Privacy Policy

1. Data controller and general presentation of the Policy

Data controller: SCRIPSENSE S.R.L., a limited liability company incorporated under Romanian law, with its registered office at Constantin Daicoviciu No.1, Cluj Napoca, Romania registered with the Romanian Trade Register under no. J2025005185002, and having the sole registration code 51186839 (hereinafter referred to as the “scripsense” or “we”).

ScripSense, through its website 🔍 http://www.scripsense.store, collects and processes certain personal data relating to its users (“you” or the “user”).

Personal data are any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements such as his or her physical, economic, cultural or social identity (the “personal data”).

In accordance with the General Regulation of the European Parliament and of the Council on Data Protection No. 2016/679 of 27 April 2016 (the “GDPR”) and Law No. 78-17 of 6 January 1978, known as the “Data Protection Act”, in its current version, the purpose of this privacy policy (the “Policy”) is to inform you about the data we collect about you, the processing we carry out and its purpose, the periods of retention of your data, the recipients of your data as well as the rights you have.

The Policy completes the contractual conditions which govern the platform and which you accept by using the platform (see the 🔍 main conditions as well as the other conditions which you accept for specific services or according to your status, hereafter together the “Terms and Conditions”).

Modification of the Policy: the policy can be modified at any time. The current version is the one available on the platform. In the event of a significant change to the policy, we will inform you within a reasonable period of time (by email or by banner – or “push” – on the platform). ScripSense may ask you at any time and by any means that can be recorded to confirm that you have read and understood the Policy.

2. Personal data collected on the Platform

We collect your data mainly from you directly, but also from third parties who want you to benefit from our services, advertising partners and social networks depending on the authorizations you provide them directly. On our platform, the mandatory nature of the data to be provided is indicated to you at the time of collection (for example, by an asterisk). If you do not fill in the mandatory fields, we will not be able to provide you with all our services.

You will find below a list of all the data that we may collect and process about you, depending on your use of the platform and the authorizations you provide. Information related to your identity and the creation of your account: Full name, Username, Email address, Password, Date of birth or confirmation of majority, Gender, Business name and legal representative identity, VAT number; tb sa mai completez

Information about your device, account and activity: IP address, Session information, Cookies and trackers, Consent and refusal, date and time of consent, User profile, Language, Preferences, Browser used by your device, Content and URLs you connect to, Date and time of your connections, Model and manufacturer of your device, Operating system used by your device (iOS, Android); 

Information about your interactions with the platform: Messages, Date and time of messages, Photos shared, Other data indicated in messages, Reviews, Rating, Date and time of review, Response to review, Your comments and public messages on the platform; Your favorite items, Your responses to our satisfaction surveys, Your consumption habits.

Payment information: Item price, Customs and transportation charges, Payment method information, Bank account number, First six and last four digits of your credit card number, Expiration date,  Invoice, promo code.

Information relating to the transportation of items: Delivery option, Address of the shipping point and the delivery point of the package, Tracking number of the package, Confirmation of the delivery of the package, Date and time of delivery of the package,  Location of the package, Other delivery information required by a chosen transportation service provider, in the event of a dispute with the carrier: a sworn statement and a copy of your ID.

Anti-fraud information: Information contained in a photo of the credit card: full name, expiration date of the card and the last four digits of the card number, and other information visible on the front of the card if you choose not to blur it, Information contained in a photograph/screen shot of the bank statement listing the most recent charges: date and description of the most recent platform-related charges and other payment information if you choose not to blur it; 

The information contained in the proof of address: first and last name of the cardholder, physical address, date of issuance of the proof, and other information that you have not blurred.

Information relating to the management of the messages you write to us, the management of disputes and inappropriate behavior: Messages (requests, complaints) sent to customer service or by contacting us on social networks (private or public message, including by “tagging” us), Type of warning received by the user, Date of receipt of the warning by the user, Information contained in judicial requests, Complaint from a user (content, reason, date and time).

Sensitive Data: We do not collect sensitive data. Any sensitive personal data collected and/or processed by us will be done so only with your explicit consent and never without your knowledge. In any case, we invite you to communicate only strictly necessary information – in particular in the free comment zones.

