PRIVACY POLICY

This privacy policy explains how MULTIFIX TRADE SRL, a company based in Romania, processes your personal data when you use the website [www.vintagedeco.art], in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and national legislation.

MULTIFIX TRADE SRL
CUI: 38025150
Reg. Com.: J8/2215/2017
Headquarters: Brașov, Calea Feldioarei nr. 27
Email: info@vintagedeco.art
 

​

1. What data we collect

When you interact with our website, we may collect the following personal data:

Name and surname

Email address

Delivery and billing address

Phone number

Order and payment details

IP address and browser/device information (via cookies and analytics)

Any other data you voluntarily provide through contact forms or account registration

 

​2. Why we collect your data

We process your data for the following purposes:

To process and deliver your orders

To issue invoices and comply with tax obligations

To communicate with you regarding your order or customer support inquiries

For marketing communications (only with your consent)

To improve your experience on the site (via analytics and personalization)

To prevent fraud and ensure site security

​​

3. Legal basis for processing

We process your data based on:

Contractual obligations (to fulfill an order)

Legal obligations (invoicing, archiving)

Legitimate interest (site security, analytics)

Consent (for newsletters or promotional messages)

​​

4. Who has access to your data

Your data may be shared with:

Courier companies (for delivery)

Payment processors (e.g., Stripe, EuPlatesc, etc.)

IT service providers (e.g., hosting, email marketing platforms like Brevo or Mailchimp)

Accountants or legal advisors (for compliance purposes)

We ensure all partners comply with GDPR and provide adequate data protection guarantees.

​

5. How long we keep your data

Your data will be stored only as long as necessary:

Order and invoicing data: 10 years (as per Romanian accounting law)

Contact forms or emails: up to 2 years

Marketing data: until you withdraw your consent

Website logs: typically 12–24 months, depending on purpose

​​

6. Your rights under GDPR

You have the right to:

Access your personal data

Correct or update inaccurate data

Request deletion (“right to be forgotten”)

Restrict or object to data processing

Withdraw consent at any time (for marketing)

File a complaint with ANSPDCP – Romanian Data Protection Authority (www.dataprotection.ro)

To exercise your rights, contact us at: [insert email address]

​

7. Cookies and tracking

We use cookies to:

Enable website functionality (e.g., shopping cart)

Analyze website traffic (Google Analytics, etc.)

Improve user experience

Personalize content and offers

You can manage cookie preferences via your browser settings or accept/reject them when prompted upon first visit. For more details, see our Cookie Policy.

8. Data security

We implement appropriate technical and organizational measures to protect your data, including:

HTTPS secure connection

Access control to databases

Regular backups

Minimization and encryption of sensitive data where applicable

9. Minors’ data

Our website is not intended for individuals under 16 years old. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be published on this page with the updated date. We recommend checking this page periodically.