Privacy policy (GDPR) – Balletique.ro

At Balletique.ro, we respect the privacy of your personal data and are committed to protecting it in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

What data we collect

Depending on how you interact with our website, we may collect the following data:

• Identification details: first name, surname, delivery and billing addresses.

• Contact details: telephone number and email address.

• Payment and billing details.

• Technical data: IP address, browser and device information.

• Communication preferences (newsletters and special offers).

How we use your data

We use your data only for legitimate purposes, such as:

• Processing orders and delivering products.

• Issuing invoices and managing payments.

• Creating and managing your customer account.

• Communicating information about orders, returns or our services.

• Providing customer support.

• Sending offers and newsletters (only with your consent).

Legal basis

We process your data on the basis of:

• Performance of a contract (orders and returns).

• Legal obligations (invoicing and record-keeping).

• Consent (marketing and newsletters).

• Legitimate interests (website security and improving our services).

Data retention

We retain data only for as long as necessary for the purposes for which it was collected or as required by law (for example, invoices must be kept for 10 years).

Your rights

Under the GDPR, you have the following rights:

• The right to access your data.

• The right to rectify your data.

• The right to erasure (“the right to be forgotten”).

• The right to restrict processing.

• The right to data portability.

• The right to object to processing.

• The right to lodge a complaint with ANSPDCP (www.dataprotection.ro).

To exercise your rights, contact us at:
info@balletique.ro

Data security

We use technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure.