GENERAL INFORMATION

The privacy of your personal data is one of our main concerns, S.C. ATELIER NICHITA S.R.L. with headquarters in Str Eroilor, no. 68, Movilita, Constanta, Romania.

We consider that, starting from May 25, 2018, Regulation (EU) 2016/679 will be implemented on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/ 46/CE (General Data Protection Regulation) known as GDPR (General Data Protection Regulation). This means that any Operator/entity that processes personal data must apply these new requirements and provide information in a transparent manner on how the data is processed.

Through this document, we inform you about the processing of your personal data, in the context of using the website www.nichita.ro

CATEGORIES OF PERSONAL DATA PROCESSED

1. If you are a customer of www.nichita.ro, SC ATELIER NICHITA SRL will process your personal data, such as name and surname, telephone, e-mail address, billing address, delivery address, data related to the way you use www.nichita.ro, for example your behavior/preferences/habits within our site, as well as any other categories of data that you provide directly in the context of placing an order through www.nichita.ro or in any other way resulting from the use of www.nichita.ro.

2. If you are a visitor of www.nichita.ro, SC ATELIER NICHITA SRL will process your personal data that you provide directly in the context of using www.nichita.ro, such as the data you provide in the form for questions or complaints, the product return form or other forms, to the extent that you complete them.

PURPOSES AND BASIS OF PROCESSING

1. If you are a customer of www.nichita.ro, SC ATELIER NICHITA SRL processes your personal data as follows:

– for the performance of the contractual relationship between you and www.nichita.ro, respectively for taking over, validating, sending and invoicing the order placed on www.nichita.ro, informing you about the status of the order, organizing the return of ordered products, etc.

Basis: The processing of your data for this purpose is based on the contract concluded between you and SC ATELIER NICHITA SRL, defined in the Terms and Conditions section on our website. Providing your personal data is required. Refusal to provide data may result in the impossibility of carrying out contractual relations between you and SC ATELIER NICHITA SRL.

– for the fulfillment of the legal obligations incumbent on SC ATELIER NICHITA SRL in the context of the services provided through www.nichita.ro, including obligations in fiscal matters, as well as in matters of archiving.

Grounds: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. The refusal to provide data may result in the impossibility of complying with the legal obligations that fall to it and therefore in the impossibility of offering you our services through www.nichita.ro.

– for marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms) of commercial communications regarding the products and services offered by ATELIER NICHITA S.R.L. , through www.nichita.ro.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for the processing of data for this purpose by ticking the appropriate boxes at the time of purchasing products online, subscribing to the newsletter, participating in promotions and contests; to unsubscribe from receiving such commercial communications you can use the default options, or you can expressly request this to our data protection officer at the email address office@nichita.ro

Providing your data for this purpose is voluntary. The refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

– for the purpose of carrying out various analyses, reports on the functioning of the www.nichita.ro website, creating profiles of consumer preferences, mainly in order to improve the experience offered on www.nichita.ro.

Basis: The processing of your data for this purpose is based on the legitimate interest of SC ATELIER NICHITA SRL to permanently improve the customer experience on www.nichita.ro. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

2. If you are a visitor of www.nichita.ro, SC ATELIER NICHITA SRL processes your personal data as follows:

– for marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms), of commercial communications regarding the products and services offered by SC ATELIER NICHITA SRL, through www.nichita.ro.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.
Providing your data for this purpose is voluntary. The refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

– to resolve complaints, complaints and to monitor traffic and improve your experience offered on www.nichita.ro.

Basis: The processing of your data for this purpose is based on the legitimate interest of SC ATELIER NICHITA SRL to ensure the correct functioning of www.nichita.ro, as well as to permanently improve the experience of our website visitors, including by solving various questions or complaints .

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

DURATION FOR WHICH WE PROCESS YOUR DATA

As a principle, SC ATELIER NICHITA SRL will process your personal data as much as is necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently according to the internal policies of SC ATELIER NICHITA SRL, respectively for the duration necessary to fulfill the legal obligations falling under the responsibility of SC ATELIER NICHITA SRL (for example, in the case of documents financial-accounting justifications for which the retention period prescribed by law is 10 years from the end of the financial year during which they were drawn up).

If you withdraw your consent for data processing for marketing purposes, SC ATELIER NICHITA SRL will stop processing your personal data for this purpose, but without affecting the processing carried out by SC ATELIER NICHITA SRL based on the consent expressed by you before its withdrawal .

