Privacy Policy

Privacy Policy of the www.cochetica.com Online Store

1. Introduction

This privacy policy describes how POPA LORENA MARILENA PFA ("the Operator"), as data controller, collects, uses, and protects the personal data of users ("Users") of the website www.cochetica.com ("the Website"). Data processing is carried out in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable national legislation.

2. Data Collected

2.1. Data provided directly by Users:

  • First and last name;
  • Email address;
  • Phone number;
  • Delivery and billing address;
  • Payment information (e.g., bank card details).

2.2. Automatically collected data:

  • IP address;
  • Browser type and version;
  • Device information;
  • Cookies and similar technologies (see Section 8).

3. Purposes of Data Processing

3.1. Personal data is processed for the following purposes:

  • Processing orders and delivering products;
  • Billing and fulfilling legal obligations;
  • Managing User accounts;
  • Sending newsletters and commercial offers, with the prior consent of Users;
  • Improving the browsing experience on the Website.

4. Legal Basis for Processing

4.1. Data processing is based on the following legal grounds:

  • Execution of a contract (Art. 6(1)(b) GDPR);
  • Users' consent (Art. 6(1)(a) GDPR);
  • Legal obligations of the Operator (Art. 6(1)(c) GDPR);
  • Legitimate interest of the Operator (Art. 6(1)(f) GDPR).

5. Data Disclosure

5.1. Personal data may be disclosed to:

  • Courier service providers;
  • Payment processors;
  • Public authorities, in accordance with legal obligations.

5.2. The Operator guarantees that third-party partners comply with GDPR standards.

6. Data Storage Period

6.1. Personal data is stored for periods necessary for the purposes for which it was collected or in accordance with applicable legal obligations.

7. Users' Rights

7.1. According to GDPR, Users have the following rights:

  • Right of access (Art. 15 GDPR);
  • Right to rectification (Art. 16 GDPR);
  • Right to erasure ("Right to be forgotten," Art. 17 GDPR);
  • Right to restriction of processing (Art. 18 GDPR);
  • Right to data portability (Art. 20 GDPR);
  • Right to object (Art. 21 GDPR);
  • Right to lodge a complaint with a supervisory authority.

7.2. Requests regarding Users' rights can be sent to [contact email].

8. Use of Cookies

8.1. The Website uses cookies to improve the browsing experience and analyze traffic. Full details are available in the Cookies Policy Click here!

9. Security Measures

9.1. The Operator implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, or destruction.

10. Policy Amendments

10.1. The Operator reserves the right to amend this Policy, notifying Users by publishing the updated version on the Website.

11. Contact

For any questions or requests, you can contact us at: