Privacy Policy - Degrize

1. INTRODUCTION

We treat the confidentiality of personal data seriously and responsibly, and the security of personal data is a priority for us.

That is why we are committed to comply with the new rules imposed by the European Regulation No. 679/2016 referred to as the “Regulation”, as supplemented by Law 190/2018 regarding the processing of personal data and the free movement of such data.

Through this policy we explain to you what personal data we process, how we collect it, how we use it and, most importantly, how we protect this data.

We also inform you about your rights and guide you on how to exercise them.

2. ABOUT US

Address: Str. Prelungirea Gării Cățelu 12, Cernica 077035, Tax Code RO31112730, J40/586/2013.

The legal representative of the company is Milescu Mircea Catalin and can be contacted at Str. Prelungirea Gării Cățelu 12, Cernica 077035, Romania and at the e-mail address: office@degrize.ro

In terms of EU Regulation 679/2016, SC DEGRIZE INDUSTRIAL TECHNOLOGY S.R.L is a personal data controller and has a designated data protection officer (Milescu Mircea Catalin) who can be contacted at:

- e-mail: office@degrize.ro;
- address: Str. Prelungirea Gării Cățelu 12, Cernica 077035, Romania, to the attention of the DATA PROTECTION OFFICER.

3. WHAT DATA WE COLLECT and HOW WE COLLECT IT

We only use information that is strictly necessary and relevant to our business and your needs as a consumer and collect it through our website which is hosted and administered in Romania.

We acquire your data, mainly as a result of you voluntarily choosing to disclose it to us, but also through automatic capture when you access our website, using specific technology and software.

Although you can visit our website without having to disclose your identity, you can directly provide us with your personal data, when using:

1.The contact form* through which you get in touch with us.

* available at https://www.degrize.ro/en/contact-us/

We use your name, email and telephone details to enable you to send us various requests, either in relation to our products and services or in relation to exercising your rights concerning personal data collected and processed through the Website. The information is stored for 12 months.

2. Request for offer form* to buy products from us.

* available on the product page

We use your name, phone number and e-mail address to enable you to send us requests for quotations on our products (model and specifications). The information is stored for 12 months.

Information concerning your rights in relation to personal data collected and processed through the Website and the exercise of those rights can be found in the relevant section of this Privacy Policy.

Automatic data capture is achieved through:

- - cookie technology; a cookie is a piece of information transmitted from the website, saved by the browser on your computer’s hard drive and which we can access later. It retains statistical information necessary for a website to personalise the browsing session (e.g. by displaying dynamic images of products of interest) such as previously visited web pages, downloads made, internet provider used, country of origin of the website visitor.

The most common cookies are:

- - Technical: they are absolutely necessary for us to ensure the efficiency of the website from a technical perspective,
  - Functional: they remember your choices and help us improve your experience on our website,
  - Performance: help us measure website performance using information about how visitors navigate the website,
  - Retargeting: helps us place ads on other websites you use
  - Social media plug-in: to connect our customers to different social media channels.

We collect and process data provided by cookie technology only if you allow us to do so.

Standard web server log files provide us with statistical information on the number of visitors and allow us to evaluate the technical capacity of our website.

We collect some information about your IP address through them, but they are not able to identify you directly, but provide us with statistical data about the traffic on the website.

Google Analytics

Our website uses the web analytics service “Google Adwords/Analytics” of Google Inc. for statistical purposes.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”), which in turn uses cookies. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

The IP address that your browser sends will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, but you may not be able to use the full functionality of the site if you do so. You can also opt-out of using Google Analytics in the future by downloading and installing the Google Analytics Opt-out Browser Addon for your browser: https://tools.google.com/dlpage/gaoptout?hl=en.

To agree or withdraw your consent to automatic processing by the above-mentioned programs or technologies, set this option within the welcome message you receive when accessing the website / make the appropriate settings in your browser.
For more details, please see our cookie policy.

If you choose to browse without these technologies or programs, some functionality or features of the site may not be usable.

If you complete all forms posted on the site and if you accept the full use of automatic capture programs and technologies, we will collect the following data:

- - identity data: surname and first name, name of the company you represent
  - contact details: e-mail address, telephone number, possibly contracting and invoicing address
  - data on commercial transactions: services and products purchased from us, payment method
  - technical data: login data, including IP, operating system and platform, browser identification, location, technologies used on the devices used to access the website
  - usage data: of our website, products and services,
  - marketing data: your preferences to receive information from us or third parties

4. PURPOSE OF COLLECTION and LEGAL GROUND

We collect information containing personal or technical data mainly for:

1. To fulfil our contractual obligations towards you (processing of requests for proposal and offers).

We collect information containing personal data as a result of legal or contractual obligations incumbent on us or by virtue of the exercise of a legitimate interest related to our business activity and use it:

- - to be able to communicate with you in the pre-contractual or contractual period,
    to contract;
  - to inform you on relevant changes to our terms and conditions or privacy policy.

2. Improving our services and your experience on our website.

In order to do this we rely on our legitimate interest in conducting business but we are also committed to respecting your rights and freedoms so we provide you with an easy way to opt-out of the use of the programs and technologies we use to collect and process data.

3. Security reasons for our hardware and software infrastructure.

The grounds for collecting and processing for this purpose are both legal, namely the obligation to safeguard assets, and based on our legitimate interest in protecting our business.

To the extent that we use the information held for purposes other than those stated above, we will expressly ask for your consent and explain what new rights you have in this situation.

