Legal
Privacy policy
What personal data we process when you shop with CALIMANI or write to us, why we need it, how long we keep it and how to exercise your rights under Regulation (EU) 2016/679 (GDPR).
Last updated:
Demo document — CALIMANI is a fictional brand; this text has no legal value.
Contents
Data controller
Your data controller is CALIMANI DEMO SRL, 7 Luminii Street, Bucharest, J40/0000/2026, VAT ID RO00000000. For any question about your data, write to salut@calimani.demo or to our registered office.
What data we process
- Identity and contact details – first and last name, email, phone.
- Delivery and billing details – address, county, town, postcode; for companies, the company name, VAT ID and Trade Register number.
- Order details – products ordered, amounts, delivery and payment method, order history.
- Payment details – we don’t store card data. The payment processor only sends us the transaction confirmation and, at most, the last four digits of the card.
- Correspondence – messages sent through the contact form, by email or by phone.
- Technical data – IP address, browser and device type, cookie preferences.
Purposes, legal bases and retention
- Purpose
- Processing and delivering orders
- Legal basis (Art. 6 GDPR)
- Performance of a contract – Art. 6(1)(b)
- How long we keep it
- For the contract’s duration plus 3 years
- Purpose
- Invoicing and accounting
- Legal basis (Art. 6 GDPR)
- Legal obligation – Art. 6(1)(c)
- How long we keep it
- 10 years, under Romanian Accounting Law no. 82/1991
- Purpose
- Returns, warranty and repairs
- Legal basis (Art. 6 GDPR)
- Contract and legal obligation
- How long we keep it
- For the warranty period plus 3 years
- Purpose
- Answering messages and requests
- Legal basis (Art. 6 GDPR)
- Legitimate interest – Art. 6(1)(f)
- How long we keep it
- Up to 2 years after our last exchange
- Purpose
- Newsletter, only if you subscribe
- Legal basis (Art. 6 GDPR)
- Consent – Art. 6(1)(a)
- How long we keep it
- Until you withdraw consent
- Purpose
- Site security and fraud prevention
- Legal basis (Art. 6 GDPR)
- Legitimate interest – Art. 6(1)(f)
- How long we keep it
- 12 months
| Purpose | Legal basis (Art. 6 GDPR) | How long we keep it |
|---|---|---|
| Processing and delivering orders | Performance of a contract – Art. 6(1)(b) | For the contract’s duration plus 3 years |
| Invoicing and accounting | Legal obligation – Art. 6(1)(c) | 10 years, under Romanian Accounting Law no. 82/1991 |
| Returns, warranty and repairs | Contract and legal obligation | For the warranty period plus 3 years |
| Answering messages and requests | Legitimate interest – Art. 6(1)(f) | Up to 2 years after our last exchange |
| Newsletter, only if you subscribe | Consent – Art. 6(1)(a) | Until you withdraw consent |
| Site security and fraud prevention | Legitimate interest – Art. 6(1)(f) | 12 months |
Who we share data with
We never sell or rent your data. We share it only as far as needed with:
- the courier companies delivering your order (Sameday, FAN Courier, Cargus);
- the payment processor, for card payments;
- our IT providers (hosting, email, e-invoicing), under contracts that meet Art. 28 GDPR;
- our accountant and advisers, who are bound by confidentiality;
- public authorities, only where the law requires it.
Transfers outside the EEA
Your data is stored in the European Union. Should a provider need to access it from outside the European Economic Area, the transfer only happens with appropriate safeguards, such as the European Commission’s standard contractual clauses.
Your rights
Under the GDPR you have the right to:
- access – find out what data we hold about you (Art. 15);
- rectification – correct inaccurate data (Art. 16);
- erasure – ask us to delete your data, where the law allows (Art. 17);
- restriction – temporarily limit processing (Art. 18);
- portability – receive your data in a structured format (Art. 20);
- object – to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting earlier processing;
- not be subject to solely automated decisions (Art. 22) – we don’t make any.
To exercise your rights, write to salut@calimani.demo. We reply within one month; for complex requests this may be extended by two more months, and we will tell you if so.
Your right to complain
If you believe your data is not being handled properly, you can complain to Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP) via www.dataprotection.ro (opens in a new tab). We’d still appreciate hearing from you first, so we can put things right.
How we protect data
We use encrypted connections (HTTPS), role-based access, strong passwords and two-factor authentication for internal accounts. Our providers are chosen partly for their security standards.
Children
The Site is not aimed at anyone under 16. If you learn that a child has sent us data without parental consent, let us know and we will delete it.
About this demo
In this demo shop nothing is sent to any server. Your bag, wishlist, demo account and form entries stay in your own browser (localStorage and sessionStorage), and you can clear them at any time from your browser settings.
Changes to this policy
We may update this policy when the law or our services change. The date of the latest update is shown at the top of the page; significant changes are also emailed to customers with an account.
A question about this document?
Write to salut@calimani.demo or use the contact page. We reply within one working day.
Get in touch