Privacy policy & terms

This Site has a general audience; however, our services are intended for persons aged 16 or over. We do not request, collect, use or disclose personal data provided by a person under 16, online or otherwise. If we learn that we have collected personal data from a child, we will delete that information.

If you are under 16, please do not register or continue with an online purchase and ask an adult (a parent or legal guardian) to complete the necessary steps.

EHIP DISTRIBUTION SRL is a limited liability company duly incorporated and operating under the laws of Romania, with registered office at Str. Alexandru Ioan Cuza 19 B, Villa 24, Tunari, Ilfov, Romania, registered with the Trade Register under no. J2016002183401, tax code (CUI) 35653207.

By visiting our Site, using its services or otherwise interacting with us through newsletters and/or websites, you acknowledge that you have read and understood this Privacy Policy and agree that we may collect, use, transmit and disclose the personal data we collect in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access this Site, do not create an account and do not use or submit personal data on this Site.

EHIP DISTRIBUTION SRL is the controller of the personal data you send us and is responsible for your personal data in accordance with applicable data protection law (collectively “Parflab”, “we”, “us” or “our” in this Privacy Policy).

Contact details: EHIP DISTRIBUTION SRL, Str. Alexandru Ioan Cuza 19 B, Villa 24, Tunari, Ilfov, Romania. Email: info@parflab.ro. Phone: 0734756276.

The data we collect from you is stored on servers used by Parflab / EHIP DISTRIBUTION SRL.

We do not transmit, sell or assign your data to third parties for marketing purposes outside Parflab. Data transmitted to third parties is used only to provide our services. You will find the categories of third parties within each specific process below.

Part of the collected data may be transferred to a third party for:

Depending on the purpose for which the data is used, the legal basis for processing your data may be:

For each specific processing of personal data we collect from you, we will inform you whether providing personal data is required by regulations or necessary to conclude a contract, whether it is mandatory to provide the data, and what the possible consequences are if you refuse.

Right of access — you have the right to obtain confirmation from us as to whether or not we process your data and, if so, access to that data and information about how it is processed.

Right to rectification — you have the right to request rectification of your personal data if it is incorrect, including the right to complete incomplete personal data. If you have an account, you may edit your personal data in your account.

Right to erasure — you have the right to obtain erasure of personal data we process in any of the following situations: the data is no longer necessary for the purposes for which it was collected or processed; you withdraw consent and there is no other legal basis for processing; you object to processing; the data has been processed unlawfully; the data must be erased to comply with a legal obligation; or collection related to information society services.

However, your data may be retained to complete the following situations: you have an unresolved Customer Service request; you have an open order that has not yet been shipped or was partially shipped; you have an unpaid debt to us regardless of payment method; or, if you made a purchase, we keep personal data related to your transaction as required by accounting law.

Right to restriction of processing — you may obtain restriction where you contest the accuracy of the data; processing is unlawful and you oppose erasure; you have objected to processing while we verify whether our legitimate grounds override yours; or we no longer need the data but you need it to establish, exercise or defend legal claims.

Right to data portability — you have the right to receive personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller.

Right to object — you may object to processing based on our legitimate interest. We will not continue processing unless we demonstrate compelling legitimate grounds that override your interests and rights, or processing is for legal claims.

Right not to be subject to automated decision-making — you have the right not to be subject to a decision based solely on automated processing, including profiling, unless you have given explicit consent or automated processing is necessary for entering into or performing a contract.

Right to object to direct marketing — you may object to direct marketing, including profiling for direct marketing. You can unsubscribe by following the instructions in each marketing email or by writing to us using the contact details in this policy.

How to exercise your rights: contact us at info@parflab.ro.

“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

When we use “personal data” in this Privacy Policy, we mean any information that allows us to identify you or a third party whose personal data you provide to us, directly or indirectly, including any information relating to the purchase of goods or services, or information you choose to communicate or share with us or third parties while using the Site.

