PRIVACY POLICY

PRIVACY POLICY

This policy describes how the personal data of individuals using the website https://evoletselection.com and online store customers are processed, in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation) and Law no. 190/2018.

  1. The Operator

The data operator is KALPO S.R.L., with its registered office in Pietroasele commune, Pietroasele village, Buzău county, postal code 127470, registered with the Trade Register Office under no. J1992000929106, unique registration code RO1189618. For any aspect regarding the processing of personal data, data subjects may contact the operator via email at contact@evoletselection.com or by written correspondence to the address: str. Heliade Între Vii no. 8, sector 2, Bucharest, postal code 023383.

  1. Data Subjects and Data Sources

This policy addresses individuals who interact with the website, namely visitors, individual customers, and representatives of legal entity customers, individuals who publish reviews, individuals who contact us via the contact form, email, or phone, as well as, to the extent the service is available, individuals subscribed to commercial communications.

We process data obtained directly from you when you provide it during account creation, order placement, exercising the right of withdrawal, or through the website forms, as well as data resulting from website usage, collected through cookies under the terms of the Cookie Policy. If you choose to create an account or log in with a Google account, we receive your first name, last name, and email address associated with your account from Google. We do not collect data about you from other sources.

  1. Categories of Processed Data

Depending on how you interact with the website, we process the following categories of data:

  1. identification and contact data: first name, last name, shipping and billing address, email address, phone number; for legal entity customers, company name, tax identification code, and trade register number;
  2. order data: ordered products, order history, payment method, and delivery options;
  3. billing data: data necessary for issuing invoices and transmitting them to the RO e-Factura system, according to tax legislation;
  4. data regarding the exercise of the right of withdrawal and complaints: name, order number, email address, content of the declaration, date and time of submission, and, if applicable, the bank account indicated for reimbursement;
  5. review data: displayed name, rating given, and content of the review, as well as the connection to the order, to verify buyer status;
  6. data resulting from website usage: IP address, and, only with your consent, information regarding the source of the visit (entry page, traffic source, device type, and browser), collected through the order attribution function, under the terms of the Cookie Policy;
  7. the content of communications you send us via the contact form, email, or phone, including requests for quotes for professional clients.

We do not intentionally request or process special categories of data. The website is intended for adults. We do not knowingly process data of minors. Providing the data necessary for an order is a condition for concluding the contract, and without it, the order cannot be processed.

  1. Purposes and Legal Bases of Processing

We process your data for the following purposes and legal bases:

  1. conclusion and execution of the sales contract, including account creation and management, order processing, payment, and delivery, and communications regarding the order, based on Art. 6 para. (1) lit. b) of the Regulation;
  2. account creation or login with a Google account, at your request, based on Art. 6 para. (1) lit. b) of the Regulation;
  3. invoicing, including transmitting invoices to the RO e-Factura system, and fulfilling accounting and tax obligations, based on Art. 6 para. (1) lit. c) of the Regulation, in conjunction with the Tax Code, Government Emergency Ordinance no. 120/2021, and Accounting Law no. 82/1991;
  4. managing withdrawal declarations, complaints, and requests regarding product conformity, based on Art. 6 para. (1) lit. c) of the Regulation, in conjunction with Government Emergency Ordinance no. 34/2014, Government Emergency Ordinance no. 140/2021, and Government Ordinance no. 21/1992, as well as Art. 6 para. (1) lit. b);
  5. responding to messages sent via the contact form, email, or phone, including requests for quotes, based on Art. 6 para. (1) lit. b) of the Regulation, for steps preceding the conclusion of a contract, respectively Art. 6 para. (1) lit. f), our legitimate interest in responding to requests;
  6. publishing reviews and verifying that they come from product buyers, based on Art. 6 para. (1) lit. f) of the Regulation, our legitimate interest in providing real product information, under the terms of Art. 7 para. (6) of Law no. 363/2007;
  7. analyzing order traffic sources (order attribution), based on Art. 6 para. (1) lit. a) of the Regulation and Art. 4 para. (5) of Law no. 506/2004, your consent;
  8. transmitting commercial communications, based on your consent, according to Art. 6 para. (1) lit. a) of the Regulation and Art. 12 para. (1) of Law no. 506/2004;
  9. ensuring website security, preventing fraud, and establishing, exercising, or defending rights in court, based on Art. 6 para. (1) lit. f) of the Regulation, our legitimate interest.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

  1. Data Recipients

To achieve the above purposes, we transmit data, to the strictly necessary extent, to the website hosting service provider, the payment processor EuPlatesc (in case of card payment), the courier company DPD (for order delivery and cash on delivery collection), IT service providers, website maintenance providers, and accounting service providers, as well as electronic communication service providers. Invoices are transmitted to the National Agency for Fiscal Administration through the RO e-Factura system. If you use Google account login, Google acts as a separate operator, according to its own privacy policy.

Data may be communicated to public authorities when there is a legal obligation to do so. We do not sell your data to third parties. With each of the processors who process data on our behalf, we conclude agreements that ensure compliance with the GDPR Regulation. In the event of a sale, merger, or business transfer, data may be communicated to the buyer or successor, to the extent necessary for the operation.

  1. Data Transfer Outside the European Economic Area

If the use of certain tools or services, including Google account login, would involve the transfer of data to countries outside the European Economic Area, this transfer is carried out only under the conditions of Chapter V of the Regulation, namely based on an adequacy decision of the European Commission or on the basis of standard contractual clauses approved by Decision (EU) 2021/914. Analytical or marketing tools that would involve such transfers are activated only after your consent is expressed, under the terms of the Cookie Policy.

  1. Storage Duration

Contractual documents and invoices are kept for the period provided by accounting and tax legislation. Data regarding orders, withdrawal declarations, and complaints are kept for three years from delivery, or from the resolution of the request, unless a longer legal term applies. Customer account data is kept for the duration of the account’s existence. Reviews are kept as long as they are published. Data processed for marketing purposes is kept until consent is withdrawn or the right to object is exercised. Correspondence is kept for the period necessary to resolve the request and for another 12 months after its closure, unless a longer legal term applies. Upon expiration of the terms, data is deleted or anonymized.

  1. Rights of the Data Subject

As a data subject, you benefit from the following rights: the right to access data, the right to rectification and erasure of data, the right to restriction of processing, the right to data portability, as well as the right to object to processing, including processing for direct marketing purposes. Where processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

These rights are exercised by sending a request to contact@evoletselection.com. To prevent unauthorized access, we may request additional information to verify identity. We respond within a maximum of one month, a period that may be extended by two months in the case of complex requests, with prior notification to you. You can object to commercial communications at any time, via the unsubscribe link in the email or by message to the same address.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, B-dul General Gheorghe Magheru no. 28-30, sector 1, Bucharest, www.dataprotection.ro.

  1. Data Security

We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, or alteration, including encrypted communication and restricted data access. In the event of a data security breach that poses a risk to the rights of data subjects, we proceed according to Articles 33 and 34 of the Regulation.

  1. Cookies

Information regarding the cookies used on the website, their categories, and how to manage consent can be found in the Cookie Policy, available on the website at: https://evoletselection.com/politica-de-cookies/. Rejecting non-essential cookies does not affect the ability to purchase products.

  1. Policy Amendments

This policy may be updated to reflect changes in processing methods or the legal framework. The current version is the one published on the website, indicating the date. Where processing is based on consent, it is requested separately.

The last update date is 10.28.2026.