Papetelle (a brand of Method Print Atelier SRL.) uses information from your interactions and from certain third parties to achieve its goal of providing relevant and high-quality products and services.

Respecting the privacy rights of online visitors and protecting the information collected about our visitors and/or customers are very important aspects for us, and we process this data responsibly.

The Privacy Policy informs you about:

The type of information we collect and how this collection is done;
The purposes for which we collect and use this information;
Your rights and options regarding our use of your data;
How your data is processed and to whom it is or may be transferred;
How long we store your information, etc.
Please read it carefully, and if you do not agree with it, you always have the option not to use the site or purchase our services or goods.

We reserve the right to periodically update and modify this Privacy Policy to reflect any changes in how we process your personal data or any changes in legal requirements. In case of a modification, we will display the modified version of the Privacy Policy on our website. Therefore, please check the content of this Privacy Policy periodically.

Definitions
Personal Data: Any information regarding an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number (e.g., CNP, ID card, passport, etc.), location data, an online identifier (such as an IP address), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person. Examples of data not considered personal data: company registration code; a general business email address, such as in**@*****ny.com; as well as anonymized data (irreversibly).

By “processing,” we mean any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, dissemination or otherwise making available, aligning or combining, restricting, erasing, or destroying.

Who We Are and How to Contact Us
Papetelle is a brand of Method Print Atelier SRL, a Romanian legal entity with its headquarters in Timișoara, str. Moldovei nr. 22, registered with the Trade Register under no. J35/2567/2018, fiscal registration code RO39674156 (hereinafter referred to as “Papetelle”, “Method Print Atelier SRL”, or “we”). For the purposes of data protection legislation, we are the data controller when we process your personal data.

Papetelle has not designated a Data Protection Officer (DPO) as we do not meet the criteria that mandate such an appointment. If you have questions or concerns about privacy or any queries regarding the personal data you have provided to us, please contact us at any time using the contact form or by direct email at hello(at)papetelle.com.

What Categories of Personal Data We Process
The categories and methods through which we collect and store information, including personal data, depend on how our website and related services are used. Generally, we collect your personal data directly from you, ensuring you have control over the type of information you provide. We do not collect sensitive data about you. Additionally, we do not wish to collect or process data from minors under the age of 16.

Data Collected from Your Interaction with Our Website (Cookies, Analytics)

Various technologies/services may be used on our website to enhance its performance, make it easier and faster for visitors to use, and ensure its efficiency and security. Such technologies/services may automatically collect personal data either by us or by third parties on our behalf. Examples of such technologies/services include cookies, web audience measurement services, and user interaction tracking with the site.

1.1 Audience Measurement and Tracking User Path/Interaction with Our Site

When you visit our website, data is sent from your browser to the server where it is hosted and to providers of traffic analysis and tracking services of your interaction with the site. This data allows us to optimize our services and improve your experience on the site. The data is collected automatically and stored by us or by third parties on our behalf. Below, in the section “To Whom We Transmit Your Personal Data,” all third parties are listed. These may occasionally change, and their updated list is always included in this Policy.

The data about the actions and navigation paths of visitors to our site may include the following:

The visitor’s IP address (anonymized in Google Analytics but fully available in the case of fraudulent attempts to compromise site security through implemented security systems)
The date and time of the visit
The referral URL (the site from which the visitor was redirected)
The pages visited and the user’s path on our site
Information about the browser used (type, version, operating system, etc.)

1.2 Cookie Files

Our website uses cookie files. Please read the “Cookie Usage Policy” section for more details about our use of cookies and the privacy policies of third parties from whom we use web analysis tools or from whom we have integrated extensions on our site.

1.3 Retargeting Services

Our site occasionally uses retargeting services/technologies provided by third parties. This allows us to promote directly and personally to visitors to our site who were already interested in our products and/or services.

2. Data Provided Directly by You

Note: If you provide personal data of another person, please ensure you have the right to disclose that information to us.

2.1 Personal Data: name, surname, postal address, images, billing information, phone number, email address, IBAN number (in case of a return request from the client, under the law) etc. Banking data (cardholder name, card number, CCV) are collected securely by the online payment processor. We do not have access to or process these data.

2.2 Information Provided to Us through Third Parties Such as Facebook, Google, and WeChat/ManyChat/etc.

2.3 Any Other Data Explicitly Entered by You When Contacting Us, Writing a Comment on the Site, Providing Feedback/Reviews, or Placing an Order.

Purposes and Legal Basis of Data Processing
For providing services / executing and delivering the ordered products, for your benefit:

Processing orders (receiving, validating, producing, shipping, and invoicing them)
Resolving any issues related to an order, the contracted/purchased products, or services
Returning products and refunding their value according to legal provisions and internal policies
Ensuring support services (responding to your questions)
Thus, the primary purpose of data collection and processing is to conclude and execute the commercial contract between us and you and to respond to your requests. Certain processing activities and the minimum data retention period are mandated by current legislation, especially fiscal/accounting laws.

