Boabe.ro

Privacy policy

1. Data controller

The data controller for the Boabe.ro online store is:

  • Company name: MXM SYSTEMS SRL
  • CUI: RO54497805
  • Registered office: Bdul. I. C. Bratianu 44 Bis, Bl. P7, Sc. 2, Et. 8, Ap. 39, Sector 3, Bucuresti
  • Email: contact@boabe.ro

2. Data collected

We collect the following personal data necessary for order processing:

  • Full name
  • Delivery address (street, city, county, postal code)
  • Phone number
  • Email address (for customer account)

We do not store card data. Payment data is processed directly by NETOPIA Payments, in accordance with PCI-DSS standards.

3. Legal basis for processing

  • Contract performance — Art. 6(1)(b) GDPR: data is necessary for processing and delivering orders.
  • Legal obligations — Art. 6(1)(c) GDPR: retaining fiscal documents in accordance with applicable accounting legislation.

4. Retention period

Data related to orders and fiscal documents is retained for the period required by applicable fiscal and accounting legislation. Customer account data is retained until the account is deleted or upon user request.

5. Recipients

Your data may be shared with:

  • FAN Courier — for package delivery (name, address, phone number).
  • NETOPIA Payments — for processing online card payments. Card data is managed exclusively by NETOPIA Payments and is not accessible to Boabe.ro.
  • Supabase Inc. — technical infrastructure provider (database, authentication). Data may be stored and processed through technical providers used to operate the site, in accordance with applicable data processing agreements.

6. Your rights

Under GDPR, you have the following rights:

  • Right of access to processed data
  • Right to rectification of inaccurate data
  • Right to erasure (right to be forgotten)
  • Right to restriction of processing
  • Right to data portability
  • Right to object

To exercise these rights, contact us at: contact@boabe.ro.

7. Right to lodge a complaint

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

www.dataprotection.ro

8. Cookies

Information about the cookies we use is available in our Cookie policy.

Privacy policy