Last updated: March 28, 2026
Starting with May 25, 2018, the Regulation 2016/679 / EU on the protection of individuals concerning to the processing of personal data and on the free movement of such data (hereinafter "the Regulation") will be applied by all EU Member States.The purpose of this Regulation is to create a unitary and uniform legislative framework throughout the European Union that no longer requires national implementation measures.
It is responsible for operating the poemi.store website and acts as the data controller for SC ATELIERELE POEMI , headquartered in Sibiu at 10 Timotei Popovici Street, registered with the Trade Register under no. J23/1389/2016, with tax identification number RO36717031, represented by its legal representative Alexandra Popescu.
This website is addressed exclusively to users over the age of 16.
In order to comply with our obligations under the Regulation, and given that the protection of your data is a major and ongoing concern for us, we have prepared this document, which sets out the categories of personal data we collect when you visit our website, the purpose and legal basis for processing, the duration of processing, where we store and to whom we disclose this data, as well as the rights you have as a data subject, implemented specifically to ensure the protection of your fundamental rights and freedoms, and in particular your right to the protection of personal data.
1. DEFINITIONS
“personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“processing” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;
“controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for in Union or Member State law;
”Authorized person' means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
We assure you that your personal data is processed lawfully, fairly, and transparently, solely for the explicit purposes that have been communicated to you.
SC ATELIERELE POEMI SRL as operator processes the data in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by taking adequate technical or organizational measures.
2. THE PERSONAL DATA WE PROCESS ABOUT YOU. PURPOSE. LEGAL BASIS. DURATION OF PROCESSING
We collect your personal data which are necessary to offer you the possibility of using our website, to be able to honour your orders add to offer you access to our products and to keep you up to date with our products, services and offers (direct marketing), to the extent allowed by the legal regulations or based on your consent.
We generally process your following personal data:
- Name and surname
- Contact address and delivery address
- Telephone number
- E-mail address
- IP
Each category of data will be collected for determined, explicit and legitimate purposes and are not subsequently processed in a way incompatible with these purposes and shall be for a period not exceeding the period necessary to fulfil the purposes for which they are processed.
To ensure the principle of transparency of information when processing your personal data, we inform you below how we process your data, the purposes and the legal basis (legal basis) of the activities through which we process your data.
CREATING AN ACCOUNT
When you create a user account on our website, poemi.store, we ask for and collect your first name, last name, address, phone number, email address, and IP address.
These personal data are necessary for pre-contractual purpose, to allow you to access our products and to be able to place an order, the basis of the processing being the contractual obligation. To the extent that you don’t agree with the processing of your personal data, SC ATELIERELE POEMI SRL will be not able to fulfil and deliver your orders.
Your personal data will be retained for the entire duration of your account, until the account is deleted, but for no longer than 3 years from the date of your last login or last order. We will notify you before closing your customer account and deleting all data associated with it. To the extent that you placed an order after creating your account, your data will be retained for a period of 3 years from the date of your last order, which is the statute of limitations.
The data processed when you create your account will not be subject to a decision based solely on automated processing, including profiling; it will not be disclosed to any third party; and it will not be transferred to a third country or an international organization.
MAKING AN ORDER
When completing and finalizing the order form, we request and collect from you. name, surname, contact address, delivery address, phone number, email and IP address.
We require this personal data for contractual purposes, so that we can fulfill your orders, deliver the products to the address you provided, fulfill our warranty obligations regarding the products, or, if necessary, process a product return. The legal basis for this processing is the contractual obligation between the parties as set forth in the Terms and Conditions. To the extent that you do not consent to the processing of your data, SC ATELIERELE POEMI will not be able to fulfill and deliver your orders.
At the same time, we need your personal data to complete and deliver the invoices related to the delivered products. Your online payment details will not be accessible or stored by SC ATELIERELE POEMI SRL, but only by the provider of the electronic payment service or by another entity authorized to provide card identification data storage services, whose identity you will be informed, prior to the actual entry of the card details that you use for online payment.
The only data regarding the payment made that we will store are those regarding the date of initiation and completion of the transaction as well as the payment situation.
