Last updated: October 2025

I. General Information

The privacy of your personal data is one of the main concerns of Shapeshifter Media, headquartered at Strada Eufrosina Popescu no. 1, ap. 40, Sector 3, Bucharest, in its capacity as data controller.

This document is intended to inform you about the processing of your personal data in the context of using the Shapeshifter.ro website (the “Site”).

II.1. If you are a client of the Site, Shapeshifter Media will process your personal data such as first and last name, phone number, e-mail address, data regarding how you use the Site—for example your behavior/preferences/habits within Shapeshifter Media—as well as any other categories of data that you provide directly in the context of creating a user account, completing forms, or in any other manner resulting from the use of the Site.

II.2. If you are a visitor of the Site, Shapeshifter Media will process the personal data you provide directly in the context of using the Site, such as the data you submit via the contact/questions/complaints section, to the extent that you contact us in this way.

III. Purposes and Legal Bases of Processing

III.1. If you are a client of the Site, Shapeshifter Media processes your personal data as follows:

• to carry out the contractual relationship between you and [the website owner], namely to receive, validate, dispatch, and invoice the order placed on the Site, to inform you about the status of the order, to organize returns of ordered products, etc.
  Legal basis: Processing your data for this purpose is necessary for compliance with legal obligations. Providing your data for this purpose is necessary. Refusal to provide the data may result in [the website owner] being unable to comply with its legal obligations and therefore unable to offer you services through the Site.
  
• for marketing activities, namely to send, by means of distance communication (e-mail, SMS), commercial communications regarding the products and services offered by [the website owner] through the Site.
  Legal basis: Processing your data for this purpose is based on your consent, if you choose to provide it.
  

Providing your data for this purpose is voluntary. Refusing to provide consent for the processing of your data for this purpose will have no negative consequences for you.

• for various analyses and reporting regarding the operation of the Site, the creation of consumer preference profiles, mainly in order to improve the experience offered on the Site.
  Legal basis: Processing your data for this purpose is based on the legitimate interest of Shapeshifter Media to continuously improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusing to provide the data for this purpose will have no negative consequences for you.
  

IV. Duration of Processing

As a rule, Shapeshifter Media will process your personal data for as long as necessary to achieve the processing purposes mentioned above.

If you withdraw your consent for processing for marketing purposes, Shapeshifter Media will cease processing your personal data for this purpose, without affecting the processing carried out based on your consent prior to its withdrawal.

V. Disclosure of Personal Data

For the fulfillment of the processing purposes, Shapeshifter Media may disclose your data to partners, to third parties or entities that support Shapeshifter Media in carrying out its activity through the Site (for example courier companies, IT service providers), or to central/local public authorities, in the following illustrative cases:

• for the administration of the Site;
  
• where such communication is necessary for awarding prizes or other benefits to data subjects obtained as a result of their participation in various promotional campaigns organized by Shapeshifter Media through the Site;
  
• for maintaining, customizing, and improving the Site and the services carried out through it;
  
• for performing data analysis, testing and research, monitoring usage and activity trends, developing security features, and authenticating users;
  
• for sending marketing commercial communications, under the conditions and within the limits provided by law;
  
• when the disclosure of personal data is provided by law, etc.
  

VI. Transfer of Personal Data

The personal data provided to Shapeshifter Media may be transferred outside Romania, but only to countries within the European Union.

VII. Your Rights

Under the legal provisions on the processing of personal data, as data subjects you benefit from the following rights:

• Right to be informed, i.e., the right to receive details regarding the processing activities carried out by Shapeshifter Media, as described in this document;
  
• Right of access, i.e., the right to obtain confirmation from Shapeshifter Media regarding the processing of personal data, as well as details regarding processing activities such as how the data are processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.;
  
• Right to rectification, i.e., the right to obtain the correction, without undue delay, by Shapeshifter Media of inaccurate/unjustified personal data, as well as the completion of incomplete data; the rectification/completion will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate efforts;
  
• Right to erasure of data, without undue delay (“right to be forgotten”), where one of the following grounds applies:
  
  • the data are no longer necessary for the purposes for which they were collected or processed;
    
  • consent is withdrawn and there is no other legal basis for the processing;
    
  • the data subject objects to the processing and there are no overriding legitimate grounds;
    
  • the personal data have been unlawfully processed;
    
  • the personal data must be erased for compliance with a legal obligation;
    
  • the personal data were collected in connection with the provision of information society services under Union or national law to which the controller is subject.
    It is possible that, following a request for erasure, Shapeshifter Media may anonymize such data (thus depriving them of personal character) and continue processing in this form for statistical purposes;
    
• Right to restriction of processing to the extent that:
  
  • the person contests the accuracy of the data, for a period enabling us to verify the accuracy of the data;
    
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
    
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or
    
  • the data subject has objected to processing (other than direct marketing) pending verification whether the legitimate grounds of the controller override those of the data subject;
    
• Right to data portability, namely (i) the right to receive the personal data in a structured, commonly used, and machine-readable format, and (ii) the right to have those data transmitted by Shapeshifter Media to another data controller, where the legal conditions are met;
  
• Right to object—with regard to processing activities—may be exercised by sending a request as indicated below:
  
  • at any time, for reasons related to your particular situation, to the processing of data concerning you carried out on the basis of Shapeshifter Media’s legitimate interest or on grounds of public interest, except where Shapeshifter Media demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subjects, or where the purpose is the establishment, exercise, or defense of legal claims;
    
  • at any time, free of charge and without any justification, to the processing of data concerning you for direct marketing purposes;
    
• Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
  
• Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or with the competent courts, as you deem necessary.
  

For any additional questions regarding how personal data are processed and to exercise your rights mentioned above, please contact us at: [email protected].

This website uses cookies. For more information on how these files are used, please access the following link: Cookie Policy.