Privacy Policy

Section. 1.General

We will process personal data (e.g. title, name, address, e-mail address, telephone number) only in accordance with the provisions of Romanian data protection law and EU data protection law. The following provisions will inform you, in addition to information about the purposes of processing, recipients, legal bases and storage periods, as well as about your rights and the data controller. This privacy policy applies only to our websites. If you are directed to other websites via links on our pages, please familiarize yourself with the respective use of your data there.

Section. 2 Contact

(1) Purpose of data processing

Your personal data that you provide to us via e-mail, contact form, etc. will be processed to respond to your requests. You are not obliged to provide us with your personal data, but we would not be able to respond to your requests sent by email without your email address.

(2) Legal basis

a) If your explicit consent is given for the processing of your data, the legal basis for this processing is set out in Art. 6 (1) (a) of the GDPR.
b) If your personal data are processed for the purpose of performing the contract, the legal basis for this processing is set out in Art. 6 (1) (b) of the GDPR.
c) The legal basis for all other cases (in particular when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.
You have the right to object at any time to data processing that was carried out in accordance with Article 6(1)(f) GDPR and that does not deal with direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to processing at any time without stating your reasons.

(3) Categories of recipients

Our legitimate interest in data processing is to communicate with you in a timely manner and to respond to your inquiries in a cost-effective manner. If you provide us with your address, we reserve the right to use it for direct mail sales. You can protect your interest in data protection by effectively transferring the data (e.g. by using a pseudonym).

(4) Categories of recipients

Hosting provider, direct marketing service provider

(5) Storage duration

Your data will be deleted if it can be deduced from the circumstances that your questions or inquiries have been fully clarified.

However, if a contract is concluded, the data required by commercial and tax law will be stored by us for the periods stipulated by law, i.e. generally for ten years (see § 257 HGB, § 147 AO).

(6) Right of revocation

You have the right to revoke your consent to the processing at any time in accordance with your agreement.

Section. 3 Web analysis with Google Analytics

(1) Purpose of data processing

Our website uses Google's web analysis service. Google uses cookies. The information about your preferences generated by the cookie allows us to analyze the use of this website. For this purpose, the information generated by the cookies (including your shortened IP address) will be transferred to our server and stored for analysis purposes. The information about your use of this website generated by the cookies will not be passed on to a third party.

(2) Legal basis

The legal basis for such processing is Article 6(1)(f) GDPR.

(3) Legitimate interest

Our legitimate interest lies in the statistical analysis of user behavior for optimization and marketing purposes. Your IP address will be anonymized during this process so that you as a user remain anonymous to us. This guarantees your right to data protection.

(4) Right to object

You can refuse the use of cookies by selecting the appropriate settings in your browser; however, you may not be able to use all the functions of this website. If you do not agree to the storage and evaluation of your visit data, you can object to the storage with a click of the mouse. In this case, an opt-out cookie is stored in your browser and Google does not collect session data.

Attention:

If you delete the cookies, the opt-out cookie will also be deleted and must be activated again the next time you visit this website.

Section. 4 Information about cookies

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored for a short time in or from your Internet browser on your computer system and only serve the functionality of the website. Other cookies remain stored in permanently and recognize your browser on your next visit in order to improve the usability of the website.

(2) Legal basis

The legal basis for such processing is Article 6(1)(f) GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality and usability of our website. The user data collected by technically necessary cookies and persistent cookies are not used to create user profiles in order to preserve your interest in data protection.

(4) Storage duration

Technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored for a period of several minutes to several years.

(5) Right of revocation

If you do not want these cookies to be stored, please deactivate the use of cookies in your internet browser. However, this may cause a functional limitation of our website.

Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.

Section. 5 Social Plugins

(1) We use social plugins from facebook.com and instagram.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States of America. The plugins can be recognized by the Facebook logo or the addition "Facebook social plugin". If you click on the "Like" button or enter a comment, the corresponding information is sent directly from your browser to Facebook and stored there. The handling of your personal data by Facebook and your relevant rights can be found in the privacy policy: Facebook. If you do not want Facebook to collect information about you via our web pages, you must log out of Facebook or Instagram before visiting our website. You can also prevent the complete storage of Facebook plugins with extensions for your browser. complete, for example, with the "Facebook blocker" (Facebook).

(2) In connection with the Twitter and Re-Tweet functions, we use so-called "social plugins" from twitter.com, operated by Twitter Inc., Folsom St., Suite 600, San Francisco, CA 94107, USA. The plugins are marked with a Twitter logo, such as the blue "Twitter bird". If you use the Re-Tweet functions, the web pages you visit will be disclosed to third parties and linked to your Twitter account. For details on the use of your data by Twitter as well as your rights and setting options to protect your personal data, please see the Privacy Policy: Twitter. If you do not like Twitter to assign the data collected through our web presence directly to your Twitter account, you must log in to Twitter before visiting our website. You can completely prevent the storage of Twitter plugins with extensions for your browser e.g. with a script blocker (NoScript).

