Privacy Policy — feeling.gift

Who We Are

feeling.gift is operated by SZILÁGYI ALAJOS ÎNTREPRINDERE INDIVIDUALĂ, a sole proprietorship registered in Romania with Tax Identification Number (CUI) 36040634, with registered address at Sat. Ciumani, Comuna Ciumani, Nr. 1445/a, 537050, Județul Harghita, Romania.

We are the data controller for all personal data collected through feeling.gift, as defined under EU General Data Protection Regulation (GDPR) 2016/679.

For all privacy-related matters, contact us at: info@feeling.gift

What Data We Collect

When you make a purchase
Full name, email address, billing address, payment information (processed securely by Stripe — we never store card details), order history, and the emotion(s) you purchased or gifted.
When you send a gift
The recipient’s email address, for the sole purpose of delivering their gift notification. We do not use recipient email addresses for any marketing purpose.
When you sign up for Collector Alerts
Your email address only. No name required.
When you visit our website
IP address, browser type, pages visited, time spent, and referral source — collected anonymously through standard server logs and analytics tools. We use this data only to improve our website, never to identify individuals.
When you contact us
Your name, email address, and the content of your message.

Why We Process Your Data & Legal Basis

Purpose Legal Basis
Processing your order and delivering your digital artwork Contract Performance Art. 6(1)(b) GDPR
Sending order confirmations and receipts Contract Performance Art. 6(1)(b) GDPR
Delivering gift notifications to recipients Legitimate Interest Art. 6(1)(f) GDPR
Issuing invoices and maintaining financial records Legal Obligation Art. 6(1)(c) GDPR
Sending Collector Alerts (max. 4 per year) Consent Art. 6(1)(a) GDPR
Preventing fraud and chargebacks Legitimate Interest Art. 6(1)(f) GDPR
Improving our website and user experience Legitimate Interest Art. 6(1)(f) GDPR
Responding to support requests Legitimate Interest Art. 6(1)(f) GDPR

Who We Share Your Data With

We do not sell your personal data. Ever. We share data only with the following trusted service providers, strictly to operate our business:

Provider Purpose Location
Stripe Payment processing USA — EU Standard Contractual Clauses apply
NMKR.io Cardano NFT minting and delivery EU
Brevo Collector Alerts email delivery EU — GDPR compliant
WooCommerce / Automattic E-commerce platform USA — EU Standard Contractual Clauses apply
Our hosting provider Website and data hosting EU

We may also share data with Romanian tax authorities or law enforcement when required by law.

How Long We Keep Your Data

Order data
10 years
As required by Romanian and EU accounting law
Email marketing (Collector Alerts)
Until unsubscribed
Every email contains a one-click unsubscribe link
Support messages
2 years
From the date of your last contact
Website analytics
13 months
Then automatically deleted
Gift recipient emails
90 days
After gift notification delivery, unless the recipient creates an account

Your Rights Under GDPR

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Ask us to delete your data, subject to legal retention requirements.

Right to Restrict Processing

Ask us to limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interest, including direct marketing.

Right to Withdraw Consent

Withdraw consent for email marketing at any time, without affecting prior processing.

To exercise any of these rights, contact us at info@feeling.gift. We will respond within 30 days.

Cookies

We use cookies to operate our store, remember your cart, process payments securely, and understand how visitors use our site. You can manage your cookie preferences at any time through our Cookie Policy page.

We do not use advertising or third-party tracking cookies.

International Data Transfers

Some of our service providers (Stripe, Automattic) are based in the United States. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place — specifically EU Standard Contractual Clauses (SCCs) as provided under Article 46 GDPR.

Data Security

We take the security of your data seriously. Our website runs on encrypted HTTPS connections, payment data is handled exclusively by Stripe and never stored on our servers, and access to customer data is restricted to essential personnel only.

In the unlikely event of a data breach that affects your rights and freedoms, we will notify the Romanian Data Protection Authority (ANSPDCP) within 72 hours and inform affected individuals without undue delay.

Children’s Privacy

feeling.gift is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately at info@feeling.gift and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top and notify Collector Alert subscribers by email if the changes are material. Continued use of feeling.gift after changes constitutes acceptance of the updated policy.

How to Complain

If you are unhappy with how we handle your personal data, please contact us first at info@feeling.gift — we will do our best to resolve your concern.

You also have the right to lodge a complaint with the Romanian data protection authority:

ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Website: www.dataprotection.ro
Address: B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, București

Plain Summary

We collect only what we need to run our store. We never sell your data.
We send a maximum of 4 emails per year to subscribers.
You can ask us to delete your data at any time.
Questions? info@feeling.gift