Legal

Privacy and Data Protection Policy (GDPR)

Our privacy policy describes how we collect, use and protect your personal data, in accordance with Regulation (EU) 2016/679.

Effective as of 09.03.2026

1. Data Controller and General Principles

1.1. In accordance with Regulation (EU) 2016/679, the controller of personal data is FAVIA GLOBAL TRADING S.R.L., with its registered office in Ilfov County, Snagov Village, 31 Nucului Street, identified by CUI RO52380336.

1.2. The Company undertakes to process data under conditions of lawfulness, fairness and transparency, ensuring the integrity and confidentiality of information provided by users.

1.3. Although the Site operates exclusively in Guest Checkout mode (without creating a member account), the collection of certain data is indispensable for the execution of the remote sales contract.

2. Categories of Data Processed

The Company collects and processes the following categories of data voluntarily provided by the Buyer at the time of placing an order:

2.1. Identification data: First and last name.

2.2. Contact data: Email address and mobile phone number.

2.3. Delivery data: Full home or residence address for shipping products.

2.4. Financial data: IBAN code, in the event of processing a return or adjustment requiring partial or full refund of the goods' value.

2.5. Traffic data: IP address, browser type and interaction with configuration modules, collected through Cookie technologies (Meta Pixel, Google Analytics) for the purpose of improving the browsing experience.

3. Purpose and Legal Basis of Processing

3.1. Contract Performance: Processing is necessary for receiving, manually assembling personalized products and delivering them to the Buyer.

3.2. Legal Obligations: Identification and billing data are processed for fiscal-accounting purposes, in accordance with the provisions of the Tax Code (Art. 319) for issuing tax invoices.

3.3. Legitimate Interest: For service optimization, customer base analysis and managing technical or commercial support requests.

4. Data Retention Period

4.1. Data related to orders and fiscal records (invoices) will be archived for a period of 10 years, in accordance with Art. 25 of Accounting Law no. 82/1991.

4.2. Data collected for marketing purposes (via cookies) are stored for a defined period, according to the technical settings of service providers (Google/Meta), or until the User withdraws consent.

5. Data Recipients (Third Parties)

For the fulfillment of contractual obligations, data may be transferred to the following categories of partners:

5.1. Logistics operators: Courier companies designated for the physical delivery of goods.

5.2. Payment processors: Banking institutions or secure online payment processing platforms.

5.3. Public authorities: Fiscal or judicial institutions, where the law requires the provision of such information.

6. Rights of the Data Subject

In accordance with Regulation 2016/679, you benefit from the following fundamental rights:

6.1. Right of access: You may request confirmation as to whether your data is or is not being processed by the Company.

6.2. Right to rectification: The ability to correct inaccurate data or complete incomplete data.

6.3. Right to erasure ("Right to be forgotten"): To the extent that the data is no longer necessary for mandatory fiscal purposes.

6.4. Right to data portability: Receiving data in a structured and transferable format.

6.5. Right to lodge a complaint: You may contact the National Authority for the Supervision of Personal Data Processing (ANSPDCP).

7. Contact

For exercising any of the rights mentioned above or for additional clarifications, you can contact us at the email address: info@byfavia.ro