We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Romanian law. We reserve the right to carry out additional processing as required by law in a criminal investigation or other investigation or proceeding.

We collect personal data from you only when you voluntarily provide it, such as:

If you provide us with personal information about third parties (e.g. family members or other third parties), you must ensure those third parties are informed and that you are authorised regarding the use of their data as described in this Privacy Policy.

Types of data we may collect and use, depending on purpose:

Personal data may be used for the following purposes, depending on how you interact with us.

When you use our Site: cookies may be used by us and third parties to operate the site, collect useful visitor information and improve your experience. Some cookies are strictly necessary and do not require consent. Other third-party cookies are placed with your consent.

When you send a request through our Site: we may need your name, phone number, email, postal address, gender and age. We use this information to answer your question, including providing information about our products and services, based on our legitimate interest in providing accurate pre-sale information. We do not use the information you provide to take automated decisions that could affect you.

When you purchase a product on our Site: we ask for contact information such as name, address, phone number, email and card information (when paying online). We also record your IP address. We use this information to manage online purchases on parflab.ro, process the order and ship products. We send order and dispatch confirmations by email and may use your phone number regarding the purchase. We also use data for complaints and product warranties, to identify you and confirm legal age for online shopping, and to confirm your address with external partners. We need this information to process payment, deliver products and perform the contract. We record your IP address to demonstrate that the sale was correctly taxed, as required by law. Personal data transmitted to third parties is used only to provide these services (warehousing/distribution providers and payment processors). We do not use this information for automated decisions that could affect you.

When you subscribe to our newsletter: you may subscribe via a form on the Site, when registering an account, or at checkout. We ask for your consent to use these data to email newsletters about our products and related information. You may withdraw consent at any time by following the instructions in each newsletter. Name and email may be transferred to an email marketing provider under appropriate contractual safeguards. We do not use this information for automated decisions that could affect you.

When you create a customer account: we ask for first name, last name, email and password. If you make a purchase we also process order history, delivery information and payment history, as well as cookie-related data such as click and browsing history. We use your data to create and manage your account and to provide a relevant experience on the Site. Processing for the account is based on consent given when the account is created. Processing to provide relevant product information is based on our legitimate interest. You may close your account at any time. You may object to processing based on legitimate interest by contacting us at the email above; your account will then be deleted and we will no longer be able to provide our services.

Direct marketing: based on your consent we may process contact information and products/offers you clicked, and if you have an account also order history and browsing/click data, to send marketing offers, surveys and invitations by email, text, phone or post. We do not sell or assign your data to third parties for marketing. You may withdraw consent at any time and unsubscribe via each marketing message.

Retention: we store your information for as long as required by law. If there is no legal requirement, we store it only as long as necessary.

We have implemented appropriate measures intended to secure your personal data against accidental loss and to prevent unauthorised access, use, alteration and disclosure. For example, when you provide order information we use Secure Socket Layer (SSL) encryption. We also use firewall protection, password controls and other technological and procedural safeguards. Although we implement these measures, 100% security is not possible. Providing your personal data is at your own risk and, to the fullest extent permitted by applicable law, we will have no liability arising from disclosure of your personal information due to errors, omissions or unauthorised acts of third parties during or after transmission to us.

We recommend that you periodically update software that protects data transmission over networks (for example antivirus software); keep your username and password confidential; change your password periodically; and do not use the same password for all accounts.

In the unlikely event that we determine that the security of your personal information in our possession or control has been or may be compromised, we will notify you as required by applicable law (by providing your email, you agree to receive such notice electronically at that address).

If you believe we process your personal data incorrectly and you have a complaint about our use of your data, we prefer that you contact us first at info@parflab.ro so we can address the complaint.

You also have the right to lodge a complaint with a supervisory authority.

We regularly review and, where appropriate, periodically update this Privacy Policy as our services and use of personal data evolve. If we want to use your personal data in a way we have not previously identified, we will contact you to provide information about this and, where necessary, to request your consent.

We will update the version number and date of this document each time it is amended.