5. FAILURE/REFUSAL TO PROVIDE US WITH CERTAIN PERSONAL DATA

In the event that you do not provide us with the requested information, it is very likely that you will not be able to use our website in the normal way and that we will not be able to accept and process your request and be able to provide you with the products of interest to you.

6. USERS

Your data is used by SC DEGRIZE INDUSTRIAL TECHNOLOGY S.R.L and we will never share your personal information with a third party for purposes other than those described in this Policy.

We may disclose your personal information to our trusted partners who are able to provide guarantees regarding the security and confidentiality of your data and who process the data only in accordance with our instructions.

Our partners are generally third party service providers with whom we collaborate and who are active in areas such as: IT services and maintenance, internal and EU database hosting, behavioural analysis services (Google Analytics), accounting and tax, legal consultancy and assistance, marketing, financing, advertising, payment processing, delivery or other services, public authorities.

7. PLACE OF STORAGE

Both the website and the physical and electronic database containing personal information are hosted/stored on secured servers in Romania.

To the extent that we transfer certain personal data to entities located in the European Union or outside the European Union, including to countries not recognised by the European Commission as having an adequate level of personal data protection, we will take steps to protect your rights and interests.

Transfers will be protected by contractual clauses or other safeguards such as certification schemes of which the Privacy Shield is a part and the Privacy Shield for the protection of personal data transferred from within the EU to the United States of America.

8. SECURITY MEASURES

Although your data is collected online, some of it is also stored on hard copy media (e.g. invoices).

SC DEGRIZE INDUSTRIAL TECHNOLOGY S.R.L is particularly and constantly concerned about implementing effective security measures to protect your personal data and avoid security breaches both in terms of information stored online and on hard copy media.

Regardless of the storage method, your data is kept in secure environments that are protected from unauthorised access, use, disclosure, modification or destruction.

We have also implemented special measures regarding network and data transfer security, infrastructure auditing and testing, trained staff, data transfer outside Romania only to entities that can provide similar protection, etc.

9. STORAGE PERIOD

In the event that we process your data for the performance of pre-contractual/contractual obligations we will store the data for as long as necessary for the performance of the contract and for an additional period thereafter.

If we process your data by virtue of a legal obligation or in the public interest we will store the data for as long as it is necessary for compliance with legal obligations or as long as the interest qualifies as public interest.

In the event that we process your data for the protection of our legitimate business interests, we will store the data until you ask us to stop unless we can demonstrate that the reason we collect and store it takes priority over your interests, rights and freedoms.

If we process your data based on your express consent, we will store the data until you ask us to stop.

10. AUTOMATION OF THE DECISION-MAKING PROCESS

SC DEGRIZE INDUSTRIAL TECHNOLOGY S.R.L does not use automated processes that may generate legal effects that concern you or that may affect you to a significant extent.

You may at any time request not to be subject to a decision based solely on automatic processing in the event that the decision produces legal effects concerning you or otherwise affects you in a similar way and to a significant extent.

You cannot benefit from this right of choice if the decision taken as a result of automatic data processing is necessary for us to conclude or perform a contract or if it is permitted by law and there are adequate safeguards for your rights and freedoms.

In the event that you have given us your consent to automatic processing and then change your mind, you may withdraw your consent at any time by making a written request to us using the contact details provided in the Contact section of the website.

11. RIGHTS

- 1. Right to information – you have the right to know whether your personal data is processed; what data is collected, where it is obtained and why, by whom it is processed, for how long and whether it is subject to automatic processing that is likely to produce legal effects or significantly affect you.
  2. Right of access – you have the right to access, free of charge and at reasonable intervals, data collected from/about you. This includes your right to request and obtain a copy of the personal data collected.
  3. Right to update/rectification – you have the right to request the rectification or updating of your personal data that is inaccurate or incomplete.
  4. Right to erasure – in the event that you have withdrawn your consent, object to the processing of your data, the processing does not comply with the Regulation or is no longer necessary for the purposes for which the data was collected and processed, you may request that your personal data be deleted from our records.
  5. Right to restrict processing – in the event that certain conditions apply, you have the right to restrict the processing of your personal data.
  6. Right to object – in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
  7. Right to object to automated processing – in the event that your personal data is subject to automated processing, including profiling, which may produce legal effects or significantly affect you, you are entitled to ask us to exclude your data from any automated individual decision-making process.
  8. Right to data portability – you have the right to obtain your personal data in an appropriate format or, if possible, by direct transfer from one processor to another.
  9. Right to help from the supervisory authority – you have the right to seek help from a supervisory authority and the right to other remedies, such as claiming compensation.
  10. Right to withdraw consent – you have the right to withdraw your consent at any time Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
  11. Right to lodge a complaint – if you want to make a complaint about the way we process your personal data, please contact us:
- - by e-mail at office@degrize.ro;
  - by post or courier at the address: Str. Prelungirea Gării Cățelu 12, Cernica 077035, Romania, to the attention of the PERSONAL DATA CONTROLLER.

We assure you that all your complaints will be treated with seriousness, professionalism and complete confidentiality.

If you are still not satisfied with the way we have responded to your complaints, you can contact the authorities that supervise our personal data activities.

In Romania this authority is represented by the National Supervisory Authority for the Processing of Personal Data, whose contact details are:

Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania,

Telephone: +40.318.059.211 or +40.318.059.212;

E-mail: anspdcp@dataprotection.ro, Romania, for the attention of the PERSONAL DATA PROTECTION OFFICER.

Politica de confidentialitate