Privacy Policy

This Privacy Policy explains how ALDA ZAIA S.R.L. (“the Company”, “we”, “us”, or “our”) collects, uses, stores, and protects the personal data of users and customers when they access or use the website [www.merlinsmerch.com] (“the Website”).
This Privacy Policy is part of and should be read together with the Terms and Conditions available on the Website.

The data controller responsible for processing your personal data is:

ALDA ZAIA S.R.L.
Registered office: com. Dumbrava Rosie, str. Teiului, no. 56, county Neamț, country România
Trade Register no.: J2025041845005
VAT number: RO51954899
Email: contact-us@merlinsmerch.com
Phone: 0040748460239

3. Categories of Personal Data We Process
We may collect and process the following categories of personal data:
Identification data: name, surname
Contact data: email address, phone number
Delivery and billing data: address, city, postal code
Order-related data: purchased products, order history
Payment-related data (processed securely by payment providers; we do not store card details)
Technical data: IP address, browser type, device, cookies
Communication data: messages sent via email or contact forms
4. Purposes and Legal Basis of Processing
We process personal data for the following purposes:
Processing and delivering orders (performance of a contract)
Issuing invoices and fulfilling legal accounting obligations (legal obligation)
Communicating with customers regarding orders or requests (legitimate interest / contract)
Handling returns, withdrawals, and complaints (legal obligation)
Improving the Website and user experience (legitimate interest)
Marketing communications (only with your explicit consent)
5. Data Retention
Personal data is stored only for the period necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations.
After this period, data will be deleted or anonymized.
6. Disclosure of Personal Data
We may disclose personal data only to the extent necessary to:
Courier and delivery service providers
Payment processors
IT and hosting service providers
Public authorities, when required by law
All third parties are contractually bound to ensure the confidentiality and security of personal data.
7. International Data Transfers
Personal data is not transferred outside the European Economic Area (EEA), unless adequate safeguards are in place, in accordance with GDPR requirements.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
However, no method of data transmission over the Internet is completely secure, and we cannot guarantee absolute security.
9. Your Rights as a Data Subject
Under GDPR, you have the following rights:
Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority
To exercise your rights, you may contact us at [email@domain.com].
10. Cookies
The Website uses cookies and similar technologies to ensure proper functionality and improve user experience.
Detailed information about cookies is available in the Cookies Policy on the Website.
11. Marketing Communications
We will send marketing communications only if you have provided explicit consent.
You may withdraw your consent at any time by using the unsubscribe option or by contacting us directly.
12. Data of Minors
The Website is not intended for individuals under the age of 18.
We do not knowingly collect personal data from minors.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time.
Any changes will be published on the Website and will apply from the date of publication.
14. Contact
If you have any questions regarding this Privacy Policy or how we process personal data, please contact us at: contact-us@merlinsmerch.com
Last updated: 27.04.2026