Information note regarding the processing of personal data within cadouri-unicate.ro

1. The preamble
For the purposes of data protection legislation, we are an operator when we process your personal data.

As we are always open to find out your opinions, as well as to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact the representatives of cadouri-unicate.ro at the e-mail address micleasimona@gmail com by mail or courier at Oradea 2C, Buzaului st., Bihor county.

We consider ensuring the right to the protection of personal data as a fundamental commitment of cadouri-unicate.ro, therefore we will dedicate all necessary resources and efforts to process your data in full accordance with Regulation (EU) 2016/679 (“General Regulation on data protection” or “GDPR”), as well as with any other legislation applicable on the Romanian territory.

We reserve the right to periodically update and modify this information note to reflect any changes in the way we process your personal data or any changes in legal requirements. In case of any such change, we will display on our website the modified version of the Information Note regarding the processing of personal data within cadouri-unicate.ro, reason for which please check periodically the content of this Information Note regarding the processing of personal data in within cadouri-unicate.ro.

By filling in your data in the account creation and / or Order form, you declare that you unconditionally accept that your personal data be included in the cadouri-unicate.ro database, and you give your express and unequivocal consent that all these personal data be be stored, used and processed indefinitely territorially and / or temporarily by cadouri-unicate.ro their affiliates and collaborators for the development and / or development by cadouri-unicate.ro, their affiliates and collaborators of activities such as, but not to be limited to, commercial activities, promotion of products and services, marketing, advertising, media, administrative, development, tracking and monitoring of sales and consumer behavior.

By reading this Information Note on the processing of personal data within cadouri-unicate.ro you have become aware that you are guaranteed the rights provided by law, namely the right to information, the right to access data, the right to intervene, the right to oppose, the right not to be subjected to an individual decision, the right to go to court in case of violation of his rights guaranteed by Law 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data. At the same time, you have the right to object to the processing of your personal data and to request their total or partial deletion.

2. What categories of personal data we process
In general, we collect your personal data directly from you, so you have control over the type of information you provide to us. By way of example, we receive information from you as follows:

When you create a cadouri-unicate.ro account, send us: e-mail address, name and surname;
Within your personal page (My Account) from the cadouri-unicate.ro platform you can add additional information, such as: gender, nickname, mobile phone number, landline number, date of birth, level of education, delivery addresses, alternative address e-mail, bank card details, etc .;
When you place an order, you provide us with information such as: the desired product, name and surname, delivery address, billing details, payment method, telephone number, bank card details, etc.

We may also collect and subsequently process certain information regarding your behavior while visiting our website, in order to personalize your online experience and provide you with offers tailored to your profile.
We do not collect or otherwise process sensitive data, included by the General Regulation on data protection in special categories of personal data

3. What are the purposes and grounds of processing
The general purpose of data collection is: informing users / customers (Buyers) on the status of their account on cadouri-unicate.ro, informing users / customers on the evolution and status of orders, evaluating products and services offered, commercial activities, product promotion and services, marketing, advertising, media, administrative, development, market research, statistics, tracking and monitoring of sales and consumer behavior.

We will use your personal data for the following individual purposes:

3.1. 3.1. For the provision of cadouri-unicate.roservices for your benefit
This individualized purpose may include, as appropriate, the following:
a) Creation and administration of the account within the cadouri-unicate.roplatform;
b) Order processing, including taking over, validating, shipping and invoicing;
c) Solving cancellations or problems of any nature related to an order, the goods or services purchased;
d) Returning the products according to the legal provisions;
e) Reimbursement of the value of the products according to the legal provisions;
h) Providing support services, including providing answers to your questions regarding your orders or the goods and services cadouri-unicate.ro
Also, certain processing subject to these purposes is required by applicable law, including tax and accounting law.

3.2. 3.2. To improve our services
We always want to offer you the best online shopping experience. For this, we may collect and use certain information about your Buyer behavior, we may invite you to complete satisfaction questionnaires subsequent to the completion of an order or we may conduct, directly or with the help of partners, studies and market research.
We base these activities on our legitimate interest in conducting business, always taking care that your fundamental rights and freedoms are not affected.

