Privacy Policy

The confidentiality of your personal data is one of the main concerns of BĂLUȚĂ MARIUS-CĂTĂLIN PFA, based in Timiș, Romania, as Data Controller.

This document is intended to inform you about the processing of your personal data in the context of using the website xyzarchitect.com, hereinafter referred to as the “Website.”

Categories of Personal Data Processed
Purposes and Legal Grounds for Processing
Data Retention Period
Disclosure of Personal Data
Transfer of Personal Data
Your Rights
Children’s Privacy
Changes to the Privacy Policy

1. Categories of Personal Data Processed

A. If you are a client of the Website, we may process the following personal data:

Name and surname
Phone number
Email address
Billing address
Delivery address
Data regarding how you use the Website (behavior, preferences, browsing habits)
Any other categories of data you provide directly in the context of creating a user account, placing an order, or otherwise using the Website.

If you create a user account using your Facebook or Google account, we will process the following public profile data made available by those applications: username and email address.

If you create a user account before completing an order, only your email address will be requested to automatically create the account. If you do not complete the order, your data will not be stored, and the account will be automatically deleted.

B. If you are a visitor of the Website, we may process the following data:

Data you provide directly through forms (contact, inquiries, complaints)
Data collected indirectly, such as: IP address, browser used, browsing duration, search history, operating system, language, visited pages, full URLs, clickstream data, products viewed or searched, time spent on certain pages, interaction data (scrolling, clicks, mouse-overs), user behavior data.

2. Purposes and Legal Grounds for Processing

A. If you are a client of the Website:

Contractual purposes: processing necessary for order placement, validation, shipment, invoicing, order status updates, and returns.
Legal ground: Contract execution.
Legal obligations: compliance with tax and accounting obligations, archiving, and other legal requirements.
Legal ground: Legal obligation.
Marketing activities: sending commercial communications (email, SMS) about products and services, based on your consent.
Legal ground: Consent.
Analytics and improvement: analyses and reporting regarding Website performance, consumer preferences, and customer experience.
Legal ground: Legitimate interest.

B. If you are a visitor of the Website:

Marketing activities: newsletters and promotional communications, based on your consent.
Complaints and inquiries: resolving complaints and ensuring proper functioning and improvement of the Website.
Legal ground: Legitimate interest.

3. Data Retention Period

We process your personal data only as long as necessary for the purposes described.

For contractual purposes: throughout the contractual relationship and according to legal obligations (e.g., accounting documents are stored for 10 years).
If you delete your account: communications will cease, but certain data may still be retained as required by law.
If you withdraw your consent for marketing: processing will stop, without affecting prior lawful processing.

4. Disclosure of Personal Data

We do not sell or rent your personal data to third parties.

Data may be disclosed to:

Service providers (IT, hosting, shipping, payment processors) acting as Data Processors, bound by confidentiality agreements.
Public authorities, where legally required.

5. Transfer of Personal Data

Personal data may be transferred outside Romania but only to countries within the European Union.

6. Your Rights

Under GDPR, you have the following rights:

Right to be informed about processing activities.
Right of access to your personal data.
Right to rectification of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”), under certain conditions.
Right to restrict processing, under certain conditions.
Right to data portability, under certain conditions.
Right to object to processing:
- For legitimate interest or public interest processing.
- At any time, free of charge, for direct marketing purposes.
Right not to be subject to automated decision-making, including profiling, with legal or significant effects.
Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (Romania) or the competent courts.

For exercising your rights or further inquiries, please contact us at: support@xyzarchitect.com

7. Children’s Privacy

We do not knowingly collect or process data from individuals under the age of 18. If we become aware of such data, we will delete it immediately or request parental consent.

8. Changes to the Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated via email (if possible) or through a notice on the Website.

This Website uses cookies. For details, please see our Cookie Policy.