Privacy policy

Protecting your personal data is one of the main priorities of THE AXN SRL (trade name: Decant Parfum), with its registered office at Calea Moșilor, Nr 88, Sc F, Ap 82, Bucharest, Romania, Tax ID (CUI) 51514286, Trade Register No. J2025021460006, which acts as data controller.

This document explains how we process your personal data when you visit decant-parfum.ro (the “Site”) or place an order, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Romanian legislation.

1. What data we process

A. If you are a customer

  • first and last name;
  • phone number;
  • email address;
  • delivery address and billing address;
  • billing details for companies (name, tax ID), where applicable;
  • order details: the products you bought, the amount, the payment method you chose, and your order and return history;
  • your IBAN, only if you give it to us for a refund;
  • the content of the messages you send us and of the reviews you publish.

Your bank card details are entered directly on the payment processor’s secure page. We never see your full card number and we do not store it.

B. If you are a visitor to the Site

  • data you give us directly: name, email address, phone number and message, when you fill in the contact form or subscribe to the newsletter;
  • data collected automatically: IP address, browser and device type, operating system, pages visited, length of visit, and products viewed or added to the cart, collected through cookies and similar technologies.

2. Why we process your data and on what legal basis

  • Receiving, processing and delivering orders, order status updates, and handling returns, replacements and refunds. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
  • Issuing invoices, keeping accounting records and meeting other legal obligations, including those on consumer protection. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Answering questions, requests and complaints sent by email, phone or the contact form. Legal basis: our legitimate interest in communicating with you and, where relevant, performance of the contract.
  • Newsletter and marketing messages by email or SMS about new perfumes, sets and offers. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through the unsubscribe link in every message or by writing to us.
  • Traffic analysis and improving the Site, as well as fraud prevention and security. Legal basis: our legitimate interest or, for cookies that are not strictly necessary, your consent.
  • Personalised advertising on social networks and search engines. Legal basis: your consent, given through the cookie banner.

3. How long we keep your data

  • Order data is kept for the duration of the contractual relationship and afterwards for as long as needed to resolve any complaints and to defend our rights in court.
  • Financial and accounting documents (for example, invoices) are kept for the period required by the financial and accounting legislation in force.
  • Newsletter data is kept until you withdraw your consent.
  • Messages sent through the contact form are kept for as long as needed to resolve your request and for no more than 3 years after the last communication.

Deleting your customer account does not automatically delete all your data, because some of it has to be kept by law. To have your data erased, you can exercise your rights as described in section 7.

4. Who we share your data with

We do not sell or rent your personal data. It may be accessed, strictly to the extent necessary, by:

  • the provider of the e-commerce platform the Site runs on (Shopify), which hosts the store and processes orders;
  • payment processors, for online payments by card or through digital wallets;
  • courier companies, for delivering parcels and handling returns;
  • providers of accounting, invoicing, email and customer support services;
  • providers of analytics and online advertising services (for example, Google or Meta), only if you have consented to the cookies concerned;
  • public authorities, when we are required to by law.

All our partners are bound by contract to keep the data confidential and to use it only for the purpose it was provided for.

5. Transfers of data outside the European Economic Area

Some of our providers (for example, Shopify or analytics and advertising providers) may process data outside the European Economic Area, including in Canada or the United States of America. In these cases, the transfer takes place only with appropriate safeguards provided for by the GDPR, such as European Commission adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

6. Cookies

The Site uses cookies and similar technologies:

  • strictly necessary cookies, without which the Site cannot work (shopping cart, checkout, security); these do not require consent;
  • preference cookies, which remember your choices;
  • analytics cookies, which help us understand how the Site is used;
  • marketing cookies, used to show relevant ads.

Preference, analytics and marketing cookies are enabled only with your consent, given through the banner shown on your first visit. You can change your choices at any time in the Site’s cookie settings or in your browser settings.

7. Your rights

As a data subject, you have the following rights:

  • the right of access: to find out whether we process your data and to receive a copy of it;
  • the right to rectification: to ask for inaccurate or incomplete data to be corrected;
  • the right to erasure (“the right to be forgotten”), under the conditions set by law;
  • the right to restriction of processing, in certain situations;
  • the right to data portability: to receive your data in a structured, commonly used and machine-readable format;
  • the right to object, including to processing for direct marketing;
  • the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal;
  • the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you;
  • the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro), or with the data protection authority in your own country, or to bring the matter before the competent courts.

To exercise these rights, you can write to us at contact@decant-parfum.ro. We will reply within one month of receiving your request, a period that may be extended as permitted by law.

8. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction. The Site uses an encrypted connection (HTTPS), and online payments are processed by providers certified to the payment card industry security standard (PCI DSS).

9. Children’s privacy

The Site is not aimed at people under 18, and THE AXN SRL does not knowingly collect data from them. If we learn that we have received such data without the consent of a parent or legal guardian, we will delete it.

10. Changes to this privacy policy

We may update this policy to reflect changes in the law or in how the Site works. The version in force is always the one published on this page. If there are important changes, we will let you know by email, where possible, or through a message displayed on the Site.

11. Contact

  • Controller: THE AXN SRL
  • Address: Calea Moșilor, Nr 88, Sc F, Ap 82, Bucharest, Romania
  • Email: contact@decant-parfum.ro
  • Phone: +40 793 173 700
  • Tax ID (CUI): 51514286
  • Trade Register No.: J2025021460006