Privacy & GDPR
Discretion matters here. This notice explains how SILLAGE uses personal information in the boutique, at its point of sale, on the website and when contacting you.
Who is responsible
The controller is REAL ESTATE EXPLORER PROPERTIES S.R.L., CUI 49301120, Trade Register J2023024271401, with registered office at Strada Gheorghe Manu nr. 7, C1, Intrarea B, Etaj 6, Ap. 62, Sector 1, Bucharest, Romania.
For privacy questions and requests, write to private@sillage.ro. For general store questions, write to concierge@sillage.ro or call 0720 011 184.
Information involved
The website uses an essential session for the bag and security. Its sandbox checkout records contact and collection details, an order reference, the total and NETOPIA payment status. The online withdrawal function records your name, email, order reference, optional goods description and submission time.
In the boutique, a customer record may contain your name, telephone, email and address. Sales and invoices may include purchased products, amounts, payment method and the linked customer. If you sign the privacy acknowledgement on the iPad, we keep the signed document, the signature, its date and the staff member who recorded it. Marketing choices and later changes are recorded separately. Normal server access logs may contain technical identifiers.
Purposes and legal grounds
We use necessary session data to operate the website and respond to your requests. Boutique customer, sale and invoice details are used to complete purchases, issue fiscal and accounting documents, deliver or arrange services, and handle returns and customer support. Depending on the activity, the legal basis is steps requested before a contract, performance of a contract, a legal obligation, or our legitimate interest in maintaining accurate service and transaction records.
Sandbox orders are used to test payments and investigate results. Withdrawal requests are recorded to administer statutory consumer rights. Optional Google Analytics runs only after you accept it in cookie preferences. Card details for online payments are entered on NETOPIA's secure payment page, not on this site.
Boutique and point of sale
You can make a boutique purchase without agreeing to marketing. We may ask for contact or address details when you request a customer record, an invoice, delivery, a reservation or follow-up service. The point-of-sale privacy form displays the contact details held in your customer record for your review; staff can correct them in the customer record.
Signing the iPad form confirms receipt of the privacy information. The signature is kept in a PDF attached to the customer record as evidence of that acknowledgement. Signing does not itself grant marketing permission, and declining to sign does not block a purchase.
Optional communications
We send SILLAGE news, invitations and commercial messages by telephone, WhatsApp or email only for channels you actively select and confirm. Marketing is based on your consent. No channel is selected by default. Refusing or withdrawing consent does not affect your purchase or other requested services.
You can change the selected channels or withdraw consent at any time in the boutique or by writing to private@sillage.ro. We record when, how and for which channels consent was given or changed, including later withdrawal, so that we can respect your choice and demonstrate it. Withdrawal does not affect earlier processing that was lawful when consent was in place.
Fit and personal preferences
When asking for Fit Concierge assistance, share only the sizing and comfort preferences needed to answer your request. Do not send medical information in an ordinary request.
We do not use the website form to collect health data or build a sensitive personal profile.
Who may receive information
Hosting and technical providers support the website and point of sale. Staff with a service need may access customer and transaction records. Payment, invoicing and fiscal service providers receive the information required for the requested transaction. A selected courier receives delivery details when shipping is arranged.
If you choose a marketing channel, the provider of that channel may handle the contact details and message needed to deliver it. With your analytics consent, Google Tag Manager and Google Analytics receive usage events. Google Fonts and NETOPIA's identity-graphic service are requested independently of analytics consent. NETOPIA receives the order and billing details needed for a sandbox card test.
How long information is kept
The website session expires when the browser session ends. Your analytics choice stays in this browser until you change it or clear browser storage. Sandbox order records are kept while needed to verify test transactions, then deleted or anonymised. Boutique sales and fiscal or accounting documents are kept for the periods required by applicable law.
Customer contact records are kept while needed to provide requested services or maintain the customer relationship, subject to legal duties and claims. Signed privacy documents and consent history are kept while needed to demonstrate the choices made and resolve claims; withdrawing marketing consent stops future marketing on those channels but does not automatically erase the evidence of the withdrawal. Withdrawal requests and correspondence are kept while needed to handle them, meet legal duties or establish claims. Security logs are kept only as long as needed for investigation.
Your choices and rights
Depending on the legal basis, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent where used.
Write to private@sillage.ro to exercise these rights or ask about applicable retention periods. You may complain to the Romanian data protection authority, ANSPDCP, without losing other remedies.
Keeping information proportionate
The website is delivered over an encrypted HTTPS connection. We intend to limit collection and access to what each service requires and to apply appropriate technical and organisational safeguards.
Sandbox order records and payment notifications are stored outside the public web directory with restricted access. Signed point-of-sale documents are available only to authenticated store operators.
