Privacy Policy
Privacy Policy regarding the processing of personal data
By accepting this document, the Parties undertake to maintain the confidentiality of all information, regardless of the form in which it has been received (oral, written), and the medium on which it is located (electronic, written, disk, or other data storage means), whether highlighted or designated otherwise as confidential, related to: financial data, product and service specifications, business projects and programs; delivered or stocked products, procurement needs; product promotion methods, manufacturing processes, manufacturing recipes, methods and cost calculation results, know-how, pricing information, and any other commercial terms, trade secrets, research and development information, product and service launch plans, marketing plans, information about employees, prototypes, computer programs, objectives or strategies, organization, internal policies; any data/information regarding customers, business partners, and suppliers, etc.
To avoid any doubt, confidential information will not include information that: is public at the time of disclosure to the parties and/or their representatives; becomes public but not as a result of the disclosure of this information by the violation of this agreement; has been obtained from a source unrelated to the Parties, provided that this source is not obliged to maintain the confidentiality of this information; or the Parties can reasonably prove that this information was legally in their possession before the date of signing this Commitment, not provided by the Parties, and not subject to the obligation of confidentiality of this information.
The Parties shall maintain confidentiality during the application of this document and for a period of five (5) years thereafter.
The Privacy Policy is based on Regulation No. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "General Data Protection Regulation").
This Privacy Policy describes how the Company collects, processes, transfers, and protects the personal data of the Users of the Site that they provide when using the Platform (hereinafter referred to as the "Services").
When using the Services, we will process the following personal data: name, first name, email address, postal address, username, location, IP address (hereinafter referred to as "Personal Data").
We do not collect and do not process sensitive data in any other way, included by the General Data Protection Regulation in special categories of personal data.
The Company processes Personal Data for the following purposes:
Account Creation and Use. Execution of the contractual relationship
When creating an account on the Site or placing an online order, we collect information such as name, first name, phone number, email address, postal address. We process this data on the basis of the execution of a contract, in accordance with Art. 6 para. (1) lit. b) of the General Data Protection Regulation. Your refusal to provide the above-mentioned data will lead to the impossibility of creating an account and/or carrying out contractual relations between you and the Company.
Marketing, Advertising, and Publicity
We will collect and use information such as name, first name, email address to send you commercial information related to our Services, but only after obtaining your explicit consent by expressing your choice in this regard, in accordance with Art. 6 para. (1) lit. a) of the General Data Protection Regulation.
Profiling
For the improvement of the quality of our Services, we can combine Personal Data (name, first name, email address) provided directly by you with other data from other sources such as cookies, but only after obtaining your explicit consent by expressing your choice in this regard, in accordance with Art. 6 para. (1) lit. a) of the General Data Protection Regulation.
Correspondence
We will collect information such as name, first name, phone number, email address, postal address to communicate with you regarding information related to the provision of our Services, as well as to communicate any changes to this Privacy Policy. We process this data on the basis of the execution of a contract, in accordance with Art. 6 para. (1) lit. b) of the General Data Protection Regulation. Refusal to provide the above-mentioned data will lead to the impossibility of transmitting any information related to the Company's Services.
Compliance with legal obligations
When public authorities request certain information, we will process information such as name, first name, phone number, email address, postal address, to respond to such requests, in accordance with Art. 6 para (1), lit. c) of the General Data Protection Regulation. Failure to provide the above-mentioned personal data for the purpose of fulfilling a legal obligation may result in negative consequences (sanctions, fines, etc.) for the Company.
Performing payment operations
In the event that you make payments on the site, you provide directly to the payment operator chosen by the Company for this purpose, your banking information such as name, first name, IBAN account, for the purpose of performing the payment operations, and we will not actually process and retain this information. Your refusal to provide the above-mentioned data will lead to the impossibility of completing the requested payment operations.
Data retention period
Personal data will be stored as follows:
Account Creation and Use - Personal data will be stored for the duration necessary for the administration of the Account, until you choose to delete it.
