This policy describes how BioSyn Laboratory SRL collects, uses, and protects your personal data when you interact with biosyn.ro (“the Site”).

1. Data Controller

• Name: BioSyn Laboratory SRL

• CUI: 52558396 | J2025072336004

• Contact: contact@biosyn.ro

• Address: Str. Lazareni 5, Sector 3, Bucharest, Romania.

2. Data Collected

• Directly: Name, email, phone number, billing/shipping address, and order history.

• Automatically: IP address, browser type, device info, and behavior on the site (via Cookies).

• Third-parties: Info from payment processors or delivery services.

3. Purpose of Processing

• Order fulfillment and delivery.

• Customer support and account management.

• Marketing communications (only with your explicit consent).

• Security and fraud prevention.

4. Legal Basis (GDPR)

• Contract: Necessary to fulfill your order.

• Consent: For newsletters or marketing.

• Legal Obligation: For invoicing and tax reporting.

• Legitimate Interest: To improve our services and site security.

5. Data Sharing We share data only with necessary partners:

• Courier companies (for delivery).

• Payment processors (for secure transactions).

• Marketing platforms (only if you opted-in).

• We do not sell or rent your data to third parties.

6. Your Rights Under GDPR, you have the right to:

• Access your data.

• Correct inaccurate information.

• Request deletion (“right to be forgotten”).

• Withdraw consent at any time.

• Lodge a complaint with the ANSPDCP (www.dataprotection.ro).

7. Security and Retention

• Data is stored as long as necessary for the purpose it was collected or as required by law (e.g., 10 years for financial records).

• We implement industry-standard technical measures to protect your information.