GDPR — your rights

Under Regulation (EU) 2016/679 (GDPR) and Law 190/2018, you have the following rights regarding your personal data processed by The Uniform Maker S.R.L.. For details on what data we collect and on what basis, see the privacy policy.

1. Right of access (art. 15)

You can request a copy of the data we hold about you and information about the purposes of processing, categories of data, recipients, retention period and source of the data.

2. Right to rectification (art. 16)

If your data is incorrect or incomplete, we can correct it on request — or you can edit it directly from the "My account" panel.

3. Right to erasure ("right to be forgotten") (art. 17)

You can request deletion of your account and associated data, except for data we are legally required to keep (invoices — 10 years under OMFP 2634/2015 and Law 82/1991).

4. Right to restrict processing (art. 18)

You can request the temporary suspension of processing if: you contest the accuracy of the data, the processing is unlawful but you don't want erasure, or you object to the processing and we verify whether our legitimate interest prevails.

5. Right to portability (art. 20)

For data you supplied, processed on the basis of consent or contract, you can receive it in a structured, commonly used and machine-readable format (JSON or CSV).

6. Right to object (art. 21)

You can object to processing based on legitimate interest, including direct marketing, at any time and free of charge. Unsubscribing from the newsletter is done with one click on the link in the email or from your account.

7. Right to withdraw consent (art. 7)

Where processing is based on your consent (for example, email marketing), you can withdraw it at any time, without affecting the lawfulness of previous processing.

8. Right not to be subject to automated decisions (art. 22)

We do not use automated profiling to make decisions that produce legal effects on you or significantly affect you.

9. How to exercise your rights

Send a request to contact@theuniformaker.ro from the email address associated with your account. We may request additional information to confirm your identity before executing the request. We respond free of charge, within 30 days (with the possibility of extension by another 60 days in complex cases, with prior notice).

10. Complaints to ANSPDCP

If our response does not satisfy you or you believe the processing breaches GDPR, you can file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

• B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest
• Email: anspdcp@dataprotection.ro
• Web: www.dataprotection.ro

11. Consumer rights — ANPC, SAL and SOL

For matters relating to your rights as a user of our services (delivery, conformity, return) you also have ANPC, SAL entities (anpc.ro/ce-este-sal) and the SOL/ODR platform (ec.europa.eu/consumers/odr).