menu
Meniu
search

Privacy policy

Privacy policy regarding the processing of personal data

Our customers are extremely important to us, so we treat seriously all the aspects and implications that the relationship with us has or can have in their private life, so we have developed a "Privacy Policy regarding the processing of personal data" intended to detail the personal data we process, why and how we process it and to the same extent how we protect it when you enter into a relationship with us.

This Personal Data Processing Policy takes into account the regulations contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of these data and the repeal of Directive 95/46/EC (which we will abbreviate as "GDPR") and the provisions of Law 190/2018 on measures to implement Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation).

The use of the malldeco.com site as a visitor, your registration as a user, and the purchase of products from our site implicitly imply the tacit and unreserved acceptance of the terms and conditions contained in this Personal Data Processing Policy, with all the consequences that emerge from these.

The use of the malldeco.com site will be for the purpose of viewing the products and the details related to them and information about our stores, as well as in the situation where you want to place an order on the site, to create an account that serves when purchasing the desired products.

The use of the site for purposes other than those mentioned above is prohibited.

This Personal Data Processing Policy is updated periodically. In the event that there will be legislative or other changes that determine the need for updating, we will display them on the website.

Date of last modification: January 2020

Content

  1. Who we are
  2. GDPR concepts. The rights of natural persons
  3. What data do we collect and the purpose of collection
  4. The legal basis of the processing
  5. Recipients of the collection
  6. Storage period
  7. Marketing
  8. Information Security

 

  1. Who we are:

TOP RESERVE BUSINESS SRL, with headquarters in Bucharest, 21 Valea Cascadelor str., sector 6, tax code RO 39479180, registered in the Trade Register under no. J40/4671/2020.

For any questions regarding the collection and processing of your personal data by us, please contact us, anytime during business hours or by sending an e-mail to the address: office.malldeco@gmail.com

  1. GDPR concepts. The rights of natural persons.

 

  1. Supervisory authority - National Supervisory Authority for the Processing of Personal Data (ANSPDCP)

Contact:

G-ral Blvd. Gheorghe Magheru 28-30

Sector 1, postal code 010336

Bucharest Romania

anspdcp@dataprotection.ro

  1. Personal data - any information regarding an identified or identifiable natural person, which may lead directly or indirectly to the identification of a person, respectively: name, surname, personal numerical code, telephone number, address, and any information about location, information regarding online identifiers, an email address;
  2. Special categories of personal data - Personal data that reveal the racial or ethnic origin, political, religious, or philosophical opinions or trade union membership, genetic and biometric data, data on the state of health, life, or sexual orientation of a natural person;
  3. Data subject - the identified or identifiable person to whom the personal data refers;
  4. Operator - the entity that determines the purposes and means of personal data processing - Malldeco;
  5. Authorized - an entity that processes personal data on behalf of the Operator - courier company, accounting service, a banking institution that processes online payments;
  6. Processing - any operation or set of operations performed on personal data, with or without the use of automated means, such as collection, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination, or making available disposition in any other way, aligning or combining, restricting, erasing or destroying them;
  7. Transfer - means disclosing or otherwise making personal data available to third parties, either by sending personal data to the respective third party or by allowing access to this data by other means.

Pursuant to the Data Protection Legislation, the natural persons concerned - Malldeco customers - benefit from the following rights:

  • the right to be informed - if personal data is collected from you, Malldeco, at the moment of obtaining the data, has the obligation to provide you with the following information: identification data, the purpose of processing, recipients of the data, information regarding the transfer if they follow to be transferred, the storage period and any rights you enjoy under Data Protection Legislation.
  • the right to access - means for you the right to obtain from us confirmation/denial that your personal data concerning you is being processed and, if so, to be provided with all the information mentioned in the "Right to be informed".
  • the right to request rectification - the right to obtain from Malldeco the rectification of inaccurate data concerning you.
  • the right to request deletion, "the right to be forgotten" - represents your right to request deletion in the situation where: the data are no longer necessary to fulfill the purpose for which they were collected, you withdraw your consent and there is no other reason legal basis for the processing, you object to the processing and there are no overriding legitimate reasons for the processing, the data was processed unlawfully, the data must be deleted to comply with a legal obligation, the data was collected in connection with the provision of services to a minor;
  • the right to restrict processing - it is applicable in the situation where you dispute the accuracy of the data or when the processing is illegal;
  • the right to object - you have the right to object to the processing of personal data for reasons related to your personal situation, except when there are legitimate and compelling reasons that justify the processing and that prevail over your interests, rights, and freedoms;
  • the right to data portability - your right to receive in a structured and machine-readable format the personal data concerning you that you have provided to us;
  • the right to lodge a complaint - your right to lodge a complaint with the ANSPDCP.

All these rights belong to you as a natural person customer and you can exercise them through an express request.

This personal data processing policy:

(i) applies to Malldeco's processing of personal data by electronic means and through classic archiving systems;

(ii) does not apply to obligations that Malldeco may have under national law in the specific field of activity.

  1. What data we collect and the purpose of collection:

The following explains how Malldeco collects, uses, and protects your personal data when you choose to be our customer, as well as for marketing purposes if you have given your consent. It is important to know that, in the context of the collection and use of your data, we have implemented, at a technical level, all the necessary measures so that personal data is protected.

