Furniture from ItalyShowroom in Roman, NeamțDelivery all over RomaniaInstalments with TBI Bank
+40 758 273 076
+40 738 321 282WhatsAppBook a visit
Skip to navigation Skip to main content
Phone support: +40758273076
0
0 items
0 items
Legal information · Privacy

Privacy policy

Updated: 15 October 2026

Personal data processing

Personal data processing


Casa Kendra are trade names of KENDRA CUCINE SRL , a legal entity of Romanian nationality, headquartered in Roman, Bulevardul Roman Musat Bl66,Scara A,Etaj1 Ap14, registered with the Trade Registry under no. J2023000169276, tax identification number RO47629610 (Casa Kendra or "we") acting as Controller with regard to personal data, in accordance with the provisions of Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR) and subsequent legislation.

This notice is addressed equally to site visitors and to customers who place orders in the online store, and sets out our policies regarding the collection, recording on various media, organisation, storage, adaptation or alteration, retrieval, consultation, combination, transmission or disclosure to third parties, erasure or destruction of personal data (hereinafter "personal data processing") when they interact with us in connection with the products and services we offer.

  1. Categories of personal data processed

We generally collect personal data that you provide to us directly when you interact with us. For example:

  • - when you create an account Casa Kendra, you send us your name and email address;
  • - when you contact the Online Store Support service by phone, email or chat, you send us your name, phone number and/or email address, as applicable;
  • - when you add further information in the My Account section, such as phone number, billing address, delivery address, etc.;
  • - when you place an order, you provide us with data such as the product purchased, quantity, delivery address, phone number, email address, etc.

 

We may also process personal data automatically. For example, visitors to our site send a series of technical data, such as the IP address, the type of browser used, the operating system, etc., when accessing any page. We use such data for statistics on browsing the site, in order to improve the visitor experience.

Other technical data is collected through cookies, when you visit the website or interact with our ads encountered while browsing the internet. More details on this subject can be found in the section Cookie policy.

We offer you the possibility of creating an account Casa Kendra and through the Facebook or Google accounts you already have. If you choose one of these options, you will be redirected to an external page managed by Facebook or Google respectively, where you will find information about the transfer of data to us.

We do not collect or process sensitive data, included by the GDPR in special categories of personal data. We also do not wish to collect or process data of persons who have not yet reached the age of 18.

  1. Purpose and legal basis for processing personal data
  2. a) for the purpose of providing you with our products and services

This purpose may include:

  • - account creation and administration Casa Kendra within our online store;
  • - order processing, including receiving, verifying, invoicing and delivering them;
  • - resolving your requests of any kind relating to an order, or to our products or services;
  • - returning products and refunding their value, in accordance with legal provisions, following your request;
  • - account-related services Casa Kendra (wishlist, Newsletter subscription, etc.)
  • - assistance for visitors and customers.
  •  

In all these cases, the processing of personal data is necessary for the conclusion and performance of a contract between you and us.

In addition, certain data processing is required by the tax legislation in force or by the legislation on the prevention of money laundering.

The legal basis for this data processing is provided by the GDPR Regulation in art. 6 para. 1 lit. b (performance of a contract) and lit. c (compliance with a legal obligation). In this context, refusing to provide us with mandatory data (marked as such with *) when we request it will make it impossible for us to honour your requests.

  1. b) for the purpose of improving our services

We may invite you to complete satisfaction surveys after placing an order, or we may run tests to improve your experience through A/B testing of changes to the site (with anonymised data).

The legal basis for this data processing is provided by the GDPR Regulation in art. 6 para. 1 lit. f (legitimate interest) for communications with customers for the purpose of improving our activity.

  1. c) for marketing purposes

Most often we send marketing communications based on the consent you have given us beforehand. For example, by subscribing to the Newsletter or to browser notifications.

We may also use certain data about buying behaviour (for example, products bought, viewed or added to the wishlist) to create a profile, in order to personalise the marketing messages for which you have given your consent, or for statistical analysis of the data.

The legal basis for this data processing for marketing purposes is provided by the GDPR Regulation in art. 6 para. 1 lit. a (consent).

  1. d) for the purpose of protecting our legitimate interests

There are situations in which we process personal data by using or sharing information with third parties in order to protect our business activity:

  • - measures to protect the site against cyber attacks;
  • - measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities.

 

The legal basis for this data processing is provided by the GDPR Regulation in art. 6 para. 1 lit. f (legitimate interest).

  1. Disclosure of processed personal data

Your personal data may be disclosed:

  • - certain employees Casa Kendra;
  • - certain recipients or third parties Casa Kendra.

 

Certain employees Casa Kendra from departments such as general management, finance and accounting, legal, sales, IT, logistics may have access to personal data, only in connection with their job duties and exclusively for the purposes set out above.

Depending on the specific situation, Casa Kendra may transmit, make available or grant access to certain relevant and necessary personal data to certain recipients and third parties (contractual partners or processors), from the following categories, individually, depending on the processing purposes mentioned above and the services they provide:

  • - suppliers of products and services available through the online store;
  • - courier service providers;
  • - financial and banking service providers;
  • - marketing and market research service providers;
  • - IT service providers directly related to the operation of the online store (web hosting, ecommerce, etc.).

 

Recipients and third parties are obliged to use the personal data securely and exclusively for the purposes specified by Casa Kendra. They have access only to the personal data strictly necessary for providing the requested service and may not use the data for their own purposes.

