Privacy policy
PRIVACY policy regarding personal data
Destres Company SRL - a legal entity of Romanian nationality, headquartered in Ovidiu, Ovidiu City, Caminului Street, no. 63, room 1, Constanta County, with serial number in the Trade Register J13/1556/2023 and CUI 48112130, email: support@destreshop.com and/or office@destreshop.com, hereby informs you of the policy on the processing of your personal data and the rights you have in accordance with REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter referred to as GDPR) and national legislation on the protection and security of personal data, in force.
In accordance with national legislation (Law 102/2005, amended and supplemented, Law no. 190/2018, Law no. 506/2004) and European legislation (Regulation 2016/679/EU, Directive 2016/680/EC, Directive 2002/58/EC) in force, Destres Company SRL is obliged to manage the personal data provided to it in a safe manner and only for the specified purposes.
For the purposes of data protection legislation, we are a " controller " when we process your personal data and you, the natural person benefiting from our products, customer or potential customer, website visitor or person in any kind of relationship with us, are a " data subject ", i.e. an identified or identifiable natural person.
definition some terms used in this policy
"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
" Processing" means any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
" Controller " means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or national law, the controller or the specific criteria for his designation may be laid down in Union or national law
" Consent " of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear action, signifies agreement to the processing of personal data concerning him or her.
The purpose for which we process the personal data you provide to us
We process the personal data you provide us directly for the following purposes:
1. for the conclusion and execution of a contract between Destres Company SRL and you . The vast majority of personal data are processed for this purpose, including, but not limited to: order processing, validation, shipping, issuing tax invoices related to purchased goods, account creation on our site, product return and reimbursement according to the return policy, taking over complaints and responding to them
2. for marketing policy - we keep you informed about the best offers for the products you are interested in, sending you emails containing information about offers or promotions, information about products similar to those you have purchased, information about new products we sell, etc.
3. to defend our legitimate interests
Various situations may arise in which we will use the information processed by us to protect our rights and commercial activity, such as: measures to protect the website from cyber attacks, measures to manage various other risks, measures to prevent and detect fraud attempts, legal actions through notifications issued by us to the competent public authorities to sanction such acts;
The general basis for these types of processing is our legitimate interest in defending our business, continuously trying to ensure a balance between our interests and your fundamental rights and freedoms.
We may also collect and subsequently process certain information regarding your behavior while visiting our website in order to personalize your online experience, to detect various errors that occur and to provide you with offers tailored to your profile.
We do not collect or otherwise process sensitive data, which are included in the General Data Protection Regulation as special categories of personal data. We also do not wish to collect or process data from minors under the age of 16.
What categories of personal data do we process?
Destres Company SRL collects your personal data directly from you, each user having control over the type of information you provide to us. By way of example but not limitation, we receive information directly from you in the following circumstances:
When you place an order on the site, you provide us with the following personal data:
-name and surname,
- email address,
-billing address,
-delivery address,
-payment method, bank card details.
-phone number,
When you create an account on our site, you provide us with data such as: email address, first and last name.
When you fill out a return form, you provide us with personal data such as: email address, first and last name, telephone number, name of the good for which you are requesting a return, bank details regarding the refund of amounts.
When you post a review you provide us with information such as your name, surname, email address, photo, nickname
When you send us a request/notification, you provide us with information such as: name, surname, email address, telephone number.
When you subscribe to the newsletter to receive offers from our company, you provide us with your email address.
When we issue the tax invoice for the purchased goods, we process data such as: the buyer's name, first name, billing address.
It is very important to keep in mind that to the extent that you do not agree to the provision of your personal data , Destres Company SRL cannot take the necessary steps. to respond to your requests for placing orders, returns, responding to complaints, creating an account, etc.
Moreover, the Personal Data Protection and Security Policy adopted at the Destres Company SRL level is to collect only the personal data necessary for the aforementioned purposes and to request that the data subjects communicate to us only those personal data strictly necessary to fulfill these purposes. Also, our company does not collect and does not process data of minors who have not reached the age of 16, with the placement of each order, the buyer is obliged to declare that he is over 16 years old.
Legal basis for data processing
The legal basis for the processing of personal data that you provide us directly is represented by art. 6 (1) a), b), c) GDPR – REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Our legal grounds for processing your personal data will generally be the following: there is your consent to the processing of the personal data, the processing is necessary for the conclusion or performance of a contract between you and us, the processing is necessary for the purposes of our legitimate interests or those of another party.
