CONFIDENTIALITY AND PERSONAL DATA PROTECTION POLICY

PERSONAL DATA PROCESSING IN ACCORDANCE WITH REGULATION (EU) 2016/679

The Privacy Policy describes the categories of your data that we process, the manner and purposes in which we collect them, in which situations we transfer personal data and the various rights and options available to you in this regard. At the same time, our Privacy Policy details how we process personal data in managing the relationship with customers.

What happens starting on May 25, 2018?
Starting with this date, Regulation (EU) 2016/679 was implemented on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Regulation on data protection) known as GDPR (General Data Protection Regulation). This means that any Operator/entity that processes personal data must apply these new requirements and provide information in a transparent manner on how the data is processed.

Why are my data processed?
Considering the need to comply with the provisions of the GDPR, as well as the fact that we are dedicated to taking care of your personal data (which may include name, surname, e-mail address, etc. depending on the purpose of the processing) which can be found in the base of our data, we inform you that they are used only for the purpose of successfully completing the processes carried out in relation to you (we mention a few processes without limiting ourselves to these: BOOKING/SALE/PROCESSING ORDERS, TRANSPORT and DELIVERY, WARRANTIES and SERVICE, maintenance relations with clients - CUSTOMER SUPPORT SERVICE, conducting recruitment processes).

How can I contact you?
If you still have any questions or want more information related to data protection, please send us an e-mail at: contact@sensestoria.ro and we will answer you as soon as possible.

Note: PROSPERIO INVESTMENTS SRL complies with all legislative measures regarding the protection of personal data.

INFORMATION REGARDING THE APPLICATION OF "GDPR" WITHIN PROSPERIO INVESTMENTS SRL
  1. INTRO:

Starting with May 25, 2018, it applies Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free circulation of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "GDPR Regulation ".

Please consult the information in this document because it expresses the policy of the company PROSPERIO INVESTMENTS SRL regarding the processing of personal data.

At PROSPERIO INVESTMENTS SRL we process personal data exclusively within the legal provisions regarding the protection of personal data.

DEFINITIONS:

  • Operator = The operator responsible for data processing within the meaning of the GDPR Regulation is PROSPERIO INVESTMENTS SRL, a company with private capital, registered in the Trade Register with No. J40/15747/2017, tax code 38212558 and registered office in Bucharest, str Prisaca Dornei 8A, bl 1, sc A, ap 39, sector 3 continuation "Operatorul" or "PROSPERIO INVESTMENTS SRL".
  • Data protection contact details (DPO) = Address to which requests for information regarding the processing of personal data can be sent: Bucharest, sector 3, str Prisaca Dornei 8A, bl 1, sc A, ap 39, PROSPERIO INVESTMENTS SRL Headquarters - in attention of the DATA PROTECTION OFFICER or to the e-mail address: contact@sensestoria.ro
  • Cookies = A "cookie" is a small file, usually consisting of letters and numbers. It is downloaded to the memory of a computer or other type of device used for internet browsing (smartphone, tablet, etc.), when the user accesses a certain website.
  • Data subject within the meaning of the GDPR Regulation = identified or identifiable natural person (who can be identified, directly or indirectly, in particular by reference to an identification element: name, identification number, location data, an online identifier, or to one/ several specific elements, specific to his physical, physiological, genetic, psychological, economic, cultural or social identity). The person concerned can be the applicant for a service offered by the Operator, as well as any other natural person whose personal data is transmitted to the Operator (for example, a customer or potential customer, a candidate for a certain available position, a user of the website of the Operator, etc.).
  • Categories of processed data = Personal data (first name, last name, address, phone number and e-mail address, etc.) are processed by us only if you enter this data in a column on the website or send them to us by e-mail.
  • The processing of personal data means any operation or set of operations performed on personal data or on sets of personal data, with or without the use of automatic means, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or making available in any other way, alignment or combination, restriction, erasure or destruction.
  1. PURPOSES AND LEGAL BASIS OF THE PROCESSING OF YOUR DATA:

According to Regulation (EU) 2016/679 and related legislation, the purposes for which we process your personal data are strictly related to the relationship between PROSPERIO INVESTMENTS SRL and the data subject. The information you provide us is treated with the utmost confidentiality and exclusively for the purposes for which it was collected.

Please see below the details of the purposes for which we process data and the legal basis:

1.1. Contracting and managing the relationship with clients:

Accessing the site:
Every time a user accesses a page from our offer and every time a file is opened, the access data is saved by us and partially by third parties in the form of protocol files. Each set of data includes: the Internet page from which you access our page, the IP address, the date and time of access, the client's request, the http response code, the amount of data transferred, information about the browser and the operating system you use.

