I. General information
Your personal data confidentiality is one of the main concerns of Asociația UBC’ 22 | CIF: 49052037 (hereinafter referred to as the WEBSITE OWNER), as a data operator. This document aims to inform you about the processing of your personal data, in the context of using the internet page you are on.
II. The categories of personal data processed
II.1. If you are a client of the Site, the WEBSITE OWNER will process your personal data, such as first and last name, telephone, email address, billing address, delivery address, data regarding how you use the Site, for example your behavior/preferences/habits within the WEBSITE OWNER, as well as any other categories of data that you provide directly in the context of creating a user account, in the context of placing an order through the site, or in any other way that results from using the Site. If you use your Facebook or Google account to create a user account on the Site, the WEBSITE OWNER will process the following public profile data displayed by the respective applications: username, email address. If you choose to create a user account only before completing the order of a product available on the Site, your email address will be requested, based on which an account will be automatically created. If you do not complete the order, the email address and other data provided will not be stored by the WEBSITE OWNER, and the account created will be automatically deleted.
II.2. If you are a visitor of the Site, the WEBSITE OWNER will process your personal data that you provide directly in the context of using the Site, such as the data you provide in the contact/questions/complaints section, to the extent that you contact us in this way.
III. The purposes and bases of processing
III.1. If you are a client of the Site, the WEBSITE OWNER processes your personal data as follows:
- for conducting the contractual relationship between you and the WEBSITE OWNER, namely for taking, validating, dispatching, and invoicing the order placed on the Site, informing you about the status of the order, organizing the return of ordered products, etc.
Basis: The processing of your data for this purpose is based on the contract concluded between you and the WEBSITE OWNER, as defined in the Terms and Conditions. Providing your personal data is necessary for the execution of this contract. Refusal to provide data may result in the inability to carry out contractual relations between you and the WEBSITE OWNER.
- for fulfilling the legal obligations incumbent on the WEBSITE OWNER in the context of services provided through the Site, including tax obligations, as well as obligations related to archiving.
Basis: The processing of your data for this purpose is necessary on the basis of legal obligations. Providing your data for this purpose is required. Refusal to provide data may result in the WEBSITE OWNER’s inability to fulfill the legal obligations incumbent upon them, thus being unable to offer you services through the Site.
- Purpose: The data processing for this purpose is to conduct marketing activities, specifically to send commercial communications regarding the products and services offered by the WEBSITE OWNER through remote communication means (email, SMS).
Basis: The processing of your data for this purpose is based on your consent if you choose to provide it. You can express your consent for the processing of data for this purpose by ticking the appropriate box at the time of account creation, or after creating the account, in the “My Account Information” section. To unsubscribe from receiving such commercial communications you can use the option at the end of each email/SMS containing commercial communications. Additionally, you can unsubscribe by accessing the “My Account Information” section.
Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
- For the purpose of performing various analyses, reporting on the operation of the Site, creating consumer preference profiles, primarily to improve the experience offered on the Site.
Basis: The processing of your data for this purpose is based on the legitimate interest of the SITE OWNER to continuously improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
III.2.If you are a visitor to the Site, the SITE OWNER processes your personal data as follows:
- for marketing activities, namely for sending, through remote communication means (email, sms), commercial communications regarding the products and services offered by the SITE OWNER, via the Site.
Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent for data processing for this purpose by filling in and ticking the appropriate box in the newsletter subscription form available on the Site. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/sms containing commercial communications. Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
- for resolving complaints, claims, and to monitor traffic and improve your experience on the Site.