Pursuant to the legal obligation, your personal data necessary for the preparation of payment documents will be provided to our contractual partners who provide our IT services and will be used in order to submit tax and accounting declarations with the tax authorities.
Your personal data will be retained for the entire duration of the contractual relationship and for a period of 3 years from the date of your last order, which is the statute of limitations.
In order to be able to carry out our contractual obligations on time and accordingly, your personal data will be disclosed to our trusted, carefully selected contractual partners:
- The provider of the service of data storage on external servers located in Romania
- The provider of accountancy service
- The provider of communication and email correspondence services
- The mobile phone services provider who helps us to keep in contact with you, located in Romania
- Couriers with whom we have a contractual relationship
- Online payment service providers
Your data processed at the time of creating the account is not subject to a decision based solely on automatic processing, including profiling, and will not be transferred to a third country or international organization.
NEWSLETTER – DIRECT MARKETING
Subscribing and unsubscribing to the newsletter of SC ATELIERELE POEMI SRL is free of charge and voluntary and is made exclusively based on your consent. The newsletter is a periodical, exclusively electronic (e-mail, SMS) means of information, regarding the goods, services, promotions etc. of the seller during a specific period, with no engagement from the seller with reference to the information included in it.
To ensure the marketing services, we collect from you your email address, telephone number, surname and name. This data is used exclusively to keep you up to date on our products, services and offers. The ground of the processing of personal data is represented by your consent, the processing duration being the entire duration of your consent.
The consent may be withdrawn at any time by mail sent to the email address [email protected] or by accessing the unsubscribe link in the content of the email received from us, and will have as consequence the cessation of processing.
We use Mailchimp (provided by Intuit Inc., USA) to send newsletters. Your email address will be stored on Mailchimp’s servers in accordance with the standard contractual clauses approved by the European Commission. You can view Mailchimp’s privacy policy at mailchimp.com/legal/privacy.
Your data will not be transferred to any other controller or processor, nor will it be transmitted to any third country or international organization, with the exception of Mailchimp, as mentioned above.
COOKIES AND THIRD-PARTY ANALYTICS TOOLS
The poemi.store website uses cookies, which are data stored on the user’s hard drive containing information about the user. The use of cookies benefits visitors by allowing the site to remember certain browsing preferences, such as the language in which the site is displayed, the filters applied when viewing specific pages, and the user’s username and password for quick access to the site’s content. Rejecting a cookie does not mean that the user will be denied access to browse the site or read its content.
The first time you visit the site, a consent banner will appear, allowing you to choose which categories of cookies you accept. You can change your preferences at any time by accessing the Cookie Policy. Strictly necessary cookies are enabled automatically, without consent, as they are essential for the site to function.
We use the following third-party services that may place cookies or collect data on your device, solely based on your consent:
- Google Analytics 4 (Google LLC, USA) – ID: G-SLKZ5V03X1 – used to analyze website traffic and visitor behavior. The data is anonymized and transferred to the USA under standard contractual clauses. Policy: policies.google.com/privacy
- Google Ads (Google LLC, USA) – ID: AW-635060284 – used to track conversions from Google advertising campaigns and for remarketing. Privacy Policy: policies.google.com/privacy
- Facebook Pixel / Meta Pixel (Meta Platforms Inc., USA) – ID: 194041132171547 – used to measure the effectiveness of Facebook/Instagram ads and to create custom audiences. Policy: facebook.com/privacy/policy
- Weglot (Weglot SAS, France) – used for the automatic translation of website content into English. Weglot may store the selected language preference. Policy: weglot.com/privacy
Of course, you can still access our website without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by disabling cookies in your browser settings. If you do not accept cookies, this may result in limited functionality of our services.
LINKS
This website contains links to other websites. SC ATELIERELE POEMI is not responsible for the privacy policies of those websites. We recommend that you review their legal terms and other information regarding the collection of personal information in advance. The rules set forth in this text apply only to information collected on this website.
