Privacy Policy

1. Data controller

Georgela-Mariana Cucuiet, Greuner Brook 1, 21271 Hanstedt, Deutschland. Contact: office@cleosdeco.com, +49 1512 0734697.

2. What we collect and why

We process personal data only for the purposes listed below, on the legal bases of GDPR Art. 6(1)(b) (contract performance), 6(1)(c) (legal obligation) and 6(1)(a) (consent).

• Order processing — name, shipping address, email, phone, order details. Kept for 10 years for tax law (German HGB / AO).
• Account — username, email, password (hashed). Kept until account deletion.
• Custom commission requests — contact details, brief, optional reference image. Kept for 24 months after last contact.
• Newsletter — email and language. Only with explicit opt-in. Unsubscribe link in every message.
• Server logs — IP, request URL, timestamp. Kept maximum 14 days for security.

3. Cookies

We only use technically necessary cookies (session, language, cart). No tracking, no advertising cookies. See the Cookie Policy for details.

4. Recipients

Data is shared only with processors acting on our behalf (hosting, payment service provider, shipping carrier) under contracts compliant with GDPR Art. 28. We do not sell or rent personal data.

5. International transfers

Hosting takes place inside the EU. If a processor uses sub-processors outside the EU, it is on the basis of the European Commission's Standard Contractual Clauses.

6. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing (GDPR Art. 15–22). You may withdraw consent at any time. To exercise a right, write to office@cleosdeco.com.

7. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority — for example, the data protection authority of your federal state in Germany or the Romanian ANSPDCP for residents in Romania.

8. Children

Our shop is intended for adults. We do not knowingly process data of children under 16.