1. Data controller

NORVA GROUP SRL, with the details above, is the controller of your personal data under Regulation (EU) 2016/679 — GDPR.

2. What we process and why

• Name, phone, delivery address — to process and deliver your order. Basis: performance of the contract.
• Email address — order confirmation and delivery updates. Basis: performance of the contract.
• Order data — accounting records. Basis: legal obligation.
• IP address and country — to show the site in the right language and for security. Basis: legitimate interest.

We do not process card data. Payment is on delivery, directly to the courier.

3. Who receives the data

Only those strictly necessary: the courier company (name, address, phone), our invoicing and accounting provider, and authorities where the law requires it. We never sell or rent your data.

4. Retention

Order data is kept for 10 years, as required by Romanian accounting and tax law. Data used only for delivery is deleted earlier.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Write to contact@birlis.com — we reply within 30 days. You may also complain to the Romanian data protection authority ANSPDCP (dataprotection.ro).

6. Cookies

We use only what is strictly necessary, with no advertising tracking and no profiling: the shopping cart and the chosen language. Both are strictly necessary cookies and do not require prior consent.

7. Security

The site runs exclusively over an encrypted connection (HTTPS). Access to order data is limited to those who need it.

Last updated: 25.09.2026