Privacy

1. Data controller

NORVA GROUP S.R.L., with the details above, is the controller of your personal data under Regulation (EU) 2016/679 (GDPR).

2. What we process and why

• Name, phone, delivery address — to process and deliver your order. Basis: performance of the contract.
• Email address — order confirmation and delivery updates. Basis: performance of the contract.
• Order data (products, amounts, currency, invoices) — accounting records. Basis: legal obligation.
• Country (from your IP address) — to show the site in the right language and currency, and for security. Basis: legitimate interest. We do not keep IP addresses in our statistics.
• Messages sent through the contact form — so we can reply. Basis: legitimate interest.

We neither process nor store card data. Payment is made on delivery, directly to the courier, or through the secure payment link, on the page of the authorised payment processor.

3. Who receives the data

Only those strictly necessary: the courier company, our hosting, email and invoicing providers acting on our behalf, and authorities where the law requires it. We never sell or rent your data.

4. Retention

Order data: 10 years, as required by accounting law. Contact messages: up to 1 year.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Write to contact@rifome.com — we reply within 30 days. You may also complain to the Romanian authority ANSPDCP (dataprotection.ro) or to the authority in your country.

6. Cookies

We use strictly necessary cookies only, with no advertising and no profiling: the shopping cart, the chosen language and the chosen country and currency. They do not require prior consent.

7. Security

The site runs exclusively over an encrypted connection (HTTPS). Access to order data is limited to those who need it.

Last updated: 11.09.2026