Privacy policy

1. Introduction

OmnioStore respects the privacy and personal information of customers and website visitors.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit contact@omnio-co.com, place an order or communicate with us.

We process personal information in accordance with the EU General Data Protection Regulation (GDPR) and applicable laws.

2. Data Controller

The data controller is:

OMNIO CO S.R.L.

Romanian tax ID: 54930223

Registered address: Municipiul Timişoara, Jud. Timiş, Strada Virgil Madgearu, Nr. 17, Camera 1, Biroul 5, Ap. 4

Privacy contact: contact@omnio-co.com

Phone: 0724345380

3. Personal Information We Collect

Depending on how you use our services, we may process:

  • Identity information, including first and last name.

  • Contact information, including email address, phone number and address.

  • Purchase details, including purchased items, order values and transaction history.

  • Shipping details, including delivery address, recipient and tracking information.

  • Limited payment information, including payment method, transaction identifiers and payment status.

  • Customer service communications and complaints.

  • Technical information, including IP address, browser, device details and online identifiers.

  • Marketing preferences and cookie consent information.

Complete payment card details are handled by authorized payment service providers rather than being stored directly by us.

4. Purposes and Legal Bases

Order Processing and Fulfillment

We process information to accept orders, arrange payment, deliver goods and manage returns.

Legal basis: performance of a contract or pre-contractual steps.

Legal Compliance

We process information to meet accounting, tax, warranty and consumer protection obligations.

Legal basis: compliance with a legal obligation.

Customer Support

We use personal data to respond to inquiries, complaints and requests.

Legal basis: contractual necessity, legal obligations or legitimate interests, as applicable.

Security and Fraud Prevention

We process information to protect our website, prevent fraudulent transactions and investigate security incidents.

Legal basis: legitimate interests or legal obligations, as applicable.

Marketing Communications

We may send promotional emails or messages where valid consent or another legally permitted basis exists.

Legal basis: consent or, where applicable law allows, legitimate interests subject to the relevant requirements.

Analytics and Personalized Advertising

Where enabled, we may use tools such as Meta Pixel, TikTok Pixel or Google Analytics to measure website and advertising performance.

Legal basis: consent for non-essential storage or access technologies and an appropriate GDPR legal basis for subsequent processing.

5. Sharing Personal Data

We may share relevant information with:

  • Shopify, our e-commerce platform.

  • Payment service providers actually used by our store.

  • Courier and fulfillment partners.

  • IT, security and hosting providers.

  • Analytics and advertising providers, where enabled.

  • Accountants and professional advisers where necessary.

  • Public authorities when legally required.

We share information only where necessary and subject to applicable data protection obligations.

6. Shopify

Our store operates on Shopify, which provides e-commerce infrastructure, order management and integrated store services.

Shopify may process personal data under different data protection roles depending on the service.

More information is available at https://www.shopify.com/legal/privacy.

7. International Data Transfers

Some providers may process personal information outside the European Economic Area.

Where applicable, international transfers are supported by legally recognized safeguards, such as adequacy decisions, Standard Contractual Clauses or other GDPR-compliant mechanisms.

You may request additional information about relevant transfers.

8. Data Retention

We retain personal data only for as long as necessary for the relevant purposes.

Financial and accounting information is kept for the retention periods required by applicable law.

Order, warranty and complaint information is retained as necessary to perform contracts, comply with legal obligations and establish or defend legal claims.

Consent-based marketing information is retained until consent is withdrawn or the applicable retention period expires.

Technical information is retained according to security requirements and the retention settings of the relevant tools.

You may request additional information about applicable retention periods at contact@omnio-co.com.

9. Your GDPR Rights

Subject to applicable conditions, you may have the following rights:

  • Access to your personal data.

  • Rectification of inaccurate data.

  • Erasure of personal data.

  • Restriction of processing.

  • Data portability.

  • Objection to certain processing.

  • Withdrawal of consent at any time, without affecting previous lawful processing.

  • Protection regarding certain solely automated decisions.

  • Lodging a complaint with a supervisory authority.

Romania's data protection supervisory authority is ANSPDCP: https://www.dataprotection.ro.

To exercise your rights, contact contact@omnio-co.com.

We respond within the time limits required by GDPR, normally within one month, subject to legally permitted extensions.

10. Cookies and Tracking

Our website uses technologies necessary for its operation and may, subject to applicable consent requirements, use analytics, personalization and advertising technologies.

Further information is available in our Cookie Policy and cookie preference controls.

11. Marketing Preferences

You may unsubscribe from marketing communications using the unsubscribe link in the message or by contacting contact@omnio-co.com.

Unsubscribing does not prevent necessary transactional communications regarding your orders.

12. Data Security

We implement appropriate technical and organizational measures to protect information from unauthorized access, loss, disclosure or alteration.

However, no internet transmission method can guarantee absolute security.

13. Children

Our website is not specifically intended for children.

We do not intentionally collect children's personal data outside circumstances permitted by applicable law.

14. Policy Updates

We may update this Privacy Policy to reflect changes in our operations, data processing or applicable legislation.

The latest version will be published on our website.

15. Contact

For privacy inquiries:

OMNIO CO S.R.L.

Email: contact@omnio-co.com

Address: Municipiul Timişoara, Jud. Timiş, Strada Virgil Madgearu, Nr. 17, Camera 1, Biroul 5, Ap. 4