Privacy Policy - cadou.me

cadou.me PRIVACY POLICY

Last updated: 10/04/2025

Protecting your privacy is of utmost importance to cadou.me. This Privacy Policy outlines how we collect, process, and safeguard your personal data when you use our website at cadou.me and the cadou.me platform (collectively referred to as the "Services").

By using our Services and providing your personal data, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 10/04/2025.

DATA CONTROLLER

cadou.me is owned and operated by an individual based in Moldova.

Email: [email protected]

Hereinafter referred to as "cadou.me", "we", "us", or "our".

1. PERSONAL DATA WE COLLECT

When you create a profile on cadou.me, we collect the following personal data:

Name, email address, and optional information like physical address, telephone number, date of birth, and gender
Information about events for which you are creating wishlists (such as birthdays, anniversaries, and other special occasions)
Usage data including your interactions with the platform, items you add to wishlists, and reservation status of your wishes
Account preferences and settings you configure on our platform

We do not collect special categories of personal data (sensitive data) such as information about your race, political opinions, religious beliefs, health, or biometric data.

2. SOURCES OF YOUR PERSONAL DATA

We collect personal information that you voluntarily provide when:

Creating and managing your account
Setting up and updating your profile
Creating and sharing wishlists
Communicating with us through contact forms or email
Subscribing to our newsletters or notifications

We may use your device (phone, computer, or tablet) to record your preferences and optimize the user experience. This helps us reduce errors, update prices, and enhance the functionality of our Services.

If you choose not to provide certain personal data, you may not be able to use some features of our Services or we may not be able to enter into a contractual relationship with you.

3. HOW WE USE YOUR PERSONAL DATA

We use your personal data for the following purposes:

Based on contract performance (GDPR Article 6(1)(b)):

To create and manage your account
To provide and personalize our Services
To process your wishlists and enable sharing features
To enable communication between users regarding gifts and events

Based on legitimate interests (GDPR Article 6(1)(f)):

To improve and develop our Services through analysis of user behavior
To troubleshoot technical issues and enhance platform security
To respond to your inquiries and provide customer support
To suggest products that may interest you based on your preferences
To display contextual marketing within our Services
To prevent fraud and ensure compliance with our terms of service
To establish, exercise, or defend legal claims if necessary

Based on your consent (GDPR Article 6(1)(a)):

To send you marketing communications via email or text message
To use cookies for analytics and personalization purposes
To connect your account with third-party services when you choose to integrate them

Based on legal obligations (GDPR Article 6(1)(c)):

To comply with applicable laws and regulations
To respond to lawful requests from public authorities
To maintain records required by law

4. DISCLOSURE OF YOUR PERSONAL DATA

We may share your personal data with:

Service providers who help us operate our business and deliver our Services (including hosting providers, payment processors, analytics services, and customer support tools)
Business partners for marketing purposes within our Services (with appropriate safeguards)
Other users when you choose to share your wishlists or profile information with them
Law enforcement agencies or courts when legally required or to establish, exercise, or defend legal claims
Potential buyers if our business or assets are acquired (in which case personal data would be one of the transferred assets)

All third-party service providers who process data on our behalf are bound by data processing agreements that require them to protect your personal data and only process it according to our instructions.

5. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

While your account is active and you're using our Services
As required to comply with legal obligations
As needed to establish, exercise, or defend legal claims
For a reasonable period after account closure to allow for potential reactivation

If you have not used our Services for a period of 3 years, we may delete your account data or anonymize it so that it can no longer be associated with you. For wishlist data related to annual events, we retain this information to provide continued service unless you specifically request deletion.

6. INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we implement appropriate safeguards to ensure that your data receives adequate protection, including:

Relying on adequacy decisions by the European Commission for countries providing adequate protection
Using Standard Contractual Clauses approved by the European Commission
Implementing additional technical and organizational measures to protect your data

7. YOUR PRIVACY RIGHTS

Depending on applicable law, you may have the following rights regarding your personal data:

Right to access: Request confirmation of whether we process your personal data and obtain a copy of that data
Right to rectification: Request correction of inaccurate data or completion of incomplete data
Right to erasure: Request deletion of your personal data under certain circumstances
Right to restrict processing: Request that we limit how we use your data in certain cases
Right to data portability: Receive your data in a structured, commonly used format and transfer it to another provider
Right to object: Object to our processing of your data based on legitimate interests or for direct marketing
Right to withdraw consent: Withdraw consent at any time when processing is based on your consent
Right to lodge a complaint: File a complaint with a supervisory authority if you believe your rights have been violated

To exercise your rights, please contact us at [email protected]. We will respond to your request within one month, though in complex cases this period may be extended by an additional two months.

8. THIRD-PARTY LINKS AND SERVICES

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by cadou.me. This Privacy Policy applies only to our Services and not to any third-party websites or services.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

When you click on links to purchase items from merchants, you will be redirected to their websites where different privacy policies apply. In some cases, we may receive a commission when purchases are made through these links.

9. CHILDREN'S PRIVACY

Our Services are not intended for use by children under the age of 13 without parental consent. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at [email protected], and we will take steps to remove such information from our systems.

10. SECURITY MEASURES

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data during transmission and at rest
Regular security assessments and testing
Access controls and authentication requirements
Staff training on data protection practices

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

If you believe your personal data has been compromised, please contact us immediately at [email protected].

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on our website with the effective date at the top.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

12. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

We will respond to your inquiry as soon as possible and no later than one month from receipt.