Privacy policy

DUORETAIL Marketplace Privacy Policy

Effective Date: 2025

DUORETAIL is committed to protecting the privacy and security of our users' personal data. This Policy outlines our data processing practices in full compliance with the **General Data Protection Regulation (GDPR)** and the relevant provisions of the **Digital Services Act (DSA)**, ensuring transparency and control over your personal information.

1. Data Controller Identification

The entity responsible for the processing of your personal data (Data Controller) is:

DUORETAIL Marketplace
Contact Email: support@duoretail.com
Legal Jurisdiction: Romania, EU

2. Data Collected and Purpose of Processing

We collect and process various types of personal data based on the legal grounds outlined in the GDPR:

2.1. Customer Data (Contractual Necessity)

  • **Data Collected:** Name, delivery address, email address, phone number, and payment information.
  • **Purpose:** To process and fulfill orders, manage payments, and provide essential customer support relating to the purchase contract.

2.2. Platform Usage Data (Legitimate Interest)

  • **Data Collected:** IP address, device information, browser type, pages viewed, and time spent on the platform.
  • **Purpose:** To improve website functionality, diagnose technical issues, and ensure the security of the marketplace.

2.3. Marketing Data (Consent)

  • **Data Collected:** Email address (for newsletters).
  • **Purpose:** To send promotional offers and updates, based exclusively on your explicit consent, which you can withdraw at any time.

3. Data Sharing and Disclosure

Your data is treated with strict confidentiality. We may share data only with the following categories of recipients, under stringent confidentiality agreements:

  • **Third-Party Sellers:** To enable them to process and ship your order (Name, Address, Contact details).
  • **Payment Processors:** Secure, certified providers to finalize transactions (Payment details).
  • **Logistics Partners:** Courier services to ensure delivery (Name, Address, Phone).
  • **Legal Authorities:** When required by law (e.g., tax compliance or legal requests).

We do not sell, rent, or trade your personal data to external parties for their marketing purposes.

4. Your Rights Under GDPR (Data Subject Rights)

As a data subject, you have the following rights concerning your personal data, exercisable by contacting support@duoretail.com:

  1. **Right of Access:** To request a copy of the data we hold about you.
  2. **Right to Rectification:** To have inaccurate data corrected.
  3. **Right to Erasure ('Right to be Forgotten'):** To request the deletion of your data, subject to legal retention periods.
  4. **Right to Restriction of Processing:** To limit the way we use your data.
  5. **Right to Data Portability:** To receive your data in a structured, commonly used, and machine-readable format.
  6. **Right to Object:** To object to processing based on legitimate interest or for direct marketing.

5. Data Retention and Security

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements (e.g., a minimum of 10 years for fiscal documentation under Romanian law). We employ robust technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction.

6. Cookies and Tracking Technologies

DUORETAIL uses cookies to enhance user experience, analyze site performance, and provide relevant advertising. Our use of non-essential cookies requires your explicit consent. Please refer to our separate **Cookie Policy** for detailed information on cookie types and management.

This Policy may be updated periodically. We encourage you to review it regularly.