We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
We consider ensuring the right to the protection of personal data as a fundamental commitment, therefore we will devote all the necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR “), as well as with any other legislation applicable on the territory of Romania. As one of the essential principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services including through our website.
Who we are and how you can contact us
Iliescu Dana-Raluca PFA – is an authorized natural person of Romanian nationality, with registered office in Romania, Dambovita county, Targoviste city, Bulevardul Independentei, Bl J5, ap 17. In the sense of the data protection legislation, we are ‘the operator’ when we process your personal data.
As we are always open to your opinions, as well as to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact our Data Protection Officer Dana Iliescu at email@example.com or by mail or courier with the mention: to the attention of Data Protection Officer Dana Iliescu.
What categories of personal data we process
We generally collect your personal data directly from you, so you have control over the type of information you give us. By way of example, we receive information from you as follows:
- When you create an account, you provide us with: your email address, first and last name;
Within your personal page (My Account) on the dana-iliescu.com platform you can add additional information, such as: photo, nickname, delivery address, address, etc.;
When you place an order, you provide us with information such as: desired product, name and surname, delivery address, billing details, payment method, IP address, etc.
- We may also collect and further process certain information about your behavior while visiting our website in order to personalize your online experience and provide you with offers tailored to your profile. We invite you to learn more in this regard by consulting the section regarding the purposes of processing below.
If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”).
We do not collect or otherwise process sensitive data, included by the General Data Protection Regulation in special categories of personal data. We also do not wish to collect or process data of minors under the age of 16.
What are the purposes and grounds of the processing
We will use your personal data for the following purposes:
- For the provision of Iliescu Dana-Raluca PFA services for your benefit.
This general purpose may include, as appropriate, the following:
a) Account creation and administration within the dana-iliescu.com platform;
b) Order processing, including their receipt, validation, dispatch and invoicing;
c) Solving cancellations or problems of any nature related to an order, goods or services purchased;
d) Returning the products according to the legal provisions;
e) Reimbursement of the counter value of the products according to the legal provisions;
The processing of your data for these purposes is in most cases necessary for the conclusion and execution of a contract between Iliescu Dana-Raluca PFA and you. Also, certain processing subsumed for these purposes is required by applicable legislation, including tax and accounting legislation.
- To improve our services
We always want to give you the best online shopping experience. For this, we may collect and use certain information related to your Shopping behavior, we may invite you to complete satisfaction surveys following the completion of an order, or we may conduct, directly or with the help of partners, studies and market research.
- If you leave a comment on the site
- If you subscribe to our newsletter by e-mail
If you sign up for our email newsletter, we will periodically send you information about our offers. The only mandatory information for sending the newsletter is your email address. The indication of any additional data is voluntary and is used to address you personally.
- Sending the newsletter by e-mail to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services from our range by email that are similar to those you -you have already purchased. In accordance with European direct advertising law we do not need to obtain your separate consent for this. In this regard, data processing takes place exclusively on the basis of our legitimate interest in personalized direct advertising, in accordance with Article 6 (1) letter (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you an email. You have the right to object to the use of your e-mail address for the aforementioned advertising purpose at any time, with effect for the future, by notifying the responsible person named at the beginning. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately
- This website uses Google Analytics
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures the anonymization of the IP address by shortening it and excludes direct personal references. As a result of the extension, your IP address will be shortened beforehand by Google in the member states of the European Union or in other contracting states of the Agreement on
On our behalf, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case, if applicable, you will not be able to fully use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the available browser plug-in to the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de
We base these activities on our legitimate interest in carrying out commercial activities, always taking care that your fundamental rights and freedoms are not affected.
How long we keep your personal data
As a general rule, we will store your personal data as long as you have an account on the dana-iliescu.com platform. If you leave a comment, the comment and its metadata are kept indefinitely. This is so that we can automatically recognize and approve any subsequent comments, rather than holding them in a moderation queue.
You can also request that we delete any personal data we hold about you. This does not include data that we are required to retain for administrative, legal or security purposes.
Who on our team has access
Our team members have access to the information you provide us. For example, the site owner/administrators can access:
— Order information, such as membership subscriptions, payment dates and amounts, and username / email address.
Any additional information added to the member profile may also be visible to administrators.
To whom we transmit your personal data
As appropriate, we may transmit or provide access to certain of your personal data to the following categories of recipients:
- to the partners Iliescu dana-Raluca PFA;
- courier service providers;
- providers of payment/banking services (Stripe, Paypal);
- marketing / telemarketing service providers; (for example Mailchimp or Mailerlit)
- market research service providers;
- insurance companies;
- IT service providers;
- other companies with which we can develop joint programs for offering our goods and services on the market.
If we are under a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
We ensure that access to your data by third parties under private law is carried out in accordance with the legal provisions on data protection and information confidentiality, based on contracts concluded with them.
How we protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures in accordance with industry standards.
The transmission of your personal data is done using state-of-the-art encryption algorithms and we store them on secure servers, ensuring data redundancy at the same time.
To enable you to make payments on our site, we use the services of the payment processor Paypal and Stripe. When you process payments, some of your data will be sent to PayPal or Stripe including information necessary to process or support the payment, such as your purchase total and billing information. Find more information on the data protection policy on their sites. Any payment information is encrypted, using HTTPS technology with TSL 1.2 encryption.
Despite the measures taken to protect your personal data, we draw your attention to the fact that the transmission of information over the Internet in general or through other public networks is not completely secure, there is a risk that the data will be seen and used by third parties unauthorized parties. We cannot be responsible for such vulnerabilities of systems that are not under our control.
The applicable data protection and consumer law grants you comprehensive rights about which we will inform you below:
- Right to information in accordance with Art. 15 GDPR:
In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or will be disclosed, the planned Storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, Existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed which guarantees pursuant to Art. 46 GDPR when forwarding your data to D third countries exist;
- Right to rectification in accordance with Art. 16 GDPR:
You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;
- Right to deletion in accordance with Art. 17 GDPR:
You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- Right to restriction of processing in accordance with Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is checked, if you refuse to delete your data due to inadmissible data processing and instead Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
- Right to information according to Art. 19 DSGVO:
If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or Restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data transferability in accordance with Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;
- Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR:
You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation;
- Right to lodge a complaint pursuant to Art. 77 GDPR:
If you believe that the processing of your personal data violates the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in particular the MState where you live, work or where the alleged violation occurred.
- The right to unilaterally terminate online contracts
The consumer has the right to unilaterally terminate the distance contract, within 10 working days, without penalties and without citing any reason. The only costs that can be borne by the consumer are the direct costs of returning the products. The 10-day period provided for the exercise of this right begins to run:
a) for products, from the date of their receipt by the consumer, if the provisions of art. 4;
b) for services, from the day the contract is concluded or after the contract is concluded.
By way of exception, the Consumer cannot unilaterally denounce the contracts for the provision of services whose execution has begun, with the consent of the consumer, before the expiration of the stipulated 10 working days.