UNDS

Privacy Policy

This document explains how UNDS, operated by World Wide Zoo SRL, headquartered in Bucharest, Sector 3, Aleea Fetești, Nr. 2-4, o cameră, Bloc I25, Scara 2, Etaj 2, Ap. 22, registered with the Trade Register Office under no. J40/12484/2020 CUI 43110678, processes your personal data and ensures its protection, in accordance with applicable legislation, including Regulation (EU) 2016/679 (GDPR).

This notice applies to data processing carried out by UNDS. This document is relevant to you as a user of our website and services.

This notice covers, in the following order:

  • categories of personal data we process;
  • purposes for which we process that personal data;
  • grounds that justify our processing;
  • persons to whom we disclose the data;
  • period for which we store the data;
  • consequences of refusing to provide us with your personal data;
  • your rights and information about how to exercise them;
  • our contact details;
  • situations in which this notice applies and its modifications.

1. Categories of Data, Purpose, Grounds

1.1. Users of UNDS

We may process personal data for:

Creating and managing your account. When you sign in or create an account, we use Clerk to authenticate you and may process your Clerk user identifier, email address, profile image, authentication-provider information, username, preferred currency, and shoe size. The processing is necessary to provide our services and manage your account.

Providing inventory and collection-management services. We process the information you enter into UNDS, including products, sizes, condition, purchase and sale dates, purchase and sale prices, currencies, sale platforms, and storage locations, to provide the features you request.

Operating our services. We use your data to ensure the operation and security of our services, process interactions, prevent abuse, and evaluate and improve service functionality. The grounds will be, as applicable, performance of a contract, our legitimate interest, consent, or a legal obligation.

Public profiles and user content. User profiles are public by default, but you may make your profile private using the setting available in your account. Depending on your settings and the relevant feature, your username, avatar, collection information, and activity may be displayed publicly. Images uploaded by you may be displayed on product pages with your username and upload date.

Inventory and collection data. Parts of your inventory and collection are displayed on your profile when your profile is public. This may include the products in your current collection, their sizes and condition ratings, collection totals and summaries, and other information presented through the profile and activity features. Purchase prices, sale prices, purchase and sale dates, currencies, sale platforms, storage locations, and other details that are not displayed on your public profile remain private account data.

Handling your requests. We will use your data to respond to requests, complaints, or other questions you send us. The grounds will be, as applicable, your consent, performance of a contract, or our legitimate interest.

Marketing communications. Where you voluntarily subscribe to our newsletter or launch communications, we process your email address and optional name details on the basis of your consent. You may withdraw your consent or unsubscribe at any time.

1.2. If You Are a Visitor to Our Website or Have Interacted with Any of Our Social Media Pages

In this case, we may use your personal data for the following purposes:

Improving your website experience.

To take into account preferences you've expressed in previous browsing sessions, to adapt our website to your device, to solve problems you might encounter when accessing it, we process usage logs.

Understanding your opinions.

When you contact us, send us feedback, or otherwise interact with our pages or communications, we will mainly process the data you've provided and the content of your request or message.

Managing our IT systems and protecting them.

We may process your data for: managing our communication systems; managing our IT security; conducting security audits of our IT networks; protecting our data and systems against attacks and similar acts in the virtual environment.

1.3. In General, Regardless of Your Position

We may also process your data for the following purposes:

Handling your requests.

We will use your data to respond to any requests, requirements, complaints, or other questions you address to us.

Responding to authority requests or processing data in other cases where the law requires us to.

Sometimes we may have a legal obligation to communicate your data to certain authorities, to store your data for a certain period, or to process your data in another way.

Conducting transactions, restructuring, or other operations.

In the context of transactions, we may disclose your data to potential buyers or their consultants or authorities, although we will try to minimize this as much as possible.

Protecting our rights and interests or those of other persons.

We may process your data to establish, exercise, or defend our rights or interests or those of other persons before courts, enforcement officers, notaries, other public authorities, arbitration tribunals, mediators, or other public or private bodies that resolve disputes.

Fraud prevention.

We are interested in conducting our activity legally. Therefore, we may process your data, such as by transmitting this data to our consultants in various fields - auditors, lawyers, etc., or by consulting this data.

1.4. About Third-Party Data

If you provide us with personal data about other persons (e.g., your representatives, family members, dependents, etc.), you must ensure that you have informed them about this and directed them to this notice regarding how UNDS processes personal data.

We will inform the respective persons appropriately about how we process their data, when applicable.

2. To Whom We Disclose Your Personal Data

As a rule, we do not disclose your data to other natural or legal persons. We limit access to data for persons outside the UNDS web-app, but in certain cases, it may be necessary to disclose your data as described below.

We may disclose data to service providers that help us operate UNDS, including Clerk, Vercel Analytics, Cloudflare R2, Resend, Sanity, StockX, Discord, PlanetScale, and hosting providers. We may also disclose data to professional advisers or authorities where necessary or required by law.

3. Conditions for Transferring Your Data to Third Countries

Our service providers may process personal data in countries outside the European Economic Area. Where required, we use legally recognised safeguards for international data transfers, such as adequacy decisions or standard contractual clauses.

4. How Long We Keep Your Data

We store your data in accordance with our personal data storage policy, which assigns a storage period based on the processing purpose and the category of data processed.

5. What Happens If You Don't Provide Us With Data

In most cases, you are not obliged to provide us with your personal data. However, if you do not provide the requested data, we may not be able to create or maintain your account, provide particular features, process your inventory, respond to your requests, or send communications you requested.

6. Absence of Automated Decision-Making

We do not make decisions based solely on automated processing of your data, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

7. Your Rights and How to Exercise Them

Your Rights

  • Right of access to data
  • Right to rectification of data
  • Right to erasure of data ("right to be forgotten")
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to withdraw consent
  • Right to lodge a complaint with the supervisory authority

You can exercise these rights by contacting World Wide Zoo SRL through the contact details provided by UNDS.

8. Our Contact Details

You can contact us at the following details:

Full name: UNDS (World Wide Zoo SRL)
Correspondence address: Bucharest, Sector 3, Aleea Fetești, Nr. 2-4, o cameră, Bloc I25, Scara 2, Etaj 2, Ap. 22
Email address: hello@wwz.ro
Website: www.unds.app

9. When This Notice Applies

This general notice applies to the processing of data concerning you by UNDS.

10. Modifications to This Policy

We may modify this policy. In such cases, we will inform you in advance by posting this policy on the website 30 days before it takes effect.

This version of the policy will take effect on September 13, 2026.

11. What the Terms Used in This Notice Mean

Supervisory Authority for Personal Data Processing:

an independent public authority that, according to the law, has responsibilities regarding the supervision of compliance with personal data protection legislation. In Romania, this supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Special Categories of Personal Data (Sensitive Personal Data):

personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data for the unique identification of a natural person; data concerning health, sex life, or sexual orientation of a natural person.

Personal Data:

any information relating to an identified or identifiable natural person (referred to as "data subject"). A natural person is identifiable if they can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Controller:

the natural or legal person who determines the purposes and means of processing personal data. According to the law, the responsibility for compliance with personal data legislation rests primarily with the controller. In our relationship with you, we are the controller, and you are the data subject.

Processor:

any natural or legal person who processes personal data on behalf of the controller, other than the controller's employees.

Data Subject:

the natural person to whom certain personal data refers (to whom the data "belongs"). In our relationship with you, you are the data subject.

Processing of Personal Data:

any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data/sets of personal data.

Third Country:

a country outside the European Union and the European Economic Area.