3.3. 3.3. For marketing
We want to keep you informed about the best offers for the products / services that interest you. In this sense, we can send you any type of message (such as: e-mail / SMS / telephone / mobile push / webpush / etc.) Containing general and thematic information, information on similar or complementary products to those that have purchased them, information on offers or promotions, information on products added in the “My Account / Cart” section or the “Account / Favorites” section or have shown interest in purchasing them, as well as other commercial communications such as research market and opinion polls, and we can post personalized recommendations on the website. In order to provide you with information of interest to you, we may use certain data regarding your buyer behavior (eg products viewed / added to the wishlist / purchased) to create a profile. We always make sure that these processing is carried out in compliance with your rights and freedoms and that the decisions taken based on them do not have legal effects on you and do not affect you significantly to a significant extent.
In most cases, we base our marketing communications on your prior consent. You can change your mind and withdraw your consent at any time by:
– Modifying the settings from the client account in the “My Subscriptions” section;
– Accessing the unsubscribe link displayed in the messages you receive from us; or through
– Contacting cadouri-unicate.ro using the contact details described above.
In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. In any situation where we use information about you for our legitimate interest, we take care and take all necessary measures to ensure that your fundamental rights and freedoms are not affected. However, you can ask us at any time, by the means described above, to stop the processing of your personal data for marketing purposes, and we will process your request.

3.4. 3.4. To defend our legitimate interests
There may be situations in which we use or transmit information to protect our rights and business. These may include:
– Measures to protect the website and the users of the cadouri-unicate.ro platform against cyber attacks:
– Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;
– Measures to manage various other risks.
The general basis of these types of processing is our legitimate interest in defending our commercial activity, it being understood that we ensure that all the measures we take guarantee a balance between our interests and your fundamental rights and freedoms.
Also, in certain cases we base the processing on legal provisions such as the obligation to ensure the protection of goods and values provided by the applicable legislation in this matter.

4. How long we keep your personal data
As a general rule, we will store your personal data as long as you have an account in the cadouri-unicate.ro platform. You can request us to delete certain information or close your account at any time and we will comply with these requests, subject to the retention of certain information, including after closing the account, in situations where applicable law or our legitimate interests so require.

5. To whom we transmit your personal data
As the case may be, we may transmit or provide access to certain personal data of yours to the following categories of recipients:
– courier service providers;
– payment / banking service providers;
– marketing / telemarketing service providers;
– market research service providers;
– insurance companies;
– IT service providers;
– other companies with which we can develop joint programs for offering our goods and services on the market.
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
We ensure that access to your data by third parties under private law is made in accordance with the legal provisions on data protection and confidentiality of information, based on contracts concluded with them.

6. In which countries do we transfer your personal data
Currently, we store and process your personal data in Romania.
However, we may transfer certain of your personal data to entities located in the European Union or outside the Union, including in countries for which the European Commission has not recognized an adequate level of protection of personal data.
We will always take steps to ensure that any international transfer of personal data is carefully managed in order to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, by other guarantees, such as standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for the protection of personal data. transferred from within the EU to the United States.
You can contact us at any time, using the contact details set out above, to find out more information about the countries in which we transfer your data, as well as the guarantees we have implemented regarding these transfers.

7. How we protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to commercial standards.
Despite the measures taken to protect your personal data, we point out that the transmission of information via the Internet, in general, or through other public networks, is not completely secure, there is a risk that the data will be seen and used by third parties. unauthorized. We cannot be responsible for such vulnerabilities in systems that are beyond our control.

8. What general rights do you have
The general data protection regulations will recognize a number of rights in relation to your personal data. You may request access to your data, the correction of any errors in our files and / or you may object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or to go to court. Depending on the case, you can also benefit from the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.
In order to exercise your rights, you can contact us using the contact details set out above. Please note the following if you wish to exercise these rights:
Identity. We take seriously the confidentiality of all records that contain personal data. For this reason, please send us your requests regarding such registrations using the e-mail address related to the cadouri-unicate.roaccount. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.
Fees. We will not charge a fee to exercise any right to your personal data, unless your request for access to information is unfounded, repetitive or excessive, in which case we will charge a reasonable amount in such circumstantial. We will inform you of any fees applied before resolving your request.
Response time. We intend to respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made several requests, in which case we will respond within a maximum of two months. We will let you know if we need more than a month. We may ask you if you can tell us exactly what you want to receive or what worries you. This will help us to act faster and shorten the response time to your request
Third party rights. We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.
9. What rights do you have as a user of cadouri-unicate.ro?
The right to information – art. 13 and 14 GDPR. It allows the data subjects to know, right from the moment the collection is made, how those data will be used, to whom they will be disclosed or transferred, what rights the persons in question have regarding the processed data, etc.
The right to access data– art. 15 GDPR. It allows you to obtain, from us, a confirmation that we process or not personal data concerning you and, if so, access to those data and other useful information.
The right to delete data – art. 17 GDPR. It allows you to obtain from us the deletion of personal data concerning you, without undue delay. There are, however, exceptions to this rule, such as the idea that some data is processed to give the public the right to information, that it is processed for statistical or archival purposes, that it is processed to fulfill a legal obligation or that we process it. for finding or defending a right in court.

