GDPR Policy for Moda Autentica
Last updated: July 7, 2025
Moda Autentica, operated by Moda Elisavi SRL, with its registered office at Str. Viorelelor, No. 1, Bl. 1, Sc. A, Ap. 7, Bacău, 600125, Romania, registered with the Bacău Trade Register Office under no. J2025025004004, CUI: 51587210, EUID: ROONRC.J2025025004004, is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and applicable Romanian legislation (e.g. Law no. 190/2018). Operating on a dropshipping model hosted by Shopify, we collaborate with trusted third-party suppliers and processors to provide our services. This GDPR Policy describes how we collect, process, share and protect your data, supplementing the Privacy Policy.
1. Data Collected
As detailed in our Privacy Policy, we collect personal data from your interactions with our websites (www.moda-autentica.ro and www.moda-autentica.com) and our services, including:
Contact Information: Name, email address, phone number, billing and shipping addresses.
Transactional Data: Details about purchases, returns, or cart activity.
Technical and Usage Data: IP address, browser type, interactions with sites, collected through cookies and similar technologies.
Third Party Data: Information from partners such as Shopify, payment processors (e.g. Netopia, Wise) or couriers.
We do not collect sensitive data (e.g. racial origin, political opinions, health) unless it is provided voluntarily, in which case we delete it, except where necessary for legitimate purposes.
2. Purposes of Data Processing
We process personal data for:
Order Processing and Delivery: To manage orders, deliveries, and payments in the dropshipping model.
Customer Support: To respond to requests and maintain the relationship with you.
Marketing and Advertising: To send promotional communications or display targeted advertisements, with your consent, if necessary.
Security and Fraud Prevention: To secure the services and detect fraudulent activities.
Legal Compliance: To comply with obligations such as tax reporting to ANAF.
3. Legal Basis for Processing
We process data based on:
Contract: To fulfill orders and deliver services (e.g. processing purchases).
Consent: For marketing communications or targeted advertising, which you can withdraw at any time.
Legal Obligations: For compliance with Romanian and European laws (e.g. retention of tax data for 10 years according to the Fiscal Code).
Legitimate Interests: To improve services, prevent fraud or secure the sites, provided that your rights do not prevail.
4. Data Sharing
We may share data with:
Shopify: For hosting the platform and processing transactions or analytics.
Suppliers and Couriers: For delivering orders in the dropshipping model.
Service Providers: For payment processing (e.g. Netopia, Wise), analytics (e.g. Google Analytics) or customer support.
Advertising Partners: For targeted advertising, with your consent, in accordance with their privacy policies.
Authorities: To comply with legal obligations or protect our rights.
Under certain U.S. laws, sharing data for targeted advertising may be considered “selling” or “sharing.” You can opt out of these activities by enabling the Global Privacy Control (GPC) in your browser, which we recognize as a request to opt out of targeted advertising for the device and browser used. Alternatively, contact us at contact@moda-autentica.com to opt out.
5. Security and Data Transfers
We use standard security measures (e.g. SSL encryption, restricted access) to protect your data. However, no method is completely secure, and you are responsible for the confidentiality of your login details.
Data is primarily stored in the European Economic Area (EEA). Some data may be transferred outside the EEA (e.g. via Shopify or Google Analytics) to countries such as the USA, with safeguards such as Standard Contractual Clauses for GDPR compliance.
6. Duration of Data Storage
We only keep data for as long as necessary:
Customer Data: 5 years from the last order (according to Romanian tax legislation).
Financial Data: 10 years (according to the Fiscal Code).
Marketing Data: Until consent is withdrawn.
Technical Data (e.g. cookies): Maximum 2 years, according to the Cookie Policy.
The data is deleted after these periods, except where required by law or for legitimate purposes.
7. Your Rights
According to GDPR, you have the right to:
Access your data.
Correct inaccurate data.
Delete data, except for legal obligations.
Restrict processing.
Port the data to another entity.
You object to processing for marketing or other purposes.
Withdraw consent (e.g. for newsletter), without affecting previous processing.
File a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or appeal our decisions.
To exercise these rights, please contact us at contact@moda-autentica.com or +40766254138. We may verify your identity before processing your requests. Responses will be provided within one month, in accordance with the GDPR.
8. Contact
For questions or to exercise your rights, please contact:
Operator: Moda Elisavi SRL, CUI: 51587210
Email: contact@moda-autentica.com
Phone: +40766254138
Address: Str. Viorelelor, No. 1, Bl. 1, Sc. A, Ap. 7, Bacau, 600125, Romania