PRIVACY POLICY REGARDING THE PROCESSING OF PERSONAL DATA

We want to ensure your right to the protection of personal data and, therefore, we dedicate resources and effort to process your data in full compliance with Regulation (EU) 2016/679 (the "General Data Protection Regulation" or "GDPR") and any other legislation applicable in Romania. This Privacy Policy informs you about how we manage your personal data when you interact with us.

Please check the contents of this Privacy Policy periodically on our site to stay informed about any updates and changes.

Who We Are and How to Contact Us

BIANCOEBIANCA is the commercial brand of SC BIANCO E BIANCA DESIGN SRL, a legal entity registered in Romania, headquartered in Timișoara, Lucian Blaga No. 7, Tax ID (CUI) RO46948769, registered with the Trade Register under No. J35/4664/2022. For the purposes of data protection legislation, we act as the data controller when processing your personal data.

If you need information regarding the processing of your data, please contact us:

  • Email: contact@biancoebianca.com

  • Phone: +40 722 164 242

  • Mail / Courier: Str. Lucian Blaga Nr. 7, Timișoara, Romania

Categories of Personal Data Processed

Generally, we collect your personal information directly from you, giving you full control over the type of information you provide. The types of information we receive from you include:

  • Newsletter subscription: Email address.

  • Contact form: First and last name, email address, and any personal information sent within your message.

  • Placing an order (SHOP): Name, address, and billing details.

We process personal data only for legitimate purposes, such as providing information about our business and services, or assisting you with project development and environmental design agreements. Data processing is always based on contract performance, compliance with legal obligations, our legitimate interest, major public interest, or your explicit consent.

We will never sell or disclose your personal data to unauthorized third parties. Data is only shared with essential collaborators, product suppliers, courier companies, or external consultants. Your data is obtained with your agreement—by emailing us for collaboration details, or reaching out via phone, Instagram, or Facebook.

We also receive information about you from third parties such as Facebook, Instagram, or Google, depending on your settings on those platforms (subject to their respective privacy policies).

If you are under 18 years old, you must inform a parent or legal guardian about this Privacy Policy and obtain their agreement before using www.biancoebianca.com.

Purposes and Means of Processing

  • Invoicing: Billing data for website purchases is transferred to our Smartbill management system, Squarespace, and our external accounting firm.

  • Product Delivery: Shipping details are shared with courier companies to fulfill orders.

  • Order & Delivery Updates: We use your provided email address and/or phone number to send status notifications.

  • Marketing Services: To keep you updated on product offers and partner news, we may send general and thematic promotional emails (only with your consent).

Data Retention Period

As a general rule, we store your personal data until you request its deletion. We will act on deletion requests subject to preserving certain information where required by applicable law or our legitimate interests.

Otherwise, your data is processed for the duration of our pre-contractual, contractual, and post-contractual relationship, as well as for periods mandated by applicable statutory archiving laws.

Recipients of Personal Data

Where applicable, we may transmit or grant access to certain personal data to the following third-party recipients:

  • MailChimp (The Rocket Science Group, LLC) – Used for managing email marketing subscriptions and newsletter delivery.

  • Smartbill – Used for issuing sales invoices.

  • Accounting Service Provider – Used for tax and financial reporting.

  • Squarespace – Our website hosting platform.

  • Public Authorities – Disclosed only to comply with legal obligations or defend our legitimate interests.

International Data Transfers

We store and process your personal data via entities located within the European Union and the United States. Data transfers to the U.S. are protected by contractual safeguards under Standard Contractual Clauses (SCCs) issued by the European Commission and recognized certification frameworks (such as the Data Privacy Framework). We ensure all international transfers are carefully managed to safeguard your rights.

Data Security

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures. However, we cannot be held responsible for security vulnerabilities in systems that are outside our direct control.

Your Rights

Under the GDPR, you hold the following rights regarding your personal data:

  • Right to Information: Request details on how your personal data is processed.

  • Right of Access: Request confirmation of processing and access to your data files.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of data where legal conditions apply.

  • Right to Restriction of Processing: Limit how your data is used under certain circumstances.

  • Right to Object: Object to processing based on legitimate interests.

  • Right to Data Portability: Receive your data in a structured, machine-readable format or transfer it to another controller.

  • Right to Withdraw Consent: Withdraw marketing consent at any time via the email "Unsubscribe" link or by contacting us directly.

  • Automated Decision-Making Rights: Request human intervention, express your point of view, or contest automated decisions.

  • Right to Lodge a Complaint: Submit a concern to the national supervisory authority.

Supervisory Authority Details (Romania):

National Supervisory Authority for Personal Data Processing (ANSPDCP)

  • Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336, Bucharest, Romania

  • Phone: +40 318 059 211 / +40 318 059 212

  • Email: anspdcp@dataprotection.ro

We kindly ask that you contact us first before filing a complaint, and we will make every effort to resolve any issue amicably.

Last Updated: 03.09.2026