Privacy policy

The confidentiality of your personal data is a primary concern of Celo Individual Trade SRL, based in Sector 3, Bucharest, Romania, acting as data controller.

This document explains how your personal data is processed when you use celo.ro, referred to below as the website.

Contents

1. Categories of personal data
2. Purposes and legal bases
3. Retention periods
4. Disclosure of personal data
5. Transfers of personal data
6. Your rights
7. Children's privacy
8. Changes to this policy
9. Use of data by Google

1. Categories of personal data

A. Customers

If you are a customer, we process personal data such as:

• First and last name.
• Telephone number.
• Email address.
• Billing and delivery addresses.
• Information about how you use the website, including behaviour, preferences and habits.
• Other information you provide directly when creating an account, placing an order or otherwise using the website.

If you use a Facebook or Google account to register, the public profile information supplied by those applications, such as username and email address, is processed.

If you choose to create an account just before completing an order, your email address is requested to create the account automatically. If the order is not completed, Celo Individual Trade SRL does not retain the email address or other information supplied, and the account created is deleted automatically.

B. Visitors

If you visit the website, we process:

• Data you provide directly when contacting us with questions, complaints or other messages.
• Data collected indirectly, such as IP address, browser, operating system, language, browsing duration, search history, viewed pages, full URLs, click paths to, through and from the website, products or information viewed or searched for, time spent on pages, scrolling, clicks, mouse movements and other browsing behaviour.

2. Purposes and legal bases

A. Customers

Performance of the contract

We process data to receive, validate, dispatch and invoice orders, inform you of their status and arrange returns.

Legal basis: the contract between you and Celo Individual Trade SRL, described in the terms and conditions. Providing the relevant personal data is necessary to perform the contract. Refusal may make it impossible to carry out the contractual relationship.

Legal obligations

We process data to comply with obligations arising from the services provided through the website, including tax and record-keeping requirements.

Legal basis: compliance with legal obligations. Providing this data is necessary; refusal may prevent compliance and therefore prevent us from providing the services.

Marketing

We process data to send commercial communications by email or SMS about products and services offered through the website.

Legal basis: your consent, if you choose to give it. You may consent by selecting the relevant checkbox when creating an account or later in your account information section.

To unsubscribe, use the option at the end of a marketing email or SMS, or the relevant account setting. Providing data for marketing is voluntary. Refusing consent has no negative consequences for you.

Analysis and reporting

We process information to analyse website operation and create preference profiles, primarily to improve the experience offered on the website.

Legal basis: Celo Individual Trade SRL's legitimate interest in improving the customer experience. Providing data for this purpose is voluntary and refusal has no negative consequences.

B. Visitors

Marketing

We process data to send email or SMS communications about our products and services, based on your consent if you choose to give it.

You can consent by completing the newsletter subscription form and selecting the relevant checkbox. You can unsubscribe through the option at the end of each commercial email or SMS. Providing the data is voluntary, and refusal has no negative consequences.

Enquiries, complaints and website operation

We process data to resolve complaints and enquiries, monitor traffic and improve the website experience.

Legal basis: our legitimate interest in keeping the website working correctly and improving the visitor experience, including responding to comments, questions and complaints. Providing the data is voluntary and refusal has no negative consequences.

3. Retention periods

We process personal data for as long as necessary to fulfil the purposes described above.

Customer data is processed throughout the contractual relationship and subsequently for the periods required by law. The policy provides, as an example, a 10-year retention period for supporting financial and accounting documents, calculated from the end of the financial year in which they were prepared.

Deleting an account through the account information section is also treated as unsubscribing from marketing communications. We will no longer send marketing emails or SMS messages after that choice.

Deleting an account does not automatically delete all personal data. To request that processing stop or that data be deleted, use the rights described in section 6.

If there is an active order on an account, an account deletion request can be registered after the products have been delivered and the last active order completed.

Withdrawing marketing consent stops processing for that purpose, without affecting the lawfulness of processing carried out before consent was withdrawn.

4. Disclosure of personal data

We do not rent or sell your personal data to third parties.

In some circumstances, data may be accessible to service providers, transport operators, hosting providers and IT companies. Where necessary, these parties are appointed as processors and are contractually required to keep the data confidential and use it only for the purposes for which it was supplied.

Data may also be disclosed to central or local public authorities. Circumstances described in this policy include:

• Website administration.
• Communication needed to award prizes or other benefits from promotional campaigns.
• Maintaining, personalising and improving the website and its services.
• Data analysis, testing, research, monitoring usage trends, developing security features and user authentication.
• Marketing communications within the limits permitted by law.
• Cases in which disclosure is required by law.

5. Transfers of personal data

Personal data supplied to us may be transferred outside Romania, but only to European Union countries.

6. Your rights

Subject to the conditions set out in applicable data protection legislation, you have the following rights:

• Information: to receive details about the processing activities carried out by Celo Individual Trade SRL.
• Access: to obtain confirmation that personal data is processed, together with details about processing methods, purposes and recipients or categories of recipients.
• Rectification: to have inaccurate data corrected and incomplete data completed without unjustified delay.
• Erasure: to request deletion without unjustified delay, subject to the relevant conditions. Data may instead be anonymised so it no longer identifies you and can continue to be used for statistical purposes.
• Restriction: to have processing restricted under the applicable conditions.
• Portability: to receive personal data in a structured, commonly used, machine-readable format and, where the legal conditions are met, to have it transmitted to another controller.
• Objection: to object by contacting us. You may object at any time, on grounds relating to your particular situation, to processing based on legitimate or public interests, unless compelling legitimate grounds override your interests, rights and freedoms or processing is needed for legal claims. You may object to direct marketing at any time, free of charge and without giving a reason.
• Automated decisions: not to be subject to a decision based solely on automated processing, including profiling, which has legal or similarly significant effects on you.
• Complaint: to contact the Romanian National Supervisory Authority for Personal Data Processing or the competent courts.

For questions about processing or to exercise your rights, contact suport@celo.ro.

7. Children's privacy

We do not knowingly contact or collect information from people under 18. The website is not intended to request information from people under 18.

If we receive such information by mistake and are informed of this, we will obtain appropriate parental consent to use it or, if that is not possible, delete it from our servers.

To report information relating to someone under 18, email suport@celo.ro.

8. Changes to this policy

We reserve the right to change this privacy policy. If significant changes are made, you will be informed by email where possible or through a specific message on the website.

This website uses cookies. Where the cookie consent panel is displayed, you can use it to manage your preferences. Section 9 explains Google's use of data depending on your consent.

9. Use of data by Google

celo.ro uses Google services, including Google Ads and Google Analytics, to measure advertising performance and display relevant advertisements.

Depending on the consent you give through the cookie banner, Google may collect and process information about website use, including IP address, online identifiers, device information, advertisement interactions and browsing behaviour.

Google may use this data to:

• Measure advertising campaign performance.
• Personalise the advertisements displayed.
• Prevent fraud and improve advertising services.

For more information, see Google's official privacy information for business services.

By consenting through the cookie banner, you agree to data processing in accordance with this policy and the applicable Google policies.