...

Privacy Policy

Contact
DPO: contact@mre.ro
Phone: 0372 829 767

This Privacy Policy defines how we, SC ROYAL CEZAR CONCEPT SRL, collect, store, and use your personal data when you access or interact with our website www.mre.ro and how we obtain or collect your data. This Privacy Policy is effective from May 1, 2021.

Table of Contents

  • Summary
  • Details about our company
  • What information we collect when you visit our website
  • What information we collect when you contact us
  • What information we collect when you interact with our website
  • What information we collect when you place an order on our website
  • Use of automated decision-making systems and profiling
  • How we collect information about you from third parties
  • Disclosure and additional uses of your data
  • Data retention period
  • Securing your information
  • Transfer of your data outside the European Economic Area
  • Your rights regarding personal data
  • Your right to object to processing for certain purposes
  • Sensitive personal data
  • Changes to our privacy policy
  • Privacy of minors
  • Copyright
 

Summary

This section summarizes how we collect, store, and use your data. This summary is meant to provide a general overview of the privacy policy. This section is not a complete description, and you should read the additional chapters in this document for further details.

  • Data controller: SC ROYAL CEZAR CONCEPT SRL.
  • How we collect or obtain information about you:
    • When you provide your data (e.g., by contacting us, creating an account on our site, accessing, ordering, or purchasing our products, signing up for our database to receive marketing information about our products, completing online or offline forms);
    • When you access our website, some data is collected through cookies and other similar technologies;
    • Occasionally, from third parties.
  • What information we collect: IP address, contact details: name, surname, email, phone number, place of residence, billing address, delivery address.
  • How we use your data: For business and administrative purposes (especially to contact you and process orders placed on our website), to fulfill our contractual obligations, to promote our goods and services, and in connection with our legal rights and obligations.
  • Disclosure of user data to third parties: To the minimum extent necessary for business operation and to fulfill any contractual obligations to you, to IT/service providers, transport companies, and to comply with legal obligations.
  • Your data is not sold to third parties.
  • How long we store your information: For no longer than necessary, depending on our legal obligations (e.g., for keeping accounting records) or any other legal basis for using the data (e.g., consent, contractual obligations, legitimate interests).
  • How we secure your data: Through the use of technical and organizational solutions, such as: storing information on secure servers, encrypting data transfers to and from our servers using SSL technology, encrypting payment transactions on the site using SSL technology, granting access to your personal data only when necessary, encrypting personal data, encrypting emails, pseudonymization and/or anonymization of personal data.
  • Use of cookies and similar technologies: We use cookies and similar technologies to collect information, such as web beacons, on our website, including essential, functional, analytical, and targeting cookies. For more information, please refer to our cookie policy here: https://mre.ro/politica-de-utilizare-cookie-uri.
  • Use of automated decision-making processes: We use automated decision-making processes in connection with our website, such as using web analytics tools, cookies, web beacons, or targeting cookies to display ads to visitors of our site on other websites (e.g., by using Google AdSense).
  • Your rights regarding your personal data:
    • You have the right to access your data and receive information about how it is used;
    • You have the right to request the correction and/or completion of your information;
    • You have the right to request the deletion of your data;
    • You have the right to restrict the use of your data;
    • You have the right to receive your data in a portable format;
    • You have the right to object to the processing of your data;
    • You have the right to withdraw your consent for processing your data;
    • You have the right to appeal to a supervisory authority.

Details about our company

The data controller for our website is: ROYAL CEZAR CONCEPT SRL, located at: Str. Orhideelor, no. 9, Chiajna, Ilfov County. You can contact the data controller by writing to the aforementioned address or via email at contact@mre.ro.

If you have any questions regarding this privacy policy, please contact the data controller.

What information we collect when you visit our website

We collect and use information from website visitors in accordance with this section and the section titled “Disclosure and additional uses of your data.”

Web Server Log Information

We use a third-party server to host our website, called DataHost, whose privacy policy is available here: https://www.datahost.ro/termeni-conditii. Our website server automatically logs the IP address you use to access our site, as well as other information about your visit, such as the pages accessed, requested information, the date and time of the request, the source of the access to our site (for example, the website or URL/link that referred you to our site), and the version of the browser and operating system.

Use of Web Server Log Information for IT Security Purposes

Our provider collects and stores server logs to ensure the security of the IT network. This includes analyzing log files to help identify and prevent unauthorized access to our network, distribution of malicious code, and forecasting DDoS attacks or other cyberattacks by detecting unusual or suspicious activities.

Unless we are investigating a suspected or potential criminal activity, we do not attempt, nor allow our provider to attempt, to identify you based on the information collected in the server logs.

Legal Basis for Processing: Compliance with legal obligations we are subject to (Article 6(1)(c) of the General Data Protection Regulation).

Legal Obligation: Recording access to our website using server log files is a technical measure to ensure an adequate level of security to protect the information collected from our site in accordance with Article 32(1) of the General Data Protection Regulation.

Cookies and Similar Technologies

Cookies are data files sent from a website to a browser to record user information for various purposes.