For improving our website and services

We aim to offer you the best experience on the site and during and after the conclusion of the commercial contract. Therefore, we collect data about how you interacted with our website (Analytics, Cookies) and may invite you to complete short satisfaction/feedback surveys after a transaction.

Marketing and internal analysis for optimizing marketing efforts

We may use retargeting technologies and a newsletter service in our online marketing efforts on platforms like Google, Facebook, Instagram to target people interested in our products/services (those who visited our site).

Protecting our legitimate interests

There may be situations where we process and transmit information to protect our rights and business activities by taking measures to protect the site against cyber-attacks, prevent fraud attempts, or other malicious actions (including transmitting information to competent authorities in such situations) or manage potential risks to us.

To Whom We Transmit Your Personal Data
We may transmit or provide access to certain personal data to the following third parties:

Our collaborator providing accounting services
Providers of online/banking payment services
Providers of courier services
Providers of marketing services
Providers of marketing platforms/technologies: Facebook (Ads), Google (Ads)
Providers of web analytics platforms/technologies: Google (Analytics), HotJar
IT service providers (including hosting, CDN, security, etc.)
Privacy Policies of Key Providers:

Facebook: https://www.facebook.com/about/privacy/
Google: https://www.google.com/intl/en/policies/privacy/
HotJar: https://www.hotjar.com/privacy
Unless: https://unless.com/en/legal/privacy/
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to competent public authorities.

In Which Countries We Transfer Your Personal Data
Primarily, data processing is carried out in Romania, where we operate. Occasionally, some of your personal data may be transferred to entities located in the European Union or outside the EU, in the United States. Third parties outside the country that may have access to data include IT or marketing service providers: Google, Facebook, HotJar. 

We will always take all possible measures to ensure that any international transfer of personal data is managed with great care and that your rights are protected.

How We Protect Your Personal Data
For payments, we use Stripe. Any payment information is encrypted using the latest algorithms. Invoices are issued using Smartbill. 

On the site, we use HTTPS encryption protocol, store data on secure servers, and, in addition to the backup provided by the hosting service provider, maintain additional cloud backup (Dropbox/Google). For email communication, we use the dedicated and specialized services offered by Google Suite.

All our samples have fictitious data. We will never send samples with your data, even if we have a few leftover products from production (invitations, business cards, etc.). We will strive to ensure that the images published on the site or social media channels do not clearly show all your data, but we cannot make guarantees in this regard. If you desire complete anonymity, please let us know, and we will not publish any image of your products where personal data is legible.

Furthermore, we ensure that your data is processed to the minimum necessary for the declared purposes and as responsibly as possible. However, despite all the measures taken to protect your personal data, we draw your attention to the fact that, unfortunately, transmitting any information over the Internet or other public networks, intranets, is not completely secure, and there is a risk that data may be viewed and used by unauthorized third parties. We cannot be held responsible for situations or vulnerabilities of systems that are not under our control. Any transmission of information is at your own risk. Once we receive your information, we will use security procedures and features to try to prevent unauthorized access.

How Long We Store Your Personal Data
The storage period will be determined by legislative requirements, especially fiscal/accounting, and internal policies.

For customers who have purchased goods or services, invoices, and the necessary billing data cannot be destroyed before the legal term expires (supporting documents that form the basis of financial accounting records are kept in the archive for 10 years, starting from the date of the end of the financial year in which they were created).

For visitors/users who have interacted with the site or communicated with us without becoming customers, we aim to store the data for 3 years, but we do not guarantee the accuracy of this period. Exceptions are visitors/users who have attempted to jeopardize the site’s security, commit fraud, or had any other intentions to affect our legitimate interests, in which case we assume the possibility of storing the available data for as long as Method Print Atelier SRL is active, regardless of any changes in its administration.

What Rights Do You Have
If you provide us with personal data through our website or other channels, you do so voluntarily. If you choose not to provide the requested information, certain facilities or benefits aimed at customers may not be available. Only individuals who have provided the necessary personal data can order products or services, as we cannot process an order without having all the necessary data for billing, production, delivery, and, if applicable, graphic customization.

According to Regulation No. 679/2016, you have the following rights:

Right of Access
You can ask us to confirm whether we process your personal data, provide you with a copy of these data, and offer other details about the information we hold and process, to the extent that the information has not already been provided through this notice.

Right to Rectification
You have the right to request the correction or completion of your stored personal data. To do this, send your request to office(at)lunapaperie.ro. If your identity is not clear, we will ask for additional data to verify the accuracy of the information before making any changes.

