Cookie Usage Policy

To provide personalized services to our customers, Artinfactory may use cookies to facilitate storing and tracking customer preferences. For example, cookies can be used to identify the customer and provide information and services based on their preferences expressed during previous visits. Additionally, other online advertising networks may use cookies to adapt advertising messages based on customer preferences. Cookies are text files provided by the customer’s browser to a web server and then stored on the customer’s computer’s hard drive. However, customers can reset their browser to notify them whenever they receive a cookie or to refuse the acceptance of cookies. Please note that some sections of the website may not be displayed correctly if the customer’s browser is set to reject cookies.

The customer is solely responsible for maintaining the confidentiality of information (passwords, usernames, etc.) related to the accounts obtained through the services offered by Artinfactory. This website uses cookies, and for more details, you can access the link: https://en.wikipedia.org/wiki/HTTP_cookie.

General Information & Privacy Policy

The confidentiality of your personal data is one of the main concerns of MITRAN DAVID-SHADI P.F.A., headquartered at Calea 13 Septembrie, Sector 5, Municipiul București Postal Code: 050713, CIF RO48105044, and F40/206/19.01.2022, hereinafter referred to as “Artinfactory,” as the data controller.

This document aims to inform you about the processing of your personal data concerning the use of the website www.artinfactory.com (“the Website”).

  1. Categories of Processed Personal Data

If you are a customer of the Website, Artinfactory will process your personal data, such as name, phone number, email address, billing address, delivery address, data regarding your use of the Website, such as behavior/preferences/habits within Artinfactory, as well as any other categories of data you provide directly when creating a user account, placing an order through the website, or in any other way resulting from the use of the Website.

If you use your Facebook or Google account to create a user account on the Website, the following public profile data displayed by these applications will be processed: username, email address. If you choose to create a user account only before finalizing the order of a product available on the Website, your email address will be requested, and based on this, an account will be automatically created. If you do not complete the order, the email address and other provided data will not be stored by Artinfactory, and the created account will be automatically deleted.

II.2. If you are a visitor of the Website, Artinfactory will process your personal data that you provide directly in the context of using the Website, such as the data provided in the contact/questions/complaints section, to the extent you contact us in this way.

Purposes and Legal Basis of Processing

If you are a customer of the Website, Artinfactory processes your personal data for the following purposes:

  • for the performance of the contractual relationship between you and Artinfactory, namely for the acceptance, validation, shipment, and invoicing of the order placed on the Website, informing you about the order status, organizing the return of ordered products, etc. Legal basis: The processing of your data for this purpose is based on the contract between you and Artinfactory, defined within the Terms and Conditions [https://gdprcomplet.ro/termeni-si-conditii/]. Providing your personal data is necessary for the execution of this contract. Refusal to provide data may result in the inability to conduct contractual relationships between you and Artinfactory.
  • for the fulfillment of legal obligations that Artinfactory has in the context of services provided through the Website, including tax obligations, as well as archiving obligations. Legal basis: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusing to provide data may result in Artinfactory’s inability to meet its legal obligations and, therefore, the inability to provide services through the Website.
  • for marketing activities, namely for sending commercial communications about products and services offered by Artinfactory through the Website, via distance communication means (email, SMS). Legal basis: The processing of your data for this purpose is based on your consent if you choose to provide it.

You can express your consent for data processing for this purpose by checking the appropriate box at the time of account creation or later, in the My Account section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. Additionally, you can unsubscribe by accessing the My Account section.

  • for various analyses, reports on the functioning of the Website, creating consumer preference profiles, mainly to improve the experience offered on the Website. Legal basis: The processing of your data for this purpose is based on Artinfactory’s legitimate interest in constantly improving the customer experience on the Website. Providing your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

If you are a visitor of the Website

Artinfactory processes your personal data for the following purposes:

  • for marketing activities, namely for sending commercial communications about products and services offered by Artinfactory through the Website, via distance communication means (email, SMS). Legal basis: The processing of your data for this purpose is based on your consent if you choose to provide it.

You can express your consent for data processing for this purpose by completing and checking the appropriate box in the newsletter subscription form available on the Website. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications.

  • for resolving complaints, inquiries, and monitoring traffic to improve your experience on the Website. Legal basis: The processing of your data for this purpose is based on Artinfactory’s legitimate interest in ensuring the correct functioning of the Website and constantly improving the visitor’s experience on the Website, including by addressing various comments, questions, or complaints.

Duration of Data Processing

As a principle, Artinfactory will process your personal data for as long as necessary to achieve the processing purposes mentioned above.

