Privacy policy

Last Update: 29.03.2025

This Privacy Policy describes the policies of Nextthings S.R.L., headquartered in Cluj-Napoca, Strada TRAIAN VUIA, Nr. 42, Cluj County, registered in the Trade Register under no. J12/1420/19.03.2024, with the fiscal code 49790964, email nextthings.office@gmail.com, and phone number 0753128434, regarding the collection, use, and disclosure of your information that we collect when you use our website the-smart-nest.com.

By accessing or using the website, you agree to the collection, use, and disclosure of your information in accordance with this Privacy Policy. If you do not agree with this policy, please do not access or use the website.

We reserve the right to modify this Privacy Policy at any time, and the changes will be published on this page. Continuing to use our website after changes are made constitutes acceptance of the revised policy.

 

1. Collection of Personal Data

We collect personal data for processing orders and delivering purchased products.

  • First and last name
  • Email
  • Phone number
  • Delivery address
  • Billing address

 

2. How We Collect Personal Data

Data is collected through:

  • The order completion form
  • The contact form

 

3. Purpose of Collecting Personal Data

We use the collected data for:

  • Processing and delivering orders
  • Issuing invoices
  • Communicating with customers regarding placed orders
  • Providing technical or commercial support

If we wish to use your information for any other purpose than those mentioned above, we will ask for your consent and will only use your information upon receiving your consent and for the specific purpose(s) for which you granted consent, except when required by law.

 

4. Processing of Personal Data and Legal Grounds

Your personal data is processed to fulfill the legal obligations of NEXTTHINGS SRL, according to Article 6, paragraph 1, letters b) and c) of the GDPR.

If special categories of personal data are required, NEXTTHINGS SRL will request your consent in accordance with Article 9, paragraph (2), letter (a) of the GDPR.

 

5. Retention of Personal Data

We retain personal data only for the period necessary for the purposes for which it was collected, in accordance with legal and fiscal obligations.

 

6. Who Has Access to Your Data?

NEXTTHINGS SRL may transmit or allow access to this data to third-party companies (referred to as processors) for achieving the purposes mentioned above, such as:

  • Payment processing service providers
  • Newsletter transmission service providers
  • Accounting service providers
  • Payment service providers (Shopify POS)
  • Courier service providers

These companies are obligated to use the data securely and exclusively for the purposes specified by NEXTTHINGS SRL. They have access only to the personal data strictly necessary for providing the service established by NEXTTHINGS SRL and cannot use personal data for their own purposes. All processors we work with are in the European Union, and those in the United States are enrolled in the EU-U.S. Privacy Shield program.

For confidentiality, security, and commercial interest protection purposes, we prefer not to disclose the names of all these third parties, but we only refer to them as processors. A list of authorized persons with contact details may be provided to competent authorities or interested users, as required by law.

 

7. Your Rights

According to REGULATION (EU) 679/2016 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL of 27 April 2016, you have the following rights:

Right of access – You have the right to obtain confirmation from NEXTTHINGS SRL as to whether or not your data is being processed and, if so, to access:

  • The purposes of processing
  • The categories of personal data concerned
  • The recipients or categories of recipients to whom the personal data has been or will be disclosed, especially recipients in third countries or international organizations
  • The period for which personal data will be stored or, if that is not possible, the criteria used to determine that period
  • The existence of the right to request the rectification or deletion of personal data or the restriction of processing of personal data concerning the data subject, or the right to object to processing
  • The right to lodge a complaint with a supervisory authority
  • If the personal data is not collected from the data subject, any available information as to its source
  • The existence of automated decision-making, including profiling, referred to in Articles 22(1) and (4) of the GDPR, and at least in those cases, relevant information about the logic involved and the significance and consequences of such processing for the data subject

Right to obtain a copy – You may obtain a copy of the personal data being processed.

Right to rectification – You have the right to request the rectification of inaccurate or incomplete personal data without undue delay.

Right to erasure / Right to be forgotten – You have the right to obtain from NEXTTHINGS SRL the erasure of your personal data without undue delay when:

  • The data is no longer necessary for the purposes for which it was collected or processed
  • You withdraw your consent, and there is no other legal basis for processing
  • You object to the processing
  • The data has been processed unlawfully
  • The data must be erased to comply with a legal obligation

Right to restrict processing – You may exercise this right in the following cases:

  • The accuracy of the data is contested, during a period allowing the accuracy to be verified
  • The processing is unlawful, but you do not wish for the data to be erased, but rather restricted
  • NEXTTHINGS SRL no longer needs the personal data for processing, but you request it for the establishment, exercise, or defense of a legal claim
  • You have objected to processing, during a period where it is verified whether the legitimate interests of NEXTTHINGS SRL override your rights

Right to data portability – You have the right to receive personal data concerning you and provided to NEXTTHINGS SRL in a structured, commonly used, and machine-readable format and to transmit those data to another data controller, without hindrance from NEXTTHINGS SRL, where:

  • Processing is based on consent or a contract
  • Processing is carried out by automated means

Right to object – You have the right to object to the processing of your personal data, including profiling. NEXTTHINGS SRL will not process the data unless it demonstrates compelling legitimate grounds for the processing that override your rights and freedoms or that the processing is necessary for the establishment, exercise, or defense of a legal claim.

Right to be informed – You have the right to be informed about the processing of your personal data.

Right not to be subject to an automated decision – You have the right not to be subject to decisions based solely on automated processing, including profiling.

Right to file a complaint – You have the right to file a complaint with the national data protection authority (The National Supervisory Authority for Personal Data Processing).

Right to seek judicial remedy – You have the right to seek judicial remedy if your rights are infringed.

You can exercise all these rights by email at nextthings.office@gmail.com.

Please note that if you do not allow us to collect or process the personal information necessary, or if you withdraw your consent for processing the information for the requested purposes, you may not be able to access or use the services for which your information was collected.

 

8. Cookies and Tracking Technologies

Our site uses cookies provided through Shopify to ensure optimal functionality and analyze site traffic. For further details, please consult our Cookie Policy.

 

9. Data Security

We are committed to protecting your personal data by implementing appropriate security measures in accordance with existing legal and technical standards.

 

Privacy Policy Update – Meta Pixel & Data Sharing

1. How We Use Your Data
We use the Meta Pixel, advanced matching, and Conversions API to track customer activity on our store. This helps us improve your shopping experience and show you relevant ads on Facebook and Instagram.

2. What Data We Collect
When you interact with our website, we may collect and share the following types of data with Meta (Facebook):

  • Page and product views
  • Items added to or removed from cart
  • Search terms
  • Customer Click ID and Agent ID
  • Payment information (for transaction processing, not shared with Meta)
  • Initiated checkout and purchase details
  • Customer name, email, phone number, and address

3. How Your Data is Shared
This information is used by Meta to personalize your advertising experience. Customers can manage or disconnect their Off-Facebook Activity by adjusting their privacy settings on Facebook.

4. Your Privacy Rights
You have the right to:

  • Opt-out of data collection via your Facebook settings.
  • Request details on how your data is used.
  • Contact us for any concerns about your privacy.

For more details on how Meta (Facebook) uses data, please visit their privacy resources.

If you have any questions, feel free to contact us.

 

Contact

For any questions related to this Privacy Policy, you can contact us at nextthings.office@gmail.com or by phone at 0753128434.

This Privacy Policy applies to all users of the website the-smart-nest.com and complies with Romanian and European data protection laws.