Geographical location:
By means of geographic location, with the help of the IP address, it is technically possible to estimate the location of the Internet user. In order to be able to optimize the order flow, we can use IP for the purpose of geographic location. After completing the current session, the IP address is not stored with us for the purpose of geographic location.
Note: Certain traffic data (such as IP addresses or other identifiers of the devices with which you access our site) may in certain circumstances be personal data and we will treat it as such.

Customer account data:
When creating a customer account using the "new account" option, your data will be saved in the PROSPERIO INVESTMENTS SRL company database. You have the possibility to request the deletion of your data and your customer account at any time. If you place an order on our website, the data will be processed in order to successfully carry out the sales process.

Data for placing an order:
The stored personal data will be used for the purpose of carrying out contracts and processing your requests. After the completion of the contract or your request, your data is saved taking into account the retention periods according to fiscal and commercial legislation and, where applicable, for a period necessary to protect the Operator's rights.

Data for the newsletter service:
When you provide your data to benefit from our newsletter service, your data is used by PROSPERIO INVESTMENTS SRL only for the purpose of sending direct marketing messages.
Through direct marketing actions, we can keep you informed about our products, services and campaigns, respecting the legal provisions in force. The use of data stops as soon as you cancel the newsletter service. You have the possibility to cancel the newsletter service at any time and for free by: accessing the "Subscribers" section, ticking the "Unsubscribe" option within the newsletter or sending an email to contact@sensetoria.ro by which you expressly request to unsubscribe.

➢ LEGAL GROUNDS: the legitimate interest of the Operator to avoid online fraud and to ensure the general functionality of the site, the execution of a contract and the consent of the person concerned, as the case may be.

1.2. Recruitment activities:

  • In order to quickly submit your application for one of the positions available within PROSPERIO INVESTMENTS SRL, you can use our online section created for this purpose and accessible at the address page_recrutare
  • We will use your data and documents exclusively to process your request, respectively to identify a suitable position available within PROSPERIO INVESTMENTS SRL. They are saved in our database, are protected against unauthorized access and processed in accordance with the legislation in force regarding the processing of personal data.

➢ LEGAL GROUNDS: consent of the concerned person.

1.3. Business Administration: COOKIES Policy

  • To improve your online browsing experience, we use cookies that facilitate the use of the PROSPERIO INVESTMENTS SRL online store by visitors.
  • In general, the role of cookies is to ensure a quick and easy interaction between users and websites. Also, cookies are used so that users can easily resume their activities the next time they access a previously visited website. Basically, the cookies tell the server which pages should be displayed to the user, without the user having to remember the pages he browsed or navigate the entire site from the beginning. Please consult the Cookies Policy to obtain detailed information.

➢ LEGAL GROUNDS: the legitimate interest to permanently offer improved services to the users of the PROSPERIO INVESTMENTS SRL website.
Note: In the event that we intend to process your personal data for a purpose other than those mentioned above, we will provide you, before this further processing, with information regarding the respective secondary purpose and any relevant information.

  1. YOUR RIGHTS AS SUBJECT TO THE PROCESSING OF PROVIDED PERSONAL DATA:

2.1. The rights of the data subject and how they can be exercised

According to the GDPR Regulation, as a data subject you benefit from a number of rights, namely:

  1. The right to information and access to personal data: the right to obtain a confirmation of whether or not personal data concerning you is being processed and, if so, access to the respective data.
  2. The right to rectification: the right to request the Operator and to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or to obtain the completion of personal data that are incomplete, with the mention that in the case of an online account you can make these changes personally from the account data editing section.
  3. The right to data erasure ("the right to be forgotten"): the right to obtain the erasure of personal data concerning you, without undue delay, if certain reasons mentioned in the GDPR Regulation apply.
  4. The right to restriction of processing: the right to obtain the restriction of processing in certain cases.
  5. The right to data portability: the right to receive your personal data and to transmit it to another operator.
  6. The right to object: the right to object at any time to the processing of personal data concerning you, under the terms of the GDPR Regulation.
  7. The right not to be the subject of a decision based exclusively on automatic processing, including profiling, which produces legal effects that concern or similarly affect you to a significant extent.
  8. The right to file a complaint with the National Authority for the Supervision of Personal Data Processing (ANSPDCP) in the situation where you consider that your data has not been processed in accordance with the legal provisions.

➢ How can you exercise these rights?
To exercise the rights mentioned above, please send a written, dated and signed request to the e-mail address: contact@sensestoria.ro, or to the postal address: Bucharest, sector 3, str Prisaca Dornei 8A, bl 1, sc A, ap 39, to the attention of the data protection officer.

➢ How long does it take to respond to your requests?
Within a maximum of one month, calculated from the receipt of your request, you will be provided with information regarding the actions taken or, where appropriate, regarding the reasons why the requested measures cannot be taken.
Note: Please keep in mind that in order to comply with a request for access to personal data, we will take all reasonable measures to verify the identity of the person concerned.

