PERSONAL DATA PROTECTION POLICY - PPD
The new European Union Law on the Protection of Personal Data, GDPR (“General Data Protection Regulation”), entered into force on 25 May 2016, but will start to produce its effects on 25 May 2018. This law has been the most significant change in the field of personal data protection in the last 20 years and has objectives that go far beyond the mere protection of private space.
The protection of your personal data is important to us, and therefore we pay special attention to the protection of the privacy of visitors who access the Website www.allaudiopro.ro, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of their personal data and on the free movement of such data (hereinafter referred to as “GDPR”).
Please pay special attention to reading the following Policy (hereinafter referred to as “PPD”) in order to understand how your information will be treated (“personal data”).
PPD explains our company's online practices regarding the enforcement of GDPR provisions, as well as the rights you have regarding the way your information is used through our Website.
The personal data processing carried out by the company will always be performed in accordance with GDPR provisions, as well as with the regulations on the protection of personal data, specific to each country in which our company operates.
Through PPD, our company wants to inform the visitors on the nature of the personal data we collect and process, as well as on the purposes of such processing. In addition, the Website visitors are also informed through PPD about their rights.
WHO ARE WE?
We are DATASOFT S.R.L. a trade company with its head office in str. Fântâna de Piatră no. 7, Cârcea, Dolj County, with Trade Register no. J16/596/1998 and sole registration number RO10672947.
Our main field of activity is NACE 6202 Computer consultancy activities, and our legal representative is the manager Cristian Dorin Anton.
WHAT IS PERSONAL DATA?
"Personal data" means any information that can identify you either directly (for example, your name) or indirectly (for example, through pseudonymous data, such as a sole identification number). This means that personal data includes items like email address, home address, mobile phone, username, profile pictures, personal preferences and shopping habits, user-generated content, financial information and information on financial status. It may also include sole numeric identifiers, such as the IP address of your computer or the MAC address of your mobile device, as well as cookies modules.
WHAT DOES PERSONAL DATA PROCESSING MEAN?
"Processing" means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means such as the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or making it available in any other way, alignment or combination, restriction, deletion or destruction.
PERSONAL DATA CONTROLLER
The personal data controller (hereinafter referred to as the “controller”) is DATASOFT S.R.L.
DATA PROTECTION OFFICER (DPO)
Our company, as an controller, has appointed Mr. Claudiu Ștefănescu, as Data Protection Officer (hereinafter referred to as “DPO”), having the obligation to verify the compliance with GDPR provisions in the personal data processing operations as performed by the controller and to represent the controller in its relation to the data subjects and the Supervisory Authority.
Data subjects have the opportunity to contact the DPO at any time, either directly, on any matter related to this PPD, using the contact details below:
Name DPO: Claudiu Ștefănescu
E-mail DPO: claudiu.stefanescu@allaudio.ro
Phone DPO: 0251.411.116
Mailing address DPO: Fantana de Piatra 7 St, Carcea, Dolj County
WHAT PERSONAL DATA WE PROCESS
www.allaudiopro.ro will collect information or personal data that allow the identification of individuals (name, address, telephone number, e-mail address). Such data is necessary in order to provide the possibility for the payment processors to collect the value of the purchase orders and to deliver the ordered products to you. www.allaudiopro.ro will also collect the IP address as traffic data.
PERSONAL DATA PROCESSING PRINCIPLES
Our company undertakes to comply with the principles of personal data protection (hereinafter referred to as the "Principles") as provided for by GDPR, in order to ensure that all data is:
Correctly, legally and transparently processed;
1. Collected for specified, explicit and legitimate purposes;
2. Adequate, relevant and limited in relation to the purposes for which it is processed;
3. Accurate and up to date;
4. Kept in a form which does not allow the data subjects to be identified for longer than it is necessary in relation to the purpose of the processing;
5. Processed in accordance with the rights of the data subject, in such a way as to ensure adequate security of processing, so that the personal data is complete, confidential and available.
BASIS AND PURPOSES OF PERSONAL DATA PROCESSING
1. For the conclusion and execution of agreements - According to art. 6 par. 1 letter b) of GDPR, personal data may be processed for the purpose of concluding or executing the agreement. In order to be able to offer you our products, we need to process your personal data.
2. In order to fulfil certain legal obligations - According to art. 6 par. 1 letter c) of GDPR, personal data may be processed for the purpose of fulfilling certain legal obligations. We therefore request a series of personal data, including, in certain cases, the personal number, in order to fulfil our obligations imposed by the tax authorities in connection with invoicing and reporting to the tax authorities.
