S.C. CARE&JOY S.R.L., registered with the Trade Register under no. J2017001558025, having VAT number 38107218, with its registered office in Gurahont town, Garii Street, No. 1, Arad County, owner of the website accessible at the following address: www.shop.laurul.ro.
1. General
The need to retain personal data varies depending on the type of data processed within the company. Some data may be deleted immediately, while other must be stored until the moment when their future utility is no longer possible.
There are situations when personal data is stored for a limited period, with storage terms imposed by the legal regulations in force, applicable at the national or European Union level. In other cases, storage terms must be established by each organization individually, depending on its activity, taking into account the data processing principles laid down in Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (known by the English acronym “GDPR”).
Since the establishment by the company of the processing and retention periods of personal data may be a somewhat subjective endeavor, the implementation of a Retention Policy is essential to ensure that the rules applied at the company level regarding data storage are consistently enforced throughout the organization.
In any case, the company shall comply with the provisions of the General Data Protection Regulation (GDPR) and Law 190/2018 on measures for the enforcement of the General Data Protection Regulation within the scope of activities involving the storage of processed personal data.
2. Storage Policy
The scope of this Policy covers all company data, namely data stored in the company’s IT systems, data provided by the company to the media, rented data, or data originating from contractual collaborations and partnerships, regardless of the location (company headquarters or branch office) where such data are processed.
The Storage Policy within S.C. CARE&JOY S.R.L. is an instrument that ensures compliance with the GDPR requirements, as well as with the relevant laws and regulations in the field of personal data protection. This Policy primarily concerns the principle of limiting the retention period of processed personal data, which entails storing such data only for the duration necessary to achieve the purposes for which they are processed. The Storage (Retention) Policy of personal data is primarily intended as a resource supportive of the company’s operations, allocating appropriate retention periods across all business areas and company departments, thereby enabling the consistent and controlled execution of personal data disposal/deletion activities.
3. Requests regarding the Storage Policy of personal data (retention)
This Policy is applicable to natural persons as clients of S.C. CARE&JOY S.R.L., legal entities as clients, as well as to representatives of our contractual partners, both in their capacity as Controllers of personal data in relation to S.C. CARE&JOY S.R.L. or as Persons Authorized by the Controller, pursuant to the General Data Protection Regulation.
We store and process personal data solely in cases where you have voluntarily provided such data, such as by completing a contact form, subscribing to the company’s newsletter, or creating an account.
Should you have any requests or questions regarding the retention periods of your personal data within S.C. CARE&JOY S.R.L., please contact the company using the email address indicated.
4. The reasons justifying the long-term storage of personal data at S.C. CARE&JOY S.R.L. The Company does not intend to adopt a ‘save everything’ approach. We consider that such a rule is neither practical nor cost-effective and would impose an excessive burden on all company personnel, particularly the IT department, which would manage an increasingly large volume of data. However, certain data must be retained long-term to protect the company’s interests, to preserve evidence regarding processing or deletion in accordance with the law and this Personal Data Policy if S.C. CARE&JOY S.R.L. deems it necessary, and, in general, to comply with sound commercial practices.
Some of the most important reasons for the long-term retention of data within S.C. CARE&JOY S.R.L. are the following:
• Complaints regarding the quality of the company’s services.
• Litigation.
• Investigation of workplace accidents.
• Inquiry into the occurrence of a security incident.
• Legal regulations.
• Protection of intellectual property.
5. Retention (storage) periods
The retention periods for personal data are specified below and apply to all recording formats, namely paper and/or electronic, except where otherwise stated in this Policy:
DEPARTMENT – PROCESSING ACTIVITY – RETENTION PERIOD:
• MARKETING – Campaign forms in physical format – 3 months after storage in electronic format.
• MARKETING – Campaign forms in electronic format – 3 years from the date of completion of the original.
• MARKETING – Documents certifying winnings or prizes awarded based on contests and prize draws – 10 years from their conclusion.
• MARKETING – Telephone calls made for marketing purposes – 30 days.
• MARKETING – Information regarding participation in contests with prizes – 5 years from the contest’s completion date. Information concerning participation in campaigns organized on the company’s social media pages – 2 years from the campaign’s completion date.
• CUSTOMER RELATIONS – Email received from the client for the submission of a complaint – retained for 3 years from the date of receipt, both in physical and electronic format.
• CUSTOMER RELATIONS – Email received from the client regarding requests related to the company’s commercial activity – retained for 3 years from the date of receipt, both in physical and electronic format.
• CUSTOMER RELATIONS – Email received from the client regarding requests related to personal data processing activities within the company – retained for 3 years from the date of receipt, both in physical and electronic format.
• CUSTOMER RELATIONS – Database within the Customer Relations Department containing any general requests submitted by clients – data to be deleted every 3 years.
• LOGISTICS – AWB (Airway Bill) and documents accompanying the shipment of goods from the warehouse to the client (delivery order) – 5 years.
