EuropePrivacy Policy
Last updated: 3 October 2026
This policy explains what personal data Stayve Europe collects when you visit this website, send us a request or place an order, why we use it, how long we keep it and what rights you have. It is written in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the ePrivacy Directive (2002/58/EC) and the Romanian laws that implement them.
This website is currently a preview hosted at https://stayve-europa.com. No card is charged on the preview; orders placed here are sent to us as a request, as explained below.
1. Who is responsible for your data
The data controller is the company that operates the Stayve Europe shop:
- ZIEGERT SRL, Str. Sfântul Petru Tei nr. 59, Sector 2, Bucharest, Romania · CUI RO35793880 · Trade Register J40/3733/2016
- Privacy requests: through the contact form on our Contact page, or in writing at the registered office above.
No Data Protection Officer is listed; all privacy requests go to the controller at the address above.
In this policy, “we”, “us” and “our” refer to this controller.
2. What data we collect
2.1 When you browse the website
Like every website, our server automatically records technical data needed to deliver the pages and keep the site secure: your IP address, the date and time of the request, the page requested, the browser and operating system you use and the referring page. We do not use this data to identify you.
Your browser also stores a few items locally on your device (your cookie choice and the contents of your cart). These are described in our Cookie Policy.
2.2 When you place an order
You can order without creating an account. To process an order we ask for:
- first and last name;
- email address and phone number;
- delivery address and, if different, billing address;
- for business customers: company name, registration number, VAT ID and billing address;
- the products ordered, quantities, prices and any notes you add;
- if relevant, information confirming that you are a trained professional for products intended for professional use.
On the preview, the order is sent to us as a message via WhatsApp or through the contact form. In that case the data you include in the message is also processed by the messaging service you choose (see section 5).
2.3 Payment data
Card payments are processed by Stripe. On the Stripe payment page you enter your card details, your email address, name, phone number and billing and delivery address; Stripe passes these details (except the card details) to us so that we can deliver and invoice the order. Your card details are entered directly on Stripe’s secure systems and are never stored on our servers. We only receive confirmation of the payment, the amount, the last four digits of the card and the card type.
2.4 When you contact us
If you use the contact form, email or WhatsApp, we process your name, contact details and the content of your message, including any attachments you send.
2.5 Newsletter
The website does not currently offer a newsletter. If one is added later, we will only send marketing emails with your prior, explicit consent, each email will include an unsubscribe link, and this policy will be updated before the newsletter goes live.
2.6 Data we do not ask for
We do not ask for health data about you or your clients. Please do not send us such information in messages or order notes.
3. Why we use your data and on what legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Processing and delivering your order, communicating about it | Order and contact data | Performance of a contract or steps before entering into one — art. 6(1)(b) |
| Issuing invoices and keeping accounting records | Identification, billing and order data | Legal obligation — art. 6(1)(c) (Romanian accounting and tax law, including RO e-Factura) |
| Handling returns, withdrawals, warranty claims and complaints | Order and contact data, content of your request | Legal obligation — art. 6(1)(c) (consumer protection law) and contract — art. 6(1)(b) |
| Answering questions sent through the contact form, email or WhatsApp | Contact data and message content | Steps at your request before a contract — art. 6(1)(b), or our legitimate interest in replying — art. 6(1)(f) |
| Checking that professional-use products go to trained professionals | Business and professional details you provide | Legitimate interest in the safe use of our products — art. 6(1)(f) |
| Keeping the website secure and working | Technical server data | Legitimate interest — art. 6(1)(f) |
| Storing your cart and your cookie choice on your device | Local storage items | Strictly necessary for the service you request (ePrivacy exemption) — art. 6(1)(b) and (f) |
| Analytics or marketing (not active at present) | Only if introduced later | Your consent — art. 6(1)(a), which you can withdraw at any time |
| Establishing, exercising or defending legal claims | Relevant order and communication data | Legitimate interest — art. 6(1)(f) |
Providing order and contact data is necessary to conclude the contract; without it we cannot process your order. We do not make decisions about you based solely on automated processing, including profiling.
4. How long we keep your data
- Invoices and accounting documents: for the period required by Romanian accounting law (currently up to 10 years for the documents covered by it).
- Order data not included in accounting records: for the duration of the contract and afterwards until the legal warranty and limitation periods expire.
- Messages and contact form requests: for as long as needed to answer your enquiry; if it leads to an order, it is kept together with the order data.
- Server logs: only for as long as needed to keep the website secure and working.
- Cart and cookie choice on your device: until you delete them from your browser (see the Cookie Policy).
When a retention period ends, the data is deleted or anonymised.
5. Who we share your data with
We do not sell your personal data. We share it only with providers who help us run the shop, under contracts that require them to protect it and use it only on our instructions, and with public authorities when the law requires it.
| Recipient | Role | Status |
|---|---|---|
| Contabo GmbH (Germany) | Hosting of the website and of the order records | Active |
| Stripe Payments Europe, Ltd. (Ireland) | Card payment processing | For every card payment |
| The courier company that delivers your order | Delivery of orders (name, address, phone) | For every shipped order |
| Our invoicing software provider | Issuing invoices and transmitting them to RO e-Factura | For every order |
| WhatsApp Ireland Limited (Meta) | Messaging, if you choose to contact us or send an order via WhatsApp | Only if you use WhatsApp |
| Google Ireland Limited | Delivery of web fonts (receives your IP address) | Active — see the Cookie Policy |
| Our accountant or accounting firm, if bookkeeping is outsourced | Bookkeeping | If applicable |
| Public authorities (e.g. ANAF, ANPC, courts) | Where required by law | Only when legally required |
6. Transfers outside the European Economic Area
We aim to use providers that store data in the EU/EEA. Some providers (for example Stripe, Meta and Google) belong to groups based in the United States and may access or transfer data there. Such transfers take place only on the basis of an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, for certified companies) or the Standard Contractual Clauses approved by the Commission, with additional safeguards where necessary. You can ask us for information about these safeguards using the contact details in section 1.
7. How we protect your data
The website is served only over an encrypted connection (HTTPS). Access to order data is limited to the people who need it to fulfil orders. Card data is handled exclusively by the payment processor. We review our measures when our systems change.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate or incomplete data;
- erasure (“right to be forgotten”), where the data is no longer needed or the processing is unlawful, except where we must keep it by law;
- restriction of processing in the cases set out in art. 18 GDPR;
- data portability — to receive the data you gave us in a structured, machine-readable format, or have it sent to another controller;
- object at any time to processing based on our legitimate interest, and without any justification to direct marketing;
- withdraw consent at any time, without affecting processing carried out before the withdrawal;
- not to be subject to a decision based solely on automated processing.
To exercise these rights, write to us through the contact form on our Contact page or in writing at the address in section 1. We reply within one month of receiving the request; this period may be extended by two further months for complex requests, in which case we will tell you why. We may ask for information to confirm your identity. Requests are free of charge unless they are manifestly unfounded or excessive.
9. Right to lodge a complaint
If you believe your data is being processed unlawfully, you can complain to the Romanian supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — www.dataprotection.ro
If you live or work in another EU country, you may also contact the supervisory authority there. You can also go to court. We would appreciate the chance to resolve your concern first, so please contact us.
10. Children
This shop is intended for adults, mainly beauty professionals. We do not knowingly collect data from persons under 18.
11. Changes to this policy
We will update this policy when our services or the law change — in particular if analytics, marketing tools or a newsletter are introduced. The date at the top shows the latest version.