Privacy policy

Protecting your personal data matters to us. This policy explains what personal data we collect, the purposes for which we use it, to whom we may disclose it and what rights you have under Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR).

1. The data controller

The purposes and means of processing your personal data are determined by MAGBO ONLINE S.R.L. (registered office: Oradea, Bihor County, Romania; tax identification number (CUI): 53586971; trade register number: J2026006028000), which operates the lumedics.ro online store under the Lumedics brand. For any question about your data, you can contact us at help@lumedics.ro.

2. What data we collect

• identification and contact data: surname, first name, e-mail address, telephone number;
• delivery and billing data: delivery address, billing address and, for legal entities, company details;
• order data: products ordered, order value, previous orders;
• payment data: handled securely by the payment service provider, we do not store full card details;
• technical data: IP address, browser and device type, pages visited, collected through cookies and similar technologies.

3. Purposes of processing

• processing and delivering orders, and handling returns and guarantee claims;
• issuing accounting documents and complying with accounting and legal obligations;
• communicating with you about your orders and requests;
• sending marketing messages, if you have given your consent;
• improving the website, statistical analysis and fraud prevention.

4. Legal basis for processing

• performance of the contract, for processing and delivering orders (Article 6(1)(b) GDPR);
• compliance with a legal obligation, for invoicing and accounting (Article 6(1)(c) GDPR);
• your consent, for marketing messages and non-essential cookies (Article 6(1)(a) GDPR);
• our legitimate interest in website security, fraud prevention and statistical analysis (Article 6(1)(f) GDPR).

5. Recipients and processors

To provide our services, we may disclose your data to recipients that process it on our behalf, under contracts that ensure the protection of the data:

• Shopify, the platform that hosts and runs the online store;
• courier companies, for delivering orders (FAN Courier and Sameday in Romania, and the courier handling delivery in other countries);
• the payment service provider, for processing card payments;
• invoicing, accounting and e-mail service providers;
• public authorities, where the law requires us to disclose the data.

6. Transfers outside the European Union

Some of our providers, such as the platform that hosts the online store, may process data outside the European Economic Area. In such cases we ensure that the transfer is based on appropriate safeguards, such as the standard contractual clauses approved by the European Commission, so that your data receives an adequate level of protection.

7. How long we keep your data

We keep your data only for as long as necessary for the purpose for which it was collected. Order data and accounting documents are kept for the period required by accounting and tax legislation, generally 10 years. Data processed on the basis of consent is kept until you withdraw your consent.

8. Your rights

As a data subject, you have the following rights:

• access to your data;
• rectification of inaccurate or incomplete data;
• erasure of your data under the conditions laid down by law;
• restriction of processing;
• data portability;
• objection to processing, including for direct marketing;
• withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You can exercise your rights by sending a request to help@lumedics.ro. We will reply within the time limit set by law, generally within one month.

9. Cookies

The website uses cookies that are strictly necessary for it to work properly and, with your consent, analytics and marketing cookies. You can manage or withdraw your consent to non-essential cookies in your browser settings or in the cookie banner on the website.

10. Data security

We protect your data with appropriate technical and organisational measures against unauthorised access, loss, alteration or disclosure. The connection to the website is encrypted, and the data can only be accessed by those who need it to perform their duties.

11. Right to lodge a complaint

If you consider that the processing of your data infringes the law, you may lodge a complaint with the Romanian data protection authority (ANSPDCP, dataprotection.ro) or with the data protection authority of the EU Member State in which you habitually reside.

12. Contact

If you have any questions about the processing of your personal data, write to us at help@lumedics.ro.