Privacy Policy

The privacy policy aims to provide information regarding the collection, use, and disclosure to third parties of personal data gathered through the WWW.LUNAAWELL.COM website, owned by LUNAAWELL SRL.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), LUNAAWELL SRL is obliged to process, under secure conditions and solely for the purposes specified below, the personal data you provide about yourself, a family member, or another person.

LUNAAWELL SRL undertakes to keep confidential the personal data provided by you through the WWW.LUNAAWELL.COM website via contact forms, email, or phone, as provided on the site.

WHAT INFORMATION DO WE COLLECT AND WHY?

Personal data is stored solely to facilitate communication and respond to your messages.
Depending on the user’s interaction with our site, we collect the following types of data:

(1) Data provided directly by the user:

• First and last name
  

• Shipping and/or billing address
  

• Email address
  
  Phone number
  

• Information about placed orders and returns
  

(2) Automatically collected data:

• IP address

• Browsing data (cookies, visited pages, session duration)

• Device information (operating system, browser type)
  

(3) Data collected from third parties (if applicable):

• Information obtained from social accounts used for login (e.g., Facebook, Google)
  

• Data provided by commercial partners for order processing
  

HOW IS THE DATA COLLECTED?

Personal data is collected through the following communication channels:

• Contact forms on the WWW.LUNAAWELL.COM
  

• Checkout form on the WWW.LUNAAWELL.COM
  

• Email address: hello@lunaawell.com
  

LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

The processing of personal data by WWW.LUNAAWELL.COM is done in strict accordance with GDPR and applicable national legislation, based on the following legal grounds:

1. Contract performance (Art. 6(1)(b) GDPR) – necessary to provide the requested services.
   

2. User consent (Art. 6(1)(a) GDPR) – for marketing, personalized advertising, or other voluntary purposes.
   

3. Legal obligation (Art. 6(1)(c) GDPR) – compliance with national or EU regulations.
   

4. Legitimate interest (Art. 6(1)(f) GDPR) – service improvement, cybersecurity, and fraud prevention.
   
   

USER RIGHTS

As a user of the website, you have the following rights regarding your personal data:

• Right to information and access (Art. 15 GDPR) – Request information about the data we hold about you
  

• Right to rectification (Art. 16 GDPR) – Request the correction of inaccurate data
  

• Right to erasure (“right to be forgotten”) (Art. 17 GDPR) – Request deletion of data no longer needed
  

• Right to restriction of processing (Art. 18 GDPR) – Request to limit processing in certain cases
  

• Right to data portability (Art. 20 GDPR) – Request transfer of your data to another controller
  

• Right to object (Art. 21 GDPR) – Object to processing for direct marketing purposes
  

• Right not to be subject to automated individual decisions, including profiling
  

• Right to lodge a complaint with the Romanian DPA (ANSPDCP)
  

• Right to seek justice if you believe your rights have been violated
  
  

You can exercise these rights by sending an email to: hello@lunaawell.com

WHO HAS ACCESS TO YOUR PERSONAL DATA

We do not sell or share users' personal data with third parties. However, to operate efficiently, data may be shared with:

• Payment service providers (e.g., online payment processors)

• Courier companies (e.g., for delivery)
  

• IT service providers (e.g., hosting, security)
  

• Public authorities (when legally required)
  
  

All our partners comply with GDPR and ensure user data protection.
As part of website management, we have implemented technical and organizational measures to ensure an adequate level of security for data storage and processing.
In case of a data breach, we will notify users and the competent authorities in accordance with Article 33 of the GDPR.

DEVICE DATA

We automatically collect data related to your visit, which may include: device type (smartphone, tablet, laptop), location, IP address, hardware specs, time and date of website use, screen resolution, operating system, and browser type.
Device/browser/screen resolution data is automatically collected via Google and is used by us to optimize website display for various device types. This data is anonymous and cannot be used to personally identify you.

We reserve the right to update this policy to reflect legal or internal changes.

Last updated: 26.11.2025