Politica de confidențialitate

Data intrarii in vigoare: 29.01.2026

1.1 Suntem Operatorul datelor cu caracter personal, Societatea Comerciala CARE&JOY S.R.L., inregistrat la evidetele Registrului Comertului sub nr. J2017001558025, avand CUI 38107218, cu sediul social in Orasul Gurahont, Strada Garii, Nr. 1, Jud Arad, propietara website-ului accesibil la urmatoarea adresa: www.shop.laurul.ro. 

2.1 Aceasta politica vizeaza prelucrarea datelor dumneavoastra cu caracter personal prin website-ul nostru:  www.shop.laurul.ro.

2.2 In general, aceasta politica vizeaza doar datele personale furnizate de catre dumneavoastra catre noi. Daca dumneavoastra transmiteti date catre alte persoane, precum furnizori de plati sau alte website-uri, va rugam sa verificati politicile lor de confidentialitate.

3.1 Daca decidem sa modificam aceasta politica, vom publica o noua versiune pe website-ul nostru: www.shop.laurul.ro, care o va inlocui pe aceasta. Vom considera ca ati acceptat noua versiune a politicii daca folositi website-ul www.explorado.ro. De asemenea, este posibil sa va notificam cu privire la orice modificari prin e-mail sau prin serviciul de mesagerie.

Pentru a va oferii produsele sau serviciile noastre operatorul CARE&JOY S.R.L. prin intermediul site-ului www.explorado.ro prelucreaza datele dumneavoastra cu caracter personal oferite, de exemplu:

4.1 Cand vizitati site-ul:  www.shop.laurul.ro.,  va inregistrati, comandati produse, operatorul CARE&JOY S.R.L.va solicita sa ne furnizati date cu caracter personal care include: 

· Date de identificare: numele si prenumele dumneavoastra.

· Date de contact: adresa de livrare, adresa de facturare, adresa de e-mail si numarul de telefon.

· Date despre tranzactii: detalii despre tranzactiile dumneavoastra in legatura cu serviciul nostrum oferit prin pagina de website:  www.shop.laurul.ro.

· Date pentru marketing: date de contact sau alte date pe care dumneavoastra le puneti la dispozitia noastra si ne ingaduiti intr-un mod explicit sa le folosim pentru serviciul de newsletter sau in alte scopuri de marketing.

· Datele profilului: numele de utilizator si parola, istoricul cumparaturilor, interesele/preferintele dumneavoastra si corespondenta dumneavoastra cu noi, intrucat operatorul de date cu caracter personal CARE&JOY S.R.L.  prin platforma de website: www.shop.laurul.ro. isi propune sa utilizeze datele cu caracter personal care va apartin intr-un mod automatizat creeand profiluri in beneficiul dumneavoastra pentru a va usura navigarea pe platforma detinuta:  www.shop.laurul.ro . 

4.2 Cand interactionati cu website-ul nostrum: www.shop.laurul.ro.  , anumite date privind utilizarea serviciului nostru vor fi prelucrate in mod automat, precum: adresa protocolului de internet (IP) folosita pentru a va conecta dispozitivul la internet, date despre conexiune precum tipul si versiunea browser-ului, informatii despre dispozitivul dumneavoastra, incluzand tipul dispozitivului si identificatorul dispozitivului, sistemul de operare si platforma, date despre reteaua mobila, un numar de referinta unic legat de datele pe care dumneavoastra le-ati introdus in sistemul nostru, detalii de autentificare, website-ul de pe care ati ajuns la serviciul nostru, detalii despre activitatea dumneavoastra cu mentiunea datei/timpului, incluzand paginile pe care le-ati vizitat si cautarile/tranzactiile dumneavoastra. Mai multe informatii despre aceasta prelucrare sunt incluse mai jos in sectiunea „Utilizarea cookie-urilor” din aceasta politica de confidentialitate.