• LOGISTICS – Goods Accompanying Note (NIR) – 5 years.
• BUSINESS RELATIONS – Contracts concluded by the company with suppliers – 10 years from the date of contract termination.
• BUSINESS RELATIONS – Partnership contracts concluded by the company for commercial promotional events organized by the company – 10 years from the date of contract termination.
• BUSINESS RELATIONS – Business cards collected during business meetings – 1 year from the date of last contact.
• BUSINESS RELATIONS (B2B) – Personal data, such as the name, position, and contact details of the representatives of the companies with which we collaborate – retained until the date of the data deletion request or until the date on which we became aware that the data had become inactive.
For information regarding the retention periods of certain personal data processing activities within the company that are not specified in this Policy, please submit your requests to the e-mail address gdpr@explorado.ro or by using the other communication means provided.
6. Retention Plan
The table containing the recommended retention periods for clients’ personal data within the company’s records (systems or physical archives) is provided for each relevant field of activity. The storage period applies by default to all records within the respective category and shall be observed whenever possible, although it is acknowledged that exceptional circumstances may require retaining documents for either shorter or longer periods. If individual records or documents require a retention period different from the recommended one, S.C. CARE&JOY S.R.L. must be contacted to discuss the specific storage requirements.
7. Data Destruction
Data Destruction is an essential component of the regulations governing the retention of personal data no longer utilized in the company’s future operations. Data Destruction ensures the efficient utilization of data collected during activities, thereby enabling data management and retrieval to be both effective and economical.
When the retention period expires, the company must actively proceed with the data destruction covered by this Policy. If an employee (or collaborator) with access to the processed personal data considers that certain data should not be destroyed, he or she must contact their direct supervisor, the Data Protection Officer, or, in their absence, the company’s direct management, so that an exception to the rules established in this Policy may be considered. Given that this decision has long-term legal implications, exceptions will be granted only by a member or members of the company’s management team.
The company expressly instructs employees (or collaborators) not to destroy data that breaches this Policy. The destruction of data which an employee (or collaborator) may consider harmful to the company, or any destruction of data intended to conceal a violation of the law or the provisions of this Policy is strictly prohibited.
8. Requests for data deletion
You may request the deletion of personal data by sending an email to: office@dpo-arad.ro where you must specify the following:
– Your contact details for the transmission of the company’s response/opinion.
– Your name.
– The processing activities through which the data was collected or processed (marketing campaigns, promotions, etc.).
– The type of data collected or processed that you wish to have deleted.
– The total number of records to be deleted.
The response deadline for the submitted request is 30 days from the date of submission. If the complexity of your request necessitates an extension of the response deadline, we will extend this period by an additional duration not exceeding 30 working days from the date of submission. In this regard, a company representative will communicate to you the status of the submitted request.
Should the submitted request be resolved following its evaluation within S.C. CARE&JOY S.R.L., entailing the deletion of your data, we shall send you a document presenting the company’s position concerning your request and the measures taken, via the agreed method of communication. The document shall contain at least the following information:
– The purpose(s) on the basis of which the data were processed.
– The data that have been erased/deleted/destroyed and the processing activity within S.C. CARE&JOY S.R.L. to which they pertained.
– The number of records deleted.
The physical document transmitted is signed by a representative of S.C. CARE&JOY S.R.L. and is stored and scanned in physical format for a period of three years from the date of notification transmission, after which the original document shall be destroyed and recycled. If the opinion is transmitted via email, it shall be stored on the company’s servers for a period of three years from the date it was sent to the Client at the provided email address, after which it shall be deleted.
If you submit a request to S.C. CARE&JOY S.R.L. for access to the processing activities concerning your personal data within our company, please be advised that, due to the continuous processing of your personal data and in consideration of the routine established in our systems for deleting processed information in accordance with the Data Retention Policy, we endeavor to keep your data updated and accurate at all times. Thus, this routine processing may involve the modification or deletion of personal information we process after you have submitted a request to us. In this case, S.C. CARE&JOY S.R.L. will provide the information held at the time we send you the response, even if it differs from the information stored at the date of the request. Please note that the deletion of your personal data is a procedure that S.C. CARE&JOY S.R.L. would have had carried out even if you had not submitted the request.
9. Continuous Development
The storage (retention) periods shall be maintained by S.C. CARE&JOY S.R.L., which shall make modifications, additions, and updates whenever legislation, the guidelines of the National Supervisory Authority for Personal Data Processing, or the organizational or structural changes of S.C. CARE&JOY S.R.L. impose such changes.
10. Updates
Our personal data storage (retention) policy is currently under review and may be amended from time to time (generally, to ensure compliance with data protection legislation and best practices). Updated versions will be published on our website at: www.shop.laurul.ro.
© S.C. CARE&JOY S.R.L. – Version: 29 January 2026