Privacy Policy

Privacy Policy

The personal data controller is LUAR CLASS SRL, with its registered office in Gheorgheni 535500, Harghita County, Cartierul Florilor, registered with the Trade Register under no. J19/333/2020, tax code RO17064351 (hereinafter referred to as the “Controller” or “Variashop”).

1. Purposes and Legal Grounds of Processing

Data is collected for the purpose of processing online orders, invoicing, product delivery, communication with customers, and, with explicit consent, for commercial communications (newsletter).

  • Performance of a contract – Art. 6(1)(b) of the GDPR
  • Legal obligation – Art. 6(1)(c)
  • Consent – Art. 6(1)(a) (for marketing)
  • Legitimate interest – Art. 6(1)(f)

2. Categories of Data Collected

  • First and last name
  • Delivery and billing address
  • Email address, phone number
  • Order-related data
  • IP address and browsing information (cookies)

3. Data Retention Period

  • Billing data – 5 to 10 years according to accounting and tax legislation
  • Marketing data – until withdrawal of consent
  • Customer account data – until account deletion + 30 days

4. Data Recipients

Data may be shared with the following contractual partners only as necessary:

  • Courier companies
  • Online payment processors
  • IT and hosting service providers
  • Accounting firms

5. Data Subject Rights

According to the GDPR, you have the following rights:

  • Right of access to data
  • Right to rectification or erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to lodge a complaint with the supervisory authority

6. Contact

For questions regarding data protection, you can contact us at: