GDPR policy
PERSONAL DATA PROTECTION POLICY Gdpr
This GDPR Policy applies to all users of the website www.druzy.ro , it is applicable to the company WARRIERA AKASHA SRL, a limited liability company, with its registered office located in Romania, Ilfov county, Rosu village, Viitorului str., no. 24, registered at the Trade Registry Office J23/5147/2022, unique registration code (CUI) RO 46581920, referred to below as "DRUZY".
DRUZY's commitment to your personal data
Druzy will process personal data in accordance with this Personal Data Protection Policy ("GDPR Policy"), according to the legislation in force.
The GDPR policy is based on the provisions of Regulation no. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("General Data Protection Regulation" or "GDPR"), which entered in force since May 25, 2018, as well as applicable national legislation.
The GDPR defines personal data as "any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to his physical, physiological, genetic, psychological, economic, cultural or social identity".
Druzy undertakes to perform all due diligence in order to implement the highest standards of confidentiality and transparency regarding the personal data it processes in its current activity. Full protection and transparency regarding the processing of your personal data in the course of our business are our highest goals.
Any information regarding the processing of your personal data can be requested in writing to the above-mentioned registered office address or to the e-mail address: office@druzy.ro
Your use of our services is subject to this GDPR Policy. When you use our services, you agree to the terms of this GDPR Policy. The purpose of the GDPR Policy is to inform our customers about how we collect, store and use personal data.
Categories of personal data collected:
The personal data we process as a result of your use of the site may include:
- details of your visits to our website (in this regard we recommend you read the Cookies Policy);
- other information that you send us, when making a request on the website or as a result of sending them by email or phone.
- the data required to issue tax invoices, as well as any other relevant data.
Ways of collecting your personal data
We collect your data mainly following a visit to the website www.druzy.ro, the launch of an online order.
We collect and process personal data relating to name, surname, email address, phone number in order to maintain a correspondence or communication with you. Thus, if you make a request by email or phone, we will process your data in order to resolve it.
In this context, if the situation presented by you for the request requires it, we may transmit your contact details to financial and government institutions, transport companies or the post office.
We collect your data that comes as a result of a request to be contacted.
We collect personal data related to name, surname, email address, telephone, interest in contracting and which come as a result of the fact that you requested to be contacted, filling in the fields on the website.
In this regard, our consultants will contact you to provide you with more information.
After completing the contact form, your data is imported into the druzy database.
In case you have expressly consented to your personal data being processed for marketing purposes by druzy, respectively for sending newsletters, information about our products and services or events, contests organized by us, druzy or the proxies will process your data for this purpose.
The purposes for which we process your personal data
We may collect and process personal data for the following purposes:
-providing our products and services, complying with our legal obligations (such as obligations to keep accounting records and supporting documents), analyzing and improving our services and communications to you, protecting the security and managing websites and other systems, preventing and detecting security threats, fraud or other criminal or malicious activity; their transmission to third parties, if you have expressly given your consent;
- marketing campaigns, customer surveys, market analysis, sweepstakes, contests or other promotional activities or events, where you have expressly consented; the relationship with public authorities, according to the applicable legal norms in civil and criminal matters;
- for any purpose related and/or ancillary to any of the above or any other purpose for which your personal data has been provided to us.
Direct marketing
We promote our services to you and to others. We use customer information to send invitations and communications promoting the products and services we provide. In all cases, you will have the possibility to unsubscribe from receiving marketing information by accessing the unsubscribe link that you will find within each communication of this type or by sending a written request to the address of the registered office mentioned above or to the e-mail address: office@druzy.ro
Please note that in the case of an unsubscribe request, there may be a period of up to 48/72 hours in which you may still receive information or marketing communications, due to considerations related to the operation of changes in the system. Unsubscribing from receiving marketing e-mails does not prevent the further transmission of transactional e-mails through which we may inform you about the status of the transaction we may conclude.
Sharing and Transferring Your Personal Data
We may provide access to the personal data you provide to our proxies based on contracts entered into in this regard, but we will retain control over your personal data and use appropriate safeguards, in accordance with applicable law, to ensure the integrity and security of your personal data. We may also disclose your personal data when you instruct or give us permission to do so or when we are required by applicable law, requests by judicial or official bodies to do so, or in order to investigate fraudulent activities or criminal, actual or suspected.
Ensuring the security of personal data
Ensuring the confidentiality of the personal data you transmit to us is an important concern for us. We have implemented technical and organizational measures to maintain the confidentiality and security of your personal data in accordance with our internal procedures regarding the storage, disclosure and access of personal data. Personal data may be kept on our personal data technology systems, those of our contractors or in hard copy for a period of 5 years or any other period according to applicable law.
The www.druzy.ro website is protected by the SSL (Secured Socket Layer) standard encryption system. This technology encrypts all your personal data that you transfer to DRUZY.
Your rights
We would like to inform you that, under the new regulations on the protection of personal data provided by the General Regulation on the protection of data EU 679/2016, if we process your personal data, you have the following rights listed below, as well as of any other applicable legal rights:
- the right of access, provided by art. 15 of the GDPR, based on which you can ask us, free of charge, to confirm whether or not we are processing personal data concerning you. You can also ask us for a copy of the data we process about you. Applications must include relevant information to identify you in our database. We will resolve your request, within the legal term;
- the right to information – involves informing the data subjects in a concise, transparent and easily accessible manner about the processed data;
- the right to rectification, provided by art. 16 of the GDPR, which you can exercise, by making a request through which you can ask us to modify the information we already have about you. You can make such a request when you notice that your data is incomplete or inaccurate;
- the right to restrict processing, provided by art. 18 of the GDPR, which you can exercise when you dispute the accuracy of the data, consider the processing to be unlawful or object to the deletion of the data. Following the exercise of this right, we will still be able to store your data, performing other processing operations being possible only with your consent, except in cases expressly provided by law;
- the right to portability, provided by art. 20 of the GDPR, which you can exercise only for cases where the processing is based on your consent or the contract and only if your data is processed by automated means. If you meet the conditions, you can send us a data porting request to the operator you want;
- the right to oppose the processing of data for marketing purposes, provided by art. 21 of the GDPR. You can exercise this right at any time, and we guarantee that your data will no longer be processed for this purpose. However, it is possible that a reasonable period of time (up to 72 hours) is required to register and process your request during which you may still receive marketing communications from us;
- the right to erasure, provided by art. 17 of the GDPR, based on which we have the obligation to delete the personal data we process about you. This right is not an absolute one, having applicability only in certain situations expressly provided by law. When making a deletion request, please be aware that deleting them can be a complex process.
- the right to contact the National Authority for the Supervision of Personal Data, the public authority in Romania, with headquarters in B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, web page http://www.dataprotection.ro, which aims to protect the fundamental rights and freedoms of natural persons, especially the right to private life , family and private, in relation to the processing of personal data and the free movement of such data ("ANSPDCP"), in case you report a violation of the GDPR.
In order to exercise these rights, please send us a written request to the address of the registered office mentioned above or to the e-mail address: office@druzy.ro, with the subject ˝Personal information request˝.
Also, if you wish to withdraw your consent for direct marketing purposes, you can use the "unsubscribe" option that is included in every marketing communication.
We reserve the right to periodically update and amend this GDPR Policy to reflect any changes to how we process your personal data or any changes to legal requirements.
In case of any such change, we will display on our website www.druzy.ro the modified version of the GDPR Policy and/or make it available in another way.
For additional information regarding the content of the GDPR Policy, please contact us in writing at the above-mentioned registered office address or at the email address: office@druzy.ro
