1. GENERAL

a. This document is written in two languages: Romanian and English. In case of discrepancies, misinterpretations, or ambiguities in translation, the official version shall be considered the Romanian one.

b. Effective date: 13/03/2026 | Last updated: 13/03/2026

c. The document is public, accessible, and may be freely distributed without prior approval, as it contains only information classified as public and reflects our commitment to complete transparency towards customers and the public.

2. ABOUT US

ANIMA MEA SRL

Office: Prelungirea Ghencea 147K, 061703, Bucharest, Romania

VAT: RO51415665

Email: contact@animamea.ro

Phone: +40771239915

We are the data operator in the context of GDPR.

For certain services, we are contracting partners, which process data on our behalf.

3. DATA COLLECTION PURPOSES

We only collect the data necessary to provide you with our Services. Depending on your interaction with our infrastructure and team, we may collect:

a. Identification and contact details: name, address, email, phone number

b. Order and delivery data: billing and shipping address, product details, order status

c. Payment data: payment methods, transaction confirmations

d. Account data (if you create one): username, encrypted password, preferences

e. Technical and usage data: IP address, browser, pages visited, cookies

f. Communications with us: information from emails or requests to Customer Service

4. DATA COLLECTION METHODS

a. Directly from you (when you create an account, place an order, or you write us)

b. Automatically from the website (technical data and cookies)

c. From our partners (delivery companies, payment processing providers)

5. LEGAL BASIS FOR DATA PROCESSING

a. Execution of the mutual contract (Art. 6(1)(b) GDPR) – to process and deliver orders, respond to your requests, and manage your account.

b. Legal hold (Art. 6(1)(c) GDPR) – to comply with tax and accounting legislation (invoice archiving)

c. Legitimate interest (Art. 6(1)(f) GDPR) – for fraud prevention, website security, service improvement, and maintaining order history

6. DATA SHARING AND THIRD-PARTY INVOLVEMENT

We do not share your data without defined purposes and do not sell your data to third parties. We may share it only with the following contractual partners, strictly for the purpose of providing the Services:

a. Hostinger International Ltd., as the provider of domain hosting services and the basic technical infrastructure of the website.

b. Netopia Payments - NETOPIA Financial Services S.A., as the payment processor handling transactions and payment confirmations.

c. Sameday - Delivery Solutions S.A., as courier companies responsible for delivering orders.

d. Digital Keez S.R.L., as the provider of accounting and tax reporting services.

Shopify International Ltd. may process your data outside the European Economic Area. In such cases, we ensure that Standard Contractual Clauses (SCC) approved by the European Commission are in place, guaranteeing an adequate level of data protection. You can also verify this yourself by accessing the following article:

https://help.shopify.com/en/manual/privacy-and-security/privacy/international-data-transfers

7. YOUR RIGHTS

In accordance with the General Data Protection Regulation (GDPR), you have the following rights regarding the personal data we process:

a. Right of access – you may request confirmation as to whether we process your personal data and obtain a copy of such data.

b. Right to correction and update – you have the right to request the correction of inaccurate data or the completion of incomplete data.

c. Right to erasure ("right to be forgotten") – you may request the deletion of personal data, under certain conditions provided by law.

d. Right to restriction of processing – you may request that we limit the processing of your data in certain situations.

e. Right to data portability – you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller, where technically feasible.

f. Right to object – you may object to the processing of your data for direct marketing purposes or when the processing is based on legitimate interest.

g. Right to withdraw consent – if you have given your consent for data processing (newsletter subscription), you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

In order to exercise any of the rights above stated, please contact us via email on contact@animamea.ro or by using any other customer support method offered by us and suitable for you. We strive to accommodate any request within 30 days, according to our lawful obligation.

THE RIGHT TO SUBMIT A COMPLAINT

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

In case that you consider that your rights regarding the processing of your personal data have not been respected and our efforts and support were not sufficient, you have the right to file a complaint to The National Supervisory Authority for Personal Data Processing (ANSPDCP).

You can access more information or file the complaint here:

https://www.dataprotection.ro/

SPECIAL NOTES

a. Calendar days = any day of the calendar, regardless of whether it is a public holiday or weekend (Saturday, Sunday).

Example: If you received a parcel today and you have a 14-calendar-day return period, and the next 5 days are non-working days (public holidays or weekend), these 5 days are still counted within your return period.

b. Business days = Monday to Friday, except when these days are public holidays.

Example: If you received a return confirmation today and we specify a 3–5 business-day refund period, and the next 5 days are non-working days (public holidays or including a weekend), these 5 days are not counted, as they are not part of the regular working schedule. We cannot guarantee the availability of our services or support during these days.

c. Any changes to this policy will be announced by publishing the date on which the latest modifications were made. This date also becomes the effective date from which the updated policy applies.

d. You have the right to request a previous version of this policy, provided you present a valid and justified reason.