(3) We have included YouTube videos in the extended privacy mode on our website. Starting the video may trigger further data processing. For more information about privacy on YouTube, please visit: http://www.youtube.com/t/privacy_at_youtube

Section. 6 Newsletter

If you would like to receive the newsletter offered on the website, we request an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Other data is not collected or only on a voluntary basis. We use this data exclusively to provide the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form takes place exclusively on the basis of your consent (Article 6 (1) lit. GDPR). The consent to the storage of data, e-mail address and their use for sending the newsletter can be revoked at any time, for example via the "unsubscribe" link in the newsletter. The legality of data processing operations already completed is not affected by the revocation.

The data submitted with us for the purpose of obtaining the newsletter will be saved by us from the newsletter until your cancellation and will be deleted after the cancellation of the newsletter. Data stored for other purposes with us (such as e-mail addresses for the members' area) remain unaffected.

Section. 7 Google Web Fonts

This website uses so-called web fonts, provided by Monotype, for the uniform representation of fonts. Your browser loads the necessary web fonts into the browser cache when you open the website in order to display texts and fonts correctly

Your browser must connect to Google servers to perform this task. Consequently Google learns that our website has been accessed by your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

If your browser does not support web fonts, your computer will use a default font.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/.

Section. 8 Rights of the data subject

If your personal data are processed, you are the "data subject" within the meaning of the GDPR and have the following rights vis-à-vis the controller:

Right of access of the data subject
You can request the controller to confirm whether or not personal data concerning you are being processed.

In the case of such processing, you may request the following information from the controller:

(1) the purposes of the processing of the personal data;

(2) the categories of personal data concerned;

(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed;

(4) the estimated period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period;

(5) the right to request the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) the right to all available information on the source of the data, where the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the intended effects of such processing.

As a data subject, you have the right to be informed whether personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards, in accordance with Article 46 of the GDPR, regarding the transfer.

Right to rectification
You have the right to have your personal data corrected and/or completed by the controller if your personal data processed are incorrect or incomplete. The controller must make the correction without delay.

Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the following applies:

(1) you contest the accuracy of the personal data concerning you for a period of time enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims; or

(4) you have lodged an objection to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override the grounds.

Where the processing of personal data concerning you has been restricted, these data may be processed, except for storage, only with your consent or for the purpose of establishing, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.

Right to erasure
a) Obligation to erase
You have the right to obtain from the controller the immediate deletion of your personal data and the controller is obliged to erase these data without delay if one of the following reasons applies:

(1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

(2) you withdraw your consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal ground for the processing;

(3) you lodge a complaint against the processing pursuant to Article 21(1) of the GDPR and there are no legitimate grounds for the processing or you lodge an objection against the processing pursuant to Article 21(1) of the GDPR
(4) your personal data have been processed unlawfully;

(5) your personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;

(6) your personal data were collected in connection with the provision of information society services referred to in Article 8(1);

b) Obligation to inform other (third-party) controllers

If the controller has made your personal data public and is obliged to erase them pursuant to Article 17(1) of the GDPR, the controller shall take reasonable steps, taking into account available technology and the cost of implementation, including technical measures, to inform the controllers processing the personal data that you, as the data subject, have requested erasure of any links to, or copy or replication of, those personal data.

c) Exceptions
The right to erasure shall not apply to the extent that processing is necessary:

(1) for the exercise of the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of ​​public health, in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing; or

(5) for the establishment, exercise or defence of legal claims.

Notification obligation
If you have exercised your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed by the controller about these recipients.

Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit these data to another controller, without hindrance to the controller who received the personal data, where:

(1) the processing is based on consent in accordance with point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract in accordance with point (a) of Article 6(1); and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons may not be affected thereby.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object
On grounds relating to your particular situation. In particular, you have the right to object at any time to processing of personal data concerning you, which is carried out on the basis of Article 6(1)(e) or (f); this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you, unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In the context of the use of information society services and without prejudice to Directive 2002/58/EC, you have the possibility to exercise your right to object by automated means, using technical specifications.

Right to withdraw your declaration of consent under the Data Protection Act
You have the right to withdraw your declaration of consent under the Data Protection Act at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent until withdrawal.

Automation of individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects concerning you or significantly affects you in a similar way.
This shall not apply where the decision:

(1) is necessary for entering into, or the performance of, a contract between you and a data controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, such decisions may not be based on special categories of personal data pursuant to Article 9(1), unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms are overridden by the legitimate interests.

In the cases referred to in paragraphs (1) and (3), the data controller shall take suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller to express his or her point of view and contest the decision.

Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.

The supervisory authority in the country where the complaint was lodged is obliged to inform the complainant about the progress and outcome of the complaint, including the possibility of a remedy in accordance with Article 78.

Data controller:

Green Dot SRL

Str. Dascalului no. 64, Bucharest, sector 2

Telephone: 0040723242491

info@luposgk.ro

Contact details of our data protection officer:

Dan Samsonic

info@luposgk.eu