Mustala Atelier
🛒
HomeShopShoe RepairsAbout usContact

Privacy Policy (GDPR)

Last updated: 16 September 2026

1. Introduction

Mustala Atelier ("we") respects your privacy and is committed to protecting the personal data you provide to us. This policy describes how we collect, use, and protect your information in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and applicable national legislation.

2. Who We Are

Data Controller: Mustala Atelier
Registered Office: Bucharest, Romania
Email: contact@mustala.ro

3. What Data We Collect

We collect the following categories of personal data:

  • Identification data: first name, last name
  • Contact data: email address, phone number, delivery and billing address
  • Transaction data: order history, purchased products, amounts paid
  • Browsing data: IP address, browser type, pages visited, session duration (via cookies)
  • Communication data: messages sent through the contact form or email

4. Purpose of Data Processing

We process your data for the following purposes:

  • Contract performance: order processing, product delivery, invoicing, customer support
  • Legal obligations: accounting, tax reporting, archiving
  • Legitimate interest: service improvement, traffic analysis, fraud prevention
  • Consent: newsletter, direct marketing, non-essential cookies

5. Legal Basis for Processing

We process data based on the following GDPR legal bases:

  • Art. 6(1)(b) — Contract performance: for order processing and delivery
  • Art. 6(1)(c) — Legal obligation: for invoicing and tax reporting
  • Art. 6(1)(f) — Legitimate interest: for service improvement and security
  • Art. 6(1)(a) — Consent: for marketing and non-essential cookies

6. Your Rights

Under the GDPR, you have the following rights:

  • Right of access — you can request a copy of the data we hold about you
  • Right to rectification — you can correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") — you can request deletion of data under certain conditions
  • Right to restriction of processing — you can request limits on how we use your data
  • Right to data portability — you can receive your data in a structured, machine-readable format
  • Right to object — you can object to processing for direct marketing purposes
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

7. Storage Period

We retain your data only as long as necessary for the stated purposes:

  • Order and invoicing data: 10 years (tax obligation)
  • Account data: until account deletion or 3 years of inactivity
  • Marketing data: until consent withdrawal
  • Cookies: according to our Cookies Policy

8. Data Security

We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, restricted data access, encrypted passwords, periodic security audits.

9. Sharing Data with Third Parties

We do not sell or rent your data. We share data only with:

  • Payment processors: Stripe (for card payments)
  • Couriers: for order delivery
  • Hosting and email providers: for technical infrastructure
  • Authorities: when required by law

All partners are carefully selected and contractually obligated to protect data in accordance with the GDPR.

10. International Data Transfers

Your data may be processed outside the European Economic Area. In such cases, we ensure adequate safeguards are in place (standard contractual clauses, adequacy decisions).

11. Contact for GDPR Requests

To exercise your rights or ask questions about this policy:

  • Email: contact@mustala.ro
  • Address: Mustala Atelier, Bucharest, Romania

You also have the right to lodge a complaint with the supervisory authority:

Last updated: September 2026