1. INTRODUCTION
We treat the confidentiality of personal data seriously and responsibly ant its security is a priority for us.
It is for this reason that we commit ourselves to respecting the new rules imposed by European Regulation No. 679/2016, further on to be referred to as the “Regulation”, as regards the processing and free movement of personal data.
In this policy, we will explain which personal data we process, how we collect it and first of all, how we protect your personal information.
We will also inform you of your rights in this sense and guide you on how to exercise them.
2.ABOUT US
Our headquarters in 1C Poetului str., Arad, Romania, tax ID RO29404317, Trade Reg. No. J02/1115/2006.
The legal representative of the company is __________ with the following contact information 1C Poetului str., Arad, Romania and e-mail address: contact@bgmpack.ro.
From the point of view of the EU Regulation 679/2016, SC BGMPACK PRESTCOM BOGMAT SRL is a personal data operator and has therefore appointed a responsible person __________ for the protection of data, with the following contact information:
- e-mail: gdpr@bgmpack.ro
- Address: 1C Poetului str., Arad, Romania, Attn: PERSON RESPONSIBLE FOR PERSONAL INFORMATION.
3. WHAT DATA WE COLLECT and HOW DO WE COLLECT IT
We only use the information which is strictly necessary and relevant for our business and your needs as a consumer and collect them by means of our website, which is hosted and managed in Romania.
We are in possession of your data, mainly because you choose to disclose it to us voluntarily, but also by automatic capture at the time of your visit on our website, by using specific technology and software.
While you can visit our site without having to disclose your identity, you can directly provide your personal data when you use the following elements:
1. Contact form by means of which you can get in touch with us.
We use your name, email, and phone number to allow you to make a variety of requests, either in connection with our products or services or in connection with the exercise of your rights regarding personal data collected and processed by means of our website.
2. Offer request form in order to buy products from us.
We use your name, phone number and e-mail address to enable you to request offers for our products (name, quantity, size, colour).
Information about your rights regarding personal data collected and processed by means of the website and the ways to use these rights can be found in the appropriate section of this Privacy Policy.
Automatic data capture to be performed by:
- Cookie technology. Cookies are pieces of information transmitted from the web page, saved by the browser on your computer’s hard drive and which we can access later. They retain the statistical information needed for a web page to customize browsing session (e.g., by displaying dynamic interest-rate imagery) such as previously visited web pages, downloads, internet provider used, the site visitor’s country of origin.
The most common cookies are:
- Technical: they are absolutely necessary to insure the site efficiency from a technical perspective,
- Functional: they memorize your choices and helps us improve your shopping experience on our website,
- Performance related: they help us measure site performance by using information about how visitors navigate the website,
- Redirect function: they help us place ads on other webpages you use
- Social media plug-ins: to connect our customers to different social media channels.
We only collect and process the data provided by cookie technology, if you allow us to do so.
- Standard web server logs, provide us with statistical information on the number of visitors and allows us to evaluate the technical capacity of our webpage.
We use them to collect some information concerning the IP address, but they are not able to identify you directly, only to provide us with statistical data on the traffic of the web-page.
Google Analytics
Our website uses “Google AdWords / Analytics” Web Analytics service from Google Inc. for statistical purposes.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”), which in turn uses cookies. The information generated by the cookie about your usage of the site will be transmitted and stored on Google’s US servers.
The IP address your browser sends will not be associated with other data owned by Google. You can refuse cookies by selecting your browser’s appropriate settings, but in this case, you may not be able to use all of the site’s functions. You can also choose not to use Google Analytics anymore by downloading and installing the Google Analytics Opt-out Browser Addon for your browser: https://tools.google.com/dlpage/gaoptout?hl=en.
In order to agree or rescind your approval on the automatic processing through the above-mentioned programs or technologies, activate this option in the welcome message you receive when accessing our website / make the appropriate settings in your web browser.
For more details, visit our cookie policy.
If you choose to navigate without these technologies or programs, some features or characteristics of the site will not be usable.
If you fill out all forms posted on the site and if you accept the full use of automatic capture programs and technologies, we will be collecting the following data:
- ID information: name and surname, the name of the company you represent
- contact information: e-mail address, phone number, possible contact and invoicing address
- information concerning commercial transactions: services and products purchased form us, payment method
- technical information: login information, including IP, operating system and operating platform,
- browser identification, location, technology of devices used to access the site
- usage information: for the website, our products and services,
- marketing information: your preferences in receiving information from us or from third parties
4. PURPOSE OF DATA COLLECTION and LEGAL BASIS
We collect information containing personal or technical data mainly for the following purposes:
1. To fulfil our contractual obligations to you (process offer requests and bidding requests).
We collect information that contains personal data as a result of our legal or contractual obligations or in the exercise of a legitimate interest in our business and we use them for the following purposes:
- to be able to register you as a potential customer;
- to be able to communicate with you during the pre-contractual or contractual period,
to conclude the contract; - to inform you of relevant changes to terms and conditions or to the privacy policy.
2. To improve our services and your experience on our site.
In order to achieve this, we rely on our legitimate interest in doing business, but we are also careful to respect your rights and freedoms, so that we offer you an easy way to unsubscribe from the programs and technologies we use in the collection and processing data.
3. Safety reasons for our hardware and software infrastructure.
The basis of collection and processing for this purpose is both a legal one, namely the obligation to guard goods and one based on our legitimate interest in protecting our business.
Insofar as we use the information held for purposes other than the ones stated above, we will expressly request your consent and explain which new rights you are entitled to in this case.
5. IMPOSSIBILITY / REFUSAL TO SUPPLY CERTAIN PERSONAL DATA
Should you fail to provide us with the requested information, it is very likely that you will not be able to use our website at normal parameters and we may not accept and process your request and not be able to supply you with products of interest to you.
