GDPR AND COOKIE POLICY

PART I - PERSONAL DATA PROTECTION

1. Legal framework and data controller

The protection of your personal data is primarily governed by Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the GDPR, as well as by Romanian Law No. 190/2018 regarding measures for the implementation of the GDPR in Romania.

1ZERO1 S.R.L. is the controller of the personal data processed through the Website.

For any questions regarding your personal data or to exercise your rights under the GDPR, you can contact us at dpo@1zero1.ro or by post at Str. Bariera Valcii 337G, ground floor, Craiova, Dolj, 200716, Romania.

Full information regarding the categories of data, purposes, legal bases, recipients and retention periods is available in our Privacy Policy .

2. What personal data we may process

Depending on how you interact with the Website, we may process the following categories of data:

• Identification and contact data - first and last name, email address, phone number and delivery or billing addresses.
• Order data - products ordered, order value, order history, returns, exchanges and refunds.
• Customer account data - email address, saved addresses, order history and other information associated with the account.
• Communication data - messages and requests submitted by email, chat, contact forms or social media.
• Marketing preferences - information regarding subscriptions to commercial communications and the consent provided.
• Technical and usage data - IP address, device and browser type, operating system, language, time zone, pages viewed and interactions with the Website.
• Data obtained through cookies and similar technologies - depending on your cookie preferences.

3. Why we process your data

Personal data may be processed for purposes such as:

• processing, confirming and delivering orders;
• managing returns, exchanges and refunds;
• administering customer accounts;
• issuing and retaining tax and accounting documents;
• communicating with customers and providing support services;
• preventing fraud and protecting the security of the Website;
• analysing how the Website is used and improving it;
• sending commercial communications, where we have the necessary consent;
• personalising content and advertising, where such processing requires and is based on your consent;
• complying with legal obligations and protecting our rights.

Depending on the purpose, processing may be based on the performance of a contract, compliance with a legal obligation, your consent or the legitimate interests of 1ZERO1 or a third party.

4. Who we may share your data with

We do not sell your personal data. Where necessary in order to provide our services, data may be shared with categories of recipients such as:

• e-commerce platforms and hosting service providers;
• payment processors and financial institutions;
• courier companies and logistics service providers;
• email marketing and customer communication platforms;
• analytics, advertising and social media service providers;
• providers of applications and services integrated into the store;
• IT, security and fraud prevention service providers;
• accountants, auditors and legal advisers;
• public authorities and institutions, where disclosure of information is required by law.

Depending on the circumstances, these recipients may act as processors, joint controllers or independent controllers.

5. Data retention and security

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, as well as for additional periods required by legal obligations or necessary for the establishment, exercise or defence of legal claims.

The retention periods applicable to the main categories of data are described in detail in our Privacy Policy .

We apply technical and organisational measures appropriate to the risk, including mechanisms for securing communications, access controls and contractual safeguards applicable to providers processing data on our behalf.

Access to data is limited to persons and providers who require it in order to perform their duties or provide their services.

6. International data transfers

Some of the providers used for the operation of the Website may process personal data outside the European Economic Area.

Where such a transfer takes place, the applicable legal mechanisms provided by the GDPR are used, such as an adequacy decision of the European Commission, Standard Contractual Clauses or other appropriate safeguards provided for by applicable law.

For more information regarding international data transfers, you can contact us at dpo@1zero1.ro.

7. Your rights

Subject to the conditions provided by the GDPR, you have the following rights:

• Right of access - you may request confirmation as to whether we process data about you, access to that data and a copy of it.
• Right to rectification - you may request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure - you may request the deletion of your data in the cases provided by law. This right is not absolute and certain data may need to be retained in order to comply with a legal obligation.
• Right to restriction of processing - you may request a temporary restriction on the way we use certain data.
• Right to object - you may object to processing based on legitimate interests, subject to the conditions provided by the GDPR. You may object to direct marketing at any time.
• Right to data portability - in the cases provided by the GDPR, you may receive the data you provided in a structured, commonly used and machine-readable format.
• Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.
• Rights regarding automated decisions - in the cases provided by the GDPR, you may request human intervention and contest a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.
• Right to lodge a complaint - you may lodge a complaint with the competent data protection supervisory authority.

To exercise these rights, write to dpo@1zero1.ro with the subject line "Personal Data Request".

We will respond without undue delay and, in any event, within no more than one month of receiving the request. In the case of complex requests or a large number of requests, this period may be extended by up to two additional months, in which case we will inform you about the extension and the reasons for it.

To protect your data, we may request additional information necessary to verify the identity of the person making the request.

8. Automated processing and profiling

Some services used for analytics, recommendations, content personalisation or advertising may involve automated processing or profiling.

We do not intend to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, except where expressly permitted by law.

Consent given for analytics, preference or marketing cookies may be withdrawn at any time through the Website's cookie settings.

9. Data protection complaints

If you believe that your personal data is not being processed in accordance with applicable law, you may first contact us at dpo@1zero1.ro so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

PART II - COOKIE POLICY

1. What cookies are

A cookie is a small file that may be stored on the computer, phone or other device used to access a website.

Cookies allow the Website to recognise certain information about the device or session and may be used, for example, to operate the shopping cart, remember preferences, analyse traffic or display relevant advertising.

Cookies may be session cookies, which are deleted after the browser is closed, or persistent cookies, which remain on the device for a certain period. They may also be set directly by the Website or by third-party providers.

2. Similar technologies

In addition to cookies, the Website may use similar technologies such as pixels, online identifiers, local storage or other technologies necessary for operation, analytics and measurement of online activity.

In this policy, references to cookies include, where relevant, these similar technologies as well.

3. Consent for cookies

4. Categories of cookies used

The specific list of cookies may vary depending on the services and applications active on the Website. Information regarding cookies available at a particular time, their providers, purposes and retention periods must correspond to the actual configuration of the Website and the consent management system being used.

5. Strictly necessary cookies

Strictly necessary cookies are essential for operating the online store and providing the services requested.

They may enable, for example, operation of the shopping cart, maintenance of the session, authentication, Website security or completion of an order.

Disabling them through your browser settings may cause certain parts of the Website to function incorrectly.

6. Preference cookies

These cookies allow the Website to remember certain choices selected by you, such as language, country, currency or other usage preferences.

7. Analytics and performance cookies

These cookies help us understand how visitors interact with the Website, which pages or products are viewed and whether any technical issues occur.

The information is used to measure traffic, produce statistics and improve the experience provided.

8. Advertising cookies

Marketing cookies may be used to measure campaign effectiveness, attribute conversions, limit how often an advertisement is shown and personalise advertising messages.

These technologies may be provided by third-party platforms, and their use is subject to your consent preferences where consent is required.

9. Cookies and third-party services

Certain Website functions may involve services provided by third parties, such as analytics, advertising, payment, communication or social media platforms.

These providers may use their own cookies or similar technologies in accordance with applicable law and your consent preferences.

10. Managing and deleting cookies

You can change or withdraw at any time the consent you have provided for cookies that are not strictly necessary, using the cookie settings available on the Website.

Most browsers also allow you to view, block or delete cookies through their own settings.

Blocking strictly necessary cookies may prevent certain functions from operating correctly, such as the shopping cart, authentication or checkout.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. Cookies already stored on your device may need to be manually deleted through your browser, depending on the technology used.

CONTACT AND RELATED PAGES

For any questions regarding data protection, the use of cookies or the exercise of your rights, you can contact us at dpo@1zero1.ro.