Privacy Policy regarding the processing of personal data

The Company processes a series of personal data of Users (whether registered or not) when using the Site https://andruino.ro/ and/or any Service offered by our company. This privacy policy describes what types of personal data are processed, how they are used, what are your options in relation to this processing, as well as how we will respect your rights as a data subject under the legislation on the protection of personal data, including Regulation (EU) 2016/679 (“GDPR”). BEFORE USING THE SITE OR ANY OF OUR SERVICES, WE RECOMMEND THAT YOU CAREFULLY READ THIS POLICY TO UNDERSTAND HOW YOUR PERSONAL DATA IS PROCESSED.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

S.C. ANDRUINO S.R.L., based in Romania, is the personal data controller, in accordance with the legislation on the protection of personal data including GDPR, with regard to the personal data of Users collected and processed through the Site https://andruino.ro/ and/or in the context of the Services offered through or in connection with the Site. For the activity of processing personal data, the Company can be contacted using the following contact details: contact@andruino.ro

2. WHAT DATA DO WE PROCESS?

The Company processes the personal data that you provide to us when you use the Site, register on our page, contract a service, sign up for our campaigns (and/or campaigns organized together with our partners), wish to receive commercial communications, or contact us by any means of communication. If you have contacted our company S.C. ANDRUINO S.R.L. through the contact form present on the website https://andruino.ro/, the data communicated by you (name, surname, address, telephone, email and any other personal data communicated) will be stored and processed due to the fact that by sending the data you have given your express consent for their processing.

3. PROVIDING PERSONALIZED OFFERS

In certain situations, we may use the information collected from you in combination with the data we obtain from our sales and/or marketing teams regarding your interaction with the Company, which we may use in the context of our marketing communications. We wish to streamline our marketing activity, offering our customers relevant and personalized products/services.[Also, if you agree, we may perform advanced analyses regarding your interests and preferences resulting from the information we hold about you. from your interaction with us, as well as by combining data obtained from third parties (e.g. through web browsing analysis technologies) to send you commercial communications tailored to your needs and preferences.] We may carry out various reports, analyses and statistical studies regarding the organized marketing campaigns and their success, sales activity / processing.

4. EXECUTION OF THE CONTRACT CONCLUDED WITH US

When you request the provision of services, we may process certain personal data necessary for these purposes (e.g. name and surname, delivery / supply address, transaction data, etc.)

5. MANAGEMENT OF THE RELATIONSHIP BETWEEN USERS AND SUPPORT

We have the interest in providing adequate services through the Site to all persons who access it. Therefore, we process a series of personal data for the purpose of managing relations with Site Users, for example when they contact us with various questions or requests regarding the functionalities of the Site, questions regarding the Company's services offered through the Site, etc. Legal basis: art. 6(1)(f) GDPR – legitimate interest consisting in our interest in providing adequate services.

6. ANALYSIS AND STATISTICS REGARDING THE OPERATION OF THE SITE, COOKIES AND SIMILAR TECHNOLOGIES

We may use the personal data that Users provide or that we collect in the context of using the Services for the purpose of performing analyses and statistics regarding our Services, including how the Site operates or the Services are offered. The analyses and statistics that we perform help us better understand how we could improve our Services or the functionalities of the Site. In performing analyses and statistics, we also do not use cookies and other similar technologies according to the Cookies Policy.

7. CONNECTION THROUGH SOCIAL NETWORKS

We have not implemented interconnection mechanisms with social media pages, such as Facebook, Twitter, Youtube and Instagram.
8. FULFILMENT OF LEGAL OBLIGATIONS

Sometimes data processing is necessary to fulfill our legal obligations, such as: • reporting to the relevant tax authorities and keeping accounting records; • archiving data in accordance with applicable legislation.

9. DEFENSE OF RIGHTS AND INTERESTS IN JUSTICE

For the establishment, exercise or defense of a right in court within the framework of a procedure before a court, an administrative procedure or other official procedures in which the Company is involved.

10. TO WHOM WE DISCLOSE YOUR DATA

We may disclose your personal data to (i) entities and/or persons authorized by us (from the EEA or from third countries) involved in the provision of the Services, including in the provision of commercial communications (such as data center providers, payment service providers for various payment facilities, providers of e-mailing platforms such as Google Mail), or if we are obliged to disclose personal data in order to comply with any legal obligation or decision of a judicial authority, public authority or government body; or (iii) if we are required or otherwise permitted to do so under applicable law. Your personal data may also be disclosed to third party providers of cookies and similar technologies as described in the Cookie Policy.

11. HOW LONG DO WE KEEP YOUR DATA

We keep your personal data for as long as necessary to fulfill the purposes for which they were collected, in compliance with internal data retention procedures, including applicable archiving rules. For example, if you are a customer of ours, your personal data will be kept for the entire duration of the contractual relationship, plus a minimum period of 3 years after termination (which is the statute of limitations for legal actions). Subsequently, certain personal data may be kept for a longer period, for archiving purposes, in accordance with applicable archiving rules.

12. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?

According to the law, you are entitled to the following rights as a data subject:
a) Right of access: you can obtain from us confirmation that we are processing your personal data, as well as information regarding the specifics of the processing
b) Right of modification: you can request us to modify your incorrect personal data or, where applicable, to complete data that is incomplete.
c) Right to erasure: you can request the erasure of your personal data when:
    (i) they are no longer necessary for the purposes for which we collected and process them;
    (ii) you have withdrawn your consent for the processing of the data and we can no longer process them on other legal grounds;
    (iii) the data is processed contrary to the law; respectively
    (iv) the data must be erased in accordance with the relevant legislation.
d)Withdrawal of consent and right to object You may withdraw your consent to the processing of data based on consent at any time. You may also object at any time to the processing for marketing purposes, including profiling carried out for this purpose, as well as to the processing based on the legitimate interest of the Company, for reasons relating to your specific situation.
e)Restriction Under certain conditions, you may request the restriction of the processing of your Personal Data
f)Right to data portability To the extent that we process data by automated means, you may request us, in accordance with the law, to provide your data in a structured, commonly used and machine-readable format. If you request this, we may transmit your data to another entity, if technically feasible.
g) The right to file a complaint with the supervisory authority You have the right to file a complaint with the supervisory authority for data processing if you consider that your rights have been violated: National Authority for the Supervision of Personal Data in Romania B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, postal code 010336 Bucharest, Romania anspdcp@dataprotection.ro TO EXERCISE THE RIGHTS MENTIONED ABOVE, YOU CAN CONTACT US USING THE EMAIL ADDRESS: contact@andruino.ro