Your privacy matters to us. This policy explains what personal data we collect, why, and what rights you have, in line with Regulation (EU) 2016/679 (GDPR).
Data controller
CARTE DESCHISA SRL, Tax ID 42056813, registered at DN25 no. 21, Șerbeștii Vechi, 807290, Galați county, Romania. Contact: contact@povestile-tale.ro, tel. +40 747 169 169.
What we collect
The data you provide when placing an order or subscribing to the newsletter: name, delivery and billing address, e-mail, phone, plus website usage data (via cookies). If you choose the signed-copy option, we also process the child's first name, provided by you, solely for the dedication in the book.
Why
- processing and delivering orders and issuing invoices;
- order-related communication;
- marketing (newsletter), only with your consent, which you can withdraw at any time;
- legal obligations (accounting and tax).
Who we share data with
Only partners needed to fulfil your order: courier (Urgent Cargus), the payment processor, the e-mailing provider and the invoicing solution, all required to protect your data. We never sell your data.
Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent, as well as the right to lodge a complaint with the Romanian DPA (ANSPDCP). To exercise your rights, write to contact@povestile-tale.ro.
Cookies
We use cookies to run the site and, with your consent, for analytics and marketing. You can manage your preferences anytime from the cookie banner.
In-store AI assistant („The Story Squirrel")
Our site uses an AI-based conversational assistant that helps you choose suitable books for a child. For full transparency:
- What we process: only the messages you type in the chat (typically the child's age and interests). The assistant does not ask for or store your name, email, phone, or address. Please do not enter personal data in the chat.
- Storage: conversations are not stored on our servers; they remain only temporarily in your browser's memory and are cleared when you reload the page.
- Sub-processor (transfer outside the EU): your messages are sent to Anthropic PBC (USA), the provider of the Claude AI model, to generate the reply. The transfer relies on Standard Contractual Clauses (SCCs) and a Data Processing Agreement (DPA). Anthropic does not use content sent via its API to train its models.
- Security: to prevent abuse, we briefly retain (a few minutes at most) a cryptographically hashed form of your IP address, never the raw IP.
- Legal basis: our legitimate interest in offering useful recommendations and protecting the service (Art. 6(1)(f) GDPR); using the chat is voluntary.
- Your rights: you may contact the controller (CARTE DESCHISA SRL, contact@povestile-tale.ro) at any time. The assistant is an AI program, not a human.