Your right to request deletion

At Xenon Bright, we respect your privacy and your rights regarding your personal data.

In accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation, you may request the deletion of your Xenon Bright customer account and personal data associated with that account.

These deletion instructions apply to all Xenon Bright customer accounts, regardless of how the account was created or how you sign in.

This includes:

• accounts created directly on the Xenon Bright website using an email address and password;
• accounts created or accessed using Google Login;
• accounts created or accessed using Facebook Login;
• accounts associated with purchases made through the Xenon Bright online store.

You may request the deletion of your Xenon Bright customer account and eligible personal data associated with that account at any time, subject to applicable legal retention requirements.

How to request deletion of your account and personal data

You may request the deletion of your Xenon Bright account and associated personal data by sending an email to:

Email: comenzi@xenon-bright.ro

Please use the following subject:

Account and Personal Data Deletion Request

Please include:

• the email address associated with your Xenon Bright account;
• your full name, where necessary to identify your account;
• a clear statement that you request deletion of your Xenon Bright account and associated personal data.

Please do not send your password, payment card details, authentication codes or other unnecessary sensitive information.

For security and fraud-prevention purposes, we may request reasonable additional information to verify that the deletion request is being made by the account holder or by an authorised person.

The same procedure applies whether your account was created directly on Xenon Bright or through a supported third-party authentication service such as Google Login or Facebook Login.

Facebook Login users

If you created or accessed your Xenon Bright account using Facebook Login, you may request deletion of your Xenon Bright account and associated personal data by following the procedure described above.

You may also remove Xenon Bright from the applications and websites connected to your Facebook account through your Facebook account settings.

Removing the Facebook connection does not necessarily delete your Xenon Bright customer account or information that Xenon Bright is legally required to retain.

If you want your Xenon Bright account and eligible personal data to be deleted, please submit a deletion request using the procedure described on this page.

Google Login users

If you created or accessed your Xenon Bright account using Google Login, you may request deletion of your Xenon Bright account and associated personal data using the same procedure described above.

Disconnecting Xenon Bright from your Google account does not necessarily constitute a request to delete your Xenon Bright customer account.

What data may be deleted

Depending on how you use our services and subject to applicable legal requirements, deletion may include personal data associated with your customer account, such as:

• account profile information;
• contact information associated with your account;
• social login identifiers associated with your account;
• saved addresses and account preferences;
• data that is no longer necessary for the purposes for which it was collected;
• other personal data for which Xenon Bright has no legal obligation or valid legal basis to continue processing.

Where appropriate and permitted by law, certain information may be anonymised instead of deleted so that it can no longer be associated with an identifiable individual.

Information we may be required to retain

The right to erasure is not absolute.

Certain information may need to be retained where required or permitted by applicable European Union or national legislation.

This may include information necessary for:

• accounting and tax obligations;
• invoices and financial records;
• processing and documenting transactions;
• legal conformity and warranty obligations;
• handling returns, refunds, chargebacks and disputes;
• fraud prevention and security;
• compliance with legal, regulatory or administrative obligations;
• establishing, exercising or defending legal claims.

Where information must be retained for legal reasons, its processing will be limited to the purposes for which retention is required or otherwise permitted by law.

After the applicable legal retention period expires, the relevant information will be deleted or anonymised where appropriate.

Orders, invoices and transaction records

Deleting your Xenon Bright customer account does not necessarily result in the deletion of all information related to previous orders.

Certain order, invoice, payment, return, refund and transaction records may need to be retained for accounting, tax, consumer protection, warranty, fraud prevention or other legal purposes.

Where possible, information that is no longer required for those purposes may be deleted, restricted or anonymised.

Processing time

We will process valid requests without undue delay and within the time limits established by applicable data protection legislation.

Under the GDPR, requests concerning data subject rights are generally handled within one month of receipt.

Where permitted by law, this period may be extended if the request is particularly complex or if we receive a large number of requests. If an extension is necessary, you will be informed in accordance with applicable law.

Identity verification

To protect customer accounts and personal data against unauthorised deletion, fraud or impersonation, we may need to verify your identity before completing a deletion request.

We will request only information reasonably necessary to confirm your identity and process your request.

Consequences of account deletion

Once your Xenon Bright account has been deleted, you may lose access to:

• your Xenon Bright customer account;
• saved addresses;
• saved account preferences;
• account-specific features;
• information available exclusively through your customer account.

Account deletion may be irreversible.

Information that must be retained due to legal obligations may continue to exist in our systems for the applicable statutory retention period.

Other data protection rights

Depending on applicable law, you may also have other rights concerning your personal data, including:

• the right of access;
• the right to rectification;
• the right to restriction of processing;
• the right to data portability;
• the right to object to certain processing activities;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with a competent supervisory authority.

For more information about how Xenon Bright processes personal data and how you may exercise your rights, please consult our Privacy Policy / Personal Data Processing Policy.

Data Controller

The operator responsible for processing personal data through the Xenon Bright online store is:

BOZAVA MOB DESIGNE SRL
VAT number: RO28388523
Website: https://xenon-bright.com
Email: comenzi@xenon-bright.ro

For questions regarding privacy, account deletion or the exercise of your data protection rights, please contact us using the email address above.

Updates to these instructions

These account and personal data deletion instructions may be updated when necessary to reflect changes to our services, authentication methods, legal requirements or data protection practices.

The latest version will always be made available on this page.

```