4.3 Urmatoarele date despre dumneavoastra ne pot fi furnizate de catre furnizorii nostri:

· date de facturare limitate transmise de catre furnizorul nostru de plati in scopuri de verificare, de exemplu: numele dumneavoastra, adresa de e-mail si adresa de facturare/livrare;

5. Temeiurile legale de prelucrare si scopurile prelucrarii datelor personale sunt:

5.1 Operatorul CARE&JOY S.R.L. la cererea dumneavostra, pentru a incheia un contract si/sau pentru a executa un astfel de contract, de exemplu, pentru a trimite mesaje de serviciu, a procesa plati si a indeplini comenzile dumneavoastra, potrivit art.6 din GDPR lit.b) prelucrarea este necesara pentru executarea unui contract la care persoana vizata este parte sau pentru a face demersuri la cererea persoanei vizate inainte de incheierea unui contract.

5.2 Operatorul CARE&JOY S.R.L. in „interesul sau legitim”, de exemplu, sa administreze si sa-si imbunatateasca serviciul, inclusiv urmarirea tiparelor de utilizare si prevenirea sau descoperirea fraudei sau abuzului, potrivit art. 6 din GDPR lit.f) prelucrarea este necesara in scopul intereselor legitime sau de o parte terta.

5.3 Operatorul CARE&JOY S.R.L. prelucreaza datele dumneavostra de contact in scop de marketing, intrucat dumneavoastra prin bifarea casutei ati fost de acord in mod expres cu serviciul nostru. Se aplica datelor de contact sau altor date pe care ni le furnizati sau ne permiteti sa le folosim pentru serviciul de newsletter. Puteti oricand sa va retrageti consimtamantul, asa cum este specificat in serviciul nostru sau prin e-mail la adresa: office@dpo-arad.ro.

5.4 Operatorul CARE&JOY S.R.L. nu prelucreaza datele dumneavostra in alt scop, iar daca va intentiona aceasta va vom informa inainte sa se realizeze aceasta prelucrare.

6. Datele dumneavostra personale vor fi transferate sau dezvaluite.

6.1 Nu vindem datele dumneavoastra personale niciunui tert. Totusi, dezvaluim datele dumneavoastra personale companiilor care ne furnizeaza anumite servicii, de exemplu, altor companii din grup care contribuie la furnizarea serviciului nostru, companiilor de livrare/depozitare, celor care gazduiesc website-uri, furnizorilor de plati si companiilor care ne ajuta sa trimitem comunicari sau care monitorizeaza website-ul nostru si care ne furnizeaza servicii de comert electronic, publicitate online sau alte servicii IT 

6.2 Dezvaluim datele dumneavoastra personale agentiilor de referinta privind creditele, autoritatilor de reglementare, politiei si altor autoritati de aplicare a legii pentru a sprijini combaterea fraudei si abuzului si/sau pentru a respecta cerintele legale.

6.3 Dezvaluim datele dumneavoastra personale asiguratorilor si consilierilor profesionisti in legatura cu acoperirea noastra de asigurare sau pentru a putea rezolva solicitarile legale.

6.4 Dezvaluim datele dumneavoastra personale potentialilor cumparatori, in masura in care este in mod rezonabil necesar, in cazul unei vanzari sau a unei potentiale vanzari (inclusiv in cazul unor negocieri) ori in cazul unei fuziuni sau a unei alte modalitati de reorganizare a acesteia, care implica toata afacerea noastra sau numai o parte semnificativa a acesteia.

6.5 Atunci cand folosim furnizori de servicii externi incheiem conventii care includ clauze corespunzatoare pentru a ne asigura ca prelucrarea datelor cu caracter personal va fi realizata in deplina conformitate cu legile aplicabile si care ii obliga pe acestia sa impelmenteze masuri tehnice si organizatorice corespunzatoare pentru ca datele dumneavoastra personale sa fie protejate.

7.1 Datele dumneavoastra sunt prelucrate in UE. Totusi, unii dintre furnizorii nostri de servicii externi se afla in afara UE, iar prelucrarea datelor dumneavoastra personale de catre acestia poate implica un transfer de date in afara UE. Atunci cand ne aflam in aceasta situatie, transferul de date este permis doar catre tarile considerate de catre Comisia Europeana ca ofera un caracter adecvat al nivelului de protectie pentru datele cu caracter personal. Pentru tarile in care nu exista o decizie privind caracterul adecvat al nivelului de protectie, vom folosi garantii adecvate pentru a oferi un caracter adecvat al nivelului de protectie in conformitate cu legile aplicabile.

