Politica de confidențialitate

Data Protection & Privacy Policy

Effective Date: September 14, 2026

Digital Storefront: bsioa.shop

Operator Contact: e01154098286@gmail.com

At bsioa.shop, we prioritize the privacy and security of our customers' personal data in compliance with the General Data Protection Regulation (GDPR) and European Union data privacy standards.

1. Categories of Personal Data Collected

Direct User Inputs: Full legal name, email address, operational telephone number, delivery/billing addresses within our supported European destinations, transaction records, and customer support inquiries.
Payment Details: We operate exclusively on a Cash on Delivery (COD) basis and do not collect advance online payment credentials. For approved returns initiated within 14 days of delivery, we collect bank account information (IBAN) solely to disburse reimbursements.
Automated Technical Logs: Device hardware details, operating system, IP address, browsing navigation paths, and technical cookie identifiers.

2. Legal Grounds & Purposes of Processing

Under GDPR principles, we process your data to:

Verify and fulfill consumer orders (processing window: 1–3 business days).
Coordinate cross-border logistics and physical parcel handover across supported European destinations (transit duration: 7–15 business days).
Manage Cash on Delivery (COD) payment collection upon delivery.
Process returns, inspect items, and execute bank transfer refunds within 14 calendar days from delivery.
Transmit transactional communications and maintain network security.

3. Cookies & Session Technologies

We deploy essential and analytical cookies to maintain active cart contents, preserve sessions, and protect against malicious interactions. You can modify or disable cookies through your browser settings.

4. Third-Party Disclosures

We do not sell personal data. Information is shared strictly with trusted partners bound by confidentiality agreements:

Logistics and courier partners for transit and COD collection;
Financial institutions for processing approved refunds;
Cloud hosting and IT infrastructure providers;
Legal or regulatory authorities when compelled by statutory obligations.

5. Data Security & Retention

Security: We implement robust SSL/TLS encryption, firewalls, and restricted administrative access.
Retention: Transaction and delivery records are retained throughout fulfillment, the 14-day post-delivery return window, and statutory financial retention periods. Data is securely erased when no longer required.

6. Consumer Data Rights (GDPR)

Under European law, you hold the right of access, rectification, erasure ("right to be forgotten"), restriction, data portability, and objection. To exercise these rights, please contact our support desk.