Privacy Policy

Last updated: 30 October 2026

We respect the privacy of your data. This policy explains what personal data we collect when you visit neurogenesisdna.ro, place an order, attend our events or contact us, why we use it, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

NeuroGenesis DNA SRL, with its registered office in București, Sector 6, Splaiul Independenței 202 M, Sc. 1, Et. 7, Ap. 79, J2025064840005, CUI RO52403243.
Data protection email: office@neurogenesisdna.ro
Phone: +40 723 299 339

2. What data we collect

  • Identification and contact data: name, delivery and billing address, email, phone; for legal entities, the company details.
  • Order data: the products ordered, the value, order history, returns.
  • Payment data: the payment method and the transaction confirmation. Full card details are processed directly by the payment processor and do not reach us.
  • Data from forms and messages: the content of messages sent through the contact form, email, phone or social media; your preferred day and time for a visit by appointment.
  • Data from interactive tools: the answers you choose to fill in in questionnaires and calculators on the website (for example the biological age test). Please do not send us health data unless it is necessary for your request.
  • Event attendance data: name, contact details, the ticket purchased; photographs and video recordings made at events.
  • Technical and browsing data: IP address, device and browser type, pages visited, interactions with the website, collected through cookies and similar technologies, in accordance with our Cookie Policy.

3. Why we use the data and the legal basis

  • Order processing, delivery, payment, returns and warranty: performance of the contract (Article 6(1)(b) GDPR).
  • Issuing invoices and keeping accounting records: legal obligation (Article 6(1)(c) GDPR).
  • Replying to messages and scheduling visits: steps taken at your request prior to entering into a contract and our legitimate interest in replying to you (Article 6(1)(b) and (f) GDPR).
  • Newsletter and promotional communications by email or SMS: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
  • Analytics and marketing cookies, personalised advertising: your consent, given through the cookie banner.
  • Website security, fraud prevention and defence of our rights in court: our legitimate interest (Article 6(1)(f) GDPR).
  • Photographs and video recordings from events, used to present the events: our legitimate interest, with your right to object at any time.

We do not make decisions based solely on automated processing that produce legal effects concerning you.

4. Who we share the data with

We do not sell your data. We share it only with partners who help us deliver our products and services to you, under contracts that protect it:

  • Shopify, the platform on which the store runs (hosting, orders, payments through Shopify Payments, emails);
  • Klarna, for payment in instalments, if you choose this option;
  • GLS and other carriers, for delivery and returns;
  • the accounting services provider and the tax authorities, for legal obligations;
  • the authorised service centre, for products sent in under warranty;
  • Meta (Facebook, Instagram) and Google (Google Ads, Google Analytics), for measuring and personalising advertising, only with your consent to cookies;
  • Microsoft Clarity, to understand how the website is used and to improve it, only with your consent;
  • public authorities, when the law requires us to.

5. Transfers outside the European Economic Area

Some partners (for example Shopify, Meta, Google, Microsoft) may process data outside the EEA, including in the United States. These transfers are made on the basis of adequacy decisions of the European Commission (including the EU-US Data Privacy Framework) or the Standard Contractual Clauses approved by the European Commission.

6. How long we keep the data

  • accounting records and invoice data: 5 years from the end of the financial year, in accordance with accounting legislation;
  • order data: for the duration of the contract and the warranty, plus the general limitation period of 3 years;
  • messages and contact or appointment requests: up to 2 years from the last interaction;
  • newsletter data: until you unsubscribe;
  • customer account: until it is closed at your request;
  • cookies: according to the durations set out in our Cookie Policy.

7. Your rights

You have the following rights:

  • the right of access: to find out what data we hold about you;
  • the right to rectification: to have inaccurate or incomplete data corrected;
  • the right to erasure: to have your data deleted, except for data that the law requires us to keep;
  • the right to restriction of processing;
  • the right to data portability: to receive your data in a structured format or to have us transmit it to another controller;
  • the right to object, including to direct marketing, at any time;
  • the right to withdraw your consent at any time, without affecting the processing carried out beforehand;
  • the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, www.dataprotection.ro.

To exercise your rights, write to us at office@neurogenesisdna.ro. We will reply within one month at the latest. To protect your data, we may ask you to confirm your identity. You can unsubscribe from the newsletter directly through the link in every email.

8. Data security

We use appropriate technical and organisational measures to protect data: encrypted connection (HTTPS), access limited to the people who need the data to do their job, vetted partners. Please keep your account login details confidential.

9. Minors

The website is intended for people over 18 years of age. We do not knowingly collect data about minors. If you are a parent or guardian and learn that a minor has sent us data, write to us and we will delete it.

10. Relationship with Shopify

The store runs on the Shopify platform, which processes data in order to provide its services. Details can be found in the Shopify Privacy Policy.

11. Changes

We may update this policy, and the version in force is always published on this page, with the date of the last update.

ANPC SAL, Soluționarea Alternativă a Litigiilor