Luna Giftables (a brand of Luna Paperie SRL) uses information from your interactions with us and from certain third parties to achieve its goal of providing relevant and high-quality products and services.

Respecting the right to online visitor privacy and protecting the information collected about our visitors and/or customers are very important aspects for us, and we process this data responsibly.

The privacy policy informs you about:

• the type of information we collect and how this collection takes place;
• the purposes for which we collect and use this information;
• your rights and options regarding our use of your data;
• how your data is processed and to whom it is or may be transferred;
• how long we store your information, and so on. Please read it carefully, and if you do not agree with it, you always have the option not to use our website or purchase our goods or services.

We reserve the right to update and modify this Privacy Policy periodically to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of a change, we will display the modified version of the Privacy Policy on our website. Therefore, please check the contents of this Privacy Policy periodically.

DEFINITIONS

Personal data: any information regarding an identified or identifiable natural person. An identifiable person is a person who can be identified, directly or indirectly, especially by reference to an identification element such as a name, an identification number (CNP, identity card, passport, etc.), location data, an online identifier (such as an IP address), or one or more specific elements specific to his physical, physiological, genetic, mental, economic, cultural, or social identity. Examples of data that are not considered personal data: the registration code of a company; a general business email address, such as in**@co*****.com; as well as anonymized data (irreversible).

By “processing,” it is understood any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, deletion, or destruction.

WHO WE ARE AND HOW YOU CAN CONTACT US

Luna Giftables is a brand of Luna Paperie SRL, a legal entity of Romanian nationality, headquartered in Timișoara, Str. Gheorghe Asachi no. 13, with registration number in the Trade Register J35/4162/2022, unique fiscal registration code 46764286 (hereinafter called “Luna Giftables,” or “we”). Under data protection legislation, we are a data controller when we process your personal data.

Luna Giftables does not have a designated Data Protection Officer (DPO) as we consider that we do not meet the conditions to have an obligation to designate one. If you have questions or concerns regarding privacy or if you have any questions regarding the personal data you have provided to us, please contact us at any time using the contact form or directly via email at he***@lu***********.com.

CATEGORIES OF PERSONAL DATA WE PROCESS

The categories and methods of collecting and storing information, including personal data, depend on how our website and related services are used. In general, we collect your personal data directly from you, so you have control over the type of information you provide to us. We do not collect sensitive data about you. Also, we do not intend to collect or process data of minors under the age of 16.

Data collected from your interaction with our website (Cookies, Analytics) Various technologies/services may be used on our website to improve it, making it easier and faster for visitors to use, more efficient, and secure. Such technologies/services may automatically collect personal data by us or on our behalf. Examples of such technologies/services include cookie files, web audience measurement services, and user interaction tracking.

1.1 Web Audience Measurement and User Interaction Tracking

When you visit our website, data from your browser is sent to the server where it is hosted and to the providers of traffic and user interaction analysis services. This data allows us to optimize our services and improve your experience on the site. Data is collected automatically and is stored by us or by third parties on our behalf. Below, in the section “To Whom We Transmit Your Personal Data,” all third parties are listed. They may change occasionally, and their updated list is always included in this Policy. This data about the actions and navigation paths of our website visitors may include:

• Visitor’s IP address (anonymized in Google Analytics but available in full in case of fraudulent attempts to compromise the site’s security through the implemented security systems).
• Date and time of the visit.
• The pages viewed on our website and the sequence of these views.
• Navigation paths between pages.
• Information about the device and browser used by the visitor.
• The country of origin.
• Other similar data and information that is used to improve the functionality and performance of our website.

1.2 Cookie Files

Our website uses cookies to provide a better user experience and to help us understand how visitors use our site. For more information about cookies and how we use them, please refer to our Cookie Policy.

DATA COLLECTED DIRECTLY FROM YOU

1.3 Contact Forms and Communication When you use our contact forms or contact us by email, we collect the information you provide, which may include your name, email address, phone number, and any other information you choose to provide in your messages to us.

1.4 Account Registration and Online Shopping

If you create an account on our website or make a purchase, we will collect your name, email address, password, and other information necessary to complete the transaction and provide you with our services.

1.5 Payment Information

If you make a purchase on our website, your payment information (such as credit card details) will be collected and processed by our payment service providers. We do not store or process your payment information on our servers.

1.6 Social Media

We may collect information from your social media profiles when you interact with us through social media platforms (e.g., when you like our Facebook page or follow us on Instagram). The information we collect may include your social media username and other information you choose to make public on your social media profiles.

1.7 Newsletter Subscription

If you subscribe to our newsletter, we will collect your email address and may collect other information such as your name and location. You can unsubscribe from our newsletter at any time by following the unsubscribe instructions provided in the email.

1.8 User-Generated Content

If you submit reviews, comments, or other user-generated content on our website or social media pages, we may collect and display your username, profile picture, and the content you submit.

PURPOSES OF PROCESSING PERSONAL DATA

We collect and process your personal data for the following purposes:

2.1 Providing and Improving Our Services

We use your personal data to provide, maintain, and improve our services, including:

• Processing and fulfilling orders for products and services.
• Providing customer support and responding to your inquiries.
• Personalizing and tailoring our services to your preferences.
• Analyzing and improving the functionality and performance of our website.
• Detecting and preventing fraud and ensuring the security of our website.

2.2 Communication and Marketing

We may use your personal data to communicate with you and send you marketing communications, including:

• Sending you transactional emails, such as order confirmations and shipping notifications.
• Sending you marketing emails, newsletters, and promotional offers.
• Conducting market research and surveys to improve our products and services.

2.3 Legal Obligations

We may process your personal data to comply with legal obligations, including:

• Complying with tax and accounting requirements.
• Investigating and responding to legal claims and disputes.
• Enforcing our terms and conditions and protecting our rights and property.

2.4 Consent

Where required by applicable law, we will obtain your consent before sending you marketing communications or using your personal data for purposes other than those described in this Privacy Policy.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

The legal basis for processing your personal data may include:

3.1 Contractual Necessity

We process your personal data as necessary to perform our contract with you, including processing your orders and providing customer support.

3.2 Legitimate Interests

We process your personal data for our legitimate interests, such as improving our services, conducting marketing activities, and ensuring the security of our website. We will not process your personal data for our legitimate interests if your rights and interests outweigh our legitimate interests.

3.3 Compliance with Legal Obligations We process your personal data to comply with legal obligations, such as tax and accounting requirements.

3.4 Consent

Where required by applicable law, we will obtain your consent before processing your personal data for specific purposes, such as sending marketing communications.

DATA RETENTION

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. The retention periods may vary depending on the type of data and the purposes for which it is processed. In general, we will retain your personal data as follows:

• Data collected for the purpose of providing and improving our services will be retained for as long as you have an active account with us and for a reasonable period thereafter.
• Data collected for marketing purposes will be retained for as long as you are subscribed to our marketing communications. You can unsubscribe at any time.
• Data collected to comply with legal obligations, resolve disputes, and enforce our rights and agreements will be retained as required by applicable law.

TO WHOM WE TRANSMIT YOUR PERSONAL DATA

We may share your personal data with the following categories of recipients:

5.1 Service Providers We may share your personal data with third-party service providers who help us operate our website and provide our services, including:

• Payment processors who facilitate online payments.
• Shipping and logistics partners who facilitate the delivery of products.
• IT service providers who assist with website hosting, maintenance, and development.
• Customer support providers who assist with responding to inquiries and resolving issues.
• Marketing and advertising partners who help us conduct marketing activities.
• Analytics providers who help us analyze and improve the performance of our website.

These service providers are contractually obligated to keep your personal data confidential and secure and to use it only for the purposes of providing services to us.

5.2 Legal Requirements We may disclose your personal data if required by law, regulation, or legal process, or if we believe it is necessary to protect our rights, property, or safety or the rights, property, or safety of others.

5.3 Business Transfers In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction. The acquiring entity will be required to comply with this Privacy Policy.

YOUR RIGHTS AND CHOICES

Subject to applicable data protection laws, you have the following rights with respect to your personal data:

6.1 Access You have the right to request access to the personal data we hold about you and receive a copy of it. You can request access to your personal data by contacting us using the contact information provided in Section 1 above.

6.2 Rectification You have the right to request the correction of inaccurate or incomplete personal data we hold about you. You can request rectification of your personal data by contacting us using the contact information provided in Section 1 above.

6.3 Deletion You have the right to request the deletion of your personal data in certain circumstances, such as when your personal data is no longer necessary for the purposes for which it was collected. You can request deletion of your personal data by contacting us using the contact information provided in Section 1 above.

6.4 Restriction You have the right to request the restriction of the processing of your personal data in certain circumstances, such as when you contest the accuracy of your personal data or when the processing is unlawful. You can request restriction of your personal data by contacting us using the contact information provided in Section 1 above.

6.5 Portability You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller. You can request your personal data in a portable format by contacting us using the contact information provided in Section 1 above.

6.6 Objection You have the right to object to the processing of your personal data in certain circumstances, such as when we process your personal data for our legitimate interests. You can object to the processing of your personal data by contacting us using the contact information provided in Section 1 above.

6.7 Withdrawal of Consent Where we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw your consent at any time. You can withdraw your consent by following the unsubscribe instructions provided in our marketing communications or by contacting us using the contact information provided in Section 1 above.

6.8 Complaints If you believe that your privacy rights have been violated, you have the right to lodge a complaint with a supervisory authority or with our Data Protection Officer (DPO). Our DPO’s contact information is provided in Section 1 above.

SECURITY MEASURES

We are committed to protecting your personal data and have implemented appropriate technical and organizational security measures to safeguard your personal data against unauthorized access, disclosure, alteration, and destruction. These measures are regularly reviewed and updated to ensure the security and confidentiality of your personal data.

INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and processed in countries other than the country in which you are located. These countries may have data protection laws that are different from the laws of your country. When we transfer your personal data to other countries, we will take appropriate measures to ensure that your personal data is adequately protected in accordance with applicable data protection laws.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updates to this Privacy Policy will be posted on our website, and the date of the latest revision will be indicated at the top of the Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about our data protection practices.

CONTACT US
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the contact form or via email at he***@lu***********.com.

Revised: October 2023