We use cookies on our website, including essential, functional, analytical, and targeting cookies, as well as web beacons. For additional information about how we use cookies, please refer to our Cookie Policy available here: https://mre.ro/politica-de-utilizare-cookie-uri.

You can reject some or all of the cookies we use on our website by adjusting your browser settings, or you can disable non-essential cookies using our cookie control tool. However, rejecting cookies may affect the functionality of the website or certain features of the site. For more information about cookies, including how to modify your browser settings, visit www.allaboutcookies.org or consult our Cookie Policy.

Information We Collect When You Contact Us

We collect and use information from individuals who contact us in accordance with this section and the section titled Disclosure and Additional Uses of Your Information.

Email

When you send an email to the address provided on our website, we collect your email address and any other information you provide in that email (such as your name, phone number, and information contained in any email signature block).

Legal Basis for Processing: Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate Interest: To respond to the questions and messages we receive and to keep a record of the correspondence.

Legal Basis for Processing: It is necessary for the performance of a contract or to initiate the process of entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).

Why It Is Necessary for the Performance of a Contract: In cases where your message involves the provision of goods or services or taking actions at your request before providing those goods or services (e.g., providing information about such goods and services), we will process your information in order to do so.

Transfer and Storage of Your Information

We use a third-party email provider to store the emails you send us. Our email provider is DataHost. Their privacy policy is available here: DataHost Terms and Conditions.

The emails you send to us will be stored within the European Economic Area (EEA), on DataHost’s servers in Romania.

Contact Form

When you contact us using any contact form on our website, we collect your name, surname, location, email, phone number, and IP address.

If you do not provide the requested information in the contact form, you will not be able to submit it, and we will not receive your request. As a result, we will be unable to respond.

Legal Basis for Processing: Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate Interest: To respond to the questions and messages we receive and to maintain a record of the correspondence.

Legal Basis for Processing: It is necessary for the performance of a contract or to initiate the process of entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).

Why It Is Necessary for the Performance of a Contract: If your message concerns the provision of goods or services or taking action at your request before providing those goods or services (e.g., providing information about such goods and services), we will process your information to do so.

Transfer and Storage of Your Information (Contact Form)

Messages you send through our contact form will be stored within the European Economic Area (EEA), on the web hosting provider’s servers in Romania and on the email service provider’s servers in Austria.

Our web hosting provider is TOTAL ONLINE SRL.

Our email service provider is DataHost. Their privacy policy is available here: DataHost Terms and Conditions.

Phone

When you contact us by phone, we collect your phone number and any information you provide during the conversation with us.

We do not record phone calls.

Legal basis for processing: Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to the questions and messages we receive and to keep a record of the correspondence.

Legal basis for processing: It is necessary for the performance of a contract or to take steps prior to entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).

Why it is necessary for the performance of a contract: If your message relates to the provision of goods or services or taking actions at your request before we provide our goods and services (e.g., providing information about such goods and services), we will process your information to do so.

Transfer and Storage of Your Information

Information about your call, such as your phone number, date, and time of the call, is processed by our phone service provider Vodafone Romania, which is located in Romania. The privacy policy of Vodafone can be found here: Vodafone Privacy Policy.

Information about your call will be stored by our phone service provider within the European Economic Area.

Postal Mail

If you contact us by mail, we will collect all the information you provide in any postal communications you send us, in order to respond to your requests.

Legal basis for processing: Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to the questions and messages we receive and to keep a record of the correspondence.

Legal basis for processing: It is necessary for the performance of a contract or to take steps prior to entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation).

Why it is necessary for the performance of a contract: If your message concerns the provision of goods or services or taking actions at your request before we provide our goods and services (e.g., providing information about such goods and services), we will process your information to do so.

Information We Collect When You Interact With Our Website

We collect and use data from individuals who interact with certain features of our website, in accordance with this section and the section titled Disclosure and Additional Uses of Your Information.

Newsletter

When you subscribe to our newsletter to receive information about promotions, events, or contests from us via subscription forms or any other form through which you can express your consent to be added to our database, we collect the following information: first name, last name, email, and location.

Legal basis for processing: Your consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: You give your consent to receive our newsletter by subscribing to it, following the steps described above.

Transfer and Storage of Your Data

We use a third-party service to send our newsletter and manage our email list, MailChimp. Their privacy policy is available here.

The information you submit to subscribe to our newsletter will be stored in the European Economic Area (EEA) on our service provider’s servers, located in Europe.

Use of Web Beacons and Similar Technologies in Emails

We use technologies such as web beacons (small graphic files) to measure the performance of our emails, such as delivery rates, open rates, click rates, and unsubscribe rates. We will use web beacons to measure interactions within a newsletter.

For more information on how we use web beacons in our emails, please refer to our cookie policy, which is available here.

For more information about our newsletter providers and the use of web beacons, please refer to their privacy policy, available here.

Registration on Our Website

When you register and create an account on our website, we collect the following mandatory information: first name, last name, email address, and IP address.

If you do not provide the mandatory information requested by the registration form, you will not be able to register or create an account on our website.

