Privacy Policy

Privacy Policy of  Email:
This website collects some Personal Data from its Users.In compliance with the provision of Article 13 of Regulation (EU) no. 2016/679 known as “GDPR”, in its capacity as a data controller Spalli Collection SRL wishes to inform your that your personal data will be processed using the methods and for the purpose set out bellow:

Owner and Data Controller

Spalli Collection SRL
Registration number: 40393464 | VAT number: RO40393464  
Owner contact email:

Purpose of processing

1. Processing Orders and Customer Service
We will use your details to effectively conduct our business, fulfilling our agreement with you including order processing and customer services, like requests for information received through this Website.
2. Email Newsletters and E-Communications
We will send you our biweekly email newsletter informing you of products, exhibitions, and other news which we consider may be of interest to you. We will only do this if you have signed up to our mailing list via our website or social media channels, or provided written consent. You may instantly unsubscribe from our mailing list at any time by using the unsubscribe link in any of our email newsletters. Alternatively, you can submit your unsubscribe request to
3. Making Improvements to our Website and Services.We will make improvements to by monitoring how you use it. Gathering your feedback will help us to improve our services, for example, our email newsletters.
4. Advertising, Analytics, Remarketing and behavioural targeting​We reserve the right to keep all queries, feedback, and customer details on Spall’ s client management system and/or ordering system until such a time we deem it suitable to destroy them.

We will take all reasonable steps to ensure all information remains confidential.

Types of Data collected

You may provide us with your personal information by filling in forms on our website or by corresponding with us by phone, email, at exhibitions or otherwise. Among the types of Personal Data, we collect, there are: first name; last name; phone number; company name; address; state; province; email address; ZIP/Postal code; city; website; Cookies; Usage Data using Google Analytics, Internet Protocol (IP) address, and details of which version of web browser you use.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using Any use of Cookies – or of other tracking tools – by or by the owners of third-party services used by, serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available. Users are responsible for any third-party Personal Data obtained, published or shared through and confirm that they have the third party's consent to provide the Data to the Owner.
Keeping your data secured
We won’t share your information with any other organisation for marketing, market research or commercial purpose, and we don’t pass your details to other websites.Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit. Any data you send is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:
Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal Data is subject to European data protection law; provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof; processing is necessary for compliance with a legal obligation to which the Owner is subject; processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner; processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.


We store your data on secure servers in the European Economic Area (EEA), and the data may also be transferred to and stored at a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
a. Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
b. Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfil such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.
c. The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
- Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

How to exercise your rights

You can find out what information we hold about you, and ask us not to use any of the information we collect. If you’ve signed up for our email newsletters, you can unsubscribe at any time by selecting one of the two ‘unsubscribe’ links that appear in every email, or by writing to us at

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, sent to you by email. Please check back frequently to see any updates or changes to our privacy policy.