3. Processing that we carry out to execute pre-contractual measures and our General Conditions

We process your personal data to:

• Allow you to create an account on the platform;
• Help you manage your account;
• Enter into contracts with us;
• Allow you to carry out transactions and payments;
• Allow you to make deliveries via our carriers;
• Notify you of any event related to your account, from its creation to its deletion (by emails and notifications);
• Notify you when we update (add, modify, delete etc.) our Terms and Conditions, Privacy Policy, our commission grid, and more generally our services and features (by emails and notifications); Inform you that there are items in the process of being deposited in your account and awaiting your validation;
• Notify you about the status of your transactions (status of your purchase, status of your sale, status of the payment, status of the quality control, status of the shipping label, notification or confirmation of deposit abandon, existence of a litigation, status of the shipping etc.) (by emails and notifications),
• Notify you when ScripSense and/or it partners need to carry out some additional verifications (identity, proof of residence etc.) (by emails and notifications);
• Notify you when we have detected a problem that is blocking or may block your use of the platform (by emails and notifications);
• Send you coupons and make you benefit from our offers (personal or by user category) (by emails and notifications);
• To offer you the benefits of our referral program.
• Answer your questions, requests, complaints addressed to the customer support department (by emails and notifications).

4. Processing that we carry out on the basis of our legitimate interests

This category of processing is based on our legitimate interests. In order to legally base a processing operation on legitimate interest, three cumulative conditions must be met:

• The interest pursued must be legitimate (i.e.lawful, clearly and precisely determined, real and present);
• The processing carried out must be necessary and;
• The processing must not adversely affect the rights and interests of data subjects.

For your complete information, we detail below the processing operations and the corresponding legitimate interests. We have ensured that these processing operations do not infringe your fundamental rights and freedoms.

We process your personal data to:

Give you advice, e.g. by emails and notifications, for example on the way to write a product sheet, on the price of your item, to suggest price drops after a certain time, and inform you that a user has contacted you or interacted with one of your articles, because we have a legitimate interest in facilitating and increasing the sales between our users to increase the user satisfaction on the platform;

Offer you to participate in surveys (e.g. satisfaction, opinion, poll…), e.g. by emails and notifications, because we have a legitimate interest in collecting feedback from our users to improve the platform. You are free to participate or not, without any consequences. Your answers are then processed on the basis of your consent;

Solve issues and litigation, send warnings, temporarily or permanently suspend a user account, e.g. by emails and notifications, because we have a legitimate interest in fighting inappropriate behavior and illegal pontent, ensuring compliance with our Terms and Conditions, fighting fraud and counterfeiting, ensuring the security of the platform and users, resolving disputes between our users and to defend the rights and interests of ScripSense;

To implement detection measures to fight against fraud and ask you to perform security checks on your account, particularly during transactions, and, in case of detected anomalies, to give rise to an automatic suspension of your transaction. A review is then carried out by our anti-fraud department which may contact you to verify your identity. We have a legitimate interest in guaranteeing the security of the platform and that of users and to fight against all forms of fraud;

Access and moderate content, messages and conversations, because we have a legitimate interest to improve the security and quality of this service, to ensure compliance with our Terms and Conditions, to detect illegal, unsolicited content or malware, to improve the functionality of the messaging system, to resolve disputes between users, to process reports and complaints sent by users, to fight against fraud and counterfeiting and to protect our users;

Allow professional buyers to issue your invoices, because we have a legitimate interest in allowing our professional sellers to fulfill their legal and accounting obligations.

To perform marketing and performance statistics and analysis in order to understand how you use the platform and our services, because we have a legitimate interest in seeking the best possible user experience and improving our platform, services and features, and to personalize the experience for everyone;

5. Processing we carry out only with your consent:

We process your personal data to:

Subscribe you to our newsletters. You can deactivate them at any time through the link provided in the newsletters or directly from your account.

Send you the product alerts you have set up from your account. You can deactivate your alerts directly from your account. that you have programmed directly from your account. You can deactivate them at any time from your account.

Customize the ads that appear on third-party sites, so that you are not exposed to ads that are not relevant to you. You can disable them by changing your cookie settings (see the “Cookies” section of the Policy). Analyze the answers you agree to share with us when you respond to our surveys (satisfaction, poll, feature test, etc.). Analyze the answers you agree to share with us when you respond to our surveys (satisfaction, poll, feature testing etc.).