6. USERS
Your data will be used by SC BGMPACK PRESTCOM BOGMAT SRL and we will not distribute any of your personal information to a third party for other purposes than the ones described in the present policy.
We may pass on your personal information to our trusted partners who are able to provide security and privacy guarantees for your data and process the data only in accordance with our instructions.
Our partners are generally third-party service providers we work with and who work in areas such as IT and maintenance services, hosting internal databases and within the EU, behavioural analysis services (Google Analytics), accounting and taxation, consulting and legal assistance, marketing, financing, advertising, payment processing, delivery or other services, public authorities.
7. STORAGE SITE
Both the website and the physical and electronic data base containing personal information are hosted / stored on secure servers in Romania.
To the extent we transfer certain personal data to entities located in the European Union or outside the Union, including in countries where the European Commission has not recognized an adequate level of personal data protection, we will take steps to protect you rights and interests.
Transfers will be protected by contractual clauses or other safeguards such as the certification schemes including the Privacy Shield for the protection of personal data transferred from within the EU to the United States of America.
8. SECURITY MEASURES
Although your data is collected in the on-line environment, some of it is also stored on paper (e.g. invoices).
SC BGMPACK PRESTCOM BOGMAT SRL is particularly and constantly concerned with the implementation of effective security measures to protect your personal data and avoid security breaches in both on-line and physical storage information.
Regardless of the means of storage, your data is kept in secure environments that are protected from unauthorized access, use, disclosure, modification, or destruction.
We have also implemented special measures for network security and data transfer infrastructure such as auditing and testing, employment of trained personnel, data transfer outside Romania made only to entities that can provide a similar protection etc.
9. STORAGE PERIOD
If we process your data for the execution of pre-contractual / contractual obligations, we will store the data for as long as is necessary for the performance of the contract and for an additional period.
If we process your data by virtue of a legal obligation or in the interest of the public, we will store the data for as long as it is necessary to comply with legal obligations or as long as the interest is qualified as being of public use.
If we process your data to protect our legitimate business interests, we will store the data until you ask us to stop, unless we can demonstrate that the reason for which we collect and store the data takes precedence over your interests, rights and freedoms.
If we process your data based on your express agreement, we will store the data until the time you ask us to stop.
If we process your data by virtue of a legal obligation or in the interest of the public, we will store the data for as long as it is necessary to comply with legal obligations or as long as the interest is qualified as being of public use.
If we process your data to protect our legitimate business interests, we will store the data until you ask us to stop, unless we can demonstrate that the reason for which we collect and store the data takes precedence over your interests, rights and freedoms.
If we process your data based on your express agreement, we will store the data until the time you ask us to stop.
10. AUTOMATION OF THE DECISION PROCESS
SC BGMPACK PRESTCOM BOGMAT SRL does not use automated processes capable of generating legal effects that concern you or that may affect you to a significant extent.
You may at any time request that you not be the subject of a decision based solely on automatic processing, if that decision produces legal effects for you or affects you similarly and to a significant extent.
You cannot use this option, if the decision taken as a result of automatic data processing is necessary to enter into or execute a contract or if it is permitted by law and there are adequate safeguards for your rights and freedoms.
If you have given us your consent for automatic processing but then change your mind, you may at any time withdraw this consent by making a written request to us using the contact information listed in the Contact section of our website.
11. RIGHTS
- The right to information – you have the right to know if your personal data is being processed; what data is collected, where it is obtained from and why, by whom it is processed, for what period and whether this data is subject to automatic processing that may produce legal effects or affect you significantly.
- The right to access – you have the right to access, free of charge and at reasonable intervals the data collected from you / about you. This includes your right to request and to obtain a copy of the personal data collected.
- The right to update/ rectify – you have the right to request the rectification or the update of your personal data which is inaccurate or incomplete.
- The right of deletion – if you have withdrawn your consent, you oppose data processing, the processing is not in accordance with the provisions of the Regulation or is no longer necessary to achieve the purposes for which data was collected and processed, you may request that your personal data be deleted from our records.
- The right to restrict processing – if certain conditions apply, you have the right to restrict the processing of your personal data.
- The right to opposition – in some cases you have the right to oppose the processing of your personal data, for example in the case of direct marketing.
- The right to oppose automatic processing – If your personal data is subject to automated processing, including profile creation, which may produce legal effects or affect you significantly, you are entitled to ask us to exclude your data from any automated individual decision-making process.
- The right to data portability – you have the right to obtain your personal data in an appropriate format or, if possible, by transferring it directly from one processor to another.
- The right of assistance from the supervisor –you have the right to seek the assistance of a supervisory authority and the right to other remedies, such as claiming damages.
- The right to withdraw consent – You have the right to withdraw your consent at any time. The withdrawal of your consent will not t affect the lawfulness of the processing prior to this date.
- The right to make a complaint – if you want to make a complaint about how we process your personal data, we invite you to contact us:
- via e-mail at gdpr@bgmpack.ro;
- by post or courier at the address 1C Poetului str., Arad, Romania, attn: PERSON RESPONSIBLE FOR PERSONAL INFORMATION.
We hereby ensure that all your complaints and notices are treated seriously, professionally and in full confidentiality.
If, however you are still unhappy with the way we respond to your complaints, you can address the authorities that have a controlling role on our activity of processing personal data. In Romania this is Autoritatea Naționala de Supraveghere a Prelucrării Datelor cu Caracter Personal, with the following contact information:
Address: B-dul G-ral. 28-30 Gheorghe Magheru bvd, district 1, zip code 010336, Bucharest, Romania.
Phone: +40.318.059.211 or +40.318.059.212;
E-mail: anspdcp@dataprotection.ro