3. For marketing purposes - According to art. 6 par. 1 letter a) of GDPR, personal data may be processed if the data subject has given his/her consent for the processing of his / her personal data for one or more specific purposes.
NEWSLETTER
If you have subscribed to the Newsletter section, your personal data (name, first name, e-mail address, IP, geolocation) will be used exclusively for the purpose of providing you with marketing information about the products and services of the company, the offers and / or promotions, news, future campaigns, invitations to various events held by the company in a given period of time.
Your personal data will be deleted immediately when you unsubscribe from Newsletter section of the company.
You can unsubscribe at any time using the link attached to the Newsletter received or by a written request addressed to the Data Protection Officer of the company.
The company reserves the right to select the persons to whom it will send newsletters and / or alerts as well as the right to remove from its database any Member or Customer who has previously expressed its consent to receive newsletters and / or alerts, without any subsequent commitment from the company, or any prior notice sent to him/her.
CONTACT FORM PROCESSING
The company will use the information you provide in the appropriate contact section on the Website exclusively for the purpose of processing your request.
By providing any personal data through the Website www.allaudiopro.ro, you understand and agree that your personal data will be processed in accordance with the PPD provisions of the company.
Please consider that in order to be able to process your requests submitted in the contact section of the Website, we may, in certain circumstances, have the obligation to disclose your personal data to partners which the company collaborates with and / or other third party service providers.
However, the company has taken appropriate technical and organizational measures to ensure the security of the personal data transfer as well as the processing of your personal data in accordance with GDPR requirements by the aforementioned entities.
Your personal data may be transmitted to other third parties only on the basis of your express consent, except for the situations when there is a legal obligation for the company to do so.
The Company undertakes not to process any personal data provided for any purpose other than that for which it was transmitted, except for the situations when you have given your express consent to use it for other purposes.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Personal data processed through the Website www.allaudiopro.ro may be disclosed and / or transferred to third parties only if there is your express consent to do so, except for the situations when there is a legal / contractual obligation for the company to do so.
Please consider that in certain circumstances we may be required to disclose your personal data to our partners and / or other third party service providers.
Third parties who have access to such data are: delivery companies, payment processors, e-mail marketing services.
PERSONAL DATA PROCESSING BY THIRD PARTIES, OTHER WEBSITES AND SPONSORS
The Website www.allaudiopro.ro may contain, at a given time, access links to other Websites whose data processing policies may differ from those of our company.
Please consider and consult the personal data protection policies of the other websites, the company not undertaking any responsibility for the information sent or collected by these third parties.
AUTOMATIC PERSONAL DATA PROCESSING. COOKIES
The Website www.allaudiopro.ro uses Cookie identifiers. The cookies used by www.allaudiopro.ro (its own or from third parties) include: Google Analytics, Facebook Login, Remarketing, zopim, trusted, globessl, pinterest, clicktale, profitshare, facebook, plusone, google experiments, twitter, adwords, retargeting. In this regard, you may consult our Cookie Policy, available on the Website, and you can exercise your right to disable Cookies, as specified below.
PERSONAL DATA RETENTION PERIOD
The company may keep the personal data processed for various periods of time, considered as reasonable, in accordance with the purposes indicated above. We retain your personal data only for the period necessary to achieve the purpose for which we keep the data, in order to meet your needs or to fulfil our obligations as required by the law.
To know how long your personal data can be retained, we use the following criteria:
1. When you purchase products and services, we retain your personal data for the duration of our contractual relationship;
2. If you participate in a promotional offer, we keep your personal data for the duration of that promotional offer;
3. If you contact us for a question, we keep your personal data for the time necessary to process your questions, but not more than 10 years from the last correspondence sent;
4. If you create an account, we keep your personal data until you request that we delete it or after a period of inactivity (without any active interaction with our brands) as defined in accordance with local regulations and guidelines. In this regard, we mention that the personal data processed for this purpose will be deleted 10 years after the last interaction with the account user (such as login to your account);
5. If you have given your consent for marketing, we will retain your personal data until you unsubscribe or request to delete it or after a period of inactivity (without any active interaction with our brands) as defined in accordance with local regulations and guidelines. In this regard, we mention that the data stored in our databases for the purpose of direct marketing communications is deleted from the records of these databases 10 years after the last interaction with you;
6. If cookies modules are stored on your computer, we keep them for as long as it is necessary to achieve their purposes (for example, during a session for shopping cart cookies or cookie session IDs) and for a period defined in accordance with local regulations and guidelines. In this regard, we mention that the personal data processed through the cookies modules used to provide online behavioural advertising, to personalize our services for you and to allow the distribution of our content on social networking sites (distribution buttons for displaying the Website), will be kept for a period of maximum 10 years from their collection, based on your consent.
