside our control.