Basis: The processing of your data for this purpose is based on the legitimate interest of the SITE OWNER to ensure the proper functioning of the Site, as well as to continuously improve the experience of visitors to the Site, including by addressing various comments, questions, or complaints. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
- Duration for which we process your data
As a principle, the SITE OWNER will process your personal data as long as necessary to achieve the processing purposes mentioned above. If you are a customer, we will process your data for the entire duration of the contractual relations and thereafter in accordance with the legal obligations incumbent on the SITE OWNER (for example, in the case of financial-accounting justificatory documents for which the retention period provided by law is 10 years from the date of the financial year in which they were drawn up). If you are a customer and you exercise your option to delete your user account, by email at the above-mentioned address, the SITE OWNER will interpret this action as your option to unsubscribe from receiving commercial communications through which we keep you updated about the products and services offered through the site. In this regard, if you choose to delete your user account, we will no longer send you emails and/or SMS of this kind. However, we wish to inform you that deleting the account will not automatically result in the deletion of your personal data. If you do not want your personal data to be processed anymore or if you want the data to be deleted, you can exercise your rights detailed in point VII below. If you request the deletion of the account, but there is at least one active order on that account, the request to delete the account can be registered only after the products have been delivered and the last active order has been completed. If you withdraw your consent for data processing for marketing purposes, the SITE OWNER will cease processing your personal data for this purpose, without affecting the processing carried out by the SITE OWNER based on the consent expressed by you before its withdrawal.
- Disclosure of personal data
To fulfill the processing purposes, the SITE OWNER may disclose your data to partners, to third parties or entities that support the SITE OWNER in conducting activities through the Site (for example, courier companies, IT service providers), or to central/local public authorities, in the following illustratively listed cases:
- for the administration of the Site;
- in situations where such communication would be necessary for awarding prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by the SITE OWNER through the Site;
- pentru menținerea, personalizarea și îmbunătățirea Site-ului și a serviciilor derulate prin intermediul lui;
- for maintaining, personalizing, and improving the Site and the services operated through it; for data analysis, testing, and research, monitoring usage trends and activity, developing security features, and authenticating users;
- for sending marketing commercial communications, within the conditions and limits prescribed by law;
- when the disclosure of personal data is provided by law, etc.
- Personal Data Transfer
The personal data provided to the WEBSITE OWNER will not be transferred outside Romania.
VII. Rights You Benefit From In accordance with the legislation on personal data processing, as data subjects, you benefit from the following rights:
- the right to be informed, namely the right to receive details regarding the processing activities carried out by the WEBSITE OWNER, as described in this document;
- the right of access to data, namely the right to obtain confirmation from the WEBSITE OWNER regarding the processing of personal data, as well as details on the processing activities such as the manner in which the data are processed, the purpose of processing, the recipients or categories of recipients of the data, etc.;
- the right to rectification, namely the right to have inaccurate/unjustified personal data corrected without undue delay by the WEBSITE OWNER, as well as the completion of incomplete data; The rectification/completion will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.
- the right to erasure of data without undue delay (“the right to be forgotten”), if one of the following reasons applies:
- they are no longer necessary for the purposes for which they were collected or processed; if consent is withdrawn and there is no other legal ground for processing;
- if the data subject objects to the processing and there are no overriding legitimate grounds;
- if the personal data have been unlawfully processed;
- if the personal data must be erased for compliance with a legal obligation;
- if the personal data must be erased for compliance with a legal obligation;
- personal data have been collected in relation to the offer of information society services in accordance with Union or Member State law to which the controller is subject.
Following a request for data erasure, the WEBSITE OWNER may anonymize these data (thus depriving them of their personal character) and continue processing them for statistical purposes in these conditions;
- the right to restrict processing to the extent that:
- the person contests the accuracy of the data, for a period that allows us to verify the correctness of the data;
- the processing is unlawful, and the data subject opposes the erasure of personal data, requesting instead the restriction of their use;
- the controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or
- the data subject has objected to processing (other than direct marketing), for the period in which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
- the right to data portability, namely (i) the right to receive personal data in a structured, commonly used and machine-readable format, as well as (ii) the right for this data to be transmitted by the WEBSITE OWNER to another data controller, to the extent that legal conditions are met;
- the right to object – concerning processing activities, this can be exercised by sending a request as indicated below;
- at any time, for reasons related to the particular situation of the data subject, that data concerning him or her to be processed on the basis of the legitimate interest of the WEBSITE OWNER or in the public interest, except where the WEBSITE OWNER can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defense of legal claims;
- at any time, free of charge and without justification, that data concerning him or her to be processed for direct marketing purposes.
- the right not to be subject to an automated individual decision-making, namely the right not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects him or her;
the right to address the National Authority for the Supervision of Personal Data Processing or the competent courts, to the extent that you consider it necessary.