PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH REGULATION (EU) 2016/679
The Privacy Policy describes the categories of your data that we process, the way and purposes in which we collect it, in which situations we transfer personal data and the various rights and options available to you in this regard. At the same time, our Privacy Policy details how we process personal data in managing the customer relationship.
1. Data protection principles
- The collection of personal data will be done only for specified, explicit and legitimate purposes (presented in point 3).
- The data will not be processed by third parties in a manner incompatible with those purposes;
- In case of updates to the transmitted data, the consent remains in force until you notify NBB PREMIUM SRL in this regard;
- The processing of personal data will be done in a legal, fair and transparent manner;
- All personal data will be kept confidential and stored in a manner that ensures the necessary security;
- Personal data will not be distributed to third parties, unless this is necessary to achieve the purposes presented in point 3.;
- Data subjects have the right to request access to personal data, rectification and deletion thereof, opposition to or restriction of data processing, as well as the right to data portability.
2. Personal data and their collection
The data we collect may include the following:
- Personal data includes all types of direct or indirect information (i.e. used in connection with other data) relating to the natural person concerned, such as: name and surname, e-mail address, postal address, mobile or landline telephone number and other similar contact data necessary to contact you in order to process the orders placed or for any other objectives planned in relation to you;
- We collect data about your device and how you and your device interact with our products through Google Analytics;
- We collect data through Google Analytics about the features you use, the items you purchase from our web pages, and the pages you visit;
- We collect data through Google Analytics about the device and network you use to connect to our products, such as geographic location, language, and operating system. We do not collect information about software applications installed on your device or product keys.
IMPORTANT : ALL INFORMATION COLLECTED BY GOOGLE ANALYTICS THROUGH OUR SITES IS FOR STATISTICAL PURPOSES ONLY AND CANNOT BE LINKED TO ANY PARTICULAR PERSON. GOOGLE ANALYTICS MAY STORE INFORMATION RELATING TO IP, BUT THAT INFORMATION IS NOT AVAILABLE TO US. WE CAN ONLY SEE THE DATA GENERATED FOR STATISTICS.
3. Purpose of collecting personal data
- any communication related to informing the individual regarding the validation, shipping and invoicing of orders, resolving cancellations or problems of any kind relating to an order, goods purchased from the online store;
- any communication related to informing the individual regarding the postal/courier shipment of samples, information materials, promotional materials;
- any communication to individuals in our database related to sending informative newsletters and/or periodic alerts, product news, feedback forms, or other company actions or activities, transmitted using the individual's electronic mail (e-mail, SMS);
- compliance with legal obligations;
IMPORTANT : Also, where applicable or the situation requires it to achieve the purpose defined above (for example: sending an order, processing an order with card payment, sending sample packages, information/promotional materials), NBB PREMIUM SRL may provide personal data to other partner companies, but only on the basis of a confidentiality commitment from them, guaranteeing that this data is kept safe and that the provision of this personal information is made in accordance with the legislation in force, as follows: courier service providers, marketing service providers, payment/banking service providers, IT service providers, or other similar services. If you do not agree with the disclosure of personal data to these companies, please contact the DPO at the email address local@krud.ro .
Personal information may also be provided to the General Prosecutor's Office, the Police, the courts and other authorized state bodies, based on and within the limits of legal provisions and as a result of expressly formulated requests.
4. Use of personal data
- we will use personal data only for the purpose for which it was collected and we will store the data only as long as necessary for the purposes mentioned above (point 3);
5. Processing security
We will process data securely, we will apply and maintain appropriate technical measures to protect personal data against accidental or unlawful destruction or loss, alteration, disclosure or unauthorized access, in particular when the processing involves the transmission of data over a network, as well as against any other form of unlawful processing.
Questions related to the security of personal data can be sent to the DPO at the email address local@krud.ro .
6. Access and rectification or deletion of personal data
- you have the right to request at any time access to: rectification, portability, deletion or restriction of the processing of the collected data;
- to keep your personal data updated, we recommend that you inform us of any change or discrepancy;
The expressed consent will remain valid until withdrawn by you.
Once you have expressed your disagreement in writing, your personal data will no longer be processed and appropriate measures will be taken to delete any records of your personal data.
Consent can be withdrawn at any time, free of charge, by accessing the UNSUBSCRIBE link in the footer of any email received from us or by directly sending your request in writing to email. local@krud.ro .
To view or modify your personal data or to obtain information related to your personal data, as well as for any dissatisfaction related to the processing of your personal data, you can contact us using the email address local@krud.ro .
We remind you of the rights granted by the General Data Protection Regulation 679/2016, including the right to information, access, rectification, not to be subject to a decision based exclusively on automatic processing, and the right to erasure.
You can exercise any of these rights by email at local@krud.ro or send us a signed letter dated at our headquarters. We may ask you to prove your identity by providing us with a copy of a valid means of identification in order to comply with our security obligations and prevent unauthorized disclosure of data.
We will consider any requests or complaints we receive and will provide you with a timely response. If you are not satisfied with our response, you may file a complaint with the National Supervisory Authority for Personal Data Processing – located at Bd. Gheorghe Magheru no. 28-30, Bucharest, Romania.