Date of update 22-02-2023

This Privacy Policy describes the policy of MIVO DESIGN STORE S.R.L., located at 38 MATEI BASARAB STREET, MANGALIA, CONSTANTA, email: [email protected], phone: 0720127041, regarding the collection, use, and sharing of personal data, data collected when using our website (https://www.oanca.ro/), referred to as the “Service.” By accessing and using our Service, you agree to the collection, use, and sharing of information and personal data provided in accordance with this Privacy Policy. If you do not agree, please do not access or use our Service. We may modify this Privacy Policy at any time without prior notice, and we will post the revised version and effective date. The revised policy will take effect within 180 days of the date of publication and for users who have accepted the old Policy. Access to and use of the Service after this period implies automatic acceptance of the revised Policy. Accordingly, we recommend periodically reviewing the Privacy Policy page. INFORMATION WE COLLECT We collect and process the following information provided by the user in connection with accessing and using the Service: Name, Email Address, Phone Number, Address, Billing Information, Payment Information HOW WE COLLECT THIS INFORMATION We collect/process information in the following situations: (1) When opening a new account on the site: Yes; (2) When interacting with the site: Cookies such as Google Analytics, other cookies in accordance with the Cookie Policy, etc.; (3) Based on consent (e.g., subscribing to the newsletter): Yes; (4) When you contact us directly or through contact forms; (5) When making a payment: Yes. We do not store card data on our server. Payment is made securely through a payment processor (e.g., PayPal, Stripe, Mobilpay, PayU, etc.). HOW WE USE THE INFORMATION COLLECTED We use the collected information for the following purposes:

Marketing, User Account Creation, Feedback Collection, Card Payment Processing, Order Processing, User Comments, Consent to Terms & Conditions If we intend to use the collected information for any other purpose, we will ask for your consent before using it, and only after receiving your consent, and only for the purposes for which it was requested, will it be used accordingly. The exception can only be in connection with legal requirements or obligations. WITH WHOM WE SHARE INFORMATION We will not share personal information collected with third parties without your consent, except in limited situations, such as those below. Analytics (e.g., Google Analytics) We condition the transfer to these third parties on the use of the information solely for the purpose for which it was collected and transferred, and not storing it for more than the agreed collection period to fulfill the purpose.

It is possible to share the collected information for the following purposes: (1) to comply with legal obligations or enforce court decisions; (2) to demonstrate agreement with this Privacy Policy; (3) to respond to claims regarding the infringement of third-party rights by our Service. In the event that our Service or company merges or is acquired by another company, the collected information will be transferred as assets to the new owner.

STORAGE OF COLLECTED INFORMATION We will keep the collected information until the account is deleted or as long as necessary to fulfill the purpose for which it was collected, as detailed in this Privacy Policy. We may be required to keep certain information for a longer period, such as accounting records required by applicable laws, or for other legitimate purposes such as law enforcement, fraud prevention.

Anonymous and aggregated data, which cannot identify you (directly or indirectly), may be stored indefinitely.

YOUR RIGHTS Depending on applicable law, you have the right to access and rectify or delete your personal data collected by us, the right to receive a copy of the collected data, the right to object or restrict the processing of certain personal data, the right to file petitions or complaints with the competent authority regarding your rights. To exercise these rights, you can contact us at: Oana Mihaila, STRADA MATEI BASARAB 38, MANGALIA, Constanta, [email protected]. We will respond to your request in accordance with applicable law within 30 days.

You have the option to object to processing for marketing communications or personalized advertising analysis by modifying your settings or directly via email at [email protected]. Please note that certain information collected is necessary for the operation of the Service, and withdrawing consent may render it unavailable for use.

COOKIES, TRACKING For more details on cookies and technologies used, please refer to the Cookie Policy.

SECURITY The security of collected data and information is important to us, and we will implement appropriate security measures to prevent loss, alteration, and unauthorized access to the collected data. However, given the inherent risks, we cannot guarantee absolute security and therefore cannot guarantee the security of the collected information.

EXTERNAL LINKS Our Service may display links to other sites that are not operated by us. This Privacy Policy is not related to the policies and practices of other sites, including but not limited to sites accessed through links published by this Service. We recommend that you review the Privacy Policies of any other sites you visit from this Service. We have no control and do not assume responsibility for the content, privacy policies, and practices of other sites.

CONTACT / DPO If you have any questions or concerns regarding the processing of information/personal data collected by us, please contact us, “Attn: Data Protection Officer”, at the address: Oana Mihaila, STRADA MATEI BASARAB 38, MANGALIA, Constanta, email: [email protected]. We will respond to your request in accordance with applicable legal provisions.