Privacy policy

FACUTEDINLEMN.RO personal data protection policy

Taking into account Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, we explain when, what data and why we process personal data, how we use it, the circumstances in which we may disclose it to others, and how and for how long we store it securely.

If you have any question about how we process your personal data, contact us at: contact@facutedinlemn.ro.

Purposes of processing

We process personal data for specified purposes. Where you are a legal representative, authorised person or contact person, we process the personal data you provide in connection with a contract, agreement or offer for the following purposes:

• direct marketing, to keep you informed of our offers, products and services;
• completion of an order placed on facutedinlemn.ro, from placement to actual delivery of the ordered product;
• compliance with applicable laws, regulations, codes of conduct or guidelines, law enforcement and cooperation with competent authorities, including fiscal and judicial authorities.

We may also process personal data to pursue legitimate interests, for example:

• preventing, detecting and investigating offences, including fraud, money laundering or terrorist financing, and analysing and managing business risks;
• handling any claim, action or proceeding, including drafting and reviewing documents, preparing transaction documentation, obtaining legal advice and facilitating dispute resolution, and protecting or exercising our contractual and legal rights and obligations;
• cooperating with public authorities and institutions;
• managing and preparing internal reports, requesting information or responses, participating in surveys, and carrying out research or analysis for statistical or other purposes, so that we can determine our products, understand customer behaviour, preferences and market trends, and review, develop and improve product quality.

Personal data we collect

To carry out the activities and purposes described above, we collect the following personal data:

• telephone number;
• residential address;
• email address;
• customer's first and last name.

Your rights regarding personal data

Unless the law provides otherwise, you have the following rights:

• the right of access: confirmation of whether we process your personal data, access to those data and information about the processing;
• the right to restriction of processing where you contest data accuracy, processing is unlawful and you oppose erasure, we no longer need the data but you require them to establish, exercise or defend legal claims, or while verification is carried out after you object to processing;
• the right to object, unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or are required to establish, exercise or defend legal claims;
• the right to data portability: to receive the personal data you provided for the purposes stated here in a structured, commonly used and machine-readable format, and to transmit them to another controller;
• the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), Bulevardul G-ral Gheorghe Magheru no. 28-30, Sector 1, 010336 Bucharest, or anspdcp@dataprotection.ro;
• the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where such processing is necessary for the relevant contract or permitted by law.

Except for lodging a complaint with ANSPDCP as above, these rights may be exercised by sending a written request to contact@facutedinlemn.ro.

Retention period

We retain personal data for the period needed to comply with legal obligations specific to our activity or for applicable limitation periods, for example three years from the end of the contractual relationship, or to meet statutory archiving obligations, including those applicable in financial and accounting matters.

Security of personal data

We make all reasonable efforts to protect personal data in our possession or control through reasonable security measures intended to prevent unauthorised access, collection, use, disclosure, copying, alteration or disposal, and similar risks.

Where personal data are stored

• the email client, accessible only by password;
• the mobile phone, where names, telephone numbers and the email client are stored, accessible only by password.