1. Data Controller Information
This website is operated by FRIENDLY LABEL SRL, acting as the Data Controller in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
Headquarters: Municipiul Cluj-Napoca, Aleea GODEANU, Nr. 7, Bloc 19, Scara II, Etaj II, Apartament 28, Judeţ Cluj, Romania.
Unique Registration Code (CUI): 27784414.
Trade Register Number: J2010002093124.
European Unique Identifier (EUID): ROONRC.J2010002093124.
2. Personal Data We Collect
When interacting with our website, we may collect the following Personally Identifiable Information (PII):
Identity and Contact Data: Name, email address, mailing address, phone number.
Financial and Transaction Data: Billing information, VAT/Company registration number, bank account details (collected when processing orders).
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system.
Usage Data: Information about how you use our website, products, and services (e.g., pages visited, clicks, time on page).
3. Lawful Basis for Processing
Under GDPR Article 6, we only process your personal data when we have a lawful basis:
Contractual Necessity: Processing is necessary for the performance of a contract (e.g., processing your orders, providing customer support).
Legitimate Interests: To improve our website functionality, ensure network security, and conduct statistical analysis.
Legal Obligation: To comply with Romanian and EU accounting and tax regulations.
Consent: When you explicitly opt-in to receive marketing communications or consent to non-essential cookies via our Cookie Banner, in accordance with Directive 2002/58/EC (ePrivacy Directive) and Romanian Law no. 506/2004.
4. How We Use Your Data
To personalize your experience and deliver relevant content.
To process transactions quickly and securely.
To administer site features (e.g., newsletters, surveys).
To follow up after correspondence (live chat, email, or phone inquiries).
5. Data Sharing and International Transfers
We do not sell, trade, or otherwise transfer your PII to outside parties unless strictly necessary for business operations. We may share data with:
Trusted Service Providers: Hosting partners and IT support who assist in operating our website and are bound by Data Processing Agreements (DPAs).
Legal Authorities: When disclosure is strictly necessary to comply with the law, enforce site policies, or protect our or others’ rights.
Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs), as mandated by GDPR Chapter V.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. For tax and accounting purposes, specific data is kept for up to 10 years, as mandated by the Romanian Accounting Law no. 82/1991.
7. Your Data Subject Rights
Under the GDPR (Articles 15-22), you hold the following rights regarding your personal data:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data when there is no compelling reason for its continued processing.
Right to Restrict Processing: Request suspension of processing under specific circumstances.
Right to Data Portability: Request transfer of your data to you or a third party in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data.
8. Security of Your Data
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights and are required to keep the information confidential. All sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
9. Contact Information and Complaints
If you wish to exercise any of your rights, please contact our Data Protection representative at:
Email: office@friendly-label.com
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
Website: www.dataprotection.ro