We will always ensure that access to personal data by employees, recipients and third parties is carried out in accordance with the legal provisions on data security and confidentiality, on the basis of adequate safeguards or on the basis of contracts concluded with them.

Where we have a legal obligation or need to defend a legitimate interest, we may also disclose certain personal data to government authorities and/or law enforcement bodies.

  1. Countries where we process personal data

Currently, we process personal data only within the territory of the European Union.

  1. How long we keep personal data

Where legal provisions govern the archiving of information, we keep the data for the entire period required by law.

Where no such specific legal provisions exist, we retain personal data according to the purpose of processing, for the following maximum periods:

  • - for the purpose of offering our products and services: 5 (five) years from your last interaction with us;
  • - for the purpose of improving our services: 3 (three) years from obtaining the answers to satisfaction questionnaires or the data from A/B testing;
  • - for marketing purposes: until consent is withdrawn or the right to object is exercised, or after 3 (three) years have passed since the last interaction with us;
  • - for the purpose of protecting our legitimate interests: 1 (one) year in the case of measures to protect the site against cyber attacks and in the case of measures to prevent and detect fraud attempts.
  •  
  1. Personal data protection measures

We ensure the security of personal data through appropriate technical and organisational measures:

  • - the use of secure https connections between your devices and our site;
  • - storing the data on secure servers, ensuring storage redundancy and the creation of backup copies;
  • - the use of encryption technologies for payment-related information.

 

  1. Rights of data subjects regarding the processing of personal data
  2. a) the right of access

The data subject has the right of access to the personal data processed, without any restriction on our part.

  1. b) the right to erasure

The data subject has the right to obtain the erasure of personal data concerning them, and we are obliged to erase the personal data from our database without undue delay, where:

(i) the personal data is no longer necessary for the purposes for which it was processed;

(ii) the data subject withdraws the consent on which the processing was based and there is no other legal basis (statutory or contractual) for this processing;

(iii) the data subject objects to the processing, provided there are no overriding legitimate grounds justifying the processing that prevail over the interests, rights and freedoms of the data subject, or provided that the purpose of the processing is not the establishment, exercise or defence of a legal claim before a court;

(iv) the data subject objects to the processing of personal data for direct marketing purposes;

(v) the data has been processed unlawfully;

(vi) the data subject objects to the processing of personal data for scientific or historical research purposes or for statistical purposes, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

  1. c) the right to rectification of data

Persoana vizata are dreptul de a obtine, fara intarzieri nejustificate, rectificarea datelor cu caracter personal inexacte care o privesc. In masura in care persoana vizata detine un cont Casa Kendra, corectarea datelor se poate face in mod liber de catre aceasta direct in acest cont. Atat persoana vizata care detine un cont Casa Kendra as well as a data subject who does not hold such an account can ask us to complete or rectify their data through a written request.

  1. d) the right to restriction of processing

The data subject has the right to obtain from us the restriction of processing where one of the following applies:

(i) the data subject contests the accuracy of the data, for a period that allows us to carry out the necessary checks;

(ii) the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use;

(iii) we no longer need the data for the purposes for which it was collected, but the data subject needs it for the establishment, exercise or defence of a legal claim;

(iv) the data subject has exercised the right to object to the processing, but verification of whether our rights prevail in that case is still ongoing.

  1. e) the right to data portability

The data subject has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. They also have the right to ask us to transmit this data to another controller where:

(i) the processing is based on consent or on the conclusion or performance of a contract;

(ii) the processing is carried out by automated means.

  1. f) the right to object

At any time, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them, including profiling based on that data.

From the moment we receive the notification, we undertake to stop processing the personal data, unless we have legitimate and compelling grounds that justify the processing and override the interests, rights and freedoms of the data subject, or where the purpose is the establishment, exercise or defence of a legal claim.

When the processing of personal data is for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing, including profiling.

  1. g) automated decision-making

We do not make automated decisions or create profiles that have legal or other significant effects on the data subjects.

  1. Exercising the rights of the data subject

In order to exercise their rights regarding the processing of personal data, the data subject can contact us using the contact details provided below, taking into account the following:

Identity verification. We take the confidentiality of all records containing personal data seriously. For this reason, please send us your requests using the email address you used in your interactions with us or, if you hold an account Casa Kendra, the email address associated with it. Otherwise, we reserve the right to carry out additional checks by requesting information aimed at confirming your identity.

Providing information. In exceptional cases, where a data subject's requests are unfounded, repetitive or excessive, we reserve the right to refuse the request for information, in accordance with art. 12 of the GDPR.

Response time. We aim to respond to any valid requests from data subjects within a maximum of 30 (thirty) days. This period may be extended by no more than 60 (sixty) days in more complicated cases, such as where the data subject has made several requests, or the requests require complex operations.

Third-party rights. We will accept all requests from data subjects and handle them appropriately, taking into account that the answers and solutions provided must not affect the rights of third parties, where this is possible.

  1. Additional information

Puteti sa contactati in orice moment Responsabilul cu Protectia Datelor Casa Kendra:

  • - by email at: office@casakendra.ro
  • - by post or courier at: Roman, Bulevardul Roman Musat Bl66,Scara A,Etaj1 Ap14 - marked For the attention of the Data Protection Officer.

 

For more details regarding the regulations in force on personal data or to file a complaint, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP), at the following contact details:



Other information
Have a question?

We reply during the showroom's opening hours.

+40 758 273 076+40 738 321 282WhatsAppoffice@casakendra.ro