Privacy Policy
1. Who We Are
This Privacy Policy explains how Atelier AREP S.R.L., with its registered office in Bucharest, at 222 Calea Grivitei, Building 7, Staircase A, 6th Floor, Apartment 26, CUI 52731437, as a data controller, collects and processes your personal data when you use the arep.ro website, contact us, or place an order.
For questions regarding personal data, you can contact us at hello@arep.ro
2. What Data We Collect
We may collect the following categories of data: first and last name, email address, phone number, shipping address, billing address, order details, communication history, payment information processed through specialized providers, technical data regarding website usage, and cookie preferences.
We do not collect or store full credit card details. These are processed by the payment service providers used on the website.
3. Why We Process Data
We process data to fulfill orders, deliver products, issue tax documents, communicate with you about your order, manage returns, complaints, or warranty claims, ensure the website functions properly, and, where applicable, send marketing communications based on your consent.
We may process technical and usage data for website security, fraud prevention, analysis, and to improve the user experience, within the limits permitted by law and the consent you have provided for non-essential cookies.
4. Legal Bases
Legal bases may include contract performance, compliance with legal obligations, legitimate interest, consent, and, where applicable, the protection of legitimate rights or interests.
For newsletters, direct marketing, or analytics/marketing cookies, we rely on your consent where required.
5. To Whom We Disclose Data
We may disclose data to service providers involved in the operation of the online store and the fulfillment of orders, such as the Wix website platform, payment processors (Stripe, PayPal), courier companies, email service providers, our accountant, IT providers, consultants, and public authorities, when required by law.
Data is shared only to the extent necessary for the purposes described in this policy.
6. Transfers Outside the EU/EEA
Some providers used to operate the website, handle payments, manage email, conduct analytics, or carry out marketing may process data outside the European Union or the European Economic Area. In such cases, we use providers who declare that they apply appropriate legal mechanisms for data protection, such as standard contractual clauses or other safeguards provided for by the GDPR.
7. How Long We Retain Data
We retain data only for as long as necessary for the purposes for which it was collected and for the periods required by tax and accounting laws, consumer protection laws, or to defend our rights.
Data related to orders and billing may be retained for the duration required by tax and accounting laws. Data collected based on consent is retained until consent is withdrawn or until it is no longer necessary for the purpose for which it was collected.
8. Your Rights
You have the right to access, rectify, erase, restrict, object to, and request data portability, as well as the right to withdraw your consent and the right to file a complaint with the competent data protection authority, in accordance with the GDPR.
To exercise your rights, you can contact us at hello@arep.ro. We may ask you for additional information to verify your identity before responding to your request.
9. Data Security
We take reasonable measures to protect personal data against unauthorized access, loss, destruction, alteration, or unauthorized disclosure. However, no method of electronic transmission or storage is completely risk-free.
10. Policy Updates
We may update this Privacy Policy from time to time. The updated version will be posted on the website, indicating the date of the last update. Last updated on July 30, 2026.