PRIVACY POLICY

1. General Information and Identity of the Controller The privacy of your personal data is important to us, which is why we are committed to securing this information and using it only within the context permitted by law. This document explains how ARCANUM SUSURRI SRL (headquartered in Ghiroda village, Ghiroda commune, 170 Dunărea St., Timiș County, registered with the Trade Register under no. J35/5422/2022), acting as a Data Controller, processes your personal data through the website www.susurriperfumes.com.

The processing is carried out in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR). Because the trust of our customers is very important to us, we continuously update our privacy policy to reflect the latest changes in Romanian and European legislation.

2. What data we collect, for what purpose, and the legal basis Depending on how you interact with our site, we may collect the following types of information:

A. Through the Contact form or direct correspondence:

• Collected data: e-mail address, phone number, and name.

• Purpose: to be able to send a response to your inquiries and to ask for feedback regarding our products.

• Legal basis: Our legitimate interest in responding to customer requests (Art. 6 para. 1 lit. f of the GDPR) or your consent (Art. 6 para. 1 lit. a of the GDPR).

B. Through the Online store (placing an order and account creation):

• Collected data: First and last name, contact address and delivery address, phone number, e-mail address, transaction data, IP.

• Purpose: receiving, validating, dispatching, and invoicing the placed orders, resolving cancellations or problems of any nature related to an order, returning products.

• Legal basis: Performance of a contract to which the data subject is party (Art. 6 para. 1 lit. b of the GDPR) and compliance with a legal obligation, such as Romanian tax and accounting legislation (Art. 6 para. 1 lit. c of the GDPR).

3. To whom we transfer your data (Recipients of the data) We will not disclose your information to third parties for marketing purposes. However, to be able to deliver your orders and ensure the proper functioning of the store, we may transmit or grant access to certain personal data to the following categories of service providers:

• Courier service providers (for parcel delivery);

• Payment/banking service providers (e.g., Netopia, for processing online payments);

• IT and web hosting service providers;

• Accounting service providers;

• Public authorities, if there is a legal obligation to do so.

We require all third parties to have adequate technical and operational security measures in place to protect your personal data.

4. How long we keep your data We will store your personal data only for the period necessary to fulfill the purposes detailed above. For example, data from financial-accounting documents (invoices) will be kept for 10 years, according to Romanian legal provisions. Data related to the customer account will be kept until the deletion of the account is requested.

5. Cookies The information presented below aims to provide the user with more details about the placement, use, and administration of “cookies”. This website uses its own and third-party cookies to provide visitors with a much better browsing experience and services adapted to your needs.

A cookie is a small text file that is stored and/or read by your web browser on the hard drive of your end device. The data stored by the cookies used never shows personal details based on which an individual identity can be established.

Based on their function and purpose, we use the following categories:

• Performance cookies: remember the user’s preferences on this site (e.g., volume settings, streaming speed).

• Visitor analysis (Analytics) cookies: Our website uses Google Analytics, a service provided by Google. This allows us to monitor the unique users who visit us and how often they do so, for statistical purposes. The information is transmitted to and stored by Google. Google will not associate your IP address with any other data held by Google. To prevent monitoring by this type of cookie, you can install an add-in on your web browser (http://tools.google.com/dlpage/gaoptout).

• Geotargeting cookies: determine which country you come from, exclusively to adapt the content.

• Cookies placed by third parties: used to monitor traffic and customize functions (e.g., cookies placed by Google Maps on the contact page).

You can withdraw your consent regarding cookies (except strictly necessary ones) at any time by blocking or removing them through your web browser settings (Chrome, Safari, Firefox, Edge, etc.).

6. Security of personal data We comply with security procedures regarding the storage of personal data and protect it using SSL (Secure Socket Layer) technology. SSL is the industry standard method of encrypting personal information so that it can be transferred securely over the Internet.

7. Your rights Under the GDPR, you have the following rights:

• Right of access: to request information regarding the data we hold and for what purpose we use it;

• Right to rectification: to request the correction of any incomplete or inaccurate information;

• Right to erasure (“right to be forgotten”): to request the deletion of your personal information if there is no longer a legal basis for processing it;

• Right to restriction of processing: to request the suspension of the processing of your data;

• Right to data portability: to request the transfer of information in an electronic and structured format;

• Right to object: to refuse the processing of personal information, including for direct marketing purposes;

• Right to withdraw your consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP – www.dataprotection.ro), if you consider that your rights have been violated.

If you wish to exercise any of these rights, please send a request by e-mail to contact@susurri.ro, by phone: –, or by mail to: Ghiroda village, Ghiroda commune, 170 Dunărea St., Timiș County, Romania.

Last update The privacy policy was last updated on June 26, 2026. If subsequent changes occur after this date, they will be presented on the site in the relevant section.