RIGHTS OF DATA SUBJECTS
According to GDPR, you have a number of rights regarding the personal data processed by the company:
1. The right to access the personal data processed - You have the right to access the personal data we hold. The first supply of information will be made without charging any fee. If you need copies of the information already provided, we may charge a reasonable fee for the administrative costs of providing the information. Clearly ungrounded, excessive or repeated requests may not be answered to.
2. The right to rectify personal data - You have the right to request that your Data be rectified if it is inaccurate or outdated and / or to complete it in case it is incomplete. If you have an account, it may be easier for you to correct your own personal data using the feature "My Account".
3. The right to Erase personal Data (“Right to be Forgotten”) - In some cases, you have the right to have your Data erased or destroyed. This is not an absolute right, as we may sometimes be forced to preserve your Personal Data for legal or judicial reasons.
4. The right to restrict processing - You have the right to request a restriction on the processing of your Personal Data. This means that the processing of your Personal Data is limited, so that we can store the Personal Data but not use or process it. This right shall apply in specific circumstances as provided for in the General Data Protection Regulation, namely:
- the accuracy of the Personal Data is contested by the data subject (namely by you), for a period that allows the controller (namely the company) to verify the accuracy of such Data;
- the processing is unlawful and the data subject (namely you) opposes the erasure of the Personal Data and requests the restriction of its use;
- the controller (for example, the company) no longer needs the Personal Data for the purpose of the processing, but it is requested by the data subject (namely you) for the establishment, exercise or defence of legal claims;
- the data subject (namely you) has objected to processing based on legitimate reasons on behalf of the controller (in this case the company) pending the verification whether the legitimate grounds of the controller (the company) override those of the data subject (namely you).
5. The right to personal data portability - You have the right to move, copy or transfer the personal data you are interested in from one database to another. This only applies to the personal data you have provided, when the processing is based on your consent or pursuant to an agreement and is implemented by automatic means.
6. The right to object - You may object at any time to the processing of your personal data when such processing is based on a legitimate interest.
7. The right to withdraw consent at any time - You may withdraw your consent regarding the processing of your personal data when such processing is based on consent. Withdrawal of consent shall not affect the lawfulness of processing on the ground of consent prior to its withdrawal.
8. The right to lodge a complaint with the competent supervisory authority - You have the right to lodge a complaint with the data protection authority in your country of residence or domicile to challenge the data protection practices provided by the company.
9. The right to object to the processing of your personal data for direct marketing purposes - You may unsubscribe or opt out of our direct marketing communication at any time. It's easier to do this by clicking the "unsubscribe" link in any email or communication we send you.
10. The right to object to the processing of your personal data by us when we carry out actions in the public interest or in our legitimate interests or of a third party - You may, at any time, object to the processing of your personal data when such processing is based on a legitimate interest.
11. The right to disable cookies - you have the right to disable cookies modules. Settings in Internet browsers are usually set by default to accept cookie modules, but you can easily adjust them by changing your browser settings. Many cookie modules are used to increase the level of use or functionality of websites / applications; therefore, disabling cookie modules may prevent you from using certain parts of our Websites or applications, as detailed in the relevant Cookie table. If you wish to restrict or block all cookies as set by our Websites / applications (which may prevent you from using certain parts of the Website) or any other websites / applications, you can do so through your browser settings. The Help function in your browser will tell you how to do it. For more information, see the following links: http://www.aboutcookies.org/
You may exercise any of these rights with regard to the personal data that the company processes by making a simple request to the company's DPO. In such a situation it is very likely to ask for proof of your identity.
LEGAL REQUESTS
We access, store and provide your information to regulation authorities, law enforcement factors or other entities:
1. In response to a legal request, when we believe, in good faith, that the law requires us to do so. We may also respond to legal requests when we consider, in good faith, that the response required by the laws of that jurisdiction affects users in that jurisdiction and is in line with internationally recognized standards.
2. When we believe, in good faith, that it is necessary to: detect, prevent and respond to fraudulent acts, unauthorized use of any material belonging to us, breaches of our terms or policies, or any other harmful or illegal activities, in order to protect us (including our rights, assets or materials), you and others, including during investigations or inquiries carried out by regulation authorities, or to prevent imminent death or personal injury. For example, if relevant, we provide information to and receive information from third parties about the reliability of your account to prevent fraud, abuse, and any other harmful activities in and out of our materials.
