We use cookies to make your experience better. To comply with the new e-Privacy directive, we need to ask for your consent to set the cookies. Learn more.
Privacy Policy
Privacy Policy
Privacy Policy regarding the processing of personal data
We consider ensuring the right to personal data protection as a fundamental commitment, and therefore, we will dedicate all necessary resources and efforts to process your data in full accordance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as with any other applicable legislation within Romania. Since transparency is one of the core principles of this legal framework, we have prepared this document to inform you about how we collect, use, transfer, and protect your data when you interact with us, in connection with all our products and services, including through our website.
We reserve the right to update and modify this Privacy Policy periodically to reflect any changes in how we process your data or any updates in legal requirements. In the event of such modifications, we will display on our website the updated version of this Privacy Policy, and we kindly ask you to regularly check its content.
Who we are and how to contact us
"Archery One - my.archery.store" is a trade name of OXYGEN ART TRADING S.R.L., a Romanian legal entity, with its registered office in Cluj County, Cluj-Napoca, Str. Branului, No. 31, registered in the Trade Register under J12/2048/2014, with the tax identification number RO33331906 (hereinafter "Archery One - my.archery.store" or “we”). Under data protection law, we act as data controllers when processing your data.
Since we are always eager to hear your opinions and to provide any additional information you may need regarding your data processing, we encourage you to contact "Archery One - my.archery.store" Data Protection Officer at the email address office@my.archery.store or by mail or courier at Str. Nadasel, Nr. 60A, Hala Albastra, Floor 1, 400207, Cluj-Napoca, Cluj County, mentioning: “Attn: Data Protection Officer”.
What categories of personal data do we process?
Generally, we collect your data directly from you, so you control the type of information you provide us. For example, we receive information from you as follows:
When you create an account "Archery One - my.archery.store," you send us: email address, name, and surname;
In your page (My Account) on the "Archery One - my.archery.store" platform, you can add additional information, such as addresses, phone numbers, etc.;
When you place an order, you provide us with information such as: the desired product, name and surname, delivery address, billing details, payment method, phone number, etc.
We may also collect and process later certain information about your behavior while visiting our website, to personalize your online experience and offer tailored to your profile. You are invited to learn more about this by consulting the section regarding processing purposes below.
On our website, we may store and collect information via cookies and similar technologies, following our Cookie Policy.
We do not collect or process in any other way sensitive data included in special categories of personal data as defined by the GDPR. We also do not intend to collect or process data of minors under the age of 16.
Purposes and legal bases for processing
We will use your data for the following purposes:
1. To provide "Archery One - my.archery.store" services for your benefit.
This general purpose may include, where applicable:
a) Creation and management of your account within the "Archery One - my.archery.store" platform;
b) Processing orders, including tracking, validation, shipping, and invoicing;
c) Resolving cancellations or issues of any kind related to an order, purchased goods, or services;
d) Returning products following legal provisions;
e) Refunding the value of products according to legal requirements;
f) Providing support services, including responding to your questions regarding your orders or about "Archery One - my.archery.store" goods and services.
Processing your data for these purposes is, in most cases, necessary for the conclusion and execution of a contract between "Archery One - my.archery.store" and you. Additionally, certain processing activities related to these purposes are imposed by applicable legislation, including fiscal and accounting laws.
2. To improve our services
We always aim to offer you the best online shopping experience. For this, we may collect and use certain information about your behavior as a Buyer/User on "Archery One - my.archery.store" to analyze and improve existing products and create new ones, in your best interest.
We base these activities on our legitimate interest to conduct commercial activities, always ensuring that your fundamental rights and freedoms are protected. If you wish to exercise your right to object, please send your request to the contact address mentioned above.
3. For marketing purposes
We want to keep you informed about the best offers for products/services that interest you. Accordingly, we may send you, for "Archery One - my.archery.store," any type of message (such as: email/SMS/phone/webpush/etc.) containing general and thematic information, information about similar or complementary products to those you purchased, information about offers or promotions, data regarding products added to the “My Account / Cart” section or the “Account / Favorites” section, or for which you expressed interest in purchasing, as well as other commercial communications, such as market research and opinion surveys. We may also display personalized recommendations on the website.
To provide you with relevant information, we may use certain data about your behavior as a buyer (e.g., products viewed, added to Desired Products, purchased) to build a profile. We ensure that these processing activities are always performed respecting your rights and freedoms and that decisions based on this data do not have legal effects on you and do not significantly affect you.
In most cases, our marketing communications are based on your prior consent. You can change your mind and withdraw consent at any time, by:
Unsubscribing from the Newsletter via your client account in the “Newsletters” section;
Contacting "Archery One - my.archery.store" using the contact details described above.
In certain situations, our marketing activities may be based on our legitimate interest to promote and develop our commercial activities. In any case where we use your information for a legitimate interest, we take care to ensure your fundamental rights and freedoms are not affected. You can request at any time, via the methods described above, that we cease processing your data for marketing purposes, and we will comply with your request as soon as possible.
4. To defend our legitimate interests
There may be situations where we use or transmit information to protect our rights and commercial activity. These may include:
Measures to protect the website and users of the "Archery One - my.archery.store" platform against cyber attacks;
Measures to prevent and detect attempts of fraud, including transmitting information to competent public authorities;
Measures to manage various other risks.
The general legal basis for these types of processing activities is our legitimate interest to defend our commercial activity, understanding that we ensure all measures we take guarantee a balance between our interests and your fundamental rights and freedoms.
Additionally, in certain cases, we base the processing on legal provisions, such as the obligation to secure property and valuables, as provided by applicable laws in this matter.
How long do we keep your data?
As a general rule, we will store your data for as long as you have an account on the "Archery One - my.archery.store" platform.
