GDPR PERSONAL DATA PROTECTION POLICY

This GDPR Policy applies to all users of the website www.druzy.eu, it is applicable to the company DRUZY SRL, a limited liability company, with its registered office located in Romania, Ilfov County, Rosu village, str. Viitorului, nr. 24, registered with the Trade Register Office J23/5147/2022, unique registration code (CUI) RO 46581920, hereinafter referred to as "DRUZY".

 

DRUZY's commitment to your personal data

Druzy will process personal data in accordance with this Personal Data Protection Policy ("GDPR Policy"), in accordance with applicable law.

The GDPR policy is based on the provisions of Regulation no. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("General Data Protection Regulation" or "GDPR"), which entered into force on 25 May 2018, as well as on the applicable national legislation.

The GDPR defines personal data as "any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or to one or more elements specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity'.

Druzy undertakes to make all due diligence in order to implement the highest standards of confidentiality and transparency regarding the personal data it processes in its current activity. Full protection and transparency regarding the processing of your personal data in the course of our business are our most important goals.

Any information regarding the processing of your personal data may be requested in writing to the above-mentioned registered office address or to the e-mail address: office@druzy.eu

 

 

Your use of our services is subject to this GDPR Policy. When you use our services, you agree to the terms of this GDPR Policy. The purpose of the GDPR Policy is to inform our customers about how we collect, store and use personal data.

 

 

Categories of personal data collected:

The personal data we process as a result of your use of the website may include:

  • details of your visits to our website (in this regard we recommend that you read the Cookies Policy);
  • other information that you send us, when making a request on the website or as a result of sending it by email or telephone.
  • the data necessary for the issuance of tax invoices, as well as any other relevant data.

 

 

Ways to collect your personal data

We collect your data mainly following a visit to the website www.druzy.eu, of launching an online order.

We collect and process personal data referring to your name, surname, email address, telephone number in order to maintain correspondence or communication with you. Thus, if you make a request by email or phone, we will process your data in order to solve it.

In this context, if the situation exposed by you to the request requires it, we may transmit your contact details to financial and government institutions, transport companies or the postal service.

We collect your data that arises as a result of a request to be contacted.

We collect personal data referring to your name, surname, email address, telephone number, interest in contracting and which arise as a result of the fact that you have requested to be contacted by filling in the fields on the website.

In this regard, our consultants will contact you to provide you with more information.

After filling in the contact form, your data is imported into the Druzy database.

If you have expressly consented to your personal data being processed for marketing purposes by druzy, i.e. for sending newsletters, information about our products and services or events, contests organized by us, druzy or its proxies will process your data for this purpose.

 

 

Purposes for which we process your personal data

We may collect and process personal data for the following purposes:

-providing our products and services, complying with our legal obligations (such as obligations to keep accounting records and supporting documents), analyzing, improving our services and communications to you, protecting the security and management of websites and other systems, preventing and detecting security threats, fraud or other criminal or malicious activities; transmitting them to third parties, if you have expressly given your consent;

  • marketing campaigns, customer surveys, market analysis, sweepstakes, contests, or other promotional activities or events, where you have expressly consented; the relationship with public authorities, according to the legal norms applicable in civil and criminal matters;
  • for any purpose related to and/or ancillary to any of the above or any other purpose for which your personal data has been provided to us.

 

Direct marketing

We promote our services to you and others. We use customer information to send invitations and communications that promote the products and services we provide. In all cases, you will have the opportunity to unsubscribe from receiving marketing information by accessing the unsubscribe link that you will find in each communication of this type or by sending a written request to the aforementioned registered office address or to the email address: office@druzy.eu

Please note that in case of an unsubscribe request there may be a period of up to 48/72 hours in which you may receive further information or marketing communications, for reasons related to the operation of changes in the system. Unsubscribing from receiving marketing emails does not prevent the further transmission of transactional emails through which we can inform you of the status of the transaction we can conclude.

 

Sharing and transfer of your personal data

We may provide access to the personal data you provide to us by our processors under contracts, but we will retain control over your personal data and use appropriate safeguards under applicable law to ensure the integrity and security of your personal data. We may also disclose your personal data when you instruct or give us permission to do so, or when we are required by applicable law to do so by judicial or official bodies, or in order to investigate actual or suspected fraudulent or criminal activities.

 

Ensuring the security of personal data

Ensuring the confidentiality of the personal data you submit to us is an important concern for us. We have implemented technical and organizational measures to preserve the confidentiality and security of your personal data, in accordance with our internal procedures regarding the storage, disclosure and access of personal data. Personal data may be kept on our technological personal data systems, those of our contractors or in printed format, for a period of 5 years or any other duration according to the applicable legal norms.

The website www.druzy.eu it is protected by the standard SSL (Secured Socket Layer) encryption system. This technology encrypts all your personal data that you transfer to DRUZY.

 

Your rights

We would like to inform you that, within the framework of the new personal data protection regulations provided by the EU General Data Protection Regulation 679/2016, if we process your personal data, you have the following rights listed below, as well as any other applicable legal rights:

- the right of access, provided by art. 15 of the GDPR, based on which you can ask us, free of charge, to confirm whether or not we are processing personal data concerning you. You can also ask us for a copy of the data we process about you. Requests must include relevant information so that we can identify you in our database. We will solve your request, within the legal term;

- the right to information – implies informing data subjects in a concise, transparent and easily accessible manner about the processed data;

- the right to rectification, provided by art. 16 of the GDPR, which you can exercise, by making a request by which you can ask us to change the information we already have about you. You can make such a request when you notice that your data is incomplete or inaccurate;

- the right to restriction of processing, provided for in Art. 18 of the GDPR, which you can exercise when you contest the accuracy of the data, consider that the processing is unlawful or oppose the deletion of the data. Following the exercise of this right, we will continue to be able to store your data, the performance of other processing operations being possible only with your consent, except in the cases expressly provided for by law;

- the right to portability, provided for in Art. 20 of the GDPR, which you can exercise only in cases where the processing is based on your consent or contract and only if your data is processed by automated means. If you meet the conditions, you can send us a request to port your data to the operator you want;

- the right to object to the processing of data for marketing purposes, provided by art. 21 of the GDPR. You can exercise this right at any time, and we guarantee that your data will no longer be processed for this purpose. However, there is a possibility that a reasonable period of time (up to 72 hours) may be required for the registration and resolution of your request during which you may still receive marketing information from us;

- the right to erasure, provided by art. 17 of the GDPR, based on which we are obliged to delete the personal data we process about you. This right is not an absolute one, being applicable only in certain situations expressly provided for by law. When making a request for deletion, please keep in mind that deleting them can be a complex process.

- the right to address the National Supervisory Authority for Personal Data, the public authority in Romania, based in B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, web page http://www.dataprotection.ro , which aims to defend the fundamental rights and freedoms of natural persons, in particular the right to intimate, family and private life, in relation to the processing of personal data and the free movement of such data ("ANSPDCP"), in case you notice a violation of the GDPR.

In order to exercise these rights, please send us a written request to the address of the registered office mentioned above or to the e-mail address: office@druzy.eu, with the subject "Request personal information".

Also, if you wish to withdraw your consent to direct marketing purposes, you may use the "unsubscribe" option that is included in each marketing communication.

We reserve the right to update and amend this GDPR Policy from time to time, to reflect any changes in the way we process your personal data or any changes in legal requirements.

In the event of any such change, we will post on our website www.druzy.eu modified version of the GDPR Policy and/or we will make it available in another way.

 

For further information regarding the content of the GDPR Policy, please contact us in writing at the above-mentioned registered office address or at the e-mail address: office@druzy.eu