Privacy Policy

Last updated: 08 July 2025

This Privacy Policy describes how your personal data is collected, used, and shared when you visit or make a purchase from https://artes.ro (the “Site”).

1. Data Controller

The controller of your personal data is S.C. BIOFY DISTRIBUTION S.R.L., having its registered office at Sat Obrijeni, Comuna Popești, Construcția 78-C1, c.f. no. 60908, Iași County, Romania, registered with the Trade Register under no. J22/2671/11.08.2017, having the Unique Registration Code (CIF) 38096364.

For any questions or requests regarding data protection, you can contact us at:

We, as owners of the online store, have access to the data you provide. However, the technical infrastructure used for collecting and storing this data is provided by the Shopify platform, which acts as our data processor.

2. What personal data do we collect?

When you interact with our Site, we collect two types of information:

A. Automatically collected data about your device and browsing

When you visit the Site, we automatically collect certain information about your device, such as: your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we collect information about the pages and products you view, the websites or search terms that referred you to our Site, and how you interact with the Site.

We use the following technologies for this automatic collection:

  • “Cookies”: Data files placed on your device or computer, often including an anonymous unique identifier. For more information about cookies and how to disable them, please visit http://www.allaboutcookies.org.

  • “Log files”: Track actions occurring on the Site and collect data including your IP address, browser type, internet service provider (ISP), referring/exit pages, and date/time stamps.

  • “Web beacons”, “tags” and “pixels”: Electronic files used to record information about how you browse the Site.

B. Data provided for placing an order

When you make or attempt to make a purchase through the Site, we collect certain information from you, including: your first and last name, billing address, shipping address, payment information (including credit card numbers, processed securely by our partners), email address, and phone number. We refer to this information as “Order Information”.

In this Privacy Policy, when we refer to “Personal Data”, we mean both automatically collected data and Order Information.

3. For what purposes and on what legal basis do we process your personal data?

We use the personal data we collect for the following purposes and legal bases:

To fulfil your orders (Legal basis: performance of a contract)

We process your data in order to:

  • Process payments and prevent fraud

  • Prepare and ship products

  • Issue invoices and order confirmation documents

  • Communicate with you regarding the status of your order

To improve our services and prevent fraud (Legal basis: our legitimate interest)

We use automatically collected data to:

  • Detect potential risks and fraud (in particular, your IP address)

  • Optimize the Site by generating analytics about how customers browse and interact with it

  • Evaluate the success of our marketing campaigns

For marketing communications (Legal basis: your consent)

If you have opted in, we may send you information or advertising regarding our products and services by email (newsletter).

4. With whom do we share your personal data?

We share your personal data with third parties that help us operate our business, as follows:

We may also share your personal data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

5. Behavioural advertising (Remarketing)

We use your personal data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative (“NAI”) educational page at:
http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising using the links below:

In addition, you can opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at:
http://optout.aboutads.info/.

6. Your rights under the GDPR

As a resident of the European Union, you have the following rights under Regulation (EU) 2016/679 (GDPR):

  • Right to be informed and right of access: The right to obtain confirmation as to whether or not we process your personal data and, if so, access to that data.

  • Right to rectification: The right to request correction of inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”): The right to request that we delete your personal data from our records.

  • Right to restriction of processing: The right to request that we limit the way we process your data.

  • Right to data portability: The right to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller.

  • Right to object: The right to object to the processing of your data, in particular for direct marketing purposes.

To exercise any of these rights, please contact us using the details in Section 11.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro.

7. Transfer of data outside the European Economic Area (EEA)

Please note that your data may be transferred outside Europe, including to Canada and the United States, as our partners (such as Shopify and Google) have offices or servers in these countries. These transfers are lawful and secure, being based on adequacy decisions of the European Commission or on standard contractual clauses.

8. Data retention

When you place an order through the Site, we will retain your Order Information in our fiscal and accounting records for as long as required under applicable law, unless you request that we delete this information earlier, where possible and in accordance with the law.

9. Minors

The Site is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

10. Changes to this Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically.

11. Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at office@artes.ro or by post using the details below:

S.C. BIOFY DISTRIBUTION S.R.L.
Sat Obrijeni, Comuna Popești,
Construcția 78-C1, c.f. no. 60908,
Iași County, Romania