In the case of a customer, we will process your data for the entire duration of the contractual relationships and subsequently according to the legal obligations regarding data and document archiving (e.g., financial-accounting documents for which the legal retention period is 10 years from the end of the fiscal year during which they were drawn up). If you choose to delete your user account, Artinfactory will interpret this action as your choice to unsubscribe from receiving commercial communications informing you about products and services offered through the website. Therefore, if you choose to delete your user account, we will no longer send you emails and/or SMS of this kind. However, we want to inform you that deleting the account will not automatically delete your personal data. If you wish not to have your personal data processed or if you want your data to be deleted, you can exercise your rights detailed in point VII below. If you withdraw your consent for processing data for marketing purposes, Artinfactory will cease processing your personal data for this purpose without affecting the processing carried out by Artinfactory based on your consent before its withdrawal.

Disclosure of Personal Data

To achieve the processing purposes, Artinfactory may disclose your data to partners, third parties, or entities that support Artinfactory in conducting activities through the Website (such as courier companies, IT service providers) or to central/local public authorities, in the following, exemplifying situations:

  • for the administration of the Website;
  • when this communication would be necessary for awarding prizes or other facilities to data subjects, obtained as a result of their participation in various promotional campaigns organized by Artinfactory through the Website;
  • for maintaining, customizing, and improving the Website and the services run through it;
  • for data analysis, testing, research, monitoring usage trends and activity, developing security features, and user authentication;
  • for sending commercial marketing communications, within the limits and conditions provided by law;
  • when the disclosure of personal data is provided by law, etc.

Transfer of Personal Data

Personal data provided to Artinfactory may be transferred outside Romania but only to European Union states.

Your Rights

Under the conditions provided by personal data processing legislation, as data subjects, you have the following rights:

  • the right to be informed, namely the right to receive details regarding the processing activities carried out by Artinfactory, as described in this document;
  • the right to access data, namely the right to obtain confirmation from Artinfactory regarding the processing of personal data, as well as details about the processing activities, such as how data is processed, the purpose of processing, recipients or categories of recipients of the data, etc.;
  • the right to rectification, namely the right to obtain without undue delay the rectification by Artinfactory of inaccurate/unjustified personal data, as well as the completion of incomplete data; Rectification/completion will be communicated to each recipient to whom the data has been transmitted, except when this proves impossible or involves disproportionate effort.
  • the right to erasure of data, without undue delay (“the right to be forgotten”), if one of the following reasons applies:
    • they are no longer necessary for the purposes for which they were collected or processed;
    • if consent is withdrawn, and there is no other legal basis for processing;
    • if the data subject opposes the processing, and there are no legitimate grounds prevailing;
    • if personal data have been processed unlawfully;
    • if personal data must be deleted to comply with a legal obligation;
    • personal data have been collected concerning the offer of information society services according to Union law or domestic law under which the data controller is subject. It is possible that, after requesting data deletion, Artinfactory will anonymize this data (thus removing its personal nature) and continue processing it for statistical purposes;
  • the right to restrict processing to the extent that:
    • the data subject disputes the accuracy of the data, for a period that allows Artinfactory to verify the correctness of the data;
    • the processing is unlawful, and the data subject opposes the erasure of personal data, instead requesting the restriction of their use;
    • the data controller no longer needs the personal data for the purposes of processing, but the data subject requests them for the establishment, exercise, or defense of legal claims; or
    • the data subject has objected to processing (other than direct marketing), for the period during which it is verified whether Artinfactory’s legitimate interests prevail over those of the data subject;
  • the right to data portability, namely (i) the right to receive personal data in a structured, commonly used, and machine-readable format and (ii) the right to have these data transmitted by Artinfactory to another data controller, to the extent that the conditions provided by law are met;
  • the right to object – regarding processing activities, this can be exercised by sending a request as indicated below;
  • at any time, for reasons related to the particular situation in which the data subject is located, that data related to them are processed on the basis of Artinfactory’s legitimate interest or the public interest, except where Artinfactory can demonstrate that it has legitimate and compelling reasons justifying the processing and which prevail over the interests, rights, and freedoms of the data subject, or that the purpose is to establish, exercise, or defend a right in court;
  • at any time, free of charge and without any justification, that data related to them be processed for direct marketing purposes.
  • the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
  • the right to address the National Supervisory Authority for Personal Data Processing or competent courts, as necessary.

For any further questions regarding how personal data is processed and to exercise the rights mentioned above, please contact us at the email address: [email protected]