The right to rectification of data– art. 16 GDPR. It allows you to obtain from us, without undue delay, the rectification or completion of inaccurate personal data concerning you.
The right to data restriction– art. 18 GDPR. It is a temporary right. In some situations, between the time we, for example, make the decision to delete certain data (we no longer need personal data for the purpose of processing) and the actual deletion of data, you send us a request to oppose the deletion, motivating the fact that you need this data to establish, exercise or defend a right in court. As a result of such a request, we will “freeze” the data by stopping their processing for a certain period of time.
The right to data portability– art. 20 GDPR. You have the right to receive the personal data concerning you and which you have provided to the operator (which processes them under a contract or under your consent, by automatic means) in a structured, commonly used format and which can be read automatically and you have the right to transmit this data to another operator, without obstacles on our part. In other words, your personal data will be provided to you, in a structured format, so that you can decide whether to download them or, on the contrary, to send them to another operator.
The right to opposition – art. 21 GDPR. You have the right to object, for example, to the processing of your personal data, when they are processed for direct marketing purposes. To make it clearer how you can exercise this right, it should be mentioned, for example, that in all newsletters that come from cadouri-unicate.ro (whether we are talking about newsletters that offer only information or newsletters that promote services or products cadouri-unicate.ro) you will always have the opportunity to unsubscribe. We offer this possibility in absolutely all situations, regardless of whether the law obliges us or not (not all emails from us are considered to be direct marketing), because we think it is important that your interaction with cadouri-unicate.ro exists only as long as you want it.
The right not to be subject to a decision based exclusively on automatic processing, including the creation of profiles, which produces legal effects concerning the data subject or similarly affects him to a significant extent. Cadouri-unicate.ro does not make such profiling to be followed by automated decisions with legal or similar significant effect for the person concerned. At the time we make such profiling, we will notify and modify this information note.

The right to submit a complaint to the National Authority for the Supervision of Personal Data Processing. B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania. +40.318.059.211 / +40.318.059.212, anspdcp@dataprotection.ro.

Please also consider the following:
Time period: We will try to respond to your request within 30 days and we may extend this deadline for specific reasons related to the complexity of your request. In all cases, if this period is extended, we will inform you about the extension term and about the reasons that led to it.

Restricting access: In certain situations, we may not be able to give you access to all or some of your personal data due to legal provisions. If we deny your request for access, we will inform you of the reason for the refusal.

No identification: in some cases, we may not be able to search for your personal data due to the identifiers you provide in your request. In such cases, if we are unable to identify you as the data subject, we are unable to comply with your request to enforce your legal rights described in this section, unless you provide additional information to identify you. We will inform you and give you the opportunity to provide such additional details.

10. Security
Cadouri-unicate.ro is committed to protecting your personal data against loss, misuse, disclosure, modification, unavailability, unauthorized access and destruction and takes all reasonable precautions to protect the confidentiality of such data, including through the use of organizational and technical measures. adequate. Organizational measures include controlling physical access to our headquarters, training staff and locking physical files in storage cabinets. Technical measures include the use of encryption, passwords for access to our systems, the use of SSL security certificates, for encrypting data in transit, etc.
During the provision of your personal data to you, personal data may be transferred over the Internet. Although we make every effort to protect the personal data you provide to us, the transmission of information between you and us on the Internet is not completely secure (it is possible that the terminal on which you write is monitored by third parties, for example, without we can do nothing about it). Therefore, we cannot guarantee the security of your personal information transmitted over the Internet. Understand, therefore, that any such transmission is at your own risk. Once we receive personal data, we will use strict procedures and security features to prevent unauthorized access to it.

11. Changes in the information note
We reserve the right, in our sole discretion, to change our privacy practices and to update and make changes to this information note at any time. For this reason, we encourage you to permanently return to this note. This document is current from the date it appears at the top of the document. We will treat your personal data in a manner consistent with the notice of confidentiality on the basis of which it was collected, unless we have your consent to treat it differently.