{"id":1324,"date":"2026-10-15T08:35:14","date_gmt":"2026-10-15T05:35:14","guid":{"rendered":"https:\/\/alice-design.ro\/?page_id=1324"},"modified":"2026-11-01T08:56:27","modified_gmt":"2026-11-01T06:56:27","slug":"politica-de-confidentialitate","status":"publish","type":"page","link":"https:\/\/alice-design.ro\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p>This policy explains which personal data we process when you visit the site, place an order, request an appointment or contact us, why we process it, and what rights you have under Regulation (EU) 2016\/679 (GDPR) and Romanian Law no. 190\/2018. Last updated: 30 October 2026.<\/p>\n<h2>1. Controller<\/h2>\n<p><strong>SC ALICE DESIGN ATELIER SRL<\/strong>, Calea Mo\u0219ilor no. 100, sector 2, Bucharest, tax ID 44435457, registration no. J2021010341402. For any question about your data: <a href=\"mailto:mail@alice-design.ro\">mail@alice-design.ro<\/a>, telephone 0763 999 950.<\/p>\n<h2>2. What data we process and why<\/h2>\n<table>\n<thead>\n<tr>\n<th>Situation<\/th>\n<th>Data<\/th>\n<th>Purpose<\/th>\n<th>Legal basis<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Online order<\/td>\n<td>name, delivery and billing address, telephone, email, products ordered, payment method, notes<\/td>\n<td>processing, delivering and invoicing the order, communications about the order<\/td>\n<td>performance of a contract (Article 6(1)(b) GDPR); legal tax and accounting obligations (point (c))<\/td>\n<\/tr>\n<tr>\n<td>Made-to-measure dresses<\/td>\n<td>body measurements, model preferences, photographs you send us<\/td>\n<td>making the dress to your measurements<\/td>\n<td>performance of a contract (point (b))<\/td>\n<\/tr>\n<tr>\n<td>Fitting appointment and contact<\/td>\n<td>name, telephone, email, preferred date, your message<\/td>\n<td>arranging the appointment and replying to your request<\/td>\n<td>steps at your request before entering into a contract (point (b))<\/td>\n<\/tr>\n<tr>\n<td>Withdrawal from a contract and complaints<\/td>\n<td>name, email, telephone, order number, IBAN for the refund<\/td>\n<td>handling the withdrawal, the refund and complaints<\/td>\n<td>legal obligation (point (c)): Emergency Ordinance (OUG) no. 34\/2014 and OUG no. 140\/2021<\/td>\n<\/tr>\n<tr>\n<td>Site security<\/td>\n<td>IP address, technical browser data, number of sign-in or form attempts<\/td>\n<td>protection against attacks and automated submissions<\/td>\n<td>legitimate interest in security (point (f))<\/td>\n<\/tr>\n<tr>\n<td>Statistics, with your consent<\/td>\n<td>statistics cookies and data about the pages viewed and actions (for example a click on the telephone number or WhatsApp)<\/td>\n<td>understanding where visitors and orders come from<\/td>\n<td>consent (point (a)); see our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a><\/td>\n<\/tr>\n<tr>\n<td>Marketing, with your consent<\/td>\n<td>marketing cookies; for orders and appointments, data sent from our server to Meta: IP address, browser and Meta cookies in clear text; name, email and telephone in hashed form; for orders, also the value and the order number<\/td>\n<td>measuring Google and Meta advertising and showing more relevant adverts<\/td>\n<td>consent (point (a)); see our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>3. Who we share data with<\/h2>\n<ul>\n<li>FAN Courier Express SRL, to deliver the parcel (name, address, telephone);<\/li>\n<li>Romarg SRL, our web hosting provider and the provider of our email service (for sending confirmations and replies); the data from orders and appointments is stored on its servers;<\/li>\n<li>Google (Google Analytics 4, Google Ads), for statistics and measuring advertising, only with your consent for those categories;<\/li>\n<li>Meta (Pixel and Conversions API), for measuring advertising, only with your consent for marketing;<\/li>\n<li>Discord, for internal notifications to the atelier team: first name, date and time of an appointment, or city and total of an order, without telephone number and without address. The channel is internal and is used only by the atelier team;<\/li>\n<li>our accountant or accounting firm, for financial and accounting records;<\/li>\n<li>our bank, for refunds by transfer;<\/li>\n<li>public authorities, only when the law requires it.<\/li>\n<\/ul>\n<p>These recipients process data only for the purposes above, under contracts that require confidentiality and security.<\/p>\n<h2>4. Transfers outside the European Economic Area<\/h2>\n<p>Google, Meta and Discord are companies based in the United States of America, so data sent to them also reaches outside the EEA. Transfers rely on the EU-U.S. Data Privacy Framework for certified providers, and\/or on the standard contractual clauses.<\/p>\n<p>The servers that host the site and the email service are in Romania.