privacy policy

This policy explains how we collect, use, store and protect your personal data, as well as your rights under applicable data protection legislation. Please read the document carefully before using the website or placing an order through our online store.

This policy supplements the Terms and Conditions and any other applicable internal policies, including the Cookie Policy which is an integral part of this document. By accessing or using the website you confirm that you have understood the information below and agree to the way in which we process your personal data.

Who we are

The data controller for the described activities is SC I 4 BEST SALES SRL, which operates the online store www.ok-lux.ro and the OK-Lux brand. The company operates under Romanian law and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable national legislation.

Operator contact details:
Email: contact@ok-lux.com
Phone: 0731 159 352
Postal address: Bucharest, Romania, registered office communicated on the website in the Contact section.

If we appoint a data protection officer, we will publish his/her contact details in this section, complying with all the conditions imposed by the applicable law in force.

Our commitment to data protection

We take privacy very seriously and only process data that is strictly necessary for the purpose for which it was collected. We maintain appropriate technical and organizational measures to ensure the integrity, availability and confidentiality of personal data, as well as the traceability of operations performed in our systems.

What data do we collect?

The types of data may include information that you provide directly or that is automatically generated when you use our website. We collect and process the following categories of personal data in our current distance trading activities:

• Identification data: name, surname, title, email address and telephone number provided voluntarily.
  
  

• Delivery and billing data: full address, city, postal code and other necessary logistical details.
  
  

• Payment data: last four digits of the card, card type, authorization confirmations and secure payment tokens, without storing all sensitive data.
  
  

• Transactional data: products ordered, value, order status, returns and refunds made later.
  
  

• Technical data: IP address, browser type and version, device used, operating system, language settings and time zone automatically detected.
  
  

• Usage data: interactions with the site, pages visited, actions taken, preferences expressed and saved wish lists.
  
  

• Marketing and communication: preferences regarding commercial communications and channels chosen for subsequent contacts.
  
  

We do not request or wish to collect special categories of data, and any such information should not be voluntarily submitted to our company.

How we collect data

We collect data directly from you when you create an account, place an order, interact with customer service, or subscribe to commercial communications. We may collect data automatically through cookies and similar technologies, in accordance with the Cookie Policy displayed below. We may also receive data from third parties who act as processors or technical partners, strictly to provide the services you requested.

Purposes and legal grounds of processing

We process your personal data only to the extent necessary and proportionate to the legitimate purposes for which it was originally collected. We rely on the following legal bases provided by applicable law in Romania and the European Union:

• Contract execution: account registration, order processing, product delivery, returns management and after-sales support.
  
  

• Legal obligations: invoicing, accounting, warranties, archiving and tax compliance imposed by current legal norms.
  
  

• Legitimate interest: securing the platform, preventing fraud, improving services, performance analysis and internal reporting.
  
  

• Consent: sending newsletters and personalized offers, marketing profiling and use of certain optional cookies.
  
  

You can withdraw your consent for commercial communications at any time by using the unsubscribe link or by contacting us directly through the available channels.

Commercial communications and newsletter

If you subscribe to the newsletter, we will send you news, recommendations, personalized offers and useful information about products. Content personalization may be based on your declared interests and browsing history, exclusively with your express consent validly granted. You can unsubscribe at any time, using the link in each message or by contacting the support team.

Payments and transaction security

Online payments are processed through authorized processors operating in PCI-DSS compliant environments and internationally recognized standards. Full card details are entered directly into the processor's secure pages and are not stored by OK-Lux in any persistent form. We use TLS/SSL to encrypt traffic, and internal access to data is only permitted to authorized and properly trained individuals.

How long do we keep data?

We retain the data for as long as necessary for the stated purposes, in compliance with the legal archiving deadlines and applicable tax requirements. Your account data is retained for the duration of the account and may be deleted later upon your legitimate request to the operator. Data necessary for accounting compliance is retained for the period provided for by the legislation in force and may not be deleted before the mandatory deadline.

In the case of inactive accounts (which have not placed orders or accessed for a period of more than 24 months), we will automatically anonymize or delete your data, except for those that must be retained according to legal obligations.

To whom do we disclose data?

We may disclose data to processors who provide us with essential services for the operation of the online store, in compliance with confidentiality and security agreements. The categories of recipients may include hosting providers, payment processors, delivery couriers, email service providers, customer support, anti-fraud solutions and professional consultants. We may provide data to competent public authorities when the law requires it, respecting all procedures provided for by the applicable legislation in Romania.

Platform and third-party processors
The OK-Lux store is hosted on Shopify Inc., which acts as a data processor on our behalf. Your data may be stored on servers located in Canada, the United States, or other regions where Shopify or its suppliers operate. Shopify complies with the Standard Contractual Clauses issued by the European Commission, ensuring an adequate level of protection under the GDPR.
You can view their full privacy policy here: https://www.shopify.com/legal/privacy

Our website may include scripts and technologies provided by third parties (for example: Google Analytics, Meta Pixel, TikTok Pixel), used exclusively for statistical analysis and targeted advertising. These tools may collect anonymous information about your online behavior (e.g. pages visited, clicks, conversions), without directly identifying you. You can control these settings in your cookie preferences or through the tools provided by each platform (Google Ads Settings, Meta Ads Preferences, etc.).