Marketing, Advertising, and Publicity - Personal data will be stored until you withdraw your consent, but no more than 5 years from the date you provided them.
Profiling - Personal data will be stored until you withdraw your consent, but no more than 5 years from the date you provided them.
Correspondence - Personal data will be stored for the entire period of the existence of the Account, until you delete it.
Compliance with a legal obligation - Personal data will be stored for the entire duration mentioned in the legal obligations imposed on the Company.
The Company will delete or anonymize all Personal Data for which you have withdrawn your consent, the maximum storage period of 5 years mentioned above has expired, or which are no longer necessary for the fulfillment of any of the purposes listed above.
The Company will not disclose Personal Data except in the following situations:
When we have your express consent in this regard;
When we are obliged to disclose Personal Data based on a legal obligation to the following categories of recipients: public authorities, auditors, or competent institutions in carrying out controls on the Company;
To achieve any of the above-mentioned purposes, our Company may use the services of several contractual partners, and Personal Data will be disclosed to them within the limits of the obligations they have assumed towards our company. These partners may have the quality of authorized persons and/or independent data processors. Also, some of the partners are third parties who do not intend to process Personal Data, but may have access to them in carrying out their tasks or interactions with the Company, such as companies that provide technical maintenance, financial or legal auditors.
We assure you that we make all necessary efforts to ensure that all entities we cooperate with process Personal Data in conditions of safety and security.
When there are disputes and/or other claims against our Company.
Before transferring Personal Data to a state or international organizations outside the European Union and/or the European Economic Area, we will ensure compliance with all conditions imposed by the General Data Protection Regulation, as well as any applicable data protection legislation.
In accordance with the provisions of the General Data Protection Regulation, you have the following rights as data subjects:
RIGHT OF ACCESS - meaning your right to request confirmation of whether Personal Data is being processed or not, and if so, you can request access to it, as well as certain information about it. Also, at your request, you will receive a copy of Personal Data;
RIGHT TO RECTIFICATION - meaning your right to obtain the rectification of inaccurate Personal Data and the completion of incomplete Personal Data, including by providing additional information;
RIGHT TO ERASURE OF DATA - meaning that in situations expressly regulated by law (especially in cases where you withdraw your consent or if it is found that Personal Data have been processed illegally), you have the right to obtain from the Company the erasure of Personal Data;
RIGHT TO WITHDRAW CONSENT - meaning your right to withdraw your consent for the processing of Personal Data at any time, with the mention that the processing of Personal Data prior to the moment of withdrawal of consent remains valid;
RIGHT TO DATA PORTABILITY - meaning your right to receive the Personal Data you provided in a structured format that can be automatically read and your right to request that Personal Data be transmitted to another operator chosen by you;
RIGHT TO RESTRICTION OF PROCESSING - meaning your right to obtain from the Company the restriction of the processing of Personal Data in certain situations expressly regulated by law (especially in cases where you contest the accuracy of Personal Data or if the processing is illegal, but you oppose the erasure of Personal Data). In these situations, except for storage, Personal Data will no longer be processed;
RIGHT TO OBJECT - meaning your right to object to the processing of data in certain cases, including profiling (direct marketing, scientific, historical, or statistical research, legitimate interest of the operator, public interest, or resulting from the exercise of public authority with which the operator is invested;
RIGHT TO LODGE A COMPLAINT - meaning your right to lodge a complaint about the way Personal Data are processed. The complaint is submitted to the National Authority for the Supervision of Personal Data Processing.
The Company will make every effort and take all necessary technical and organizational measures to protect Personal Data against loss, theft, improper use, unauthorized access, unauthorized disclosure, alteration, and destruction. In this regard, we will use methods such as encryption, passwords, and limiting access to Personal Data. We will also periodically update and test the security of the technologies we use. Also, we will inform and train our personnel regarding the importance of confidentiality and the protection of your personal data.