GDPR Privacy Policy

We, Asociatia Afterhills, have taken technical and organisational measures to protect personal data against loss, alteration or to eliminate risks of unauthorised access.

Thus, the personal data processed by us are in compliance with the legal provisions on the protection of personal data and the EU Regulation 2016/679 (hereinafter GDPR).

Type of personal data – the personal data that will be processed by us are data such as: name, surname, email, telephone number, address, CNP.

The ways in which the data is collected is by: filling in a form regarding a request for information/offers or subscribing to our newsletter, and by making a purchase of products or services.

At the same time, we specify that our website is addressed to persons over 18 years of age, the data collected are required under the tax law and the Romanian tax administration laws, and are necessary for the realization of contract and/or the realization of tax invoices for products and services sold by us.

I. DEFINITIONS AND TERMS:
1. Personal data – any information relating to an identified or identifiable natural person („data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity
2. Data controller – means the person who transfers personal data, and who is our representative in our dealings with you.
Technical and organisational security measures – means measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other forms of processing.
3. Categories of data processed – personal data (first name, name, address, telephone number, e-mail address, etc.) are processed by us only in the situation where these data are entered by the data subject in the fields created on our website (e.g. field concerning the request for information/offers or subscription to the newsletter).
4. Processing of personal data: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

II. PERSONAL DATA WE PROCESS

We use your personal data to enable you to benefit from our services as follows:

Data for requesting information/offers
By filling in the contact forms, intended for potential clients or partners, you give us access to your contact data which we will use to answer your requests and questions.

Social networking plugins and the use of cookies
Our website uses „plugins” from social network operators (e.g.: www.facebook.com). All social network plugins on our website are clearly and distinctly marked.

Through these plugins, we do not collect / store personal customer data. Besides our customers, according to the way social networks work, there is a possibility that virtual friends of our customers may also view our page as a result of liking our website.

With regard to the use of Cookies (terminology includes „Internet Cookie”, „browser cookie”, „HTTP cookie” or simply „cookie” ) we specify that they are files or information that may be stored on your computer or mobile devices with Internet access (smartphone or tablet) when you access the Internet. The cookie is installed by a request issued by a web-server to a browser (e.g. Internet Explorer, Chrome) and cannot access the information on the user’s computer/mobile device. Please note that this technology does not contain software, viruses or spyware. We use cookies to make the site easier to use and to better tailor our offerings to your interests and needs. Cookies are also used to increase the speed of your future activities and experiences on our site. More details and information about cookies in the cookies section of our website.

III. PURPOSE OF DATA PROCESSING

In general, all information collected is used for the intended purpose for which you submitted it to us, stated at the time of collection or in the privacy policy.

We may use your personal data for one of the following purposes:

– We use your contact data to respond to your requests communicated to us either by using the contact form or directly using our email or postal address;

– we use the e-mail address you have provided to us to receive commercial information such as newsletters, promotions, offers, etc., if you have given your consent;

– we use information collected through cookies, pixels or plug-ins to provide you with an optimised experience when using our website

– we may use your data for statistical purposes to assess customer satisfaction with our services. Your answers are strictly confidential and will be used exclusively for the purpose of improving our services; the data is collected and processed through an external application so there will be no connection between your personal data and the answers given by you through these questionnaires.

– we use your data for the purpose of tax invoicing according to Romanian laws.

– in case of extraordinary situations your data may be transmitted to state bodies and institutions at their request and request.

If you choose not to provide any personal information when requested, you may not be able to participate in certain activities and personalized features on our sites and may

have limited access to services and special offers. For example, if you refuse to share your email address, you will not be able to receive any newsletters and you will not be able to contact us through the form on the site.

However, to simply search our sites and learn more about our products, you do not have to provide us with any personal information.

IV. DATA TRANSFER
We guarantee that your data will not be sold or rented to other individuals or companies so that it can be used by other companies without your consent. However, we may disclose your data to third parties to ensure that you benefit from our services, such as to service providers who ensure the operation of the website, marketing agencies who ensure the communication of the newsletter, authorities or public institutions in order to fulfil legal obligations, etc.

V. YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA PROVIDED:
According to the GDPR, as a data subject you benefit from an accumulation of rights, namely:

The right to information and access to personal data: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, access to such data.
Right to rectification: the right to request the Controller and to obtain, without undue delay, rectification of inaccurate personal data concerning you and/or to obtain complete personal data that are incomplete, with the proviso that in the case of an online account you can make these changes yourself in the data editing section account.

Right to erasure of data („right to be forgotten”): the right to obtain the erasure of personal data concerning you without undue delay if certain grounds mentioned in the GDPR apply.
Right to restriction of processing: the right to obtain restriction of processing in certain cases.
Right to data portability: the right to receive personal data concerning you and to transmit them to another controller.
Right to object: the right to object at any time to the processing of your personal data under the terms of the GDPR.
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent.
The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that your data has not been processed in accordance with the law.
National Supervisory Authority for Personal Data Processing

Bld. General Gheorghe Magheru 28-30,

010336, Bucharest, Romania

Tel: 031 805 9211

www.dataprotection.ro

To exercise these rights please send us a written request signed by you using the contact details specified on the contact page.

PRIVACY POLICY UPDATE

We reserve the right, at our discretion, to add, amend or remove elements of this Privacy Policy in the future to ensure that the information contained herein provides relevant and adequate information about our collection and processing of your personal data.