Privacy Policy

 

We consider ensuring the right to personal data protection as a fundamental commitment of our company, therefore we will dedicate all the necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other applicable legislation in Romania. As one of the key principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services, including through our website or by telephone.

 

We reserve the right to periodically update and amend this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will post the amended version of the Privacy Policy on our website, so please check the content of this Privacy Policy periodically.

 

The current version entered into force on 15.12.2022.

1. Who are we?

 

The data controller is AZOC STAR SRL Romania, with registered office in Bucharest, Sector 4, Intrarea Binelui nr. 1A, (FORTUNA building) TEL: +4 0372 775 919, E-mail: office@azocstar-bag-in-box.ro with Fiscal Code: RO 2727391 registered at the Trade Register with no. J40/11418/2014 and represented by Costiniuc Catalin-George, as administrator.

The Privacy Policy explains the practices of AZOC STAR SRL. regarding the application of the GDPR provisions, as well as your rights regarding how your information is collected, processed and stored, through the website and offline interaction with our employees.

If you have any questions about this privacy policy or what it says, please contact the data controller.

2. What personal data do we collect?

Through the contact form on the website we collect :

• Name and surname
• Email address
• Phone
• Your message

By subscribing to the newsletter we collect

• Your e-mail

Through e-mail messages/telephone calls received for an order we collect

• Name and surname
• Email address
• Phone
• Your message
• Delivery address
• Bank information for reimbursement of orders/payments differences occurred

On our website we collect

• Information about your behaviour while visiting our website, to personalise your online experience and provide you with offers tailored to your profile, in accordance with our Cookie Policy.

 

We do not collect or otherwise process sensitive data, which are included by the General Data Protection Regulation in special categories of personal data.

 

We also do not want to collect or process data from minors, as the site is intended for adults. If you communicate sensitive data to us, it will be deleted.

 

3. What is the purpose of the collection and what are the legal grounds?

 

Data obtained through the contact form

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to questions and messages we receive and to keep records of correspondence.

 

Data obtained by subscribing to the newsletter

Legal basis for processing: your consent. (Article 6(1)(a) of the General Data Protection Regulation).

Consent: you consent to receive our e-newsletter by signing up to receive it.

 

Data obtained by e-mail/telephone call for an order

Legal basis for processing: necessary for the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation).

The reason why it is necessary for making a contract: if your message is about providing services / delivering products or taking action at your request. before we provide you with our services (e.g. providing information about such services) / deliver the products we will process your information. to do so).

Data collected on the site

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: to improve our site for our site users and to know the preferences of our site users so that our site can better meet their needs and desires.

Data collected at events

Legal basis for processing: your consent. (Article 6(1)(a) of the General Data Protection Regulation).

Consent: you consent to be photographed/filmed and appear on our media channels, including: website, Facebook page, Instagram account.

4. Where do we store and how long do we keep your data?

 

Data obtained through the contact form and by e-mail are kept for 1 year

Data obtained through the contact form is hosted on servers located in the EU and is not transferred outside the EU.

Data obtained by subscribing to the newsletter – are kept for 3 years, or until unsubscription

The data is stored on MailChimp’s operator servers located in the US. The transfer of personal data outside the EU is protected by the Standard Contractual Clause. More information about MailChimp’s GDPR compliance can be found here.

Data obtained by telephone call with a view to an order – kept for 1 year if the request for an offer does not materialise and in accordance with tax rules if an invoice is issued

This data is stored in a spreadsheet on a password-protected computer belonging to our company, to which only employees have access.

Data collected on the site automatically- is stored according to the Cookie Policy, by category.

Data collected at events – kept for 5 years or until consent withdrawn

Photos taken at events are stored for 30 days at the photographer, then only on our company’s computer hard drive. Photos displayed on the website/social media are protected by this privacy policy and those of the respective platforms. If you wish to remove an image, it is sufficient to contact us using one of the methods indicated in the contact section.

5. Disclosure of personal data to third parties

Disclosure of user data to third parties: if you agree to a firm order and the conclusion of a Contract, your data is provided to third parties in order to achieve the object of the contract: namely the processing and delivery of the order. Personal data entered in tax documents are processed by third parties (accounting firm) in order to fulfil legal tax obligations.

User data is not sold to third parties.

If you would like further information about the identity of the service providers, please contact us directly via our contact form or by e-mail and we will provide you with such information if you have a legitimate reason to request it).