7.2 In cazul in care furnizorul de servicii se afla in SUA, datele dumneavoastra personale vor fi transferate numai pe baza unor garantii adecvate pentru a oferi un caracter adecvat al nivelului de protectie in concordanta cu legile aplicabile.

7.3 In cazul in care dumneavoastra va aflati in afara UE, este posibil sa transferam date catre curieri sau companii care furnizeaza servicii de depozitare aflati in afara UE in scopul executarii contractului pe care l-am incheiat cu dumneavoastra. In aceasta situatie, transferul va fi realizat in conformitate cu legile aplicabile si prin implementarea unor garantii adecvate care sa ofere un caracter adecvat al nivelului de protectie.

8.1 Daca cerintele legale sunt indeplinite, aveti dreptul de acces la datele cu caracter personal, dreptul la rectificare in cazul in care acestea sunt inexacte, dreptul la stergerea datelor sau la restrictionarea prelucrarii in anumite circumstante, dreptul la portabilitatea datelor sau dreptul de a va retrage consimtamantul in orice moment (de ex., in cazul activitatilor de marketing).

8.2 De asemenea, aveti dreptul de a va opune prelucrarii datelor cu caracter personal in anumite situatii.

8.3 Daca doriti sa ne adresati o solicitare cu privire la prelucrarea datelor dumneavoastra cu caracter personal, va rugam sa contactati Responsabilul cu Protectia Datelor cu Caracter Personal(DPO) Iulian MAFTEI la numarul de telefon: 0746069727 sau la adresa de e-mail: office@dpo-arad.ro. In cazul in care sunteti nemultumit de raspunsul nostru sau considerati ca prelucrarea datelor dumneavoastra persoanale nu se realizeaza in conformitate cu legislatia aplicabila, aveti dreptul de a depune o plangere la Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal („ANSPDCP”

8.4 Pentru mai multe informatii despre drepturile dumneavoastra, puteti accesa website-ul ANSPDCP: https://www.dataprotection.ro/.

Version: 1.1

Effective Date: 29.01.2026

1.1 We are the Commercial Company CARE&JOY S.R.L, Personal Data Controller, registered in the Trade Register under no. J2017001558025, VAT number 38107218, having registered office in Gurahont town, Garii Street, No. 1, Arad County, owner of the website accessible at the following address: www.shop.laurul.ro.

2.1 This policy pertains the processing of your personal data through our website: www.shop.laurul.ro.

2.2 Generally, this policy concerns only the personal data provided by you to us. If you transmit data to other entities, such as payment providers or other websites, please verify their privacy policies.

3.1 If we decide to modify this policy, we will publish a new version on our website: www.shop.laurul.ro, which will replace the current one. If you use the website www.explorado.ro, it is understood that you have accepted the new version of the policy. Additionally, we may notify you of any changes by email or by the messaging service.

To provide you with our products or services, the controller CARE&JOY S.R.L.processes your personal data provided, for example, via the website www.explorado.ro:

4.1 When you visit the site: www.shop.laurul.ro, register, or order products, the controller CARE&JOY S.R.L. requests that you provide personal data including:

· Identification data: your first and last name.

· Contact data: delivery address, billing address, email address, and telephone number.

· Transaction data: details of your transactions related to our service offered by the website: www.shop.laurul.ro.

· Marketing data: contact information or other data that you provide to us and explicitly authorize us to use for the newsletter service or other marketing purposes.

· Profile data: username and password, purchase history, your interests/preferences, and your correspondence with us, as the personal data controller CARE&JOY S.R.L.via the website platform: www.shop.laurul.ro. intends to use the personal data that belongs to you in an automated manner by creating profiles for your benefit, in order to facilitate your navigation on the platform owned by: www.shop.laurul.ro.

4.2 When you interact with our website: www.shop.laurul.ro, certain data concerning the use of our service will be processed automatically, such as: the Internet Protocol (IP) address used to connect your device to the internet, connection data including browser type and version, information about your device including device type and device identifier, operating system and platform, data about the mobile network, a unique reference number related to the data you have entered into our system, authentication details, the website from which you accessed our service, and details regarding your activity including date/time, pages visited, and your searches/transactions. Further information regarding this processing is provided below in the 'Use of Cookies' section of this Privacy Policy.

