Privacy Policy

1. Who we are

Personal data controller:
Batcu Bianca-Elena PFA
Registered office: Str. Dacilor, Nr. 17, Sat Lumina, Com. Lumina, Constanța County, postal code 907175, Romania
Tax ID (CUI): 44949091 | Registration No.: F2021000842133
Email: office@biancabatzco.com
Phone: 0727 254 707
Website: biancabatzco.com

This privacy policy applies to the processing of personal data carried out through the website biancabatzco.com, in accordance with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 and Law no. 506/2004.

2. What data we collect

We collect and process the following categories of personal data:

  • Identification data: first name, last name
  • Contact data: email address, phone number, delivery/billing address
  • Transactional data: order history, products purchased, transaction values
  • Technical data: IP address, browser type, pages visited, cookies (with your consent)

3. Purpose and legal basis of processing

  • Performance of the contract (Art. 6(1)(b) GDPR): processing orders, delivering products, invoicing, managing returns and complaints
  • Legal obligation (Art. 6(1)(c) GDPR): issuing accounting documents, complying with Romanian tax legislation
  • Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention, website security
  • Consent (Art. 6(1)(a) GDPR): sending newsletters and marketing communications (if you have subscribed), using non-essential cookies (Analytics, Marketing)

4. Data recipients

Your data may be transmitted to:

  • Shopify Inc. – e-commerce platform (order processing, data storage); registered office: 151 O’Connor St, Ottawa, ON, Canada; transfer mechanism: Standard Contractual Clauses
  • Couriers (Sameday, Fan Courier, Cargus) via the Woot platform – solely for parcel delivery; data transmitted: name, delivery address, phone
  • Google LLC – Google Analytics (aggregated, anonymous analytics, only with your consent); transfer based on Standard Contractual Clauses
  • Meta Platforms Inc. – Meta Pixel (only with your consent); transfer based on Standard Contractual Clauses
  • Public authorities – ANAF, ANPC or other authorities, where we are required by law

We do not sell, rent or transfer your personal data to third parties for commercial purposes.

5. Data retention period

  • Accounting and tax data: 10 years (legal obligation)
  • Active and undelivered order data: for the duration of the contract + 3 years
  • Newsletter/marketing data: until consent is withdrawn
  • Analytics/marketing cookies: according to each provider’s settings (typically 6–24 months)
  • Technical logs: maximum 12 months

6. Your rights

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15) – you may request a copy of the data we hold about you
  • Right to rectification (Art. 16) – you may request correction of inaccurate data
  • Right to erasure (Art. 17) – you may request deletion of the data, under the conditions of the law
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21) – in particular to processing based on legitimate interest or direct marketing
  • Right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal

To exercise your rights, you can contact us at office@biancabatzco.com or at our registered address. We will respond within a maximum of 30 calendar days.

7. Right to lodge a complaint

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction, including: HTTPS/SSL connection, limited access to data, secure passwords.

9. International transfers

Some service providers (Shopify, Google, Meta) are established outside the European Economic Area. Data transfers are carried out on the basis of the Standard Contractual Clauses adopted by the European Commission or other transfer mechanisms compliant with the GDPR.

10. Changes to the policy

We reserve the right to update this policy. The date of the latest amendment is indicated below. We recommend that you consult this page periodically.

Last updated: 31 March 2026