Last updated: 01.07.2025
1. Introduction
This Privacy Policy describes how your personal data is collected, used, and protected when you use the website www.mandalamindfulness.com (“Website”), operated by Oanea Lavinia Sole Proprietorship, based in Romania, as the data controller.
We are committed to respecting your right to privacy and the protection of personal data, in accordance with Regulation (EU) 2016/679 (GDPR).
By accessing this website or placing an order, you agree to the terms set out in this policy.
2. What Data We Collect
Depending on your interaction with the website, we may collect the following personal data:
- Full Name
- Email address
- Phone number
- Shipping address
- Billing information (name, address, personal ID / optional for sole proprietorship)
- Information voluntarily provided via contact forms or custom orders
- Technical information (IP, browser type, pages visited – via cookies, see Cookie Policy)
3. Purposes of Data Processing
The data collected is used exclusively for the following purposes:
- Processing orders and delivering products
- Issuing invoices and fiscal documents
- Communicating about orders and purchased products/services
- Responding to inquiries submitted through the contact form
- Improving the website’s functionality and user experience
4. Legal Basis for Processing
Data is processed based on the following legal grounds:
- Performance of a contract (e.g., orders)
- Legal obligations (e.g., invoicing)
- Consent (e.g., voluntary communication through contact form)
- Legitimate interest (e.g., proper functioning of the website)
5. Data Transfer to Third Parties
For the operation of this website and order processing, some data may be transferred to third-party service providers:
- WordPress / Elementor – website hosting and operation
- Netopia mobilPay – online payment processing
- ColeteOnline.ro – shipping labels and delivery management
- Partner courier companies of ColeteOnline.ro
These providers may have their own privacy policies and security systems.
We strive to work only with partners who provide an adequate level of protection, but we cannot assume responsibility for any security breaches that occur solely due to vulnerabilities in their systems.
6. Data Security
Your data is stored and processed in secure environments. Access to this data is restricted and protected by appropriate technical and organizational measures.
Data transmitted via website forms and payment processing is encrypted (SSL).
However, no transmission over the internet or electronic storage system is 100% secure. Therefore, we cannot guarantee absolute security of data transmitted online.
7. Your Rights
Under GDPR, you have the following rights:
- Right to access your data
- Right to rectify inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
- Right to file a complaint with the Romanian Supervisory Authority for Personal Data Processing (www.dataprotection.ro)
8. Data Retention
Data is retained only as long as necessary for the purposes for which it was collected, in accordance with legal obligations (e.g., accounting document retention – minimum 10 years), or until consent is withdrawn, where consent is the basis for processing.
9. Policy Changes
We reserve the right to update this Privacy Policy at any time, in response to legislative changes or website operation. You are encouraged to review this page periodically.
10. Contact
For any questions or requests regarding your personal data, you can contact us at contact@mandalamindfulness.com