Source of personal data
Destres Company SRL collects personal data directly from you, the users of our website.
If we need to process personal data obtained from third party legal entities, the latter are obliged to provide you with the necessary information regarding the use of the personal data transmitted.
Categories of recipients of personal data
Your personal data is intended for use by Destres Company SRL in order to fulfill the purposes mentioned above and for which you have given us your consent and may be communicated by us to the following recipients:
- courier companies for the purpose of sending the orders placed by you,
- the companies that provide us with banking services;
- marketing service providers;
– companies that provide us with IT services;
If we have a legal obligation or if it is necessary to defend a legitimate interest, we have the right to disclose certain personal data to public authorities.
We would like to inform you that we ensure that access to your personal data by third party legal entities is carried out in accordance with the legal provisions regarding data protection and confidentiality of information, based on contracts concluded between our company and them.
Storage period of personal data
Please note that we store your personal data only for the period necessary to fulfill the purposes, but no longer than 5 years from the termination of the contract or the last interaction with us. After the termination of the period, the personal data will be destroyed or deleted from the IT systems. Regarding billing data - the buyer's first and last name, billing address - will be stored for a period of 10 years according to the relevant tax legislation.
If you have created an account on our site, as a general rule, we will store your personal data for as long as you have an account on our site. You can ask us to delete certain information or close your account at any time and we will comply with these requests.
Your rights and how to exercise them
According to the applicable legal provisions, you benefit from the right of access, the right to rectification, the right to erasure of data, the right to restriction of processing, the right to data portability, the right to opposition and automated individual decision-making.
Right of access - You have the right to request and obtain from us confirmation as to whether or not personal data concerning you are being processed and, if so, access to the data and information provided for in Article 15(1) of the GDPR.
The right to rectify your data - You can ask us to rectify or complete your inaccurate or incomplete personal data that we hold - art. 16 of the GDPR .
Right to erasure - In the situations provided for in art. 17 of the GDPR, you have the right to request and obtain the erasure of personal data. We may comply with your request to erase the data processed by us if: they are no longer necessary for the purposes for which they were collected; you have withdrawn your consent if the data processing was based on consent; you exercise a legal right to object. We are not obliged to comply with your request to erase your personal data if the processing of your personal data is necessary: for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
Right to restriction of processing - In the cases provided for in Article 18 of the GDPR, you have the right to request and obtain restriction of processing.
The right to transmit the data we have about you to another controller - called the "right to portability" - The data subject has the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and has the right to transmit these data to another controller, without hindrance from the controller to whom the personal data were provided - art. 20 of the GDPR
Right to object to data processing - The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her based on point (e) or (f) of Article 6(1) or Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims - Article 21 of the GDPR.
The right not to be subject to a decision based solely on automated processing - Data Protection Law establishes that you have the right not to be subject to a decision based solely on automated means if the decision produces legal effects concerning you or similarly significantly affects you. A decision produces legal effects when it has an impact on your legal rights. In addition, the processing may significantly affect you if it influences your circumstances, behavior or choices
The right to seek justice to defend your rights and interests.
How we protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to the standards imposed by the legislation in force.
Personal data processed by our company is stored on secure servers, while ensuring data redundancy.
Despite the measures taken to protect your personal data, we draw your attention to the fact that the transmission of information over the Internet generates risks that the data may be seen and used by unauthorized third parties. We cannot be responsible for such vulnerabilities of systems that are not under our control.
To exercise your rights, please contact us directly at the following contact details, and our company will make every effort to respond to you as soon as possible:
Destres Company SRL
headquarters: Ovidiu Village, Ovidiu City, Caminului Street, no. 63, room 1, Constanta County
email: support@destreshop.com or office@destreshop.com
For any questions regarding the way in which your personal data is processed, please send us a complaint to the address mentioned above in order to resolve it amicably, but we inform you that you can also file a complaint with the National Supervisory Authority for Personal Data Processing:
The National Supervisory Authority for Personal Data Processing, headquartered at B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania, email: anspdcp@dataprotection.ro.
We inform you that we will periodically update and modify this Privacy Policy, depending on the modification of our company's policies regarding the way we process your personal data but also in relation to any legislative changes, which is why we ask you to periodically check the content of this Privacy Policy.
This personal data privacy policy was updated on 14.02.2025.