Privacy Policy

Last updated: September 2026

1. Introduction

This Privacy Policy explains how DAK LUXURY SRL processes personal data in connection with the ATUM website, www.atumdiffuser.com, and the sale and delivery of ATUM products.

This Policy is intended to provide clear information about what personal data may be collected, why it is processed, how it may be shared, how long it may be retained, and the rights available to individuals under applicable data protection law.

2. Data Controller

The controller of personal data processed through the Website is:

DAK LUXURY SRL
CUI: RO51373055
Trade Registry No.: J2025014464002
Drumul Lăpuș Nr. 108–110, Camera 1, 1st Floor
Sector 1, Bucharest, Romania

Email: contact@atumdiffuser.com
Website: www.atumdiffuser.com

3. Applicable Data Protection Law

The processing of personal data is carried out in accordance with applicable data protection legislation, including, where applicable, Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR) and applicable Romanian data protection legislation.

The exact legal basis for a particular processing activity depends on the purpose for which the data is processed.

4. Personal Data We May Collect

Depending on how you interact with the Website, we may process:

identification and contact information, such as name, email address and telephone number;
billing and delivery information, such as billing address, delivery address and company information where applicable;
order information, including products purchased, order number, order date and transaction status;
information provided when you contact us regarding an order, return, refund, warranty or customer support request;
information necessary to process warranty or product-support requests, including photographs or videos supplied by you;
technical information relating to your use of the Website, such as IP address, browser type, device information and website interaction data, where collected;
cookie and similar technology data, in accordance with our Cookie Policy and your applicable choices;
marketing preferences and information relating to your consent or withdrawal of consent, where applicable.

5. How We Collect Personal Data

We may collect personal data:

directly from you when you place an order;
when you contact us by email or through the Website;
when you request a return, refund, warranty service or customer support;
automatically through the Website, where applicable, through cookies and similar technologies;
from service providers involved in payment, delivery, hosting, security, analytics or other Website operations, where such information is lawfully provided to us.

6. Purposes of Processing

We may process personal data for the following purposes:

processing and fulfilling orders;
processing payments;
arranging delivery;
communicating with customers about orders and transactions;
handling returns, refunds, complaints and warranty requests;
providing customer support;
maintaining, securing and operating the Website;
complying with legal, accounting, tax and regulatory obligations;
preventing fraud, misuse and security incidents;
defending or exercising legal claims;
sending marketing communications where permitted by law and, where required, based on consent;
analysing and improving the Website and customer experience where the relevant technologies are used lawfully.

7. Legal Bases for Processing

Depending on the processing activity, DAK LUXURY SRL may rely on one or more of the following legal bases:

performance of a contract – for example, processing information necessary to accept, process and deliver an order;
compliance with a legal obligation – for example, accounting, tax and regulatory obligations;
legitimate interests – where permitted by applicable law, for purposes such as Website security, fraud prevention, service improvement or the establishment, exercise or defence of legal claims;
consent – where processing requires your consent, such as certain forms of direct marketing or non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Online Payments

Online card payments for purchases made through the Website are processed through Stripe.

Payment card details are handled through the applicable payment-processing infrastructure and are not intended to be stored directly by DAK LUXURY SRL except where strictly necessary and lawfully permitted.

Stripe may process personal data in accordance with its own privacy documentation and applicable data protection requirements.

9. Sharing Personal Data

Personal data may be disclosed to third parties only where necessary for the purposes described in this Policy, where required by law, or where otherwise permitted by applicable law.

Depending on the Website's actual configuration, recipients may include:

payment service providers;
delivery and logistics providers;
Website hosting, IT and security providers;
service providers supporting customer communications;
accounting, legal and professional advisers;
public authorities, courts or other competent bodies where disclosure is legally required.

Service providers that process personal data on our behalf may act as data processors or other legally recognised recipients, depending on the nature of the service.

10. International Data Transfers

Some service providers used by the Website may process personal data outside Romania or the European Economic Area.

Where personal data is transferred outside the European Economic Area, DAK LUXURY SRL will apply the safeguards required by applicable data protection law, where such safeguards are necessary.

The specific international transfers depend on the third-party services actually integrated into the Website.

11. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Order, billing, accounting, tax, warranty and other business records may need to be retained for periods prescribed by applicable legal obligations.

Where processing is based solely on consent, personal data will be processed until consent is withdrawn, unless another lawful basis permits continued processing.

12. Cookies and Similar Technologies

The Website may use cookies and similar technologies for purposes such as Website functionality, security, analytics and, where applicable, marketing.

Non-essential cookies will be handled in accordance with applicable law and the user's applicable choices.

A separate Cookie Policy should be published on www.atumdiffuser.com and should describe the specific cookies and technologies actually used by the Website.

13. Data Security

DAK LUXURY SRL takes appropriate technical and organisational measures intended to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage.

Access to personal data is limited to persons and service providers who need it for legitimate business or legal purposes.

No online transmission or storage system can be guaranteed to be completely secure.

14. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may have the right to:

obtain information about the processing of your personal data;
request access to your personal data;
request correction of inaccurate or incomplete personal data;
request erasure of personal data;
request restriction of processing;
object to certain processing activities, including direct marketing;
request data portability where the legal requirements for portability are met;
withdraw consent where processing is based on consent;
lodge a complaint with the competent data protection supervisory authority.

Requests concerning your rights may be sent to contact@atumdiffuser.com.

We may need to verify your identity before fulfilling certain requests. Requests are handled within the time limits established by applicable law.

15. Marketing Communications

Where marketing communications are sent on the basis of consent, you may withdraw your consent or unsubscribe at any time.

You may also object to direct marketing where provided by applicable law.

If you unsubscribe from marketing communications, we may still send transactional or service-related communications that are necessary to fulfil an order or provide requested services.

16. Children

The Website is intended for general consumers and is not directed at children.

We do not knowingly seek to collect personal data from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to us unlawfully, please contact us at contact@atumdiffuser.com.

17. Third-Party Websites and Services

The Website may contain links to or integrations with third-party websites and services.

DAK LUXURY SRL is not responsible for the privacy practices of third parties operating independently from the Website. Their own privacy notices may apply to information processed through their services.

This includes payment providers and other third-party services integrated into the Website.