<\/p>\n<h2>5. How long we keep data<\/h2>\n<ul>\n<li>order and invoice data: 10 years, in line with the tax and accounting obligations for accounting documents;<\/li>\n<li>withdrawal declarations and complaints: 3 years from resolution (the general limitation period);<\/li>\n<li>appointment requests and contact messages: up to 24 months from the last interaction, then deleted;<\/li>\n<li>measurements and materials for made-to-measure dresses: until the order is completed and the conformity guarantee expires, then deleted, unless you ask us to keep them for future orders;<\/li>\n<li>internal Discord notifications: deleted manually, at the latest 12 months after they were sent;<\/li>\n<li>IP addresses used to block repeated sign-in attempts: a block lasts 30 minutes, and 24 hours if attempts are repeated; the block log keeps the last 100 entries;<\/li>\n<li>cookies: as set out in our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a>;<\/li>\n<li>data processed by Google and Meta: Google Analytics keeps data for 14 months (the default setting); Meta applies the default periods documented by Meta, and the advertising attribution window is 7 days after a click.<\/li>\n<\/ul>\n<h2>6. Your rights<\/h2>\n<p>You have the right of access, rectification, erasure (\u201cright to be forgotten\u201d), restriction of processing, data portability, objection, and the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. To exercise them, write to <a href=\"mailto:mail@alice-design.ro\">mail@alice-design.ro<\/a>; we reply within one month at most.<\/p>\n<p>You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru no. 28-30, sector 1, Bucharest, <a href=\"https:\/\/www.dataprotection.ro\/\" target=\"_blank\" rel=\"noopener\">dataprotection.ro<\/a>.<\/p>\n<h2>7. Cookies and withdrawing consent<\/h2>\n<p>Our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a> explains which cookies we use, how long they last and how to change your choice. You can change your choice at any time from the \u201cCookie settings\u201d link in the footer.<\/p>\n<h2>8. Security<\/h2>\n<p>The site uses an encrypted connection (HTTPS). Access to data is limited to the people who need it to process your order or request. The appointment form has protections against automated submissions.<\/p>\n<h2>9. Changes<\/h2>\n<p>We may update this policy. The version in force is published on this page, with the date of the last update.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This policy explains which personal data we process when you visit the site, place an order, request an appointment or contact us, why we process it, and what rights you have under Regulation (EU) 2016\/679 (GDPR) and Romanian Law no. 190\/2018. Last updated: 30 October 2026. 1. Controller SC ALICE DESIGN ATELIER SRL, Calea Mo\u0219ilor [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"alice_care":"","alice_seo_title":"Privacy Policy | Alice Design","alice_seo_desc":"How Alice Design processes personal data under the GDPR: orders, fitting appointments, withdrawals, your rights and how to contact the data controller.","alice_en_title":"","alice_en_slug":"","alice_en_short":"","alice_en_excerpt":"","alice_en_content":"<p>This policy explains which personal data we process when you visit the site, place an order, request an appointment or contact us, why we process it, and what rights you have under Regulation (EU) 2016\/679 (GDPR) and Romanian Law no. 190\/2018. Last updated: 30 October 2026.<\/p>\n\n<h2>1. Controller<\/h2>\n<p><strong>SC ALICE DESIGN ATELIER SRL<\/strong>, Calea Mo\u0219ilor no. 100, sector 2, Bucharest, tax ID 44435457, registration no. J2021010341402. For any question about your data: <a href=\"mailto:mail@alice-design.ro\">mail@alice-design.ro<\/a>, telephone 0763 999 950.<\/p>\n\n<h2>2. What data we process and why<\/h2>\n<table>\n<thead><tr><th>Situation<\/th><th>Data<\/th><th>Purpose<\/th><th>Legal basis<\/th><\/tr><\/thead>\n<tbody>\n<tr><td>Online order<\/td><td>name, delivery and billing address, telephone, email, products ordered, payment method, notes<\/td><td>processing, delivering and invoicing the order, communications about the order<\/td><td>performance of a contract (Article 6(1)(b) GDPR); legal tax and accounting obligations (point (c))<\/td><\/tr>\n<tr><td>Made-to-measure dresses<\/td><td>body measurements, model preferences, photographs you send us<\/td><td>making the dress to your measurements<\/td><td>performance of a contract (point (b))<\/td><\/tr>\n<tr><td>Fitting appointment and contact<\/td><td>name, telephone, email, preferred date, your message<\/td><td>arranging the appointment and replying to your request<\/td><td>steps at your request before entering into a contract (point (b))<\/td><\/tr>\n<tr><td>Withdrawal from a contract and complaints<\/td><td>name, email, telephone, order number, IBAN for the refund<\/td><td>handling the withdrawal, the refund and complaints<\/td><td>legal obligation (point (c)): Emergency Ordinance (OUG) no. 34\/2014 and OUG no. 140\/2021<\/td><\/tr>\n<tr><td>Site security<\/td><td>IP address, technical browser data, number of sign-in or form attempts<\/td><td>protection against attacks and automated submissions<\/td><td>legitimate interest in security (point (f))<\/td><\/tr>\n<tr><td>Statistics, with your consent<\/td><td>statistics cookies and data about the pages viewed and actions (for example a click on the telephone number or WhatsApp)<\/td><td>understanding where visitors