Last updated: 4th December 2025

1. Controller Identification

DIGITALEASE SOLUTIONS S.R.L.
VAT: RO47543828
Address: Soseaua Mihai Bravu 188, Bl. 211, Sc. 2, Et. 4, Ap. 49, Sector 2, Bucharest, Romania
Email: contact@minoxidil.eu
Phone/WhatsApp: +40 750 206 470

DIGITALEASE SOLUTIONS S.R.L. (“we”, “us”, “our”) is the controller responsible for processing your personal data collected through www.minoxidil.eu (the “Website”).

This Privacy Policy applies solely to data collected through this Website, including browsing, purchasing, and customer support interactions.

Nature of Business
The Website sells cosmetic and dermatological products, including Minoxidil-based solutions and related personal care items. The information provided on the Website is for general informational purposes only and does not constitute medical advice. We do not operate as a pharmacy and do not sell prescription-only medicines.

If you do not agree with this policy or our Terms & Conditions, please discontinue using our Website.

2. How We Collect Personal Data

We collect data in the following ways:

2.1 Directly from You

When you:

• Place an order

   

• Create an account

   

• Subscribe to newsletters

   

• Contact us (email, form, WhatsApp, phone)

   

2.2 Automatically When You Use the Website

Through:

• Cookies and tracking technologies

   

• Server logs

   

• Device data

   

2.3 From Third Parties

Examples:

• Payment providers confirming a transaction

   

• Courier services providing delivery updates

   

• Marketing/analytics providers (if you consent to their cookies)

   

We do not purchase data from external sources.

3. What Personal Data We Collect

3.1 Website Function & Administration

• Name, surname

   

• Email address

   

• IP address

   

• Device data (browser type, OS, screen resolution)

   

• Cookie identifiers

   

• Date/time of access

   

3.2 Orders & Payments

• Name, surname

   

• Billing and delivery address

   

• Email and phone number

   

• Order details, transaction data

   

• Payment confirmation (no card numbers stored)

   

3.3 Marketing (with your consent)

• Email address

   

• Preferences & interests

   

• Behavior data (via analytics/marketing cookies you accept)

   

3.4 Customer Service

• Name, contact details
• Order references
• Chat/email/phone interactions
• Support notes

   

3.5 Legal & Archiving

• All information necessary for invoicing, disputes, fraud prevention, and compliance with Romanian/EU law.

   

We do not collect special-category data unless you voluntarily provide it.

4. Purposes & Legal Bases of Processing

Purpose	Data Used	Legal Basis
Processing orders and deliveries	Identity, contact details, shipping address, order details	Contract performance (Art. 6(1)(b))
Payment processing	Transaction and billing details	Contract performance / Legal obligation
Customer service & support	Contact details, order history	Legitimate interest (Art. 6(1)(f))
Account management	Login details, profile data	Contract performance
Marketing emails	Contact details, preferences	Consent (Art. 6(1)(a))
Analytics (Google Analytics, etc.)	Cookie data, browsing behavior	Consent
Website security, fraud prevention	IP, device data, logs	Legitimate interest
Legal compliance & accounting	All relevant data	Legal obligation (Art. 6(1)(c))

5. Profiling & Automated Decision-Making

We may perform basic profiling for:

• Tailoring newsletter content

   

• Customizing product recommendations

   

• Measuring advertising performance

   

This profiling does not produce legal or significant effects for users.

You may object to profiling at any time by contacting us.

6. Cookies & Tracking Technologies

We use cookies to improve site functionality, analyze traffic, and measure marketing performance.

6.1 Cookie Types

• Strictly Necessary (no consent required) — site functionality, cart, security

   

• Analytics (consent required) — Google Analytics or similar

   

• Functional (consent required) — remembering language, region

   

• Marketing (consent required) — Meta Pixel, Google Ads, etc.

   

6.2 Your Choices

You may:

• Accept or reject non-essential cookies using the cookie banner
• Withdraw consent at any time via “Cookie Settings”
• Block cookies in your browser

   

Analytic, marketing, and advertising cookies (including Google Analytics, Google Ads, and Meta Pixel) are loaded only after you provide explicit consent through the cookie banner. You may withdraw or change your consent at any time via the “Cookie Settings” panel, and the Website will stop loading non-essential cookies from that point forward.

6.3 Third-Party Cookies

If enabled by you, third parties may set cookies, such as:

• Google Ireland Ltd (Analytics, Ads)
• Meta Platforms Ireland Ltd (Facebook Pixel)
• Email/marketing tools (MailChimp, Klaviyo, Brevo, etc.)

6.4 Advertising, Analytics & Remarketing Tools

We use the following advertising and analytics tools on the Website, only after you provide consent for non-essential cookies:

• Google Analytics (Google Ireland Ltd.) to understand how visitors use the Website and to measure traffic and performance.

