Privacy Policy

1. Data Controller

The data controller is BRODART CREATION SRL, the company operating the DRAMACLUB online store.

• Tax ID (CUI): 46395243
• Trade Register No.: J26/1136/2022
• Address: Str. Zarnesti, Nr. 4, Apartament 1, Targu Mures, Mures, Romania
• Website: www.dramaclub.ro
• Contact email: vanzari@dramaclub.ro
• Phone: 0760591232

2. What Data We Collect

Depending on your interaction with the site, we may process the following categories of data:

• first name and last name;
• email address and phone number;
• delivery address and billing details;
• information about orders, products, sizes, amounts and statuses;
• data required for creating a customer account and order history, only if you choose this option;
• basic technical data, such as IP address, browser type, device and similar information, if collected via server or technical tools;
• email address, subscription date and subscription status for the newsletter;
• cookie preferences and Google Analytics statistical data, only with the user's consent.

DRAMACLUB does not store full bank card details. Online payments are processed through the integrated payment provider.

3. Purposes of Processing

• receiving, confirming and processing orders;
• delivering products via courier or collection points;
• issuing invoices and fulfilling tax obligations;
• communicating with the customer regarding the order, delivery, payment, returns or warranty;
• creating and managing the customer account, at the customer's request;
• fraud prevention, website security and resolution of technical issues;
• protecting the legitimate rights and interests of the company, where necessary;
• sending newsletters and commercial communications, only based on consent.

4. Legal Bases

We process personal data on the following legal bases provided by the GDPR:

• performance of a contract, for placing and delivering the order;
• legal obligations, for invoicing, accounting and tax reporting;
• legitimate interest, for website security, operational communications, protection of rights and fraud prevention;
• consent, where explicitly required, for example for optional commercial communications or non-essential cookies.

5. Who We Share Data With

Data may be shared only with recipients necessary for the operation of the store and fulfilment of legal obligations:

• courier and logistics service providers, including services selected through Colete Online;
• Stripe, for processing online card payments;
• Oblio and accounting providers, for issuing and managing invoices;
• Supabase, hosting and email providers, for the database and technical infrastructure;
• Google Analytics, only if the user accepts statistical cookies;
• public authorities, where there is a legal obligation;
• legal, tax or technical advisors, where necessary.

6. International Transfers

Some technical providers, such as Google, Stripe or Supabase, may also process data outside the European Economic Area. In such cases, applicable legal mechanisms are used, such as adequacy decisions or standard contractual clauses.

7. How Long We Retain Data

Data is retained only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable legislation.

• data related to orders and invoices is retained in accordance with tax and accounting obligations;
• customer account data is retained for as long as the account is active or until a deletion request is made, unless there are contrary legal obligations;
• data required for handling complaints, returns or warranty claims is retained for the duration necessary to manage them;
• newsletter data is retained until consent is withdrawn, with retention of proof of unsubscription where necessary.

8. Your GDPR Rights

Under the GDPR, you have the following rights:

• the right of access to your data;
• the right to rectification of inaccurate data;
• the right to erasure of data, where permitted by law;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw consent, where processing is based on consent;
• the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

To exercise your rights, you can contact us at vanzari@dramaclub.ro.

9. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unauthorised disclosure.

No method of electronic transmission or storage is completely risk-free, but we use measures proportionate to the nature of the data and the risks of processing.

10. Cookies and Similar Technologies

The site may use cookies necessary for the operation of the store, including for the shopping cart, session and security. If analytics, marketing or other non-essential cookies are used, these should be activated in accordance with user preferences and applicable legislation.

More information is available in the Cookie Policy.

11. Policy Changes

We may update this policy to reflect changes to the site, services or legal requirements. The current version will be published on this page.