Privacy Policy (GDPR)

PRIVACY POLICY (GDPR)

Last updated: 18.02.2026

This Privacy Policy explains how SC MIXTMARKET ONLINE SRL (“we”, “us”, “our”, “Qualuca”) collects, uses, discloses, and protects your personal data when you visit or make a purchase from https://qualuca.shop (the “Site”).

1. DATA CONTROLLER

SC MIXTMARKET ONLINE SRL
Registered office: Iași, Str. Grigore Ureche Nr. 7, Casa cu Absidă, Iași, Romania
Trade Register: J22/2156/2017
Tax ID (CUI): 37895320

Email: contact@qualuca.shop
Phone: +40 754 595 747

For any questions regarding this Privacy Policy or your personal data, please contact us using the details above.

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our Site, we may collect the following categories of personal data:

a) Data you provide directly

First and last name
Email address
Phone number
Billing and shipping address
Company details for invoicing (company name, VAT number), if applicable
Messages sent via contact forms or email

b) Order and transaction data

Products purchased
Order value and order history
Delivery and order status information

Important: We do not store full payment card details. Payments are processed securely by third-party payment providers.

c) Technical and usage data

IP address
Browser type and version
Device and operating system
Pages visited and time spent on the Site
Referring URLs
Cookie identifiers and similar technologies

3. PURPOSES OF PROCESSING

We process personal data for the following purposes:

To process, manage, and deliver orders
To communicate with you regarding orders, returns, or inquiries
To issue invoices and comply with legal and tax obligations
To manage returns, refunds, and customer support
To ensure the security and proper functioning of the Site
To improve our services and user experience
To send marketing communications, where permitted by law and/or based on your consent
To perform analytics and performance measurements

4. LEGAL BASES FOR PROCESSING

We process personal data based on the following legal grounds under GDPR:

Contract performance (Art. 6(1)(b) GDPR)
Legal obligation (Art. 6(1)(c) GDPR)
Consent (Art. 6(1)(a) GDPR)
Legitimate interest (Art. 6(1)(f) GDPR)

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. DATA SHARING AND RECIPIENTS

We may share your personal data only with trusted third parties, including:

Shipping and courier companies
Payment service providers (such as PayPal, Klarna, or other available providers)
Shopify (e-commerce platform and hosting provider)
IT, security, and website maintenance providers
Marketing and analytics providers (such as Meta Pixel, Google Analytics, where applicable and based on consent)
Public authorities, when required by law

These service providers may process personal data in accordance with their own privacy policies and applicable data protection laws.

We do not sell your personal data to third parties.

6. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards in accordance with GDPR, such as Standard Contractual Clauses or other legally recognized mechanisms.

7. DATA RETENTION

Personal data is retained only for as long as necessary to fulfill the purposes described above:

Order and customer-related data: for the duration of the contractual relationship and as required by applicable law
Legal and accounting data: according to statutory retention periods
Marketing data: until you unsubscribe or withdraw consent
Cookie data: according to applicable cookie retention periods

8. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to operate the Site and improve your experience.

Types of cookies used:

Strictly necessary cookies (essential for Site functionality)
Analytics cookies (used to analyze Site performance, subject to consent where required)
Marketing cookies (used for advertising and remarketing, subject to consent where required)

Non-essential cookies are only used based on your consent, which can be withdrawn at any time via the cookie banner or your browser settings.

9. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or otherwise consent to marketing communications, we may send you information about our products and updates.

You may unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at contact@qualuca.shop.

You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

10. YOUR RIGHTS UNDER GDPR

You have the right to:

Access your personal data
Request rectification of inaccurate data
Request erasure of your personal data
Restrict the processing of your data
Object to processing, including direct marketing
Request data portability, where applicable
Withdraw consent at any time
Lodge a complaint with a supervisory authority

To exercise your rights, please contact us at contact@qualuca.shop.

Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.

The competent supervisory authority for our company is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Romania

You may also lodge a complaint with the data protection authority in your country of residence within the European Union.

11. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure.

12. CHILDREN’S DATA

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The updated version will be published on this page with the revised date.

14. CONTACT DETAILS

SC MIXTMARKET ONLINE SRL
contact@qualuca.shop
+40 754 595 747
https://qualuca.shop

DATA SUBJECT RIGHTS (GDPR)

When you submit a Data Subject Access Request (DSAR) through our compliance page, we use Consentmo as our consent and compliance management provider. Consentmo may process your IP address and email address solely for the purpose of handling and fulfilling your request, in accordance with applicable data protection laws.

For more information, please refer to Consentmo’s Data Processing Policy.

Data Rectification

If your account data is inaccurate or incomplete, you may update or correct it using the link below:

Edit your account information

Data Portability

You may request a copy of the personal data we process about you in a structured, commonly used, and machine-readable format.

You may use the links below to request access to:

GDPR Data Requests
Personal Information
Orders Data

Access to Personal Data

You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data.

You may request a report containing your personal data using the link below. We will respond within 30 days in accordance with GDPR requirements.

Request a report

Right to Erasure (“Right to be Forgotten”)

You may request the deletion of your personal data under the conditions set out in Article 17 GDPR.

Please note that deleting your personal data may result in the deletion of your customer account and the inability to access certain services.

Request personal data deletion

Right to Restrict Processing

You have the right to request restriction of processing of your personal data under certain circumstances, in accordance with Article 18 GDPR.

For assistance, please contact us at:

contact@qualuca.shop

Right to Object

You have the right to object, at any time, to the processing of your personal data based on legitimate interests, including profiling, as well as to the processing of your personal data for direct marketing purposes.

To exercise this right, please contact us at: