PRIVACY POLICY ROMANIAN GOODS
Introduction
The purpose of this Privacy Policy is to explain to you what data we process, why we process it and what we do with it. We take your privacy seriously and never sell lists or email addresses. Being fully aware that your personal information belongs to you, we do our best to store it securely and process it carefully. We do not give information to third parties without informing you.
Other services This Privacy Policy does not cover applications and websites of other third parties that you may reach by clicking on links on our site. This is beyond our control. We encourage you to review the Privacy Policy on any website and/or application before providing any personal data.
Who are we? ROMANIAN GOODS, based in Newport Wales, Pant Road NP205PQ is responsible for processing your personal data that it collects directly from you or from other sources. According to the legislation, our company is a personal data operator. For your data to be processed securely, we have made every effort to implement reasonable measures to protect your personal information.
Who are you?
According to the legislation, you, the natural person benefiting from our products or the person in a relationship of any kind with us, are a "data subject", ie an identified or identifiable natural person. In order to be completely transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us, the data controller and you, the data subject.
Changes We may change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notification, which we will make by posting on the site and / or notification by e-mail.
Questions and requests If you have any questions or concerns about the processing of your data or would like to exercise your legal rights in relation to the data we hold or if you have concerns about how we handle any privacy issue, you can write to us at the email address romaniangoods@gmail.co.uk
Our commitment the protection of your personal information is very important to us. That is why we are committed to the following principles:
Legality, fairness and transparency – We process your data legally and fairly. We are always transparent about the information we use, and you are properly informed.
Control is Yours
Within the limits of the law, we offer you the opportunity to review, modify, delete the personal data you have shared with us and to exercise your other rights.
Data integrity and purpose limitation – We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that personal data is accurate, complete and up to date.
Security – We have implemented reasonable security and encryption measures to best protect your information. However, keep in mind that no website, app, or internet connection is completely secure.
What kind of information do we collect about you?
You may use the Platform without disclosing your personal data. However, if you wish to benefit from our services, you will be asked to provide your data during a registration process. The requested data may include: full name, telephone number, e-mail address, home address. We may collect data through cookies or other similar technologies, such as your IP address, internet browser, ads clicked, location, web pages you visit on our site.
Why do we collect this information?
We collect your information for specific and legitimate purposes which include, but are not limited to, the following:
To conclude or execute a contract between you and us.
Account registration.
To answer your questions and requests.
For marketing purposes, but only if we have your prior consent.
To provide and improve the services and products we offer.
To diagnose or fix technical problems.
To provide you with personalized advertising and content.
To defend ourselves against cyber-attacks.
For creating and/or maintaining accounts.
To comply with legislation.
For establishing or claiming a right in court.
​
What are the legal grounds for data retrieval?
You have given your consent to the processing of personal data
Please note that you can withdraw your consent at any time by following the unsubscribe instructions in each email or by sending a written request to the email address romaniangoods@gmail.co.uk
The processing is necessary for entering into, or performance of, a contract between you and us
Such as performing a Contract for the sale or purchase of one or more services, or to take steps, at your request, prior to entering into a Contract.
Processing is necessary to comply with a legal obligation. For example, keeping accounting documents for a period of 10 years.
How do we disclose your data? Romanian Goods may transfer Data, by disclosing or granting remote access rights, only through secure applications, to third parties, such as affiliated entities and other commercial partners of Romanian Goods, acting as processors, processing personal data for and on behalf of Romanian Goods (for example, storing Data on cloud servers, legal and financial consultants, technical service providers or shipping assistance service providers), with whom Romanian Goods has concluded the necessary contractual agreements in accordance with EU and national regulations.
We may also disclose your data to business partners because of a joint effort to offer a product or service.
We will transfer Data to third parties only to the extent necessary to fulfil the applicable Processing Purposes for which your data is collected and processed.
Personal data collected and processed for the Processing Purposes described in this Privacy Policy may be stored on servers located abroad or transferred to affiliated entities based outside the territory of the European Union. In case of transfer of Data to third countries, Romanian Goods will communicate the intention of transfer as well as the third countries concerned, the purpose of the transfer and the request for consent, when such consent is required according to the legal provisions in force.
Romanian Goods may disclose Data to comply with legal provisions or in response to a request from a court or other public authority.
How long do we store data?
Personal data collected by Romanian Goods will be stored for a period of 5 years from the termination of contractual relations or any other longer period required by law, regulations or applicable rules regarding obligations to keep accounting documents or requests of public authorities.
Immediately after the end of the applicable storage period, the data will be: deleted or destroyed; or anonymized; or transferred to an archive (unless prohibited by law or regulation applicable to record keeping).
Personal data collected and used to create your Account will be deleted immediately if you close your Account. To ensure that the Data is not kept longer than necessary, Romanian Goods will periodically review the Data and, if necessary, delete it.
What security measures have we taken?
As part of the administration of the Platform, we have taken technical and organizational measures to ensure a level of security appropriate to the risks involved in the processing of Data, in particular through misuse, accidental destruction, illegal or unauthorized access, loss, alteration, disclosure, intentional or accidental manipulation, access by third parties, deletion and modification. To this end, we have developed and implemented data security policies and other privacy practices. In addition, our security procedures are constantly reviewed based on new technological developments.
For additional information regarding our security practices, please fill in the contact form in the Contact section of the Platform.
You will be notified of a data breach within a reasonable period of time after the discovery of such breach, unless a competent public body determines that notification would impede a criminal investigation or harm national security. In this case, the notification will be deferred, according to the instructions of such a body. We will promptly answer your questions regarding such a data breach.
What are your rights?
Right to withdraw consent
The data subject has the right to withdraw consent when consent is used as a legal basis for processing (e.g. when the processing is not based on a different justification allowed by the GDPR, such as a legal or contractual obligation).
Before we exclude the data of the data subject from processing, we must confirm that requesting consent is indeed the legal basis for processing. If not, the request may be rejected on the grounds that the processing does not require the consent of the data subject. Otherwise, the application would have to be granted.
In many cases, giving and withdrawing consent will be available electronically – online, and this procedure will not be necessary.
When consent concerns a child (defined by the GDPR as a person under the age of 16), the expression and withdrawal of consent must be authorised by the holder of parental responsibility over the child.
The right to be informed about the processing of your data
When personal data are collected from the data subject or obtained from other sources, there is a requirement to inform the data subject about the purpose of using such data and the rights he has over them.
Right of access to data
The data subject has the right to ask the company what data it processes about him, to have access to such data, as well as to the following information:
Purpose of processing
Categories of personal data involved
Recipients or categories of recipients of the data, if any, in particular third countries or international organisations
Duration of storage of personal data (or criteria used to determine this period)
Rights of the data subject to rectification or erasure of his or her personal data and limitation or opposition to its processing
Right of the data subject to lodge a complaint with a supervisory authority
Information on the source of the data, if not obtained directly from the data subject
Whether personal data will be subject to automated processing, including profiling and, if so, the possible consequences involved
Where data is transferred to a third country or an international organisation, information on the safeguards that apply
In most cases, the decision-making process for such requests will be simple unless it is concluded that the request is manifestly unfounded or excessive. However, compiling information might require the help of data owners.
The right to rectify inaccurate or incomplete data
Where personal data are inaccurate, the data subject shall have the right to request the correction and completion of incomplete personal data on the basis of the information he or she provides.
If necessary, we will take steps to validate the information provided by the data subject to ensure that it is correct before modifying it.
Right to erasure ("right to be forgotten")
We give the data subject the right to request us to delete personal data without delay in connection with one of the following situations:
personal data are no longer necessary for the purposes for which they were collected or processed.
the data subject withdraws consent based on which the processing takes place and there is no other legal basis for processing.
the data subject opposes the processing and there are no overriding legitimate grounds for the processing.
the personal data have been processed unlawfully.
personal data must be deleted for compliance with the law.
Personal data has been collected in connection with the provision of online services to children.
We will make a decision on each case of such requests as to whether the request can or should be rejected for one of the following reasons: the data are necessary for exercising the right to freedom of expression and information; the data are necessary for the fulfilment of a legal obligation; for reasons of public interest in the area of public health; for archiving purposes in the public interest. for establishing, exercising or defending a right in court.
Right to restriction of processing
The data subject may exercise his or her right to restriction of processing in the following situations:
the accuracy of the data is contested by the data subject, for a period enabling the controller to verify the accuracy of the data.
the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use.
the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for the establishment, exercise or defence of a right in court; or
the data subject has objected to the processing for the period of time in which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
If the data is restricted, it will remain stored, but cannot be processed without the consent of the individual. As an exception, they may be processed for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State (provided that the data subject is informed thereof). Other organisations processing personal data on our behalf must also be informed of the restriction.
The right to transmit the data we have about you to another operator
The data subject has the right to request that personal data be provided in a "structured, commonly used and machine-readable" format (Article 20 GDPR) and to transfer those data to another party, for example another service provider. This applies to personal data for which the processing is based on the consent of the data subject, on the legal basis of the contract or where the processing is carried out by automated means.
The right to object to data processing
The data subject has the right to object to processing that is based on the following legal justifications:
For the performance of a task carried out in the public interest or in the exercise of official authority of the controller
For the purposes of the legitimate interests of the controller
Once the objection has been made, the organization must justify the reasons on which the processing is based and suspend processing until the decision has been made (rule). The organization will no longer process personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
If personal data is used for direct marketing, the organization will cease processing.
The right not to be subject to a decision based solely on automatic processing, including profiling
The data subject shall have the right not to be subject to an automated decision, including profiling where the decision has a significant or legal effect on him. The data subject shall also have the right to express his or her point of view, request human intervention and contest the decision.
There are exceptions to this right, when the decision: It is necessary for the conclusion or performance of the contract; It is authorized by national or European law; It is based on the explicit consent of the data subject.
In the situations under paragraphs (1) and (2), the organization shall implement appropriate measures to safeguard the data subject's rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
The right to appeal to justice
The data subject also has the right to go to justice if he or she considers that his or her rights have been violated.
Right to lodge a complaint with a Supervisory Authority
It is important to know that:
If you have given your consent for direct marketing, you can withdraw it at any time by following the unsubscribe instructions in each email/SMS or other electronic message.
If you want to exercise your rights, you can do so by sending a written, signed and dated request to the email address romaniangoods@gmail.co.uk
The rights listed above are not absolute. There are exceptions, so each request received will be analysed so that we decide whether it is justified or not. To the extent that the request is well founded, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of the rights to file a complaint with the Supervisory Authority and to go to court.
We will try to respond to your request within 30 days. However, the deadline may be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility to identify you in a timely manner.
If, despite our best efforts, we fail to identify you, and you do not provide us with additional information to be able to identify you, we are not obliged to comply with the request.
Questions, requests and exercise of rights
If you have any questions or concerns about the processing of your information or wish to exercise your legal rights or have any other privacy concerns, you can write to us at romaniangoods@gmail.co.uk