— Data protection (GDPR)
Privacy Policy
This English translation is provided for convenience only. In case of any discrepancy, the Romanian version prevails.
We explain what personal data we process, why, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Law 190/2018.
1. Data controller
Controller: SARA FINE JEWELRY SRL, with its registered office at Calea Aurel Vlaicu, Arad (according to the Trade Register), tax ID (CUI) 35378433, Trade Register no. J02/9/2016, not registered for VAT. Correspondence address: Strada Aurel Vlaicu I3, Arad 310141. Telephone: 0751 059 740. Data protection e-mail: contact@sarafinejewelry.ro.
We have not appointed a data protection officer (DPO), as this is not mandatory for our activity.
2. Data we process
- Contact / price request form: name, e-mail, telephone (optional), subject, message, product of interest.
- Newsletter: e-mail address and proof of consent (date/time).
- Reservations, bespoke orders, sales: name, telephone, address (for delivery), order details, billing data.
- Technical data: IP address, browser type, cookie preference, via the server and cookies (see Cookie Policy).
We do not process special categories of data and do not make automated decisions with legal effect.
3. Purposes and legal bases
| Purpose | Legal basis (art. 6 GDPR) | Retention |
|---|---|---|
| Replying to enquiries and price quotes | Pre-contractual steps, letter (b); legitimate interest, letter (f) | up to 12 months after the last communication |
| Reservations, sales, bespoke orders, warranty | Performance of a contract, letter (b) | for the duration of the contract and warranty |
| Invoicing and accounting records | Legal obligation, letter (c) (Law 82/1991) | in line with statutory archiving periods (currently 5 years for registers and supporting documents, with the exceptions provided by law) |
| Newsletter / news | Consent, letter (a) | until you unsubscribe / withdraw consent |
| Website security, defence of legal claims | Legitimate interest, letter (f) | technical logs: max. 6 months; in case of dispute: until resolved |
| Maps and external content (Google Maps) | Consent, letter (a), and Law 506/2004 | according to your cookie settings |
4. Recipients
Data may be disclosed, strictly as necessary, to: our hosting and e-mail provider, accountant, couriers (if delivering), and public authorities where required by law. For content loaded with your consent (Google Maps), Google Ireland Ltd. may receive your IP address. We do not sell or rent personal data.
5. Transfers outside the EEA
Through Google services (only after consent), transfers to the USA may occur, based on the EU–US Data Privacy Framework and/or standard contractual clauses.
6. Your rights
Under articles 15 to 22 GDPR you have the right of access, rectification, erasure (“right to be forgotten”), restriction, portability and objection (including to direct marketing), and you may withdraw your consent at any time, without affecting the lawfulness of prior processing.
Requests can be sent in writing to Strada Aurel Vlaicu I3, Arad 310141, by telephone at 0751 059 740 or to contact@sarafinejewelry.ro. We reply within one month at most (extendable by two further months in complex cases), in accordance with art. 12 GDPR.
7. Complaints to the authority
You may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro.
8. Security
We apply appropriate technical and organisational measures (restricted access, security updates, encrypted HTTPS connection on the public website, backups).
9. Minors
This website is not intended for persons under 16; we do not knowingly collect their data.
10. Changes
This policy may be updated; the date of the last update is shown above.
Informative document based on the legislation in force on the date of the update. We recommend periodic review by a legal adviser.