GDPR COMPLIANT PRIVACY POLICY
The GDPR compliant privacy policy describes how your personal data is processed by Sofia Prodcom S.R.L. (hereinafter referred to as “the Company”).
According to the provisions of Regulation no. 679/2016 of the European Parliament and of the European Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Personal Data Regulation”), the Company has the obligation to manage under the conditions of security, only for the specified purposes and for the duration necessary to achieve those purposes, certain personal data that clients / potential customers (“Users”) provide.
“Processing” means any operation or set of operations performed on personal data or on personal data sets, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise available, alignment or combination, restriction, deletion or destruction.
The personal data that can be requested from the Users are as it follows:
a.) name and surname,
b.) the postal and / or electronic address,
c.) telephone number,
d.) banking data necessary to make the payment of the price of the products offered by the Company (“the Products“).
The processing of character data is performed for the purpose:
The conclusion and execution of the contract for the sale of the Products (according to art. 6 letter b) of the Personal Data Regulation), at the request of the Users, in situations such as:
a.) informing them about the various aspects related to the functioning of the site www.paleti.eu (the “Site“);
b.) recording, taking over and confirming the takeover of the order;
c.) issuing the accounting and fiscal documents related to the order (invoice and / or fiscal receipt);
d.) making the payment of the tariffs for the initiated order;
e.) launching the delivery order to the courier / transport company by generating the transport document;
f.) contact by the courier / carrier in order to deliver the order;
g.) contacting the representatives of the Company to confirm receipt of the order;
h.) the solution of the possible problems arising in connection with the taking and delivery of the order according to the options of the User etc.
Given that the delivery of the ordered Products is done through a courier or transport company, the personal data indicated above may be used, under the conditions provided in the Personal Data Regulation, and by the company for the purpose of carrying out the delivery obligation.
The refusal to provide this data makes it impossible to deliver the requested products.
If information is provided on behalf of a third party, the User must ensure that the third party has previously received this privacy policy. Potential users under the age of 16 are asked not to provide us with any information, unless they have the permission of the parent or tutor for this purpose.
We ask you to help us update the information by notifying us of any changes in the contact details.
Also, if the Users want and express their consent, the personal data could be used for the communication by the Company of various information and materials regarding the Products, such as new offers, price changes, change of the mechanism of granting discount, packing changes, rebranding, creating new products, new variants of the Products, various articles on the Products, evaluating the quality of the Products, invitations to various events, etc. The consent can be expressed on the Site, by post or email. In addition, in order to receive congratulations from the Company, the User is requested the date of birth and the consent for its processing for the purpose specified above.
“Consent” means the manifestation of free, specific, informed and unambiguous will of the User by which he accepts, by an unequivocal declaration or action, that the personal data concerning him are processed by the Company.
After the purpose of collecting, storing, using, as mentioned above, the personal data will be deleted from the Company’s records. However, in certain situations permitted by the applicable law such as those mentioned below, the respective data could be further processed under the legal conditions:
However, in certain situations permitted by the applicable law such as those mentioned below, the respective data could be further processed under the legal conditions:
- the fulfillment by the Company of some legal obligations (such as keeping accounting and tax documents for a period of 10 years, etc.) (pursuant to art. 6 letter c) of the Regulation);
- there is the consent of the Users to receive various communications from the Company (according to art. 6 letter “a” of the Regulation).
In view of the provisions of the Personal Data Regulations, the User has the following rights:
a.) the right to be informed about:
- the identification and contact details of the Company,
- the purposes of processing own personal data,
- the legal basis for the processing of own personal data,
- the recipients or categories of recipients of personal data,
- the period of storage of personal data or the criteria for establishing this period;
b.) the right of access, rectification, deletion of personal data;
The user has the right to request a copy of the personal data held by the Company in connection with it. For this purpose, the User can contact us at the email address mentioned in the contact section of our site.
If the data held in connection with a User is not correct, he has the right to request the rectification of said data. If the data we hold needs to be updated or corrected, the User can contact us at the email address mentioned above.
The Company will only process and retain the User’s data for as long as is necessary for the purpose for which they were provided and for any other related purposes permitted (for example, in connection with any information in connection with which there are reasonable grounds that defense or prosecution will be required. or making claims against a person whose personal data we have collected, ours or a third party, we can keep these data as long as this claim could be within the legal term to be formulated). Therefore, if the information is used for two purposes, we will hold it until the end of the period with the longest period; but we will stop using it for a shorter period of time once that period has expired.
In connection with the information used for customer support and marketing purposes, it is possible to keep the information for this purpose until the request to unsubscribe / during the collaboration period.
Our retention periods are based on the needs of our activity, and information that is no longer required is irreversibly anonymized (and anonymous information can be kept) or securely destroyed.
In certain circumstances, the User has the right to ask us to delete his personal data that we hold.
c.) the right to restrict the processing;
We restrict access to personal data to those who need to use it for relevant purposes.
If the User considers that we should not process his / her data, please contact us for a discussion regarding his / her rights. In certain circumstances, the User has the right to ask us to restrict the processing.
d.) the right of portability of personal data (starting with May 25, 2018);
e.) the right to withdraw the consent at any time;
f.) the right to lodge a complaint with the supervisory authority for respecting personal data (National Supervisory Authority for Personal Data Processing, www.dataprotection.ro).
For the exercise of any of these rights, the User may transmit to the Company, using the data mentioned above a written, dated and signed request.
