Privacy policy
Last updated: 12 September 2026Vasarleto shop ("we", "us") operates vasarleto.shop. This policy explains what personal data we collect when you browse or order, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Romanian Law no. 190/2018.
1. Who is responsible
The data controller is Vasarleto shop, Calea Floreasca 246B, Promenada Mall, Level 1, 014476 București, Romania. Questions about this policy can be sent to contact@vasarleto.shop or +40 21 310 48 72.
2. What we collect
- Order data: name, delivery address, phone number, email address and the products you buy. We need these to fulfil the contract of sale.
- Payment data: card payments are processed by Shopify Payments and its banking partners. We never see or store your full card number.
- Account data: if you create an account, we store your name, email and order history so you can reorder without retyping.
- Contact-form and email data: whatever you send us, kept only as long as needed to answer you.
- Technical data: IP address, browser type and pages visited, collected through essential cookies and, with your consent, analytics cookies.
3. Why we use it
To process and deliver orders, to answer questions, to send the monthly newsletter if you asked for it, to meet accounting and tax obligations (Romanian law requires us to keep invoices for 10 years), and to understand which pages of the site are useful.
4. Who we share it with
Couriers (Fan Courier, DPD) receive your name, address and phone number to deliver parcels. Shopify hosts the store and processes payments. Our accountant receives invoice data. We do not sell personal data and we do not share it with advertisers for their own use.
5. How long we keep it
Order and invoice data: 10 years, as required by Romanian fiscal law. Account data: until you ask us to delete the account. Newsletter data: until you unsubscribe. Contact messages: up to 12 months.
6. Cookies
Essential cookies keep your cart and session working and cannot be switched off. Analytics cookies are only set after you accept them in the cookie banner. You can change your choice at any time by clearing cookies in your browser.
7. Your rights
You can ask to see, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent for marketing at any time. Write to contact@vasarleto.shop; we reply within 30 days. You can also complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro).
8. Changes
If this policy changes materially, we will note the date above and, for account holders, send a short email.















