Data Protection

Privacy Policy regarding the Processing of Personal Data


Respecting the fundamental rights and freedoms of natural persons - that are guaranteed and protected by national, Community and international law - is a main responsibility of our on-line store


Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR") introduces six principles that must be respected by any entity that processes personal data, namely:


ü  The principle of legality, equity and transparency – by observing this principle, the personal data are collected correctly to the data subject, according to the legal provisions;


ü  The principle of collect purpose limitation – by respecting that, the personal data are used only in the manner in which they are presented to the natural person;


ü  The principle of data minimization - by observing that, we do not process more personal data than we need;


ü  The principle of accuracy - by respecting which, the data are kept updated;


ü  The principle of integrity and confidentiality - by observing which, personal data are protected by specific measures;


ü  The principle of responsibility - by respecting which, we commit ourselves responsibly to apply exactly the whole legislation in the field of reference.


            In this context, we come to meet our customers with a privacy policy of personal data by which we inform you about how we collect, use, transfer and protect your personal data when you interact with us regarding our products and services, including through our website or through the applications available on your mobile phone.


            This Privacy Policy will be updated whenever new regulations are adopted in this area, to reflect any changes in the way we process your personal data or any changes to legal requirements, which is why you should periodically check the content of this Privacy Policy.


Who we are and how you can contact us is the trade name of Smart Concept Shopping Ltd, legal person of Romanian nationality, having its registered office in Bucharest, county 4, Metalurgiei Avenue nr. 132, with order number in the Trade Register J40/7641/2014, unique code of tax registration 33322169. For the purposes of data protection legislation, we are an operator when we process your personal data.


For any information regarding the processing of your data, we encourage you to contact the Data Protection Controller via e-mail at or by post mail or courier to the address Bucharest, county 4, Metalurgiei Avenue nr. 132 .



What categories of personal data we process collects your personal data directly from you, so you have control over the type of information you provide to us. For example, we receive information from you as follows:


ü  When you create a account, you send us: email address, first and last name;


ü  Within your personal page (My Account) of the platform you can add additional information;


ü  When you are placing an order, you provide us with information such as: the desired product, first and last name, delivery address, billing details, payment method, telephone number, bank card details, etc


For Facebook and Google variants, personal data protection information can be viewed by accessing the following links:


We do not collect or otherwise process sensitive data included in the special categories of personal data in the General Data Protection Regulation. Also, we do not want to collect or process data of minors who have not reached the age of 16 years.


What are the purposes and grounds for processing


We will use your personal data for the following purposes:

1. To provide services for your benefit

This general purpose may include, as appropriate, the following:

a) Creation and administration of the account within the platform;

b) Processing of orders, including taking, validating, shipping and invoicing;

c) Solving cancellations or problems of any kind related to an order, the goods or services purchased;

d) Returning the products according to the legal provisions;

e) Reimbursement of the value of the products according to the legal provisions;

f) Providing support services, including providing answers to your questions regarding your orders or goods and services.

The processing of your data for these purposes is in most cases necessary for the conclusion and execution of a contract between and you. Also, certain processing subordinate to these purposes is required by applicable law, including tax and accounting law.


2. To defend our legitimate interests

There may be situations in which we will use or transmit information to protect our rights and commercial activity. These may include:

- Measures to protect the website and users of the platform from cyber-attacks;

- Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;

- Measures to manage various other risks.

The general basis of these types of processing is our legitimate interest in defending our commercial activity, being understood that we ensure that all the measures we take guarantee a balance between our interests and your fundamental rights and freedoms.


As a general rule, we will store your personal data as long as you have an account on the platform. You may request us at any time to delete certain information or to close the account and we will respond to these requests, subject to the preservation of certain information including after closing the account, in cases where applicable law or our legitimate interests require it.


To whom we transmit your personal data


Where appropriate, we may transmit or provide access to certain personal data of your own to the following categories of recipients:

- courier service providers;

- payment / banking service providers.

If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to some public authorities.

We ensure that access to your data by third parties legal persons under private law is made in accordance with the legal provisions regarding data protection and confidentiality of information, based on contracts concluded with them.


In which countries we transfer your personal data


Currently, we store and process your personal data on the territory of Romania.


How we protect the security of your personal data


We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, in accordance with industry standards.

The transmission of your personal data is done using encryption algorithms.

To make payments we use Twispay payment processor services. Any payment information is encrypted.


What rights do you have?


The General Data Protection Regulation recognizes a number of rights in relation to your personal data. You may request access to your data, correct any errors in our files, and / or object to the processing of your personal data.

In order to exercise your rights, you may contact us using the contact details set out above.


We remind you that you can contact Data Protection Controller at any time by submitting your request through any of the following methods:

– by e-mail at: sau

– by postmail or courier at address: Sc Smart Concept Shopping Ltd, Romania, Bucharest, county 4, Metalurgiei Avenue no 132.