Privacy Policy (GDPR)

This privacy policy describes how we collect, use and disclose personal information when you visit or make a purchase using our website. We are committed to protecting your privacy and safeguarding your personal information in accordance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR"), as well as any other applicable legislation in Romania. By accessing or using our website, you agree to the terms of this Privacy Policy.

• 1. Legislative Framework

  The processing of personal data and the protection of privacy in the public communications sector are regulated by:
  Regulation UE 679/2016 - https://eur-lex.europa.eu/legal-content/RO/TXT/HTML/?uri=CELEX:32016R0679&qid=1552658506249&from=EN
  Directive 2000/31/CE - https://eur-lex.europa.eu/legal-content/RO/TXT/HTML/?uri=CELEX:32000L0031&qid=1552658766436&from=EN
  Directive 2002/21/CE - https://eur-lex.europa.eu/legal-content/RO/TXT/HTML/?uri=CELEX:32002L0021&qid=1552658766436&from=EN
  Directive 2002/58/CE - https://eur-lex.europa.eu/legal-content/RO/TXT/HTML/?uri=CELEX:32002L0058&qid=1552658766436&from=EN
  

• 2.Personal data and their processing

  By "personal data" we mean any information relating to an identified or identifiable person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
  “Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  By "restriction of processing" we mean the marking of stored personal data for the purpose of limiting their further processing.

• 3. Personal data controller

  The personal data controller is the company POLYTRADE GLOBAL SRL with headquarters in Sos. Bucuresti Nord Nr.10, Global City Business Park O21, Voluntari, Ilfov, Romania, 077190 with registration number J23/2524/03.09.2012 and VAT 30618187.

• 4. Principles governing the processing of personal data
  • 4.1 processed lawfully, fairly and transparently in relation to the data subject ("lawfulness, fairness and transparency")
  • 4.2 collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes
  • 4.3 adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation")
  • 4.4 accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay ("accuracy")
  • 4.5 kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed ("storage limitations")
  • 4.6 processed in a way that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or accidental damage, by taking appropriate technical or organisational measures ("integrity and confidentiality")
• 5. Data/information that may be collected by the operator as a result of being provided directly by the user

  We may collect personal information from you when you visit our website, create an account, place an order or contact us. The types of personal information we may collect include:

  • 5.1 Contact information (such as name, email address, shipping address and phone number)
  • 5.2 Payment information (such as credit card details or details of other payment methods)
  • 5.3 Account credentials (such as username and password)
  • 5.4 Purchase history and preferences
  • 5.5 Information you provide when contacting our customer support

  If you choose to register on our website using your Facebook or Google account, you will be redirected to a page managed by Facebook Inc. / Google LLC. These companies will inform you about the transfer of your data to our website. Please refer to the privacy policies of Facebook or Google respectively, using the following links:
  Facebook Privacy Policy: https://www.facebook.com/about/privacy
  Google Privacy Policy: https://policies.google.com/privacy

• 6. The purpose of processing personal data

  Personal data will only be used in compliance with legal provisions. Frequently personal data will be used for:

  • 6.1 Processing and fulfilling your orders and requests
  • 6.2 Providing customer support and answering your questions
  • 6.3 Improving and personalising your experience
  • 6.4 Detecting and preventing fraud and unauthorised access
  • 6.5 Executing the contract that is to be or has been concluded
  • 6.6 Where the operator is constrained by a legal obligation and/or regulation
  • 6.7 With the consent of the user, with the caveat that in this case the purpose and category of personal data to be and/or to be processed will be announced
• 7. User Rights

  According to Regulation 679/2016 the user has the following rights:

  • 7.1 The right to request access to his/her personal data, which is materialized by the Operator issuing a copy of the personal data, giving the possibility to verify the legal processing of these data.
  • 7.2 The right to request the correction of any data belonging to the User.

  • 7.3 The right to request restriction of the processing of personal data. Exercising this right allows the User to request the suspension of the processing of his/her personal data in the following cases:

    • 7.3.1 the data subject disputes the accuracy of the data
    • 7.3.2 the processing is unlawful
    • 7.3.3 the controller no longer needs the personal data for the purpose of the processing, but the data subject requests them for establishing, exercising or defending a legal claim
    • 7.3.4 the data subject has objected to the processing of the data, for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject
  • 7.4 Right to request deletion of personal data. Exercising this right consists in requesting the deletion of personal data, unless there are compelling reasons to allow further processing.
  • 7.5 Right to object to the processing of personal data. Exercising this right entails objecting to the processing, by invoking a legitimate interest, if there is an impact on fundamental rights and freedoms. Furthermore, the User has the right to object to the processing of personal data for direct marketing purposes, except in cases where the Controller demonstrates the existence of legitimate grounds for the further processing of such data, which are overriding the rights and freedoms of the User.
  • 7.6 Right to request the transfer of personal data. Exercising this right implies transferring the data to the User or to a third party designated by the User. The provision will be made in a structured, commonly used, device-readable format, with the caveat that it only applies to automated information for which the User has initially given consent to use it or where the Operator has used the information to conclude a contract.
  • 7.7 The right to withdraw your consent to the processing of personal data at any time. Exercising this right does not affect the lawfulness of any processing that the Operator has already carried out on the basis of the previously given consent.

  For the exercise of the above-mentioned rights, as a rule, the Operator will not charge any fee, except in cases where the User's requests are clearly unfounded, excessive and/or repeated. In the latter cases, the Operator will charge a reasonable fee. As a general rule, the response time is one month, except in cases where Users' requests are particularly complex, when the response time may exceed this period.

• 8. Transfering your personal data

  We may provide your personal data to other companies with whom we have a partnership relationship, in accordance with a confidentiality commitment from them. These companies must guarantee that they will keep your data secure and that the provision of this personal information will be done in accordance with applicable law. Examples of such companies include providers of marketing services, courier services, payment/banking services, telemarketing or other services, and other companies with whom we may develop joint programs to market our products.
  Your personal information may also be provided to authorities such as public prosecutors, police, courts and other authorized state bodies, within the limits provided by law and following express requests made in accordance with legal provisions.

• 9. Keeping your personal data

  In general, we will keep your personal data for as long as you have an active account on our website. If you wish, you can request at any time to delete certain information or to close your account. We will comply with such requests, except where applicable law or our legitimate interests require us to retain certain information, even after account closure.
  It is important to note that under applicable law, we may be required to retain certain data for a specific period of time for legal, compliance or dispute resolution purposes. In such situations, we will ensure the confidentiality and security of your information as required by law.
  In addition, we have a legitimate interest in retaining certain information, such as your purchase history, for analytical and reporting purposes and to provide you with further support and assistance with our products or services.
  We assure you that we will take all reasonable steps to protect your personal information and to respect your rights under applicable data protection legislation.