Optional information: phone number, city, sector/county, and address. You may also choose to receive marketing communications from us and/or other third parties. For more information, see the “Marketing Communications” section below.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Transfer and Storage of Your Data

The information you provide via the registration form on our website will be stored in the European Economic Area on the servers of our web hosting service provider, DataHost, based in Romania. Their privacy policy is available here.

Information Collected When You Place an Order on Our Website

We collect and use information from individuals who place an order on our website according to this section and the section titled “Disclosure and Additional Use of Your Data.”

Mandatory Information Collected When You Place an Order

When you place an order for goods on our website, we collect the following mandatory information: first name, last name, email address, shipping/billing address, phone number, and IP address. If applicable: company name, unique registration code, registration number in the Trade Registry.

If you do not provide this information, you will not be able to purchase goods from our website or enter into a contract with us.

Legal basis for processing: necessary for the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation).

Reason for necessity: we need the mandatory information collected through our order verification form to establish who the contract party is and to contact you in order to fulfill our contractual obligations, including issuing invoices, sending receipts, and order confirmations.

Legal basis for processing: compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).

Legal obligation: we are legally required to issue you an invoice for the goods and services you purchased from us, and you are registered for VAT purposes. We collect the mandatory information through our payment form for this purpose.

Optional Information

We also collect optional information from you, such as preferred delivery time or any other additional details you wish to provide.

Legal basis for processing: our legitimate interests (Article 6(1)(b) of the General Data Protection Regulation).

Legitimate interests: to ensure smooth operation of our business and to deliver your order within the time frame you requested.

Legal basis for processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).

Marketing Communications

Transfer and Storage of Your Data

We use a third-party service to manage our email list: Mailchimp.

The information you submit to subscribe to our newsletter will be stored in the European Economic Area on the servers of the third-party email list administrator, located in Europe.

Use of Web Beacons and Similar Technologies in Emails

We use technologies such as web beacons (small graphic files) to evaluate the performance of our emails, such as delivery rates, open rates, and click rates.

For more information about how we use web beacons in our emails, please refer to our cookie policy, available here.

For more information about our providers and the use of web beacons, please refer to their privacy policy, available here.

Goods and Services

You can choose to receive marketing communications from us regarding our goods and services via email or SMS. We will send marketing communications related to our goods and services only if you subscribe to receive them.

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Your consent: you give consent to receive information about our goods and services by subscribing to receive such information according to the steps described above.

Third-Party Goods and Services

In addition to receiving information about our products and services, you can opt to receive marketing communications from us related to third-party goods and services via email, SMS, phone, or post by checking the box indicating that you wish to receive such communications.

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Your consent: you give consent to receive information about third-party goods and services by subscribing to receive such information according to the steps described above.

Information Collected or Obtained from Third Parties

This section outlines how we obtain or collect information about you from third parties.

Information Received from Third Parties

Sometimes we receive information about you from third parties. These third parties are generally our business partners.

It is also possible that third parties with whom we have not had prior contact may provide information about you.

The information we obtain from third parties will generally include your name and contact details, but may also include any additional information provided to us.

Legal basis for processing: necessary for the performance of a contract or taking steps at your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Reason for necessity: if a third party has provided us with information about you (such as your name and email address) to provide services, we will process the information to take steps at your request to enter into a contract with us (as applicable).

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Your consent: if you have requested that a third party disclose information about you to us and the purpose of that disclosure is not related to fulfilling a contract or service by us, we will process your information based on your consent, which you grant by asking the third party to share your information with us.

Legal basis for processing: legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interests: if a third party has disclosed information about you and you have not consented to the disclosure, we may have a legitimate interest in processing that information under certain circumstances.

Information We Obtain from Third Parties

In certain circumstances (e.g., to verify the information we hold about you or to obtain missing information required to provide you with a service), we will obtain your data from public sources, both inside and outside the EU, such as government authorities.

Legal basis for processing: necessary for the performance of a contract or taking steps at your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Reason for necessity: if you have entered into or requested to enter into a contract with us, we will obtain your information from public sources to allow us to understand your business and provide services at an adequate standard.

For example, we may obtain and/or verify your email address from your website if you have requested that we send you information via email and we need to confirm the address.

Automated Decision-Making Mechanisms

We use automated decision-making mechanisms on our website. We do not believe this has any legal impact or similar consequences on you.

You have the right to object to the automated decision-making mechanisms described in this section. You can do this by opting out of cookies in the manner described in the relevant section of this privacy policy. If you do not want us to process your real IP address (usually assigned by your Internet Service Provider) when visiting our site, you may use a Virtual Private Network (VPN) or a free service like Tor.

You can find more information about our use of cookies and similar technologies (including the legal basis for using them) and how to opt out in our cookie policy here.

Disclosure and Additional Use of Your Data

This section outlines the circumstances under which we will disclose your data to third parties and other additional purposes for which we use your data.

Disclosure of Your Information to Service Providers

We use a variety of third parties to provide services necessary for our business or to assist us in running our business, and they process your information on our behalf. These include:

  • Telephone service providers: Vodafone Romania. Their privacy policy is available here
  • Email service providers: DataHost. Their privacy policy is available here
  • Billing service providers: Facturis. Their privacy policy is available here
  • Website developers, including TOTAL ONLINE. Their privacy policy is available here