  1. Legal Basis of Processing:
  1. The purposes of the Processing are based on one of the following:
  2. Your consent to the processing.
  3. Execution of a contract, the processing is necessary for the execution of a contract that you, the data subject, concluded with us for the sale of a product, etc.
  4. Compliance with a legal obligation when legal provisions impose such an obligation on us.
  5. Legitimate interest when the processing complies with a legitimate interest of ours to justify the processing.
  6. Recipients of the collection

Regarding the access to your personal data, it is good to know that they can only be accessed by our team (directly involved in the delivery and invoicing process) and by our representatives with whom we collaborate based on contracts containing confidentiality clauses (accounting and delivery), and in exceptional cases, and only following legal action, by representatives of public institutions in Romania in the exercise of a legal obligation.

  1. Data collected and purpose of collection:

Contact data and identification data

We record your name, surname, home/delivery address, telephone number and email address, and IP address.

We use your name and address to invoice you for the products you ordered.

We use your contact details to confirm the existence of the requested products and/or to deliver your parcel with the ordered products.

We use your email address to:

- to communicate the status of your order, respectively delivery to the courier and/or if it is on its way to you

- to send you our newsletter (we can send you this newsletter by email if you have subscribed) offers, blog articles, and personalized news

- to have created and attached a personal account for orders on our website, thus keeping a history of your orders.

If you access the www.malldeco.com site, it benefits from a security system that monitors and analyzes traffic, so when you visit us, the IP address from where it was accessed is retained to identify accesses.

Payment data

If you pay the value of the products by bank card, we record the data on your card. We use your payment card details to receive payments for services rendered.

Video surveillance

Your image may be captured when you visit our stores through the means of video surveillance existing on their premises. We use video surveillance to prevent and detect potential crimes and for the safety of our customers and staff. You should know that if you do not provide us with the requested personal data we cannot sell our products to you through the online store and we cannot deliver them to you.

Regarding the access to your personal data, it is good to know that they can only be accessed by our team (directly involved in the delivery and invoicing process) and by our representatives with whom we collaborate based on contracts containing confidentiality clauses (accounting and delivery), and in exceptional cases, and only following legal action, by representatives of public institutions in Romania in the exercise of a legal obligation.

Because we value the relationship we have with all those who have trusted us with their personal data and become our customers, we assure them that we will not sell their data to any third party. Malldeco has not sold, does not sell, and will not in any context sell your data to third parties. We will allow access to your data to our employees who will use your data for the purposes for which it was collected. We will pass your card details and bank details to our electronic payment service provider for payment processing (Banca Transilvania).

We will send your contact details (name, surname, address, and phone number) to the courier company we collaborate with (currently Fan Courier, DPD) in order to deliver your order.

SC FIDES PROFESSIONAL SRL accounting service providers will have access to all billing data (Name, address, products purchased, and payment amount).

Codifun Smart Education SRL has access to your name and e-mail address in the situation where we have your consent for marketing communications, promotion, and sending newsletters.

  1. Storage period:

We keep the data provided or collected for the necessary period corresponding to the purpose of collection, respectively in accordance with legal obligations.

We retain your contact details for marketing communications (name and email address) until you revoke your consent.

We keep information related to the payments made during the period established by the special legislation in the field.

The images captured by the surveillance cameras are automatically deleted after a period of 30 days, except in situations where they are kept in connection with an incident, in which case they are kept during the period in which an investigation is carried out, and in the situation where there is no such investigation 4 years after the date of the incident.

  1. Marketing:

We use your personal data (name and email) to provide information about our special offers and new products.

You can opt-out of receiving promotional emails from us by communicating your wish to stop being contacted at the contact details provided. Thus, unsubscribing from the newsletter, choosing to stop receiving our messages, can be done in one of the following ways:

  • using the unsubscribe link that any newsletter sent by us contains;
  • by email, by sending an email to us stating that you no longer wish to receive our newsletter.

Regardless of how you decided to unsubscribe, we will no longer send you our newsletter. We reserve 72 hours from receipt of the unsubscribe request to resolve any such situation.

  1. Security of information provided:

We protect your personal data against any unauthorized access, use for purposes other than those mentioned in this Policy, alteration, or loss of information, in this sense we have made sure of this aspect by purchasing and contracting the most secure services on the existing market.

All data is stored and encrypted (if applicable) on our private server with a high degree of security hosted in the EU (Romania). We have security procedures in place covering the storage and disclosure of information to prevent unauthorized access and comply with data protection legislation.

We will do our best to protect your personal data, but given the online transmission environment which is not completely secure, we cannot guarantee the security of such transmissions of information, so any transmission of information online is made at your own risk.

Malldeco cannot be held responsible for errors resulting from the user's negligence regarding the security and confidentiality of his account and password.

We will never ask you to give us your highly sensitive personal information, for example about your account, through a remote means of communication. You are responsible for keeping your personal and account information safe and not disclosing it to others.

This Policy is completed with the other specific policies of TOP RESERVE BUSINESS SRL and the Terms and Conditions that you can access from our website.

If there are separate regulations between the Personal Data Processing Policy and the Data Protection Legislation, the latter will prevail.

This information is limited to our malldeco.com page and our stores and does not apply to third-party web pages that can be accessed through this web page. We have no influence on the data processing by these third-party operators and assume no responsibility or liability in relation to these web pages.