Privacy Policy on the Processing of Personal Data
Our clients are extremely important to us, so we treat seriously all aspects and implications that the relationship with us has or may have in their private lives, so we have developed a "Privacy Policy on the Processing of Personal Data" intended to present in detail the personal data that we process, why and how we process them and to the same extent how we protect them when you enter into a relationship with us.
This Personal Data Processing Policy takes into account the regulations contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (which we will abbreviate as "GDPR") and the provisions of Law 190/2018 on implementing measures for Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Using the malldeco.com website as a visitor, registering as a user and purchasing products from our website implies tacit and unreserved acceptance of the terms and conditions contained in this Personal Data Processing Policy, with all the consequences arising from them.
You will use the malldeco.com website for the purpose of viewing the products and the details related to them and information about our stores, as well as in the event that you wish to place an order on the website, to create an account that will serve to purchase the desired products.
Using the website for purposes other than those mentioned above is prohibited.
This Personal Data Processing Policy is updated periodically. In the event of legislative or other changes that require updating, we will post them on the site.
Last modified: January 2020
Contents
- Who are we
- GDPR concepts. Rights of individuals
- What data do we collect and the purpose of collection
- Legal basis for processing
- Recipients of the collection
- Storage period
- Marketing
- Information Security
Who are we:
TOP RESERVE BUSINESS SRL, headquartered in Bucharest, Valea Cascadelor Street no. 21, sector 6, tax code RO 39479180, registered in the Trade Register under no. J40/4671/2020.
For any questions regarding the collection and processing of your personal data by us, please contact us, anytime during business hours or by sending an e-mail to:
office.malldeco@gmail.com
GDPR Concepts. Rights of individuals.
- Supervisory Authority - National Authority for the Supervision of Personal Data Processing (ANSPDCP)
Contact:
B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, postal code 010336
Bucharest, Romania
anspdcp@dataprotection.ro - Personal data - any information regarding an identified or identifiable natural person, which may lead directly or indirectly to the identification of a person, namely: name, surname, personal identification number, telephone number, address and any location information, information regarding online identifiers, email address;
- Special categories of personal data - personal data revealing racial or ethnic origin, political, religious or philosophical opinions or trade union membership, genetic and biometric data, data concerning the health, life or sexual orientation of a natural person;
- Data subject - identified or identifiable person to whom the personal data refer;
- Operator - the entity that determines the purposes and means of processing personal data - Malldeco;
- Processor - entity that processes personal data on behalf of the Operator - courier company, accounting service, banking institution that processes online payments;
- Processing - any operation or set of operations performed on personal data, with or without the use of automated means, such as collection, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction thereof;
- Transfer - means disclosing or otherwise making personal data available to third parties, either by sending personal data to the respective third party, or by allowing access to these data by other means.
- Under the Data Protection Legislation, the natural persons concerned - Malldeco clients - benefit from the following rights:
- the right to be informed - if personal data is collected from you, Malldeco, at the time of obtaining the data, is obliged to provide you with the following information: identification data, purpose of processing, recipients of the data, information regarding the transfer if they are to be transferred, the storage period and all the rights you enjoy under the Data Protection Legislation.
- the right to access - implies for you the right to obtain from us confirmation/denial that personal data concerning you is being processed and, if so, to be provided with all the information mentioned under the "Right to be informed".
- the right to request rectification - the right to obtain from Malldeco the rectification of inaccurate data concerning you.
- the right to request deletion, “the right to be forgotten” - represents your right to request deletion in the event that: the data is no longer necessary for the purpose for which it was collected, you withdraw your consent and there is no other legal basis for the processing, you object to the processing and there are no overriding legitimate reasons for the processing, the data was processed unlawfully, the data must be deleted for compliance with a legal obligation, the data was collected in connection with the provision of services to a minor;
- the right to restriction of processing - is applicable in the event that you contest the accuracy of the data or when the processing is unlawful;
- right to object - you have the right to object to the processing of personal data for reasons related to your personal situation, except where there are legitimate and compelling reasons that justify the processing and that override your interests, rights and freedoms;
- right to data portability - your right to receive the personal data concerning you and which you have provided to us in a structured and machine-readable format;
- right to lodge a complaint - your right to lodge a complaint with the ANSPDCP.
This personal data processing policy:
(i) applies to the processing of personal data by Malldeco by electronic means and through classic archiving systems;
(ii) does not apply to the obligations that Malldeco may have under national legislation in the specific field of activity.
What data we collect and the purpose of the collection:
Find below explanations regarding how Malldeco collects, uses, and protects your personal data when you choose to be our client, as well as for marketing purposes if you have expressed your consent in this regard. It is important to know that, in the context of collecting and using your data, we have implemented, at a technical level, all the necessary measures so that personal data is protected.
Legal Basis of Processing:
The purposes of Processing are based on one of the following:
1. Your consent to the processing.
2. Execution of a contract, the processing being necessary for the execution of a contract that you, the data subject, have concluded with us for the sale of a product, etc.