4.3 The following data about you may be provided to us by our suppliers:

· Limited billing data transmitted by our payment provider for verification purposes, such as your name, email address, and billing/shipping address;

5. The legal bases for processing and the purposes of processing personal data are:

5.1 The controller, CARE&JOY S.R.L., at your request, needs it to conclude a contract and/or to perform such a contract, for example, to send service messages, process payments, and fulfill your orders; pursuant to Article 6(1)(b) of the GDPR, processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract.

5.2 The operatorCARE&JOY S.R.L. in its legitimate interest, for example, needs it to manage and improve its service, including monitoring usage patterns and preventing or detecting fraud or abuse; pursuant to Article 6(f) of the GDPR, processing is necessary for the purposes of the legitimate interests of the controller or a third party.

5.3 The operatorCARE&JOY S.R.L. processes your contact data for marketing purposes, as you have expressly consented to this service by ticking the box. This applies to contact data or other data that you provide to us or permit us to use for the newsletter service. You may withdraw your consent at any time, as specified in our service or by email at: office@dpo-arad.ro.

5.4 The operatorCARE&JOY S.R.L. does not process your personal data for any other purpose, and should it intend to do so, we will inform you prior to such processing.

6. Your personal data will be transferred or disclosed.

6.1 We do not sell your personal data to any third party. However, we disclose your personal data to companies that provide us with certain services, such as other companies within the group that contribute to delivering our service, delivery and storage companies, website hosting providers, payment processors, and companies that assist us in sending communications, monitoring our website, and providing e-commerce, online advertising, or other IT services.

6.2 We disclose your personal data to credit reference agencies, regulatory authorities, the police, and other law enforcement authorities to support the prevention of fraud and abuse and/or to comply with legal obligations.

6.3 We disclose your personal data to insurers and professional advisers in connection with our insurance coverage or for the purpose of resolving legal claims.

6.4 We disclose your personal data to potential buyers, insofar as reasonably necessary, in the event of a sale or prospective sale (including negotiations) or in the event of a merger or other reorganization involving all or a substantial part of our business.

6.5 When we use external service providers, we enter into agreements containing appropriate clauses to ensure that the processing of personal data is carried out in full compliance with applicable laws, and that require them to implement adequate technical and organizational measures to protect your personal data.

7.1 Your data is processed within the EU. However, some of our external service providers are located outside the EU, and the processing of your personal data by them may involve a transfer of data outside the EU. In such cases, the data transfer is permitted only to countries deemed by the European Commission to provide an adequate level of protection for personal data. For countries where no adequacy decision exists, we will apply appropriate safeguards to ensure an adequate level of protection in accordance with applicable laws.

7.2 In the event that the service provider is located in the USA, your personal data will be transferred only on the basis of appropriate safeguards to ensure an adequate level of protection in accordance with applicable laws.

7.3 If you are located outside the EU, we may transfer data to couriers or companies providing storage services located outside the EU for the purpose of performing the contract we have concluded with you. In this situation, the transfer will be carried out in accordance with applicable laws and through the implementation of appropriate safeguards to ensure an adequate level of protection.

8.1 If legal requirements are met, you have the right to access personal data, the right to rectification if inaccurate, the right to erasure or restriction of processing under certain circumstances, the right to data portability, or the right to withdraw your consent at any time (e.g., in the case of marketing activities).

8.2 You also have the right to object to the processing of personal data in certain circumstances.

8.3 If you wish to submit a request regarding the processing of your personal data, please contact the Data Protection Officer (DPO), Mr. Iulian MAFTEI, by telephone at: 0746069727 or by e-mail at: office@dpo-arad.ro.If you are dissatisfied with our response or believe that the processing of your personal data is not carried out in accordance with applicable legislation, you have the right to lodge a complaint with the National Supervisory Authority for the Processing of Personal Data ("ANSPDCP").

8.4 For more information about your rights, you may visit the ANSPDCP website: https://www.dataprotection.ro/.