IXY.RO

1. Data Controller

The controller of personal data is IXY Retail SRL, a legal entity of Romanian nationality, with its registered office in Bucharest, District 1, 87 Dr. Iacob Felix Street, Felix Office Building, Office 1, Section 3.1.11, 3rd Floor, registered with the Trade Register Office under no. J2007009918404, having tax identification code RO21787802 (“IXY”, “we”).

Contact details:
E-mail: contact@ixy.ro
Correspondence address for GDPR requests: NEXT Store, inside Promenada Mall, Calea Floreasca 246B, Level -1, Sector 1, Bucharest.

2. What data we process

Depending on your interaction with the ixy.ro website, we may process:

• Identification and contact data: name, surname, email, phone number, delivery/billing address
• Account data: login credentials (customer account), order history, favorite products
• Transactional data: purchased products, value, order status, returns, invoices
• Payment data: we do not store full card details; these are processed by the payment processor – IXY only receives confirmations/results
• Communication data: support requests, conversations (email/chat), complaints
• Technical / cookie data: IP, device ID, browser, visited pages, actions on the site (depending on consent)

3. Purpose of processing your personal data

When we request personal data in order to provide certain functionalities or services on ixy.ro, we will clearly mark mandatory fields. This information is necessary in order to provide the respective service (for example, placing an order or creating an account). If you do not provide mandatory data, you may not be able to use the desired functionality or service.

In certain situations, we may automatically collect information through cookies or similar technologies, in accordance with the Cookie Policy. We may also receive data about you from third parties, for example when an order is delivered to your address or when you are indicated as the beneficiary of a service.

In all cases, we process only the data necessary for the specific purpose for which it was provided, for the following purposes:

A) Account creation and management (if a customer account exists)

If you choose to create an account on ixy.ro, we will process your data to identify you and to provide access to functionalities available to registered users (order history, saved delivery details, etc.).

Data regarding your activity on the website, including orders placed, will be associated with your account in order to be accessible in one place.

You may delete your account at any time, by requesting this from Customer Service or directly from your account (if the functionality is available). During registration or authentication, it may be necessary to verify your email address or phone number to confirm your identity.

B) Placing and delivering orders / contract execution

We process your data in order to process and deliver orders placed on ixy.ro, including:

• confirming and communicating order status;
• processing payment;
• issuing invoices and fiscal documents;
• delivering products and managing returns or exchanges;
• preventing fraud and unauthorized use of the platform.

If you choose to save delivery or payment details for future orders (where this functionality is available), these may be used to facilitate future purchases and may be modified or deleted at any time from your account.

We may also process data to the extent necessary to comply with applicable legal obligations.

C) Customer support and request management

We process only the data necessary to respond to your requests and to resolve your claims or complaints.

If you contact us by phone, calls may be recorded for service quality improvement purposes. If you choose to communicate with us via messaging apps or social networks, certain data (such as name or phone number) may also be processed by the respective platform provider, according to their own privacy policies.

D) Marketing and advertising (newsletter, SMS, promotional communications)

Based on your consent, we may use personal data to send you commercial communications (newsletter, offers, promotional campaigns) via email, SMS or push notifications.

We may use information regarding your orders and interaction with the site to personalize offers and display relevant ads on third-party platforms (such as Google, Meta, TikTok), through the use of cookies and similar technologies.

We also analyze the performance of our marketing campaigns in order to understand their effectiveness and improve user experience.

You may withdraw your consent at any time by unsubscribing from communications or by modifying your preferences in cookie settings.

E) Analysis and website improvement (analytics)

We process certain data to analyze how the ixy.ro website is used, in order to improve functionalities, optimize user experience and measure the performance of the online store.

These data may include information such as: visited pages, duration of visit, viewed products, interactions with the site, device used or IP address (in anonymized form).

Analysis is carried out through cookies and similar technologies, based on consent expressed via the cookie banner. In certain cases, we may use aggregated or anonymized data based on our legitimate interest in improving our services.

4. Data transfer and data sharing

In order to achieve the purposes mentioned in this Privacy and Cookie Policy, we must provide access to your personal data to third-party companies with whom we collaborate in providing our services, namely:

• IT providers / e-commerce platform / technological and analytics service providers
• Payment processors and financial institutions
• Providers and partners in logistics, transport and delivery services and/or their partner units (depending on consent)
• Providers and partners in marketing and advertising services, such as social networks, advertising agencies or advertising partners
• Customer Service providers
• Accounting / audit / consultants / fraud detection and prevention entities, where necessary
• Public authorities, when we have a legal obligation

In order to provide our services efficiently, some of our providers (for example IT service providers, e-commerce platforms, marketing or analytics services) may be located outside the European Economic Area (EEA). In such cases, the transfer of personal data is carried out in compliance with applicable legal requirements and by implementing appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission and, where applicable, additional technical and organizational measures to ensure a level of protection equivalent to that provided under EU law.

5. How long we store your data

We retain data only for as long as necessary for the purposes:

• Customer account: We will process your account data for as long as your account exists. If you request deletion, data will be deleted or anonymized, except for data we are legally required to retain.
• Orders / invoices: We process your data for as long as necessary to process and deliver orders, including managing returns, complaints or warranties. Order and invoice data will then be stored according to legal obligations (e.g. tax and accounting laws).
• If you choose to save delivery or payment details, these will be stored until you decide to modify or delete them.
• Customer support: Data will be processed as long as necessary to resolve the request or complaint and afterwards if required by legal obligations or for defending our rights.
• Marketing: Data will be processed for direct marketing until consent is withdrawn or you unsubscribe.
• Personalized ads will be displayed as long as you maintain consent for marketing cookies.
• Campaigns: Data will be stored for the duration of campaigns and a reasonable period thereafter.
• Cookies: according to durations in the Cookie Policy / consent panel.

After these periods, data are deleted or anonymized.

6. Your rights regarding personal data

We respect your rights regarding personal data. You may exercise them free of charge by sending a request to contact@ixy.ro. We may request additional information to verify your identity.

You have the following rights:

• Right of access – request confirmation and a copy of your data
• Right to rectification – correct inaccurate or incomplete data
• Right to erasure – request deletion of data
• Right to restriction – limit processing in certain cases
• Right to portability – receive your data in a structured format
• Right to object – object to processing based on legitimate interest, including marketing
• Right to withdraw consent – at any time

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP).

8. Children’s data

Our website and products are not intended to knowingly collect data from minors. If you are a parent/guardian and believe a minor has provided data, please contact us for deletion.

9. Cookies and similar technologies

The ixy.ro website uses cookies and similar technologies to ensure proper functioning, improve browsing experience, perform analytics and, based on your consent, display relevant ads.

Cookies are small files stored on your device that help us recognize user preferences, analyze site usage and personalize content and communications.

We use the following categories of cookies:

• Strictly necessary cookies – essential for site functionality
• Functional cookies – to remember preferences
• Analytics cookies – to measure and improve performance
• Marketing cookies – to display personalized ads

You can manage or modify your cookie preferences at any time through the dedicated panel available on the site. Full details regarding cookie types, duration and providers are available in this panel.