• Google Ads Conversion Tracking (Google Ireland Ltd.) to measure the effectiveness of our advertising campaigns.

• Meta (Facebook) Pixel (Meta Platforms Ireland Ltd.) to measure ad performance and improve audience targeting.

These tools may collect or receive information such as IP address, device identifiers and characteristics, cookie IDs, pages viewed, actions taken on the Website, and browsing behavior. The data is used for analytics, advertising measurement, and optimization.

If you consent to marketing/advertising cookies, we may also use:

• Google Ads Remarketing to display personalized ads to users who previously interacted with our Website.

• Meta Custom Audiences to show personalized ads on Meta platforms based on your interactions with our Website.

Remarketing activities rely on cookies or hashed identifiers and are activated only after your explicit consent. You can opt out at any time by withdrawing cookie consent (see Section 6.2).

A full list of cookies (name, duration, purpose) is available in our Cookie Policy or “Cookie Settings” panel.

7. International Data Transfers (GDPR Art. 44–49)

Some providers may process data outside the EU/EEA, including in the United States.

Where this occurs, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Additional technical and organizational measures

We ensure all transfers comply with GDPR.

The Website is hosted on servers located within the European Union, ensuring that primary hosting remains inside the EU/EEA. Where external service providers are involved (e.g., analytics or email tools), any data transfers outside the EU/EEA are handled as described in Section 7.

8. With Whom We Share Your Data

We share your data only when necessary and only with:

8.1 Service Providers (Processors)

Under strict Data Processing Agreements:

• Payment processors (e.g. Stripe, PayPal, Viva Payments)
• Couriers (Fan Courier, DHL, DPD, etc.)
• Web hosting providers
• Email/Newsletter services
• Analytics & marketing tools (only if you consent to their tracking)

Payments on the Website are processed by Stripe, PayPal, and Viva Payments (as applicable). These providers process payment information directly and securely. We do not store, access, or process full card details (such as card number, CVV, or full expiration data). We only receive confirmation that a payment was completed successfully.

8.2 Public Authorities

If legally required by:

• Courts
• Police
• Tax authorities

   

8.3 Internal Group Companies

Only when necessary for internal administration.

We never sell personal data.

We do not sell personal data and we do not share personal data with third parties for their own independent advertising purposes unless you have provided consent for such sharing through cookies or other explicit choices. We also do not collect sensitive medical or health information through the Website. Any product-related questions you choose to send us are treated as regular customer service communications.

9. Data Retention

We retain data only as long as needed or required by law:

Data Category	Retention Period
Order & invoicing data	5–10 years (legal obligation)
Customer account data	Until account deletion
Customer service communications	Up to 3 years
Marketing data	Until consent withdrawal or inactivity for 24 months
Analytics data	14–26 months (depending on provider settings)
Server logs	12–24 months

After expiration, data is securely deleted or anonymized.

10. Data Security

We implement technical and organizational measures, including:

• HTTPS/TLS encryption

   

• Encrypted servers & backups

   

• Restricted access control

   

• Monitoring & auditing

   

• Secure password hashing

   

• Regular vulnerability assessments

   

While no system is 100% secure, we follow industry best practices to protect user data.

11. Your GDPR Rights

You have the right to:

• Access your data

   

• Rectify inaccurate information

   

• Erase your data (“right to be forgotten”)

   

• Restrict processing

   

• Withdraw consent

   

• Object to legitimate interest processing

   

• Port your data

   

• Not be subject to certain types of automated decision-making

   

• Lodge a complaint with ANSPDCP (Romanian Data Protection Authority)

   

To exercise any right, contact: contact@minoxidil.eu

Requests are processed within 30 days.

12. Children’s Data

• We do not knowingly collect data from children under 14 years old.

   

• Minors aged 14+ may use our services only with guardian consent.

   

• Marketing communications are not targeted at minors.

   

13. International Hosting

Our website is hosted on servers located within the European Union.
Some backups or external service providers may involve transfers outside the EU, handled as described in Section 7.

14. Data Protection Officer

DIGITALEASE SOLUTIONS S.R.L. is not legally required to appoint a Data Protection Officer under GDPR.
For privacy inquiries, please contact: contact@minoxidil.eu

15. Changes to This Policy

We may update this Privacy Policy periodically.
The latest version will always be available on this page with the updated date above.

16. Contact Information

DIGITALEASE SOLUTIONS S.R.L.
Soseaua Mihai Bravu 188, Bl. 211, Sc. 2, Et. 4, Ap. 49, Sector 2
Bucharest, Romania

• Email: contact@minoxidil.eu

   

• Phone/WhatsApp: +40 750 206 470

   

Working hours: Mon–Sat, 08:00–20:00 (GMT+2)