Legal
Privacy Policy
Last updated: 11 October 2026
This Privacy Policy explains what personal data we collect when you visit or shop on shop.boravision.com (the “Site”), why we collect it, who we share it with and what rights you have. It follows the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Romanian data protection law.
1. Who we are#
The controller of your personal data is BORAVISION SRL, a company registered in Romania (Trade Register no. J12/3312/2023, EUID ROONRC.J12/3312/2023, tax ID (CUI) 48577802), with its registered office at [To confirm: registered office address].
You can contact us about anything in this policy: – Email: Boravision@yahoo.com – Phone and WhatsApp: +40 744 407 779, daily 10:00–19:00 – Contact form: shop.boravision.com/support/
2. What data we collect#
- Contact and delivery data: name, email address, phone number, billing and delivery address.
- Order data: products bought, prices, order number, delivery details, returns, refunds and invoices.
- Payment data: payment method and payment status. Card and wallet payments are handled by Stripe. We do not receive or store your full card number. For refunds on cash-on-delivery orders, we collect the bank account (IBAN) you give us.
- Account data: if you create an account, your username, password (stored in encrypted form) and order history.
- Communication data: messages you send us by email, WhatsApp, phone or the contact form, including complaints and withdrawal notices.
- Newsletter data: your email address and your subscription status, if you sign up to our “Stay in the game” newsletter.
- Technical and usage data: IP address, browser and device type, pages visited, how you arrived at the Site and how you use it. Some of this is collected through cookies. Analytics and marketing cookies are used only if you agree. See our Cookie Policy.
We collect most of this data directly from you. We receive payment status and fraud-check results from Stripe, and delivery status from our couriers.
3. Why we use your data and our legal basis#
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Processing and delivering your order, handling payment, returns and refunds | Contact, delivery, order and payment data | Performance of a contract (Art. 6(1)(b)) |
| Customer account | Account data | Performance of a contract (Art. 6(1)(b)) |
| Answering your questions and complaints | Communication data, order data | Performance of a contract (Art. 6(1)(b)) and our legitimate interest in providing good service (Art. 6(1)(f)) |
| Invoicing, accounting and tax | Order and invoice data | Legal obligation (Art. 6(1)(c)) |
| Handling withdrawals, warranty and legal guarantee claims | Order and communication data | Legal obligation (Art. 6(1)(c)) and performance of a contract (Art. 6(1)(b)) |
| Preventing fraud and keeping the Site secure | Technical data, order and payment data | Legitimate interest in protecting our business and customers (Art. 6(1)(f)) |
| Sending our newsletter | Newsletter data | Your consent (Art. 6(1)(a)) |
| Analytics: understanding how the Site is used | Technical and usage data, through cookies | Your consent (Art. 6(1)(a) GDPR and Romanian Law 506/2004) |
| Advertising: measuring and improving our ads | Technical and usage data, through cookies | Your consent (Art. 6(1)(a) GDPR and Romanian Law 506/2004) |
| Establishing or defending legal claims | Relevant order and communication data | Legitimate interest (Art. 6(1)(f)) |
You need to give us your contact, delivery and payment details to place an order. Without them we cannot complete it. Signing up to the newsletter and accepting analytics or marketing cookies are always optional.
We do not use your data for decisions based solely on automated processing that have legal or similarly significant effects on you.
4. Newsletter#
If you sign up to our “Stay in the game” newsletter, we send you emails about new editions, offers and news. Every email has an unsubscribe link. You can also unsubscribe by emailing us. Unsubscribing does not affect any emails we sent before.
Our newsletter is sent using [To confirm: newsletter tool or provider].
5. Who we share your data with#
We share your data only when needed, with: – Hosting provider: [To confirm: hosting provider name], which hosts the Site and its database on servers in the EU. – Email providers: our email inbox is provided by Yahoo, and order emails are sent through [To confirm: provider used to send order emails]. – Couriers: our courier partners (for example FedEx) receive your name, delivery address, phone number and email address so they can deliver your parcel. For cash-on-delivery orders, they also collect payment. – Payment provider: Stripe processes card and wallet payments. Stripe also acts as an independent controller for some purposes, such as fraud prevention and meeting its own legal obligations. See Stripe’s privacy policy. – Google: if you consent, Google Analytics and Google Ads receive usage data through cookies. See Google’s privacy policy. – Meta: if you consent, the Meta Pixel sends usage data to Meta Platforms Ireland Ltd. We and Meta are joint controllers for collecting and sending this data. Meta is responsible for what it does with the data afterwards. See Meta’s privacy policy. – WhatsApp: if you contact us on WhatsApp, your messages are handled by WhatsApp, which is part of Meta. – Accounting: our accountant or accounting software provider, [To confirm: accountant or invoicing software]. – Authorities: the Romanian tax authority (ANAF), including through the RO e-Factura system where the law requires it, and other public authorities or courts when the law requires us to.
Our service providers process data only on our instructions, under contracts that protect your data. We do not sell your personal data.
6. Transfers outside the European Economic Area#
Some providers, or their group companies, are based in the United States or other countries outside the European Economic Area (EEA): – Google (USA): relies on the EU–US Data Privacy Framework. – Meta (USA): relies on the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses. – Stripe (USA): relies on the EU–US Data Privacy Framework and Standard Contractual Clauses. – Yahoo (USA): [To confirm: safeguard Yahoo relies on, e.g. EU–US Data Privacy Framework].
If you order delivery to an address outside the EEA, we and our couriers must send your delivery details to that country to deliver your order.
You can ask us for more information about these safeguards.
7. How long we keep your data#
| Data | How long |
|---|---|
| Invoices and accounting records | 10 years from the end of the financial year, as Romanian accounting law requires |
| Order data not needed for accounting | For as long as needed to handle the order, returns and guarantee claims, and then up to 3 years (the general limitation period under Romanian law) |
| Customer account | Until you delete the account or ask us to delete it |
| Newsletter | Until you unsubscribe |
| Messages and complaints | Up to 3 years after the matter is closed |
| Refund bank details (IBAN) | Until the refund is made, and then as part of the accounting records |
| Cookies | As shown in our Cookie Policy |
8. Your rights#
You have the right to: – access your personal data and get a copy; – correct data that is wrong or incomplete; – delete your data, when there is no longer a valid reason for us to keep it; – restrict how we use your data in certain cases; – data portability: receive the data you gave us in a common, machine-readable format, or have it sent to another company; – object to processing based on our legitimate interests, and to direct marketing at any time; – withdraw your consent at any time, for the newsletter or for cookies. This does not affect processing before you withdrew it.
To use these rights, contact us at Boravision@yahoo.com. We will reply within one month. We may ask you to confirm your identity first. You can change your cookie choices at any time through the cookie settings link on the Site.
9. Your right to complain#
If you think we have handled your data unlawfully, you can complain to the Romanian data protection authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, Romania
Website: www.dataprotection.ro
You can also complain to the data protection authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first, so please contact us.
10. Security#
We use reasonable technical and organisational measures to protect your data, including an encrypted (HTTPS) connection, encrypted password storage and access limited to people who need it.
11. Children#
The Site is for adults. We do not knowingly collect data from anyone under 18.
12. Changes to this policy#
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will tell you on the Site or by email.