Share your strictly necessary data with our partner brands when you agree to participate in operations. In this case, you will be given information specific to the operations and partner brands.

6. Processing we carry out to comply with our legal obligations

We process your personal data to:

• Comply with our legal and regulatory obligations, for example as part of Scripsense’s legal obligation to cooperate with the tax or judicial authorities acting in particular in the context of their control and investigation missions; to keep certain documents such as your invoices even after your account has been closed;
• Process your requests to exercise your rights under the GDPR (see section “Your Rights” below).

7. Length of time personal data is kept

ScripSense retains your personal data for the strict period of time necessary to fulfill the purpose of the processing concerned. Thus:

• The data associated with your account is retained as long as you maintain your account and until your account is deleted; however, if you remain inactive for three (3) years (e.g., no login to the platform, no opening of sent emails, etc.), your account will be considered inactive, and we will delete it after a notification email remains unactioned by you for 1 (one) month;
• The data relating to the sending of newsletters and alerts are kept as long as you do not withdraw your consent by unsubscribing;
• The data collected in the context of the conclusion of specific contracts are kept for the duration of the execution of the latter, and are then archived for the strict legal prescription periods applicable;
• The data collected in the context of our legal, fiscal and accounting obligations are kept for the applicable legal, fiscal and accounting retention periods;
• The data collected in the context of tax reporting obligations are kept until they are sent to the tax authorities once a year, and then archived for the strict limitation periods applicable;
• The data related to the management of complaints, disputes and litigation are kept for the duration necessary to resolve the dispute and for the duration of any applicable statute of limitations;
• The documents necessary for the identity verifications which take place within the framework of the fight against fraud are preserved during the time necessary for the verifications and are removed within 3 (three) days;
• The answers to surveys are kept for the time necessary for the survey and are then anonymized if they were not already;
• The data collected in the context of specific partnerships with partner brands are kept for the time necessary to carry out the said commercial operation and are then anonymized; If you consent to participate in some specific commercial operations (for example, “resale as a serviceoperations”), a dedicated privacy policy may apply and then will be available on the dedicated webpage of the operation;
• The data collected through cookies and tracers on the platform are kept in accordance with the “cookies” section of the Privacy Policy);
• The data collected can be kept in a form that does not allow your identification (anonymization) for analytics and statics purposes, without limitation of duration.

8. Recipients to whom your data is transmitted

In the course of processing your personal data, we may pass it on to certain personnel of ScripSense and its group. We ensure that only those persons who are authorized to do so by virtue of their duties or functions have access to your data. The recipients of your data are listed below: ScripSense‘s internal departments: anti-fraud department, transport and logistics department, product control department, customer service department, legal department, data protection officer, human resources defor online applications. In addition, we may transmit your data to our service providers and to third parties, such as listed below:

• Our transportation and logistics service providers;
• Our anti-fraud service providers;
• Our service providers managing our customer relations;
• Our moderation service providers;
• Our communication service providers;
• Our IT, technical and hosting service providers;
• Our external legal counsel;
• Advertising platforms and business partners with your consent;
• Banking and payment service providers;
• To authorized third parties, in particular in the context of investigations of offences;
• To your buyer, especially in the case of direct mailing;
• To third parties, buyers or investors, in the event of a restructuring of the ScripSense group, including the total or partial sale of assets, mergers, acquisitions, spin-offs and, more generally, any capital operation;
• To public bodies and the tax authorities in the context of our legal obligations;
•  To our partners within the framework of certain services that we provide to brands present on the platform.

Your data will not be sold to third parties under any circumstances. Some of these recipients are responsible for the processing of the personal data that we communicate to them. They process the data in accordance with our agreements and their personal data protection policy.

This is notably the case for:

• Service providers who allow you to carry out banking transactions on the platform (non-limited list): Stripe, Oney, Ingenico, Klarna, Splitit, Currencycloud, American Express, PagaMasTarde, Affirm, Paypal and its subsidiary Hyperwallet; 
• From provider in the fight against payment fraud: Riskified: 🔍 https://www.riskified.com/privacy/; 
• Partner brands within the framework of commercial operations when you wish to participate;