Also, according to the GDPR Regulation, the response deadline mentioned above can be extended by a maximum of two months in the situation where it is necessary, taking into account the complexity and number of requests, and we will inform you about this aspect, if you be the case.

  1. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA:

Recipients who process personal data within the European Union have the obligation to comply with the same legal provisions, offering the same level of protection as the Operator.
Note: In the case of recipients with activity on the territory of the United States of America, the Operator guarantees that they are "Privacy Shield" certified and are considered by the European Commission to provide an adequate level of protection. The list of companies that adhere to "Privacy Shield" is available on this website:https://www.privacyshield.gov/welcome .

3.1. Transmission of data for the purpose of processing orders
The personal data stored by PROSPERIO INVESTMENTS SRL are transmitted to our collaborators for the purpose of completing/delivery of orders. For example, your data will be sent to the courier companies, if you opt for delivery of the order by courier.
If you select the option to pay online by paying with a bank card, it is important to know that this operation takes place in a secure way on the website provided by the payment processor, and PROSPERIO INVESTMENTS SRL transmits to the processor of payments only data related to your order (PROSPERIO INVESTMENTS SRL does not access or process any personal data related to the bank card).

3.2. Transmission of data for the purpose of operating the newsletter service
To be sure that this service works at the desired parameters, we use a third party specialized in the field of e-mail delivery, namely the mailchimp.com platform belonging to The Rocket Science Group. Its policy in the field of data protection can be found here:https://mailchimp.com/legal/privacy/ .
You can cancel the newsletter service at any time - either from your account - the "Subscriptions" section, or by pressing the "Unsubscribe" button in the e-mail received, or by sending an email to the address contact@sensestoria.ro by which you expressly request unsubscription.

3.3. Transmission to public institutions, courts, as well as competent authorities to investigate the commission of criminal acts
In special cases, when this is required by law, the company PROSPERIO INVESTMENTS SRL can provide the competent institutions with information regarding personal data.

3.4. Transmission to other third parties
In order to offer you the most pleasant experience in the online environment, we are constantly concerned with improving/carrying out the maintenance of the software programs used. In this sense, we have concluded development contracts with companies specialized in the field of programming and software maintenance.

3.5. Social Network Plugins
Our website uses "plugins" from social network operators (eg: www.facebook.com). All social network plugins on our website are clearly and distinctly marked:

➢ Facebook for WordPress
We use this plugin in order to make the connection between the www.sensestoria.ro website and the company's official Facebook page. Through this plugin, PROSPERIO INVESTMENTS SRL does not collect / store personal data of customers, but through the link created with Facebook, customers can see on our website some of their friends who appreciate the PROSPERIO INVESTMENTS SRL page.

➢ Facebook share -> Script for sharing the list of products (Favorites) on Facebook.
With the help of this plugin, customers who have an account created on the website www.sensestoria.ro can share their list of favorite products (from Favorites) on their Facebook pages. This plugin does not collect personal data of customers either. The process consists of a data transfer (pictures, links, text) between the PROSPERIO INVESTMENTS SRL website and the Facebook platform.

3.6. Google Adwords/Analytics web analysis service
Our website uses the "Google Adwords/Analytics" web analysis service of Google Inc., for statistical purposes.
This website uses Google Analytics, a web analysis service provided by Google, Inc. ("Google"), which in turn uses cookies. The information generated by the cookie about your use of the site will be transmitted and stored on Google servers in the USA.

If the anonymization of the IP address is activated, your IP will be shortened in the space of the member states of the European Union or of other third-party members of the European Economic Area. Only in exceptional cases, the entire IP address will be transmitted to a Google server in the USA and shortened there. IP anonymization is enabled for this site. Google will use this information on behalf of the operator of this site for the purpose of evaluating your use of the site, will generate reports on site activity for web page operators and will provide them with other services related to site activity and internet use.

The IP address that your browser transmits will not be associated with other data held by Google. You can refuse the use of cookies, by selecting the appropriate settings of your browser, but in this situation you may no longer be able to use all the functionalities of the site. You can also opt out of using Google Analytics in the future by downloading and installing the Google Analytics Opt-out Browser Addon for your browser: https://tools.google.com/dlpage/gaoptout?hl=en .
Note: Additional information is available on the following pages: Google Analytics terms of service and Google Analytics .

  1. LEGAL BASIS

For more details, you can consult the legal basis:

  • Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (accessible at http://dataprotection.ro/?page=Regulamentul_nr_679_2016).
  • Law no. 506/2004 regarding the processing of personal data and the protection of private life in the electronic communications sector.

The management at the highest level undertakes that this privacy policy is respected by all employees, by implementing the internal procedures specific to the rules regarding the protection of personal data, according to the legal basis regarding their processing.