Skip to content

Demo store

Legal

Privacy policy

What personal data we process when you shop with CALIMANI or write to us, why we need it, how long we keep it and how to exercise your rights under Regulation (EU) 2016/679 (GDPR).

Last updated:

Demo document — CALIMANI is a fictional brand; this text has no legal value.

Data controller

Your data controller is CALIMANI DEMO SRL, 7 Luminii Street, Bucharest, J40/0000/2026, VAT ID RO00000000. For any question about your data, write to salut@calimani.demo or to our registered office.

What data we process

  • Identity and contact details – first and last name, email, phone.
  • Delivery and billing details – address, county, town, postcode; for companies, the company name, VAT ID and Trade Register number.
  • Order details – products ordered, amounts, delivery and payment method, order history.
  • Payment details – we don’t store card data. The payment processor only sends us the transaction confirmation and, at most, the last four digits of the card.
  • Correspondence – messages sent through the contact form, by email or by phone.
  • Technical data – IP address, browser and device type, cookie preferences.

Purposes, legal bases and retention

Purpose
Processing and delivering orders
Legal basis (Art. 6 GDPR)
Performance of a contract – Art. 6(1)(b)
How long we keep it
For the contract’s duration plus 3 years
Purpose
Invoicing and accounting
Legal basis (Art. 6 GDPR)
Legal obligation – Art. 6(1)(c)
How long we keep it
10 years, under Romanian Accounting Law no. 82/1991
Purpose
Returns, warranty and repairs
Legal basis (Art. 6 GDPR)
Contract and legal obligation
How long we keep it
For the warranty period plus 3 years
Purpose
Answering messages and requests
Legal basis (Art. 6 GDPR)
Legitimate interest – Art. 6(1)(f)
How long we keep it
Up to 2 years after our last exchange
Purpose
Newsletter, only if you subscribe
Legal basis (Art. 6 GDPR)
Consent – Art. 6(1)(a)
How long we keep it
Until you withdraw consent
Purpose
Site security and fraud prevention
Legal basis (Art. 6 GDPR)
Legitimate interest – Art. 6(1)(f)
How long we keep it
12 months

Who we share data with

We never sell or rent your data. We share it only as far as needed with:

  • the courier companies delivering your order (Sameday, FAN Courier, Cargus);
  • the payment processor, for card payments;
  • our IT providers (hosting, email, e-invoicing), under contracts that meet Art. 28 GDPR;
  • our accountant and advisers, who are bound by confidentiality;
  • public authorities, only where the law requires it.

Transfers outside the EEA

Your data is stored in the European Union. Should a provider need to access it from outside the European Economic Area, the transfer only happens with appropriate safeguards, such as the European Commission’s standard contractual clauses.

Your rights

Under the GDPR you have the right to:

  • access – find out what data we hold about you (Art. 15);
  • rectification – correct inaccurate data (Art. 16);
  • erasure – ask us to delete your data, where the law allows (Art. 17);
  • restriction – temporarily limit processing (Art. 18);
  • portability – receive your data in a structured format (Art. 20);
  • object – to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time, without affecting earlier processing;
  • not be subject to solely automated decisions (Art. 22) – we don’t make any.

To exercise your rights, write to salut@calimani.demo. We reply within one month; for complex requests this may be extended by two more months, and we will tell you if so.

Your right to complain

If you believe your data is not being handled properly, you can complain to Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP) via www.dataprotection.ro (opens in a new tab). We’d still appreciate hearing from you first, so we can put things right.

How we protect data

We use encrypted connections (HTTPS), role-based access, strong passwords and two-factor authentication for internal accounts. Our providers are chosen partly for their security standards.

Children

The Site is not aimed at anyone under 16. If you learn that a child has sent us data without parental consent, let us know and we will delete it.

About this demo

In this demo shop nothing is sent to any server. Your bag, wishlist, demo account and form entries stay in your own browser (localStorage and sessionStorage), and you can clear them at any time from your browser settings.

Changes to this policy

We may update this policy when the law or our services change. The date of the latest update is shown at the top of the page; significant changes are also emailed to customers with an account.

A question about this document?

Write to salut@calimani.demo or use the contact page. We reply within one working day.

Get in touch