Privacy Policy

PERSONAL DATA PROCESSING (GDPR)

Welcome to the GDPR information page!

HERE you have useful information about:

TERMS AND CONDITIONS OF DATA PROCESSING

1. General information

The webshop www.modernglassart.ro, managed by:
MODERN GLASS ART SRL,
headquarters: Gilău, Balastierei St. no. 13–15, Cluj County,
tel.: 0264 701 788,
e-mail: comenzi@modernglassart.ro

as a personal data controller, processes your data in compliance with the provisions of:

  • Regulation (EU) 2016/679 (GDPR),

  • Law no. 190/2018,

  • Law no. 506/2004 on electronic communications.

We commit to processing personal data lawfully, fairly, and transparently, exclusively for the determined, explicit, and legitimate purposes described below.


2. Types of data collected

We collect personal data directly from you via the website, phone communications, or email.

Data may include, but are not limited to:

  • first and last name;

  • email address;

  • phone number;

  • delivery and/or billing address;

  • tax identification data (for legal entities);

  • information about ordered products;

  • data necessary for payment processing (without storing full card data);

  • information voluntarily provided in the user account (e.g., alternative addresses);

  • data resulting from website use (cookies, IP, device type, browsing behavior).

⚠️ MODERN GLASS ART does not store full bank card data.
Online payments are processed exclusively through authorized providers.


3. Purposes and legal bases of processing

3.1 Contract execution (art. 6 para. 1 lit. b GDPR)

We process data for:

  • creating and managing the customer account;

  • receiving, confirming, processing, and delivering orders;

  • customizing and producing ordered products;

  • issuing invoices, receipts, and warranty certificates;

  • handling returns, refunds, and cancellations;

  • communicating with the Customer regarding order status;

  • providing financing (e.g., eCredit) through authorized partners.


3.2 Improving services and customer relations

(legitimate interest – art. 6 para. 1 lit. f GDPR)

We may use certain data for:

  • analyzing purchasing behavior;

  • conducting internal statistics;

  • sending satisfaction surveys;

  • optimizing the offer and experience on the site.

These activities do not affect the fundamental rights and freedoms of data subjects.


3.3 Marketing and commercial communications

We may process data for marketing purposes:

  • only based on explicit consent or

  • based on legitimate interest, within legal limits.

You have the right to object at any time to data processing for marketing purposes by:

  • unsubscribe link;

  • written request to the indicated email address.


4. Cookies and similar technologies

The site uses cookies for:

  • proper platform operation;

  • content personalization;

  • traffic and performance analysis;

  • displaying relevant advertisements.

Refusing cookies may affect site functionality.
Full details are available in the Cookie Policy.


5. Data recipients

Data may be transferred, as applicable, to:

  • courier service providers;

  • payment processors and banking institutions;

  • IT and hosting providers;

  • marketing service providers;

  • insurance companies;

  • public authorities, when there is a legal obligation.

All partners are carefully selected and operate based on GDPR-compliant contracts.


6. Data retention period

Data is retained:

  • for the duration of the user account existence;

  • later, according to legal obligations (e.g., financial-accounting archiving);

  • as long as necessary to defend the legitimate interests of the company.


7. Data security

We apply appropriate technical and organizational measures, including:

  • encryption of transmissions (HTTPS / TLS 1.2+);

  • secure servers;

  • access control;

  • backup and redundancy.

Online payments are processed through PayU, according to PCI DSS security standards.


8. Rights of data subjects

You have the following rights:

  • the right of access;

  • the right to rectification;

  • the right to erasure ("the right to be forgotten");

  • the right to restrict processing;

  • the right to data portability;

  • the right to object;

  • the right to file a complaint with the ANSPDCP.

Requests can be sent to: comenzi@modernglassart.ro