This Privacy Policy describes how we collect, use, store, and protect the personal data of visitors and clients of the CoroaneFunerareRomânia.ro platform.
Access to and use of our services are subject to compliance with this policy and the commercial Terms and Conditions.
In accordance with Regulation (EU) 2016/679 (GDPR), the processing of personal data necessary for processing and delivering orders is carried out on the legal basis of executing a distance contract. Consent for marketing communications (newsletters or special offers) is given separately, voluntarily, and unambiguously.
The customer is obligated to provide correct and complete information required for delivery (such as the address of the chapel, church, cemetery, or private residence, and a valid contact phone number). The provider cannot be held liable under any circumstances for inconveniences caused by the customer providing incorrect or incomplete information.
In the event of force majeure, the fulfillment of contractual obligations will be postponed for the duration of the event, pursuant to applicable law.
Any misunderstanding or dispute arising from the use of the service shall first be settled amicably. Otherwise, jurisdiction belongs to the competent judicial courts in Romania.
The online services are provided and operated through the legal entities within the group, acting as data controllers:
S.C. OK FLORA WEB S.R.L. (for orders fulfilled in Bucharest and Ilfov county)
Tax ID (CUI): 48412553 | Trade Register No.: J40/12027/2023
Registered Address: Bucharest, Sector 2, 46 Cernăuți street, bl. A15, entrance 2, 8th floor, apt. 105
OK FLORA FLOWERS S.R.L. (for orders fulfilled in the rest of the country)
Tax ID (CUI): 51258242 | Trade Register No.: J2025008787003
Registered Address: Bucharest, Sector 2, 46 Cernăuți street, bl. A15, entrance 2, 8th floor, apt. 105
For any questions or to exercise your GDPR rights, you may contact our Data Protection Officer (DPO) via:
E-mail: order@coroanefunerareromania.ro
Mail / Courier: Bucharest, Sector 4, 302 Calea Văcărești, marked: “Attn: Data Protection Officer”.
We only process personal data that is strictly necessary for providing funeral and memorial floral services. Collected data types include:
Full name (of the account holder placing the order and of the recipient/contact person);
Delivery address (private residence, church, chapel, or cemetery);
Phone number and email address;
Billing details and transactional information (sensitive banking details are processed directly by authorized payment gateways and are never stored on our servers);
Username and password (when creating a customer account);
Custom message text for the funeral ribbon or condolence card.
Note: We do not collect or otherwise process special categories of sensitive data (such as health data, ethnic origin, religious beliefs, or political opinions).
Order processing, invoicing, and delivery:
Legal Ground: Execution of a distance contract (Art. 6(1)(b) GDPR) and compliance with statutory fiscal obligations.
Retention: Invoicing and order data are stored for 10 years, pursuant to mandatory statutory requirements under Romanian fiscal and accounting law. Customer account data is retained until account closure or deletion requested by the user.
Service optimization and customer support:
Legal Ground: Our legitimate interest (Art. 6(1)(f) GDPR) to provide prompt services, confirm order details (including sending live photo proof via WhatsApp/Viber), and handle customer requests.
Marketing communications (Newsletters / Special Offers):
Legal Ground: Prior, explicit consent of the customer (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via an unsubscribe link or by sending an email.
Security and fraud prevention:
Legal Ground: Legitimate interest and statutory obligations to secure the website against cyber threats.
To fulfill our services, your data may be shared strictly under confidentiality agreements with:
Specialized courier and local delivery service providers;
Local partner florists (exclusively for orders fulfilled outside Bucharest/Ilfov);
Authorized payment service providers (PayU, PayPal, banking institutions);
IT service, web hosting, and communication (email/SMS) service providers;
Public authorities, strictly when required by statutory legal obligations.
As a data subject, you benefit from the following rights, which you can exercise free of charge:
Right of access: You may request confirmation and a copy of your personal data being processed.
Right to rectification: You may request the correction or completion of inaccurate data.
Right to erasure (“right to be forgotten”): You may request the deletion of your data, except for information we are legally obligated (fiscal/accounting) to retain.
Right to restriction of processing: You may request the temporary restriction of processing under conditions specified by law.
Right to data portability: You may receive your data in a structured, machine-readable format to transfer to another data controller.
Right to object: You can object at any time to processing based on direct marketing or our legitimate interest.
Right not to be subject to automated decision-making.
Right to lodge a complaint: You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania (28-30 B-dul G-ral. Gheorghe Magheru, Sector 1, Bucharest, email: anspdcp@dataprotection.ro).
The standard timeframe to respond to requests regarding your rights is a maximum of 30 days.
By checking the relevant consent boxes during checkout or by submitting contact forms on the website, you confirm that you have read, understood, and agreed to this Privacy Policy.