The information we receive about you may be accessed and stored for a longer period of time when it is the subject of a legal request or obligation, a government inquiry, or an investigation relating to possible breaches of our terms or policies, or in other cases in order to prevent damages.
RELATIONS WITH OTHER CONTROLLERS
Depending on the context, we may find ourselves in a situation when it is absolutely necessary to provide information at a higher level, both globally and internally or externally, to our partners and those with whom we transfer personal data in accordance with the aforementioned Regulation, by virtue of ensuring the provision of the most professional services possible. The information controlled by the company may be transferred, transmitted or stored and processed in the EU or in countries other than your country, for the purposes described in this policy. Such data transfers are necessary in order to be able to provide services at the highest level, as well as to continue to provide you with our materials at the best professional level. We use standard contractual terms as approved by the European Commission and we rely on the European Union decisions regarding the appropriateness of certain countries, as the case may be, on personal data transfers from the EEA to the United States and other countries.
SECURITY OF PROCESSING
The Company has adopted technical and organizational measures for the processing of personal data, updated in accordance with GDPR requirements, in order to protect your personal data against any unauthorized access, inappropriate use or disclosure, unauthorized modification, destruction or accidental loss. All Datasoft employees and collaborators, as well as any third parties acting in the name and on behalf of the company, shall have to comply with the confidentiality of your information and GDPR requirements, in accordance with the provisions of this Policy.
EXEMPTION OF LIABILITY
The Website www.allaudiopro.ro may contain links to other websites and / or other web pages that are not the property of the company. The company shall take no responsibility for the content of these websites and therefore cannot be held responsible for the content, advertising, goods, services, software, information or any other materials available on or through these websites. The company will not be liable for the loss of personal data, any negative effects on the personal data of visitors or any other moral and / or property damage caused by the access to those websites.
UPDATE OF THE PROTECTION AND PROCESSING OF PERSONAL DATA POLICY
Please note that this Policy may be subject to regular changes with regard to its content by updating the Website www.allaudiopro.ro.
How will we notify you of changes brought to this Policy?
We will send you a notice before making any changes to this Policy and we will give you the opportunity to consult the PPD revised before choosing to continue to use our materials.
Please do not continue to use the Website www.allaudiopro.ro if you do not agree with such changes. We also recommend that you check this page for any updates.
PPD terms shall be construed in accordance with the applicable law.
CONTACT
If you have any questions or concerns about the manner of how we process and use your personal data or if you wish to exercise any of your rights, please contact us by accessing the contact details of our DPO.
Advertising
The newsletters Datasoft - All Audio are sent through our partner platforms (Mailchimp - The Rocket Science Group). Therefore, the confidentiality and security of the information are ensured.
When the Customer creates an Account on the Website, they shall have the possibility to express their consent on receiving commercial notifications / newsletters.
The customer can change their option regarding the consent issued to the Seller at any time:
- by contacting Datasoft - All Audio in this regard
- by changing the settings in the Customer Account in the "Account Details" section - "Edit personal details"
- by accessing the unsubscribe link displayed in the commercial messages received from the Seller.
Waiver to receiving Newsletters shall not imply waiver of acceptance of this Document.
ONLINE PAYMENTS
For online payments, the payment for the services on this Website is made through the online payment solutions made available by ING Bank.
Bank card data information (card number, expiry date, etc.) is not transferred or stored at any time on Datasoft (All Audio) servers.
In the case of the 3D Secure system for payment using Visa or MasterCard cards, the data relating to your card is directly entered into the Visa or MasterCard systems, and if your card was issued by a bank certified in the 3D Secure system, the authorization of the transaction is made only after your login in this system - entering a secret code / password known only to you, similar to the PIN code for ATM transactions.
ANY ATTEMPT TO ACCESS THE PERSONAL DATA OF ANOTHER USER OR TO CHANGE THE CONTENT OF THE WEBSITE [www.allaudiopro.ro] OR TO AFFECT THE PERFORMANCE OF THE SERVER ON WHICH THE WEBSITE RUNS [www.allaudiopro.ro], SHALL BE CONSIDERED AN ATTEMPTED FRAUD OF THE WEBSITE [www.allaudiopro.ro] AND SHALL ENTAIL THE CRIMINAL INVESTIGATION AGAINST THOSE WHO HAVE TRIED TO ACT IN SUCH A MANNER.