You can request at any time the deletion of certain information or the closure of your account, and we will comply with these requests, subject to retaining certain information even after account closure, where required by applicable legislation or our legitimate interests.
To whom we transmit your data
As appropriate, we may transmit or provide access to certain of your data to the following categories of recipients:
Companies within the same group as "Archery One - my.archery.store";
Courier service providers;
Payment/banking service providers;
IT service providers;
Other companies with which we may develop joint programs for offering our goods and services in the market.
In case of a legal obligation or if necessary to defend our legitimate interests, we may also disclose certain personal data to public authorities. We ensure that access to your data by third-party legal persons occurs in accordance with legal provisions on data protection and confidentiality, based on contracts concluded with them.
In which countries do we transfer your data
As a general rule, your data is stored and processed within the territory of the European Union and the European Economic Area (EEA).
How do we protect the security of your data
We commit to ensuring the security of your data by implementing appropriate technical and organizational measures following industry standards.
The transmission of your data is performed using state-of-the-art encryption algorithms, and we store it on secure servers, ensuring data redundancy.
For processing payments, we use the services of the payment processor Netopia. Any information related to payments is encrypted using at least HTTPS technology with TLS 1.2 encryption.
Despite the measures taken to protect your data, we draw your attention to the fact that transmitting information over the Internet, in general, or via other public networks, is not completely secure, and there is a risk that data may be viewed and used by unauthorized third parties. We cannot be responsible for vulnerabilities of systems that are not under our control.
What rights do you have
The General Data Protection Regulation (GDPR) grants you a series of rights regarding your data. You may request access to your data, correct any errors in our files, and/or oppose the processing of your data. You may also exercise your right to complain to the competent supervisory authority or to seek legal remedy.
Depending on the case, you can also request the deletion of your data, the restriction of data processing, and the right to data portability.
More information about each of these rights can be obtained by consulting the information presented below.
To exercise your rights, you can contact us using the contact details provided above. Please keep in mind the following aspects if you wish to exercise these rights:
Identity: We take the confidentiality of all records containing personal data seriously. Therefore, please send your requests regarding such records from the email address associated with your "Archery One - my.archery.store" account. Otherwise, we reserve the right to request additional information to confirm your identity.
Response time: We aim to respond to any valid requests within a maximum of one month, unless the request is particularly complex or if you have made multiple requests, in which case we will respond within a maximum of two months. We will notify you if more than one month is needed.
Third-party rights: We are not obliged to comply with a request if it would negatively affect the rights and freedoms of other data subjects.
Rights You Can Exercise
Access
You may request us:
to confirm whether we process your data;
to provide you with a copy of these data;
to give you additional information about your data, such as the data we hold, how we use them, to whom we disclose them, whether we transfer them abroad and how we protect them, how long we keep them, what rights you have, how you can lodge a complaint, where we got your data from, in case this information has not already been provided to you through this notice.
Rectification
You may request us:
to rectify inaccurate personal data;
to complete incomplete personal data. We may try to verify the accuracy of the data before rectifying it.
Erasure (Right to be Forgotten)
You may request us to erase your data, but only if:
- they are no longer necessary for the purposes for which they were collected;
- you withdraw your consent (if the processing was based on consent);
- you oppose the processing based on a legal right;
- they have been processed unlawfully;
- We have a legal obligation to do so.
We are not obliged to comply with your request to erase your data if:
- processing is necessary to comply with a legal obligation;
- to establish, exercise, or defend a legal claim;
- in other circumstances where we cannot fulfill your erasure request.
Please keep in mind that before exercising this right, you should download all information and/or documents of interest from your "Archery One - my.archery.store" account.
If you do not perform this step before exercising your right to erasure, you will lose all those documents, and "Archery One - my.archery.store" will be unable to provide them to you afterward, as the data and account deletion process (including all related documents) is irreversible.
Restriction of Data Processing
You may request us to restrict the processing of your data, but only if:
- its accuracy is contested (see the rectification section), to allow us to verify its accuracy;
- the processing is illegal, but you do not want the data to be erased;
- they are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise, or defend a legal right;
- You have exercised your right to oppose, and the verification of whether our rights prevail is ongoing.
We may continue to use your data following a restriction request if:
- we have your consent;
- to establish, exercise, or secure the defense of a right in court;
- to protect the rights of "Archery One - my.archery.store" or of another natural or legal person.
Opposition
You may oppose at any time, for reasons related to your specific situation, the processing of your data based on our legitimate interest if you believe that your fundamental rights and freedoms outweigh this interest.
You can also oppose at any time the processing of your data for direct marketing purposes (including profile creation), without providing any reason; in this case, we will cease this processing as soon as possible.
Automated decision-making
You may request not to be subject to a decision based solely on automated processing, but only if the decision:
- produces legal effects concerning you;
- similarly and significantly affects you.
This right does not apply if the decision resulting from automated processing:
- is necessary to conclude or perform a contract with you;
- is authorized by law and adequate guarantees are in place to protect your rights and freedoms;
- is based on your explicit consent.
Complaints
You have the right to file a complaint with the supervisory authority regarding the processing of your data. In Romania, the contact details of the data protection authority are as follows:
National Authority for Data Protection
B-dul G-ral. Gheorghe Magheru No. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212
Email: infor@dataprotection.ro
Without prejudice to your right to contact the supervisory authority at any time, we kindly ask you to contact us first, and we promise to make every effort to resolve any issue amicably.
Remember that you can contact the "Archery One - my.archery.store" Data Protection Officer at any time by submitting your request through any of the following methods:
By email at: office@my.archery.store
By mail or courier at: Str. Nadasel, No. 60A, Hala Albastra, Floor 1, Cluj-Napoca, 400207, Cluj County, mentioning: "Attn: Data Protection Officer".