Transfers outside the European Economic Area

If it is necessary to use providers located outside the EEA, we will ensure an adequate level of protection through recognised legal instruments such as standard contractual clauses or other safeguards accepted by the European Commission. We will provide you with further information on the transfer mechanisms used by our contractual partners upon request.

Your rights

Under the GDPR, you have the following rights that you can exercise at any time, within the limits and conditions provided by the law applicable in Romania:

• The right to information: you receive clear information about how and why we process your data.
  
  

• Right of access: you obtain confirmation of processing and a copy of your processed personal data.
  
  

• Right to rectification: you can request the correction of inaccurate data or the completion of incomplete data.
  
  

• Right to erasure: you can request the deletion of data in the cases provided for by the applicable European regulation.
  
  

• Right to restriction: you can request the limitation of processing in certain legally provided situations.
  
  

• Right to object: you can object to processing based on legitimate interest or direct marketing.
  
  

• Right to portability: you can receive your data in a commonly used and machine-readable format.
  
  

• Rights related to automated decisions: you can request human intervention when there is relevant profiling.
  
  

To exercise your rights, please contact us at contact@ok-lux.com or at 0731 159 352, and we will respond within a maximum of one calendar month from the receipt of your request. The deadline may be extended for justified reasons, with prior information to the applicant in accordance with the legal provisions applicable on the territory of Romania.

We do not use automated decision-making processes that produce significant legal effects on you. If we apply such processes in the future (e.g. automated product recommendations, personalized offers), we will inform you in advance and give you the opportunity to request human intervention.

Supervisory authority

You have the right to file a complaint with the National Supervisory Authority for Personal Data Processing, using the officially published contact details. You can contact us first to try to resolve the matter amicably, and our team will assist you without undue delay.

Website: www.dataprotection.ro
Address: 28-30 General Gheorghe Magheru Blvd., Sector 1, Bucharest, 010336
E-mail: anspdcp@dataprotection.ro | Phone: +40 318 059 211

Children and minors

Our website, services and products are intended for persons aged 16 or over, as defined by the age limit in Romania. We do not knowingly collect data from persons under this age and will promptly delete any data identified as belonging to a minor without the consent of the legal representative.

Links to third parties

The Site may contain links to websites, applications or services operated by independent third parties. We do not control the practices of those third parties and are not responsible for their privacy policies, so please review them before providing any personal information.

Policy Updates

We may update this policy periodically to reflect significant legislative or operational changes. We will always publish the current version on the site, and your continued use of our services constitutes acceptance of the changes communicated in a transparent manner.

Cookie Policy

This Cookie Policy explains what cookies are, what types we use, why we use them and how you can control them at a granular level. The Policy is part of the Privacy Policy and Terms and Conditions published on our official website.

What are cookies?

Cookies are small text files placed on your device when you visit websites, used to make websites work, be more efficient and provide owners with usage information. Cookies do not contain executable code and cannot run programs or deliver viruses to your personal device.

What cookies do we use?

• Strictly necessary cookies: allow you to navigate the site and use basic functions such as authentication or the shopping cart.
  
  

• Functional cookies: remember preferences such as language, location and personalized display settings.
  
  

• Performance and analytics cookies: help us understand how the site is used, to constantly improve the experience.
  
  

• Marketing and profiling cookies: can be used to deliver personalized content and measure the effectiveness of campaigns.
  
  

Certain third parties may set their own cookies when you interact with our site, for example analytics providers, advertising platforms or social networks. These third parties are responsible for their own policies, which we encourage you to consult before continuing to browse.

Cookie lifetime

Some cookies are session cookies and expire when you close your browser, while others are persistent cookies and remain on your device until they expire or are manually deleted. Durations may vary depending on the purpose and the technical provider used to collect the data.

How you can control cookies

You can manage cookies directly from your browser settings, where you can block, delete or restrict certain categories of cookies. Please note that blocking strictly necessary cookies may affect essential website functionality, including the login process and checkout. Useful resources can be found at www.aboutcookies.org and www.youronlinechoices.com/ro/ , which provide clear guides for the most popular browsers in use today.

All cookie choices are recorded and stored as evidence of consent, as required by GDPR. You can change your preferences at any time via the consent banner displayed on your first visit or from the "Cookie Settings" section available at the bottom of the page.

Changes to the Cookie Policy

We may adjust this policy to reflect technological, operational or compliance changes, always publishing the latest version on our website. Continued use of the site after the publication of any change signifies acceptance of the updated version without further reservations or restrictive conditions.

Privacy and cookies contact

For any questions, requests or concerns regarding privacy or cookies, you can quickly contact us using the official contact details. Our team will respond to you as soon as possible, respecting the legal deadlines applicable in Romania.

Email: contact@ok-lux.com
Phone: 0731 159 352
Address: Bucharest, Romania, the Contact section provides complete updated details.