Privacy policy

STATEMENT ON THE PROCESSING OF PERSONAL DATA

Protecting personal data online has become a legal and mandatory requirement. Every controller must inform customers and business partners about the processing of their personal data and ensure that it is kept securely.

CARTIER BIO 888 S.R.L., with its registered office at 2 Apollonia Hirscher Street, 500025 Brașov, registered with the Trade Register under number J08/2690/2020, tax identification number RO 43442812, as data controller, hereby informs you about the processing and storage of the personal data you provide when obtaining services and products.

WHAT PERSONAL DATA MEANS

Personal data is information about an identified or identifiable individual: first and last name, address, email address, telephone number, signature, financial information, information requested by authorities in connection with the provision of services and products, information obtained through audio or video monitoring when visiting a location where CARTIER BIO 888 S.R.L. provides services, audio or video monitoring during technical support services, IP address and any other information necessary for the activities of CARTIER BIO 888 S.R.L..

Any action or set of actions involving data, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination, alignment or combination, blocking, archiving, erasure or destruction, may fall within the scope of personal data processing, directly or indirectly.

COLLECTION OF INFORMATION

Sources of information:

1. When using www.basarabiainbucate.ro or applications provided by CARTIER BIO 888 S.R.L., you may be asked to complete forms or questionnaires necessary for the provision of services, without an obligation to accept.
2. Direct and indirect transactions between CARTIER BIO 888 S.R.L., partners and users.
3. External sources associated with public institutions.

How we collect personal data from users of www.basarabiainbucate.ro

• Directly.
• Through the user’s browser and traffic data.
• Through cookies.

1. Direct collection of personal data

A1. Placing an order, with or without creating an account, on www.basarabiainbucate.ro may require your first and last name, address, email address and other information necessary for contracting, invoicing and delivery.

• Contractual data is retained for three years, corresponding to the general limitation period.
• Tax-related data is retained for ten years under tax legislation.
• Orders cannot be fulfilled without the information described above.

A2. Support services. When providing support, we may ask for your telephone number or email address so that we can contact you to resolve your issue. Other personal data may be requested where necessary. Communications during support services provided by www.basarabiainbucate.ro may be recorded.

A3. Newsletter subscription. We request an email address for personalised communications. Retention ends when consent is withdrawn.

A4. Payments to our account are processed by our banking partners, to whom banking information is transmitted.

2. Collection of personal data through traffic information

When you visit www.basarabiainbucate.ro from any device, you provide information such as your IP address, the time of your visit, your location and the pages visited. External traffic analysis services, such as Google Analytics, are used by www.basarabiainbucate.ro exclusively to improve services and ensure and maintain website security.

3. Collection of data through session and persistent cookies

Cookies are used to remember passwords, language preferences, child protection filters and the types of advertisements accepted or restricted.

PURPOSES FOR WHICH CARTIER BIO 888 S.R.L. PROCESSES PERSONAL DATA

CARTIER BIO 888 S.R.L. uses the means described above to identify potential users accessing its services, monitor related operations, conduct surveys and/or create profiles for marketing activities, and carry out internal analyses relating to the services provided. CARTIER BIO 888 S.R.L. also processes personal data to resolve legal procedures connected with providing services. Records are archived in both physical and electronic form. Romanian public institutions regulated by law may request reports containing personal data.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

The General Data Protection Regulation applies in Romania as follows:

• Article 6(1)(b) GDPR concerns the collection of personal data through an order form.
• Article 6(1)(c) GDPR concerns mandatory information needed to issue invoices.
• Article 6(1)(a) GDPR requires consent for the use of personal data for marketing, including newsletter subscriptions and cookies.
• Article 6(1)(f) GDPR and Article 12(2) of Law 506/2004 concern the legitimate interest of www.basarabiainbucate.ro in securing and optimising its website, as described in Recital 49 GDPR.

PROVIDING PERSONAL DATA IS NECESSARY FOR THE USER

Refusing to provide this information makes it impossible to supply services. Users have the right to refuse processing for direct marketing purposes.

RECIPIENTS OF PERSONAL DATA

The purposes for which personal data is collected are described above. Where necessary, CARTIER BIO 888 S.R.L. may also make limited personal data available to legal authorities and contractual partners, who undertake not to use it for any other purpose. These may include public authorities, auditors, legal advisers, accountants and companies belonging to the CARTIER BIO 888 S.R.L. group.

Under Regulation (EU) 2016/679 (GDPR), adopted by the European Parliament, PERSONAL DATA MAY BE TRANSFERRED OUTSIDE THE COUNTRY.

Personal data may be stored for the periods required by law: three years for contractual data and ten years for financial data. Processing may continue until the purpose for which the data was collected has been fulfilled, after which the data is archived or destroyed.

SECURITY MEASURES FOR PERSONAL DATA PROCESSING

• Data confidentiality must be maintained, and users therefore use their own usernames and passwords.
• Every user accessing, collecting or changing personal data is recorded together with the date, time and action performed.
• Only authorised users may print invoices, delivery notes, contracts and other documents containing personal data.

Users and potential users whose personal data is processed have the following rights:

1. The right to be informed about data collection under Articles 13 and 14 GDPR.
2. The right to access processed data under Article 15 GDPR.
3. The right to request changes or erasure under Article 17 GDPR, subject to exceptions provided by law.
4. The right to request restricted processing or refuse processing under Article 18 GDPR.
5. The right to transfer data to another controller under Article 20 GDPR.
6. The right to withdraw consent previously given for processing.
7. The right to refuse processing for marketing and profiling purposes.
8. The right to contact ANSPDCP or the competent court if the user considers that their rights have been infringed.

CARTIER BIO 888 S.R.L. RESERVES THE RIGHT TO AMEND THIS STATEMENT ON THE PROCESSING OF PERSONAL DATA WITHOUT PRIOR NOTICE BY PUBLISHING AN UPDATED VERSION ON THE WEBSITE.

Notifications may be sent electronically to contact@basarabiainbucate.ro or in writing to: 2 Apollonia Hirscher Street, 500025 Brașov.