Your data protection rights under the General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a comprehensive European privacy law that gives you control over your personal data. As a EU registered business, Tooluxe Home SRL is fully committed to protecting your privacy and ensuring you can exercise all your rights.
Your rights are guaranteed and completely free to exercise. We will never charge you for accessing, correcting, or deleting your personal data.
What it means: You can request a copy of all personal data we hold about you, including how it's used, where it came from, and who we share it with.
Response time: 30 days (free of charge)
What you'll receive: Complete data export, processing purposes, legal basis, and retention periods
What it means: You can ask us to correct or complete any inaccurate or incomplete personal data we have about you.
Response time: 30 days (immediate for urgent corrections)
Examples: Update address, correct name spelling, add missing information
What it means: You can request deletion of your personal data when there's no compelling reason for us to continue processing it.
Limitations: We may keep data required by law (invoices, tax records) for legal compliance
Process: Account deletion, data anonymization, or complete removal
What it means: You can ask us to limit how we process your data while disputes are resolved or accuracy is verified.
Effect: We store but don't actively use your data
When available: During accuracy disputes, legal challenges, or when processing is unlawful
What it means: You can receive your data in a structured, machine-readable format to transfer to another service.
Format: JSON, CSV, or XML files
Scope: Data you provided to us directly and data processed by automated means
What it means: You can object to processing based on legitimate interests, direct marketing, or for research/statistical purposes.
Marketing: Absolute right to stop all marketing communications
Other processing: We must stop unless we have compelling legitimate grounds
Right not to be subject to automated decision-making: You have the right not to be subject to decisions based solely on automated processing, including profiling, that have legal or significant effects.
Our practice: We don't make automated decisions that significantly affect you without human oversight.
Easy withdrawal: Where processing is based on consent, you can withdraw it at any time, as easily as you gave it.
Effect: Withdrawal doesn't affect past processing but stops future processing based on that consent.
Use this form to exercise any of your GDPR rights. We'll respond within 30 days and verify your identity for security.
We acknowledge your request within 72 hours and assign a unique reference number for tracking.
We verify your identity to protect your privacy and prevent unauthorized access to personal data.
We locate, compile, and review all relevant data. Complex requests may take longer but we'll keep you informed.
We provide a complete response to your request. For complex cases, we may extend by 60 days with explanation.
There are limited circumstances where we may not be able to fulfill your request:
We will always explain our reasoning and inform you of alternative options.
To protect your privacy, we may need to verify your identity before processing requests:
Data Protection Officer:
π§ dpo@tooluxehome.shop
π +40 721 345 678
π Calea Vitan 225, BucureΘti 077085, Romania
Response Times:
β’ Email: Within 24 hours
β’ Phone: Business hours (9:00-18:00)
β’ GDPR Requests: Within 30 days
β’ Urgent Issues: Same day
You have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP):
Website: www.dataprotection.ro
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania
Email: anspdcp@dataprotection.ro
Phone: +40 21 252 5599
If you're not satisfied with our response or the supervisory authority's handling, you have the right to:
Yes, absolutely. We will never charge you for exercising your GDPR rights. All requests are processed free of charge.
We keep different types of data for different periods: order data (10 years for legal compliance), marketing data (until consent withdrawn), analytics data (26 months). See our Privacy Policy for complete details.
Yes, you can request deletion of specific data categories while keeping your account active. We'll work with you to find the best solution for your needs.
You can contact our DPO for escalation, file a complaint with the Romanian Data Protection Authority, or seek judicial remedy through Romanian courts.
GDPR rights apply to anyone whose data is processed by EU businesses, regardless of residence. We extend the same privacy protections to all our customers worldwide.
Tooluxe Home SRL | VAT: RO45123456 | EU Registered Business
GDPR Compliant Since Day One | Your Privacy is Our Priority
Questions about your rights? Contact us anytime at dpo@tooluxehome.shop