Privacy Policy for Moda Autentica
Last updated: July 7, 2025
Moda Autentica, operated by Moda Elisavi SRL, is an online store that operates on a dropshipping model, collaborating with trusted suppliers to deliver products directly to customers, ensuring quality and efficiency. This Privacy Policy describes how we collect, use, process and disclose your personal data when you visit our websites (www.moda-autentica.ro and www.moda-autentica.com), use our services, make purchases or interact with us (collectively, the “Services”).
By accessing or using the Services, you confirm that you have read and understood this Privacy Policy. In the event of a conflict between our Terms and Conditions and this Policy, the latter shall prevail with respect to the collection, processing and disclosure of your data.
1. Personal Data Collected
We collect personal data that identifies you or can be associated with you, depending on how you interact with the Services and as permitted by applicable law. This data does not include anonymized or de-identified information that cannot identify you. The categories of data collected include:
Contact Information: Name, email address, phone number, billing address, shipping address.
Financial Data: Payment details (e.g. credit/debit card numbers, transaction details) processed securely through third-party providers (e.g. Netopia, Wise).
Account Data: Username, password, security questions, preferences and settings.
Transactional Data: Information about products viewed, added to cart, wish list, purchased, returned or canceled.
Communications: Information provided when you contact us (e.g. through customer support requests).
Technical and Usage Data: IP address, browser type, operating system, device type, duration of visits, click sequences, interactions with the Services, collected through cookies or similar technologies.
Third Party Data: Information obtained from Shopify, payment processors (e.g. Netopia, Wise), couriers or analytics providers (e.g. Google Analytics).
We do not collect sensitive data (e.g. racial origin, political opinions, religious beliefs, health, sexual orientation). If you provide us with such data voluntarily, we will delete it, unless the processing is necessary for a legitimate purpose.
2. Sources of Personal Data
We collect data from:
You Directly: When you create an account, place an order, contact us, or fill out forms.
Automatic: Through cookies, web beacons or similar technologies (e.g. IP address, browsing behavior).
Third Parties: From Shopify (platform provider), payment processors, couriers or analytics providers (e.g. Google Analytics).
Commercial Partners: From suppliers or logistics partners for processing orders in the dropshipping model.
3. How We Use Personal Data
We use the data based on legal grounds such as contract performance, legal obligations, legitimate interests or your consent, to:
Providing and Improving Services: Order processing, managing deliveries, administering accounts, processing payments, managing returns, sending order-related notifications, and personalizing the experience (e.g., product recommendations).
Marketing and Advertising: Sending promotional emails, text messages or displaying personalized advertisements, with your consent, if necessary.
Security and Fraud Prevention: Authenticating accounts, securing transactions, detecting fraudulent or malicious activity, and protecting the Services.
Customer Support: Responding to requests and maintaining the relationship with you.
Legal Compliance: Compliance with legal obligations (e.g. tax reporting to ANAF), responding to legal requests, or enforcing our policies.
4. How We Disclose Personal Data
We may share data with:
Shopify: To host and operate the Services, process payments, and provide personalized features.
Suppliers and Logistics Partners: To deliver orders and manage returns in the dropshipping model (e.g. sharing delivery details with couriers).
Service Providers: For IT management, payment processing (e.g. Netopia, Wise), analytics (e.g. Google Analytics) or customer support.
Marketing Partners: For advertising, with your consent, in accordance with their privacy policies.
Authorities: To comply with legal obligations or protect our rights.
Affiliates: Within our corporate group for business operations.
We don't sell your data. Shopify may use the data for its own purposes (e.g. analytics, fraud prevention), as described in the Shopify Privacy Policy.
5. International Transfers
Data is stored primarily in the European Economic Area (EEA). Some data (e.g. through Google Analytics or Shopify) may be transferred outside the EEA (e.g. the USA), with safeguards such as Standard Contractual Clauses for GDPR compliance.
6. Data Security and Retention
We use standard security measures (e.g. SSL encryption, restricted access, secure servers). However, no method is completely secure, and the transmission of data over the Internet involves risks. You are responsible for the confidentiality of your authentication data.
We only keep data for as long as necessary:
Customer data: 5 years from the last order (according to Romanian tax legislation).
Partner data: Contract duration plus 10 years (according to the Fiscal Code).
Marketing data: Until consent is withdrawn.
Technical data (e.g. cookies): Maximum 2 years, according to the Cookie Policy.
The data is deleted after these periods, except where required by law or for legitimate purposes.
7. Your Rights
According to the GDPR, you have the right to:
Request access to your data.
Request correction of inaccurate data.
Request deletion of data, except for legal obligations.
Request data portability.
You object to or restrict processing (e.g. marketing).
Withdraw consent (e.g. for newsletter), without affecting previous processing.
File a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
To exercise your rights, contact us at contact@moda-autentica.com or +40766254138. We may verify identity before processing requests.
8. Third Party Sites
The Services may include links to third-party sites (e.g. Netopia, Wise, social platforms). We are not responsible for their privacy practices. We recommend that you check their policies.
9. Children's Data
The Services are not intended for children under the age of majority in your jurisdiction. We do not collect data from children. If a child has provided us with data, please contact us to request deletion.
10. Policy Updates
We may update this Policy to reflect changes in practices or legal requirements. Updates will be posted on our sites, with the "Last Updated" date revised. Significant changes will be notified as required by law.
11. Contact
For questions or to exercise your rights, please contact:
Email: contact@moda-autentica.com
Phone: +40766254138
Address: Moda Elisavi SRL, Str. Viorelelor, No. 1, Bl. 1, Sc. A, Ap. 7, Bacau, 600125, Romania
Moda Elisavi SRL is the personal data controller according to applicable legislation.