Right to Erasure (“Right to be Forgotten”)
You can ask us at any time to delete your personal data, but only if:

they are no longer necessary for the purposes for which they were collected;
you have withdrawn your consent (if the processing was based on consent and not on legitimate interest or for concluding the commercial contract for goods/services);
they were processed illegally;
we have a legal obligation to do so.
Please note that we are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary to comply with legal obligations or for the establishment, exercise, or defense of a legal claim.
Right to Restriction of Processing
You can ask us to restrict the processing of your personal data if:

you contest the accuracy of the data, for a period that allows us to verify the accuracy of the data;
the processing is illegal, but you oppose the deletion of personal data, requesting instead the restriction of their use;
we no longer need the personal data for processing purposes, but you request them for the establishment, exercise, or defense of a legal claim;
you have objected to the processing, for the period in which it is verified whether our legitimate rights prevail.
If the processing was restricted under Article 21, paragraph (1) of Regulation No. 679/2016, such personal data may be processed with the consent of the data subject (you) or for the establishment, exercise, or defense of a legal claim or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Right to Object
At any time, you have the right to object, for reasons related to your particular situation, to the processing of your personal data. We will no longer process your personal data unless we have legitimate and compelling reasons that justify the processing and prevail over your interests, rights, and freedoms, or the purpose is to establish, exercise, or defend a legal claim.
When the processing of personal data is for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you, including profiling, to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for this purpose as soon as possible.

Right to Data Portability
You can ask us to provide your personal data in a structured, commonly used, and machine-readable format that can be “ported” directly to another data operator if:

the processing is based on your consent or on the conclusion or execution of a commercial contract with you, and the processing is carried out by automated means.
Complaints
You have the right to file a complaint with the supervisory authority regarding the processing of your personal data.

Without affecting your right to contact the National Authority for Supervision at any time, we ask you to contact us in advance, and we assure you that we will make all efforts necessary to resolve any issue amicably.

You can contact us at any time using the contact form on the site, by direct email at hello(at)papetelle.com, or by mail/courier at the address Str. Gheorghe Asachi 13, Timișoara, Timiș.

Cookie and Similar Technologies Policy

This policy refers to cookies and similar technologies used, as applicable, on the papetelle.com website, operated by Method Print Atelier SRL, hereinafter referred to as “we,” “our site,” or “this site.”

Cookies and similar technologies on this site are set by us or by the third parties we choose to use as providers.

What Are Cookies and What Are They Used For?
In this context, a cookie is a small file made up of letters and numbers that will be placed by the internet browser and stored on the computer, mobile terminal, or other equipment used by the user to access the internet.

The main role of the cookie is to notify the site that the user has returned. By retaining browser settings, information, and the authentication system, the user benefits from a service-oriented site optimized to be more relevant, easy, and pleasant to use. This identification is extremely useful, especially on websites where real-time user data is very important. For example, when using an online store, you couldn’t buy anything without the help of cookies. Stores would not be able to identify you and attribute a shopping cart without them because each time you load a new page, the store would see you as a new user and create a new cart.
Cookies are also frequently used in establishing aggregated anonymous statistics that help us better understand how users interact with the pages of our site, allowing us to improve the structure and content of the site without allowing the personal identification of the visitor.

What Types of Cookies Do We Use?
We use the following types of cookies:

Strictly Necessary Cookies;
Performance Cookies;
Functionality Cookies;
Analytical and Marketing Cookies.
How Can You Avoid and/or Delete Cookies?
Most browsers accept cookies by default, but you can change your browser settings to not accept cookies or to delete cookies from your system. Most browsers also allow a “private” mode in which cookies are always deleted after a visit.

Depending on the browser you use, the settings for cookies have different names. The most common browsers are indicated below:

Google Chrome

Click on the menu button (three horizontal dots) located in the top right corner of your browser window and select “Settings” then “Show advanced settings.”
Locate the “Privacy” title and select “Content settings.”
Now select “Allow local data to be set.”
Safari on OS X

Click on “Safari” at the top of your browser window and select the “Preferences” option.
Click on “Privacy.”
Select “Allow from the websites I visit.”
Mozilla Firefox

Click on the menu button (three horizontal bars) located in the top right corner of your browser window and select “Options.”
Then select the “Privacy” icon.
Click on “Cookies,” then select “allow sites to set cookies.”
Microsoft Edge

Click on the “Settings” icon (which looks like a gear) located in the top right corner of your browser window and select “Internet options,” then click on the “Privacy” button.
Ensure that the Privacy level is set to Medium or lower, which will enable cookies in your browser.
Setting the privacy level above Medium will disable cookies.
Please read the “Help” section of your browser for more information on how to set the “private” mode or delete cookies. You can visit our site even if your browser is in “private” mode, but the experience may not be optimal, and some functionalities may not be available.

Useful Links
If you want to learn more about cookies and what they are used for, we recommend the following links:

Microsoft Cookies guide
All About Cookies
Your Online Choices
Third-Party Services Implemented Now or in the Near Future on Our Site That Use Cookies or Similar Technologies
Google Analytics

Category: Analysis
Purpose: Web analytics
Policies: https://www.google.com/analytics/terms/gb.html, https://support.google.com/analytics/answer/6004245
Google AdWords

Category: Advertising
Purpose: Remarketing
Policies: https://policies.google.com/privacy, https://policies.google.com/technologies/ads
Hotjar

Category: Analysis
Purpose: Web analytics
Policies: https://www.hotjar.com/legal/policies/privacy
Facebook

Category: Advertising
Purpose: Remarketing
Policies: https://www.facebook.com/privacy/explanation
Unless

Category: Personalization
Purpose: Personalization
Policies: https://unless.com/en/legal/privacy