Privacy policy
Last updated: 8 July 2026
1. Controller. BY PRUNA SRL (pruna.ro), Drumul Fermei 65C, Popești-Leordeni, Ilfov, Romania; Trade Register No.: J2025057675003; Tax ID: RO52258526; email: orders@pruna.ro. Online clothing store (sales exclusively online).
2. Data We Process
- Account / order data: name, email, phone number, delivery and billing addresses, products, order values, transaction history.
- Payment: payment information (processed by authorised payment processors; pruna.ro does not store card data).
- Delivery: data required for handover to the courier.
- Support: information provided in conversations or attachments.
- Marketing (optional): consent for newsletter and commercial communications.
- Technical: IP address, device/browser, security and fraud logs, cookies and similar identifiers (non-essential cookies only with consent).
3. Purposes & Legal Bases. Performance of contract (orders, delivery, returns); legal obligations (accounting and tax requirements); legitimate interest (anti-fraud security, service improvement); consent (marketing, non-essential cookies and personalised advertising). We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
4. Recipients. Strictly necessary processors and partners: e-commerce platform, payment processors, couriers, email/SMS providers, anti-fraud and analytics services, and advertising platforms (e.g. Meta, Google) for conversion measurement and, subject to your cookie consent, personalised advertising. Processors act solely in accordance with our instructions. We may also disclose data to public authorities (e.g. tax authorities, courts) where required by law.
5. Transfers Outside the EEA. Where we use providers based outside the EEA, we apply appropriate legal safeguards (e.g. European Commission adequacy decisions or standard contractual clauses) and adequate technical and organisational measures.
6. Retention Periods
- Accounting documents / orders: as required by law (up to 10 years, depending on document type).
- Customer account: until deletion or 3 years from last activity.
- Support: 3 years from closure of the request.
- Marketing: until withdrawal of consent / opt-out.
- Cookies: as per the settings in the consent banner.
7. Your Rights. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (without affecting processing carried out before withdrawal). To exercise your rights, contact us at orders@pruna.ro. We will respond within 30 days (extendable by up to two further months for complex requests, in which case we will inform you). You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania, www.dataprotection.ro.
8. Security. We apply proportionate technical and organisational measures to protect your data. No measure is entirely infallible; please avoid sending sensitive information over unsecured channels.
9. Minors. Our services are not directed at persons under 16. We do not knowingly collect data from children under 16. If you are a parent or guardian and believe we have collected such data, please contact us for deletion.
10. Updates. We may update this policy to reflect operational or legal changes. The current version and the date of the last update are displayed at the top of this page.