For continued compliance with laws, regulations and other legal requirements

We will use and process your information. to comply with the legal obligations we are subject to. For example, we may need to disclose your information. based on a court order or subpoena, if we receive one.

Legal basis for processing: compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation.

Legal obligation: legal obligations to disclose information that are part of Romania’s laws or if they have been incorporated into Romania’s legal framework (e.g. in the form of an international agreement that Romania has signed).

6. What rights do you have?

 

Rights concerned	Description
Access	You can ask us: to confirm whether we process your personal data; to provide you with a copy of this data; provide you with other information about your personal data, such as what data we hold, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can make a complaint, where we obtained your data, to the extent that information has not already been provided to you through this notice.
Correction	You can ask us to rectify or complete inaccurate or incomplete personal data. We may try to verify the accuracy of the data before correcting it.
Deleting data	You can ask us to delete your personal data, but only if: they are no longer needed for the purposes for which they were collected; or you have withdrawn your consent (if the data processing is based on consent); or give effect to a legal right to object; or they have been processed unlawfully; or we have a legal obligation to do so. We are not obliged to comply with your request. to delete your data. personal data if the processing of your personal data personal data is required: for compliance with a legal obligation; or to establish, exercise or defend a right in court. There are certain other circumstances in which we are not obliged to comply with your request. deletion of data, although these are the two most likely circumstances in which we would refuse your request
Restriction of data processing	You can ask us to restrict the processing of personal data, but only if: their accuracy is disputed (see the rectification section) to allow us to verify their accuracy; or the processing is unlawful, but you do not want the data to be deleted; or they are no longer needed for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court; or you have exercised your right to object, and verification of whether our rights prevail is ongoing. We may continue to use your data. personal data following a restriction request, if: we have your consent; or to establish, exercise or defend a right in a court of law; or to protect our rights or the rights of another person or company.
Data portability	You can ask us to provide your personal data in a structured, commonly used and machine-readable format, or you can request that it be “ported” directly to another data controller, but in each case only if: processing is based on your consent. or on the conclusion or performance of a contract with you; and processing is done by automatic means.
Opposition	You may object at any time, for reasons relating to your particular situation, to the processing of your data. personal data on the basis of our legitimate interest, if you consider that your rights and freedoms are not respected. fundamental interests prevail over this interest. You can also object to the processing of your data at any time. for direct marketing purposes (including profiling), without giving any reason, in which case we will cease such processing as soon as possible.
Automatic decision-making	You can ask not to be subject to a decision based solely on automatic processing, but only when that decision: produces legal effects in relation to you; or affect you in another similar way and to a significant extent. This right does not apply if the decision reached as a result of automatic decision-making: is necessary for us to enter into or perform a contract with you; is authorised by law and there are adequate safeguards for your rights and freedoms; or is based on your consent. explicit.
Complaints	You have the right to lodge a complaint with the supervisory authority about the processing of your data. personal data. In Romania, the contact details of the data protection supervisory authority are as follows: National Supervisory Authority for Personal Data Processing B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania Phone: +40.318.059.211 or +40.318.059.212; E-mail:anspdcp@dataprotection.ro Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance, and we promise to make every effort to resolve any issues amicably.

Response time. We aim to respond to any valid requests within a maximum of 30 days, unless this is particularly complicated or if you have made multiple requests, in which case we will respond within a maximum of 45 days. We might ask if you can tell us exactly what you want to receive or what you are worried about. This will help us to act faster and shorten the response time to your request.

 

CHANGES TO OUR PRIVACY POLICY

We regularly update and amend our privacy policy.

Minor changes to our privacy policy

If we make minor changes to our privacy policy, we will update the Privacy Policy with a new effective date stated at the beginning of the Privacy Policy. Processing your information will be governed by the practices set forth in the new version of the Privacy Policy as of its effective date.

Major changes to our privacy policy or the purposes for which we process your information.

If we make major changes to our privacy policy or intend to use your data in a different way, we will notify you. for a new purpose or for a purpose different from the purpose for which we originally collected it, we will notify you by email (if possible) or by posting a notice on our website.

We will provide you with information about the change in question and the purpose and any other relevant information before we use your information. for the new purpose.

Whenever necessary, we will obtain your consent. before using your information. for a purpose other than the purpose for which we originally collected it.