When you access a website containing plugins, your browser establishes a direct connection with the servers of the respective providers. The content of the plugins will be transmitted by the respective supplier directly to your browser and will be integrated by it in the webpage. By integrating the plugins, the provider receives information that your browser has accessed our website. This happens regardless if you have a profile on that social network or if you have just logged in.
In case you are logged in on that social network, it can attribute your visit to our web page to your profile on that social network. If you interact with plugins, for example by clicking the “like” button on Facebook or comment, the corresponding information will be directly transmitted to that supplier and stored there.
Information on the purpose and volume of data collection, the processing and subsequent use of personal data by that provider, as well as your rights and the possibilities of setting them in order to protect your privacy can be found in the instructions on data protection of the respective supplier.
3. SECURITY OF YOUR PERSONAL DATA
The security of your personal data is a priority for us. We assure you of the fact that any data processing is made in compliance with the principles guaranteed by the Regulation and processed in a manner that ensures adequate security of personal data, including protection against unauthorized or illegal processing and against loss, destruction or accidental damage, by taking appropriate technical or organizational measures, by implementing appropriate internal data protection policies.
This site adopts all security measures necessary to protect the personal data of our users. When completing your personal data on our site, the information will be protected both offline and online. All personal information will be processed by means of secure pages which use the SSL encryption system, are marked with a padlock symbol placed at the bottom of the Microsoft Internet Explorer browser window.
4. YOUR RIGHTS AS A DATA SUBJECT
Regulation 679/2016 ensures the protection of the fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.
The Regulation 679/2016 ensures the protection of the fundamental rights and freedoms of individuals and in particular of their right to the protection of personal data:
- the right to access your data: you may request information regarding the categories of personal data being processed, the purpose of the processing, the recipients to whom the data has been or will be disclosed, the period for which the data is expected to be stored, or, if this is not possible, the criteria used to determine that period; the existence of automated decision-making, including profiling;
- the right to request the rectification of data: if there are errors in the data we process about you, you may request that we correct or complete it. We will communicate the rectification to each recipient to whom the data has been disclosed, unless this proves impossible or involves a disproportionate effort
- the right to request restriction of data processing: you have the right to request restriction of data processing in the following situations: if you have contested the accuracy of the data, for a period that allows us to verify the accuracy of the data; if the processing is unlawful and you oppose the erasure of the personal data, requesting instead that its use be restricted; if we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of a legal claim; if you have objected to the processing while we verify whether the legitimate interests of the controller override your rights.
- the right to request erasure of data: you may request the erasure of processed data if the data is no longer necessary for the purposes for which it was collected or processed, if you have withdrawn your consent and there is no other legal basis for the processing; if you object to the processing and there are no legitimate grounds for the processing that override your interests; the personal data has been processed unlawfully; the personal data must be erased to comply with a legal obligation; the personal data was collected in connection with the provision of information society services.
- the right to request data portability: you may request that your data be transferred to another controller if the processing is based on your consent and is carried out by automated means
- Right to object to processing: You have the right to object at any time to the processing of your data for direct marketing purposes, including profiling; in this case, your data will be deleted.
- the right to object to being subject to automated decisions based solely on automated processing, including profiling.
All these rights can be exercised by a simple request addressed to SC ATELIERELE POEMI SRL, as operator, at our seat or email address [email protected] by accessing the functions made available on our site (link export and deletion).
If you consider that your rights have been violated, you have the possibility to file a complaint at the National Authority for the Supervision of Personal Data Processing.
5. CONTACT INFORMATION
This Policy is supplemented by the other specific policies of SC ATELIERELE POEMI and the Terms and Conditions, which you can access on our website. Any changes to the terms of this policy will be communicated to users via email, so that they are always informed about the information we collect, how we use it, and under what circumstances, if any, we disclose it. Users may or may not agree to the use of their information for other purposes. We will use the information in accordance with the policy under which the information was collected.
This privacy notice applies only to our website and does not apply to third-party websites that may be accessed through this website. We have no influence over the processing of data by these third parties and assume no responsibility or liability in connection with these websites.
SC ATELIERELE POEMI SRL
- Person in charge: Alexandra Popescu
- Phone: 0729986714
- E-mail: [email protected]
