DECLARATION ON THE PROCESSING OF PERSONAL DATA
Protecting personal data online has become a legally required and mandatory necessity. Every controller must inform the client or partner about the processing of personal data and guarantee that it is kept safe.
S.C. Pelgrim Impex S.R.L., headquartered in Cluj-Napoca, str. Cepei nr. 11, registered with the Trade Register under number J12/874/1996, tax ID (CUI) RO8472394, as controller, hereby informs you about the processing and storage of your personal data transmitted in connection with the supply of services and products.
WHAT PERSONAL DATA IS
• information relating to an identified or identifiable natural person: surname, first name, address, e-mail, telephone, signature, financial information, information requested by authorities specific to the supply of services and products, information from audio-video monitoring resulting from a client’s visit to a location where the services of S.C. Pelgrim Impex S.R.L. are provided, audio-video monitoring during technical support services, IP address, and any other information necessary for the activity of S.C. Pelgrim Impex S.R.L..
• any action (set of actions) such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination, alignment or combination, blocking, archiving, erasure or destruction that is performed on the data may fall within the scope of personal data (directly or indirectly).
COLLECTION OF INFORMATION
Sources of information collection:
1. when www.pelgrim.ro is used or applications of S.C. Pelgrim Impex S.R.L. are used, you may be asked to complete forms or questionnaires (without any obligation to accept) needed for the supply of services;
2. direct and indirect transactions between S.C. Pelgrim Impex S.R.L., partners and users;
3. external sources specific to public institutions.
How we collect personal data from users of www.pelgrim.ro
• directly;
• using the user’s browser and traffic data;
• using cookies.
1. Direct collection of personal data.
A1. Placing an order (with or without creating an account) on www.pelgrim.ro may involve requesting surname, first name, address, email and any other data necessary for the contracting, invoicing and delivery process.
• contractual data is kept for 3 years (general limitation period);
• tax data is kept for 10 years (tax legislation);
• orders cannot be fulfilled without the data above.
A2. As part of the support services offered, we may ask you for your telephone number or email address so that we can contact you to resolve your problem (where necessary, other data falling into the category of personal data may also be requested). Communication within the support services of www.pelgrim.ro may be recorded.
A3. Subscribing to the newsletter comes with a request to provide an email address for personalised communication; storage ends upon withdrawal of consent.
A4. Payments made to our account are processed by our banking partners, and the banking information is transmitted to them.
2. Collection of personal data using traffic data
During your visit to www.pelgrim.ro, from any device, you provide information such as your IP address, the time of the visit, your location and the pages visited. External traffic analysis services (e.g. Google Analytics) are used exclusively by www.pelgrim.ro to improve services and to ensure and maintain the security of the site.
3. Collection of data through cookies (per session and persistent)
Cookies are used to remember passwords, language preferences, filters for the protection of minors, the types of advertisements agreed to, or to limit them.
FOR WHAT PURPOSES S.C. Pelgrim Impex S.R.L. PROCESSES PERSONAL DATA
S.C. Pelgrim Impex S.R.L. identifies (through the means defined above) potential users who access the services provided, monitors operations in this respect, carries out surveys and/or profiles as part of marketing activities, and carries out internal analyses specific to the services provided. S.C. Pelgrim Impex S.R.L. also processes personal data in order to resolve various legal procedures connected with the supply of services, and archives it both physically and electronically. There are legally regulated institutions of the Romanian state that may request reports containing personal data.
We have set out above the purposes for which personal data is collected. In addition, if it is truly necessary, S.C. Pelgrim Impex S.R.L. may make various (limited) personal data of users available to legal authorities and contractual partners, who undertake not to use it for any other purpose (e.g. public authorities, auditors, lawyers, accountants, companies belonging to the group of S.C. Pelgrim Impex S.R.L.).
Under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), adopted by the European Parliament, there is a possibility of TRANSFER OF PERSONAL DATA OUTSIDE THE COUNTRY.
Personal data may be stored for as long as the law provides, namely 3 years for contractual data and 10 years for financial data. Data may be processed until the purpose for which it was collected has been achieved; after that it is archived or destroyed.
MEASURES FOR THE SECURITY OF PERSONAL DATA PROCESSING
• keeping data confidential is mandatory, which is why users use their own name and password;
• every user who accesses, collects or modifies personal data is recorded with the date, time and operation performed;
• only authorised users have the right to print invoices, delivery notes, contracts and other documents containing personal data.
A user or potential user affected by the processing of personal data has the following rights:
1. The right to be informed about data collection under Articles 13 and 14 GDPR;
2. The right of access to the data processed, Article 15 GDPR;
3. The right to request rectification or even erasure of data, Article 17 GDPR, except for the exceptions provided by law;
4. The right to request minimal processing or to refuse the processing of personal data, Article 18 GDPR;
5. The right to transfer data to another controller, Article 20 GDPR;
6. Withdrawal of the right to process data after consent was initially given;
7. Refusal of data processing for marketing purposes and profiling;
8. When the user feels wronged, they have the right to contact the ANSPDCP (the Romanian data protection authority) or to turn to the competent court.
S.C. Pelgrim Impex S.R.L. RESERVES THE RIGHT TO AMEND THIS DECLARATION ON THE PROCESSING OF PERSONAL DATA WITHOUT PRIOR NOTICE, BY PUBLISHING THE UPDATED VERSION ON THE SITE.
Any notification can be sent electronically to office@pelgrim.ro or in writing to: Cluj-Napoca, str. Cepei nr. 11
Contact