Privacy Policy Vetter Store

This page explains how SC VETTER CO SRL collects, uses, stores and protects the personal data of customers who use the vetter.store website, place orders or interact with our support services.

As of 25 May 2018, the Regulation (EU) 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data applies. Its aim is to create a unitary data protection framework in all EU countries.

The controller responsible for data processing on the vetter.store website is:

SC VETTER CO SRL, with headquarters in Bucharest 1, Bd Ion Mihalache 172, registered with the ORC under no. J201400959522403, with CUI RO33481407.

1. Main definitions

For the purposes of Regulation (EU) 2016/679 and this Privacy Policy, we use the following notions:

• Personal data - any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier (name, identification number, location data, online identifier, etc.) or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
• Processing - any operation or set of operations which is performed upon personal data, such as collection, recording, organisation, structuring, storage, adaptation, alteration, modification, retrieval, consultation, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Controller - the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. In this case, the controller is SC VETTER CO SRL.
• Controller's authorised person - a natural or legal person, public authority, agency or other body processing personal data on behalf of the controller (e.g. IT service providers, payment processors, courier companies).

2. What data we collect, for what purpose and for how long

We only process personal data that is necessary for the operation of the website, managing your account, delivering products, providing support and commercial communications.

2.1 Types of personal data

• Name and surname;
• Billing address and delivery address;
• Telephone number;
• E-mail address;
• IP address and other online identifiers associated with your browsing session.

2.2 Main purposes of processing

Your data is used for the following legitimate purposes:

• The use of the vetter.store website - to enable the correct display of pages, the functioning of your account, shopping basket and checkout process.
• Order processing and delivery - to take, confirm, prepare and deliver the orders placed, as well as to manage product warranty and possible returns.
• Communicating with you - to provide you with order notifications, stock updates, delivery information, enquiry responses and support messages.
• Direct marketing - to send you, where appropriate, information about new products, promotions, personalised offers and relevant user guides (e.g. iPhone 17 or Galaxy S25 accessories), to the extent that you have consented or there is a legitimate interest.
• Complying with legal obligations - for issuing and archiving accounting records, managing warranties, dealing with complaints and fulfilling tax and accounting obligations.

2.3 Creation and use of client account

When creating an account on vetter.store we collect your name, surname, address, telephone number, e-mail address and IP address. This data is processed for pre-contractual and contractual purposes to enable you:

• access to your order and invoice history;
• to place subsequent orders quickly;
• update delivery and invoicing data;
• managing guarantees and returns.

Account data is kept for the entire duration of the account's existence, but not more than 3 years from the last login or the last order, unless there is another legal requirement to keep it.

2.4 Data processed for orders and payments

When placing an order, we process your name, surname, contact address, delivery address, telephone number, e-mail address and IP address, for:

• order processing and parcel preparation;
• delivery of products by courier or in-store collection;
• issuing fiscal documents and managing guarantees.

Data related to online payment (card number, expiry date etc.) are not accessible to SC VETTER CO SRL and are stored exclusively by the electronic payment service provider.

Data related to transactions are kept for the period necessary to fulfil contractual and legal obligations (in general, the 3-year prescription period, respectively the archiving periods stipulated by tax legislation).

2.5 Legal basis of processing

Depending on the context, data processing is based on one or more of the following grounds:

• Contract performance or pre-contractual steps - when you place orders, create an account or request offers/information.
• Compliance with legal obligations - when we have to keep certain documents and information in accordance with tax, accounting or consumer protection legislation.
• Legitimate interest - for service improvement, site security, fraud prevention and moderated communications related to products already purchased.
• Consent - in situations where we ask for your explicit consent (e.g. for newsletters or certain direct marketing campaigns). In these cases, you have the right to withdraw your consent at any time.

3. Security of personal data

SC VETTER CO SRL adopts appropriate technical and organisational measures to ensure an adequate level of security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

The measures used include:

• use of encrypted (SSL) connections for the transmission of sensitive information;
• controlling access to computer systems and databases;
• internal data backup and restoration procedures;
• limiting access to data to authorised personnel and authorised contractual partners only;
• confidentiality agreements with authorised persons, where appropriate.

Although we make every reasonable effort to protect data, no computer system or data transmission over the Internet can be guaranteed 100% secure. In the unlikely event of a security incident impacting your data, we will follow legal notification procedures.

4. Your rights as data subject

In accordance with Regulation (EU) 2016/679, you have the following rights regarding your personal data:

• Right of access - you can request information about the data we process (types of data, purposes, recipients, storage period).
• Right to rectification - you can ask for inaccurate or incomplete data to be corrected or completed.
• The right to erasure ("right to be forgotten") - you can request erasure of data in certain situations (for example, when the data are no longer necessary for the purposes for which they were collected or you have withdrawn your consent).
• The right to restriction of processing - you can request restriction of processing in certain cases, such as challenging the accuracy of the data or when you object to the deletion of the data.
• The right to data portability - you can receive your data in a structured, commonly used and machine-readable format, or you can request that your data be transferred to another controller, where technically feasible.
• Right to object - you can object to the processing of your data for direct marketing purposes or on legitimate interest grounds, under certain conditions.
• Right not to be subject to automated decision - including profiling that produces legal effects on you or significantly affects you.

To exercise these rights, you can send us a written, dated and signed request to the contact details set out in the next section. We will respond without undue delay and, in any event, no later than one month after receipt of the request, with the possibility of extending the deadline in complex cases, in accordance with the GDPR.

If you consider that your rights have been violated, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

5. Data Protection Contact

For any questions, requests or to exercise your rights regarding your personal data, you can contact us using the following details:

• E-mail: [email protected]
• Postal address: SC VETTER CO SRL, Bd Ion Mihalache 172, Sector 1, Bucharest, 011185, Romania - with the mention "For the attention of the VETTER CO Data Protection Officer".

This privacy policy may be updated periodically to reflect changes in the legal framework, in our processing practices or in the functionality of the website. Any significant changes will be communicated, where appropriate, by e-mail or by messages posted on the website. We recommend that you periodically check this page to stay informed about how we protect your personal data.