DISCLOSURE OF PERSONAL DATA

In order to fulfill the processing purposes, SC ATELIER NICHITA SRL may disclose your data to Partners, to SC ATELIER NICHITA SRL’s affiliated companies, to third parties or entities that support SC ATELIER NICHITA SRL in providing services through www.nichita.ro (for example companies courier, IT service providers), or to the central/local public authorities, in the following examples listed:

  • for the administration of www.nichita.ro;
  • in situations where this communication would be necessary for awarding prizes or other facilities to customers, obtained as a result of their participation in various promotional campaigns organized by SC ATELIER NICHITA SRL through www.nichita.ro;
  • for maintaining, personalizing and improving the website www.nichita.ro and the services provided through it;
  • to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users;
  • for the transmission of commercial marketing communications, under the conditions and limits provided by law;
  • when the disclosure of personal data is provided by law, etc.

TRANSFER OF PERSONAL DATA

The personal data provided to SC ATELIER NICHITA SRL can be transferred outside of Romania, but only to states in the European Union, to the extent that the development of the company will involve the establishment of secondary offices / logistic points on the territory of the European Union.

YOUR RIGHTS

  • The right to information and access to personal data: the right to obtain a confirmation of whether or not personal data concerning you is being processed and, if so, access to said data.
  • The right to rectification: the right to request SC ATELIER NICHITA SRL and to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or to obtain completion of incomplete personal data.
  • The right to data deletion (“the right to be forgotten”): the right to obtain the deletion of personal data concerning you, without undue delay, if certain reasons mentioned in the GDPR Regulation apply.
  • The right to restriction of processing: the right to obtain the restriction of processing in certain cases.
  • The right to data portability: the right to receive your personal data and to transmit it to another operator.
  • The right to object: the right to object at any time to the processing of personal data concerning you, under the terms of the GDPR Regulation.
  • The right not to be the subject of a decision based exclusively on automatic processing, including profiling, which produces legal effects that concern or similarly affect you to a significant extent.
  • The right to file a complaint with the National Authority for the Supervision of the Processing of Personal Data (ANSPDCP) in the situation where you consider that your data has not been processed in accordance with the legal provisions.

To exercise the rights mentioned above, please send a written, dated and signed request to the e-mail address: office@nichita.ro, or to the postal address: str. Eroilor no. 68, Movilita, Constanta to the attention of the data protection officer. Within a maximum of one month calculated from the receipt of your request, you will be provided with information on the actions taken or, where applicable, on the reasons why the requested measures cannot be taken. Also, according to the GDPR Regulation, the response deadline mentioned above can be extended by a maximum of two months in the situation where it is necessary, taking into account the complexity and number of requests, we will inform you about this aspect, if it will be the case.

PRINCIPLES CONSIDERED BY SC ATELIER NICHITA SRL REGARDING THE PROCESSING OF YOUR DATA:

Legality, fairness and transparency: Personal data is processed legally, fairly and transparently towards you.
2. Purpose limitation: Data are collected for specific, explicit and legitimate purposes and are not further processed for a purpose incompatible with these purposes.
3. Data minimization: Data is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
4. Accuracy: Personal data processed is accurate and updated whenever necessary. Data found to be inaccurate will be deleted or rectified without delay.
5. Limitation of storage: Data are kept only for the period necessary to fulfill the purposes for which they are processed.
6. Security and Privacy: Data is processed in a manner that ensures adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.
7. Responsibility: SC ATELIER NICHITA SRL is responsible for compliance with all principles and can demonstrate compliance with them.

RESPONSIBILITIES ASSUMED BY SC ATELIER NICHITA SRL AND MEASURES TAKEN IN DATA PROCESSING ACTIVITY:

1. Register of processing operations: SC ATELIER NICHITA SRL keeps a record of the processing activities carried out.
2. Appointment of a Data Protection Officer: SC ATELIER NICHITA SRL has appointed a person responsible for the implementation and monitoring of data protection measures.
3. Taking technical and organizational measures / adopting internal policies and procedures: SC ATELIER NICHITA SRL has adopted technical measures such as the implementation of advanced security software solutions, data pseudonymization solutions (for example, in the case of the selection of IT service providers SC ATELIER NICHITA SRL guarantee that they are “Privacy Shield” certified and/or are considered by the European Commission as providing an adequate level of protection). Also, SC ATELIER NICHITA SRL drafted and implemented internal procedures for managing personal data, trained employees, limited access to personal data, concluded confidentiality agreements with its employee data operators, etc.
4. Authority notification procedure: in order to minimize the impact of potential security breaches on the persons concerned, SC ATELIER NICHITA SRL has implemented a procedure for notifying the supervisory authority (ANSPDCP) in the shortest possible time (maximum 72 hours) .

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact: office@nichita.ro.

The monitoring of compliance with the legal requirements in this field is also ensured by the data protection officer appointed within SC ATELIER NICHITA SRL, with the following contact details: office@nichita.ro.

For even more details, you can consult the legal basis: Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Regulation regarding data protection) (accessible at http://dataprotection.ro/?page=Regulamentul_nr_679_2016).