and orders come from<\/td><td>consent (point (a)); see our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a><\/td><\/tr>\n<tr><td>Marketing, with your consent<\/td><td>marketing cookies; for orders and appointments, data sent from our server to Meta: IP address, browser and Meta cookies in clear text; name, email and telephone in hashed form; for orders, also the value and the order number<\/td><td>measuring Google and Meta advertising and showing more relevant adverts<\/td><td>consent (point (a)); see our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h2>3. Who we share data with<\/h2>\n<ul>\n<li>FAN Courier Express SRL, to deliver the parcel (name, address, telephone);<\/li>\n<li>Romarg SRL, our web hosting provider and the provider of our email service (for sending confirmations and replies); the data from orders and appointments is stored on its servers;<\/li>\n<li>Google (Google Analytics 4, Google Ads), for statistics and measuring advertising, only with your consent for those categories;<\/li>\n<li>Meta (Pixel and Conversions API), for measuring advertising, only with your consent for marketing;<\/li>\n<li>Discord, for internal notifications to the atelier team: first name, date and time of an appointment, or city and total of an order, without telephone number and without address. The channel is internal and is used only by the atelier team;<\/li>\n<li>our accountant or accounting firm, for financial and accounting records;<\/li>\n<li>our bank, for refunds by transfer;<\/li>\n<li>public authorities, only when the law requires it.<\/li>\n<\/ul>\n<p>These recipients process data only for the purposes above, under contracts that require confidentiality and security.<\/p>\n\n<h2>4. Transfers outside the European Economic Area<\/h2>\n<p>Google, Meta and Discord are companies based in the United States of America, so data sent to them also reaches outside the EEA. Transfers rely on the EU-U.S. Data Privacy Framework for certified providers, and\/or on the standard contractual clauses.<\/p>\n<p>The servers that host the site and the email service are in Romania.<\/p>\n\n<h2>5. How long we keep data<\/h2>\n<ul>\n<li>order and invoice data: 10 years, in line with the tax and accounting obligations for accounting documents;<\/li>\n<li>withdrawal declarations and complaints: 3 years from resolution (the general limitation period);<\/li>\n<li>appointment requests and contact messages: up to 24 months from the last interaction, then deleted;<\/li>\n<li>measurements and materials for made-to-measure dresses: until the order is completed and the conformity guarantee expires, then deleted, unless you ask us to keep them for future orders;<\/li>\n<li>internal Discord notifications: deleted manually, at the latest 12 months after they were sent;<\/li>\n<li>IP addresses used to block repeated sign-in attempts: a block lasts 30 minutes, and 24 hours if attempts are repeated; the block log keeps the last 100 entries;<\/li>\n<li>cookies: as set out in our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a>;<\/li>\n<li>data processed by Google and Meta: Google Analytics keeps data for 14 months (the default setting); Meta applies the default periods documented by Meta, and the advertising attribution window is 7 days after a click.<\/li>\n<\/ul>\n\n<h2>6. Your rights<\/h2>\n<p>You have the right of access, rectification, erasure (\u201cright to be forgotten\u201d), restriction of processing, data portability, objection, and the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. To exercise them, write to <a href=\"mailto:mail@alice-design.ro\">mail@alice-design.ro<\/a>; we reply within one month at most.<\/p>\n<p>You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru no. 28-30, sector 1, Bucharest, <a href=\"https:\/\/www.dataprotection.ro\/\" target=\"_blank\" rel=\"noopener\">dataprotection.ro<\/a>.<\/p>\n\n<h2>7. Cookies and withdrawing consent<\/h2>\n<p>Our <a href=\"\/en\/cookie-policy\/\">Cookie policy<\/a> explains which cookies we use, how long they last and how to change your choice. You can change your choice at any time from the \u201cCookie settings\u201d link in the footer.<\/p>\n\n<h2>8. Security<\/h2>\n<p>The site uses an encrypted connection (HTTPS). Access to data is limited to the people who need it to process your order or request. The appointment form has protections against automated submissions.<\/p>\n\n<h2>9. Changes<\/h2>\n<p>We may update this policy. The version in force is published on this page, with the date of the last update.<\/p>","alice_en_seo_title":"","alice_en_seo_desc":"","footnotes":""},"class_list":["post-1324","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/pages\/1324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/comments?post=1324"}],"version-history":[{"count":4,"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/pages\/1324\/revisions"}],"predecessor-version":[{"id":3209,"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/pages\/1324\/revisions\/3209"}],"wp:attachment":[{"href":"https:\/\/alice-design.ro\/en\/wp-json\/wp\/v2\/media?parent=1324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}