Privacy policy

Last updated: July 2, 2026. Document version: 2026.06.

Data controller

Media Design SRL (Avelle), registered office at Str. Exemplu nr. 1, București, România, VAT RO00000000, Trade Register no. J00/0000/2024, is the controller of the personal data collected through the online store http://mdlabs-shop.local. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data we collect

We collect the data you provide when creating an account and placing an order: first and last name, shipping and billing address, email, phone number, and order details. We also automatically collect technical data (IP address, browser type, pages visited) through cookies.

Purpose and legal basis

• Performance of contract — processing and delivering orders, handling returns (Art. 6(1)(b) GDPR).
• Legal obligations — issuing invoices and keeping accounting records (Art. 6(1)(c)).
• Legitimate interest — fraud prevention and service improvement (Art. 6(1)(f)).
• Consent — marketing communications, only where you have opted in (Art. 6(1)(a)).

Retention

We retain data for the duration of the contractual relationship and afterwards in line with statutory archiving periods (generally 10 years for financial records). Data processed on the basis of consent is kept until consent is withdrawn.

Your rights

Under the GDPR you have the right of access, rectification, erasure ("right to be forgotten"), restriction, data portability and objection, as well as the right to withdraw consent at any time. To exercise these rights, contact us at contact@avelle.ro.

Complaints

If you believe your rights have been infringed, you may lodge a complaint with the competent data protection supervisory authority (in Romania, the National Supervisory Authority for Personal Data Processing — www.dataprotection.ro).