3. Compliance with a legal obligation when legal provisions establish such an obligation on our part.
4. Legitimate interest when the processing complies with our legitimate interest to justify the processing.
5. Recipients of the collection
Regarding access to your personal data, it is good to know that they can only be accessed by our team (directly involved in the delivery and invoicing process) and by our proxies with whom we collaborate based on contracts containing confidentiality clauses (accounting and delivery), and in exceptional cases, and only following a legal proceeding, by representatives of public institutions in Romania in the exercise of a legal obligation.
Because we value the relationship we have with all those who have trusted us to provide their personal data and to be our customers, we assure them that we will not sell the data provided to any third party. Malldeco has not sold, does not sell and will not sell your data to third parties in any context. We will allow access to your data to our employees who will use your data for the purposes for which they were collected. We will transmit your card details and bank details to our electronic payment service provider for payment processing (Banca Transilvania).
We will transmit your contact details (name, surname, address and telephone number) to the courier company we collaborate with (currently Fan Curier, DPD) in order to deliver your order.
SC FIDES PROFESSIONAL SRL accounting service providers will have access to all billing data (Name, address, products purchased and payment amount).
Codifun Smart Education SRL has access to your name and e-mail address in the event that we have your consent for marketing, promotion, sending newsletters.
Data collected and purpose of collection:
Contact and identification data
We record your name, surname, home/delivery address, telephone number and e-mail address, IP addresses.
We use your name and address to issue you an invoice for the products you ordered.
We use your contact details to confirm the existence of the requested products and/or to deliver the package with the ordered products to you.
We use your e-mail address for:
- to communicate the status of your order, namely the delivery to the courier and/or if it is on its way to you
- to send you our newsletter (we can send you this newsletter by e-mail if you have subscribed) offers, blog articles and personalized news
- to create and attach a personal account for orders on our site, keeping a history of your orders in this regard.
If you access the site www.malldeco.com it benefits from a security system that monitors and analyzes traffic, so when you visit us, the IP address from where it was accessed is retained to identify accesses.
Payment data
If you pay for products using your bank card, we record your card details. We use your payment card details to receive the amounts of money for the services provided.
Video surveillance
Your image may be captured when you visit our stores through the video surveillance means available on their premises. We use video surveillance to prevent and detect possible crimes and for the safety of customers and staff. You should know that if you do not provide us with the requested personal data, we cannot sell you our products through the online store and we cannot deliver them to you.
Regarding access to your personal data, it is good to know that they can only be accessed by our team (directly involved in the delivery and invoicing process) and by our proxies with whom we collaborate based on contracts containing confidentiality clauses (accounting and delivery), and in exceptional cases, and only following a legal proceeding, by representatives of public institutions in Romania in the exercise of a legal obligation.
Storage period:
We keep the data provided or collected for the necessary period corresponding to the purpose of collection, respectively in accordance with legal obligations.
We keep your contact details for marketing communications (name and e-mail address) until the consent is revoked.
We keep information related to payments made for the period established by special legislation in the field.
Images captured by surveillance cameras are automatically deleted after a period of 30 days, except in situations where they are kept in connection with an incident, in which case they are kept for the period during which an investigation is being carried out, and in the event that there is no such investigation, 4 years from the date of the incident.
Marketing:
We use your personal data (name and email) to provide information about our special offers and new products.
You can opt out of receiving promotional emails from us by communicating your desire to no longer be contacted at the contact details provided. Thus, unsubscribing from the newsletter, thus choosing not to receive our messages, can be done in one of the following ways:
– using the unsubscribe link that any newsletter sent by us contains;
– by email, sending us an email stating that you no longer wish to receive our newsletter.
Regardless of how you decided to unsubscribe, we will no longer send you our newsletter. We reserve 72 hours from the receipt of the unsubscribe request to resolve any such situation.
Security of the information provided:
We protect your personal data against any unauthorized access, use for purposes other than those mentioned in this Policy, alteration or loss of information, in this regard we have ensured this aspect by purchasing and contracting the most secure services on the existing market.
All data is stored and encrypted (as appropriate) on our private server with a high degree of security hosted in the EU (Romania). We have security procedures in place that cover the storage and disclosure of information to prevent unauthorized access and to act in accordance with data protection legislation.
We will do everything we can to protect your personal data, but given the online transmission environment that is not completely secure, we cannot guarantee the security of such information transmissions, so any online transmission of information is done at your own risk.
Malldeco cannot be held responsible for errors resulting from the user's negligence regarding the security and confidentiality of his account and password.
We will never ask you to communicate your highly sensitive personal information, for example regarding your account, through a means of remote communication. You are responsible for keeping your personal and account information safe and for not communicating it to other persons.
This Policy is complemented by other specific policies of TOP RESERVE BUSINESS SRL and the Terms and Conditions that you can access from our website.
In the event of distinct regulations between the Personal Data Processing Policy and the Data Protection Legislation, the latter shall prevail.
This information is limited to our malldeco.com page and our stores and is not valid for the websites of third-party operators, which can be accessed through this website. We have no influence on the processing of data by these third-party operators and assume no responsibility or liability in relation to these websites.