PERSONAL DATA PROCESSING

SPI values ​​the trust you have placed in us by providing us with your personal data and we promise to treat this data in accordance with the privacy policy, applicable laws and your wishes.

We use your personal data to process your orders, to email you the newsletters you have subscribed to, and to contact you by other means, where you have given your consent. At the same time, we use your personal data to improve our products and your experience when you shop with us through any sales channel.

This Privacy Policy applies to the processing of personal data that is collected online, as well as to personal data collected through other channels (telephone, in-store, prize competitions, unless otherwise specified).

What is personal data and other terms used?

"Personal data" is any type of information about you that personally identifies you, either alone or in combination with other information we hold. SPI will collect various personal data about you that you provide to us, including your personal purchase history. SPI will not collect any special categories of personal data (unless otherwise specified).

"E-mail News" is that electronic news that includes informational news, offers, events, promotions and any other news that SPI wishes to communicate to you;

How and what personal data do we collect?

How do we collect your personal data?

Your personal data is collected through:

Subscribe to e-mail news - where each user subscribes to e-mail news, which includes informational news, offers, events, promotions and any other news that SPI wishes to communicate to you;

Order (via the Internet or by phone) - when you order products, you must provide us with your personal data so that we can process your order;

Registration - SPI gives you the ability to register so you don't have to enter your shipping information every time you order a product. Registration is not required for purchases and it is your choice whether you wish to register or not;

Prize competitions - various personal data are collected through prize competitions, which may have additional terms and conditions as defined here. Please see the terms and conditions of each prize competition before entering;

Our retail team: If you wish, you can also provide your personal data to our retail team. Of course, this is not necessary to make a purchase.

What personal data about you do we collect?

Depending on what personal data you wish to provide us and at the time of purchase in any form or manner of collecting personal data, the data collected from you may be:

Email adress;

First name;

Name;

Address;

Postal code and city;

Telephone number (landline and/or mobile);

Date of birth;

CNP

When you use our website (registration, ordering), your browser sends information about you through our servers, including your IP address, the date and time of your visit and information about the time spent on our website, the referring URL ( the website you came from); the pages you have visited on our websites; and device and browser information (eg browser type and version, operating system).

In addition, we may collect certain data through cookies and other similar devices. Click here to view our cookie policy for more information on how to use cookies and similar devices.

When you use our sites, you can also enable your location information. All browsers will ask if you agree to the sharing of this information. Therefore, only in such cases will your location information be communicated to SPI (eg "find nearest store").

What are your rights regarding personal data?

The General Data Protection Regulation recognizes a number of rights for you in relation to this data. In order to exercise any of these rights, you can contact us using the contact details on the website:

The right of access allows you to request any of the following from us:

to confirm or deny whether we are processing your personal data.

to provide you with a copy of all your personal data that we use

to provide you with other information about your personal data that we have collected, namely what we use it for, to whom we disclose it, how we protect it, how long we keep it, where we obtained it, etc.

The right to rectification gives you the opportunity to ask us to correct or complete your inaccurate or incomplete personal data.

The right to erasure allows you to ask us to erase your personal data if:

they are no longer necessary to fulfill the purposes for which they were collected;

you have withdrawn your consent on the basis of which they were collected;

exercise a legal right to object;

they were processed illegally;

we are under a legal obligation to delete them.

However, when the processing of your personal data is necessary to comply with a legal obligation or to establish, exercise or defend a right in court, we will not comply with your request to delete the data.

The right to restrict data processing can be exercised by you, if:

dispute their accuracy, and wish to restrict processing until we verify their accuracy;

the processing is illegal, but you do not want us to delete your data;

they are no longer necessary for the purposes for which we collected them, but you need them to establish, exercise or defend a right in court;

you have exercised your right to object to processing and checking whether our rights prevail is ongoing.

However, when we have your consent or when we retain, exercise or defend a right in court or when we protect our rights or the rights of another natural or legal person, we may continue to use your personal data following restriction requests.

The right to data portability gives you the opportunity to ask us to provide the personal data we have collected from you in a structured, commonly used and machine-readable format in order to provide it to another operator, or you can request that they be ported directly to another data operator.

In each of the two situations portability is possible only when:

the processing is based on your consent or the conclusion or performance of a contract with you;

the processing is done by automatic means.

The right to object allows you to object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest.

Also, when we process for direct marketing purposes, you can object at any time without giving any reason, in which case we will stop this processing as soon as possible.

You have the right not to be subject to a decision based solely on automated processing where that decision has legal effects on you or otherwise affects you in a similar and significant way.

This right does not apply, however, if the decision reached by automated decision-making:

it is necessary for us to enter into or perform a contract with you;

is authorized by law and there are adequate safeguards for your rights, freedoms and legitimate interests;

is based on your explicit consent.

The right to complain allows you to lodge a complaint with the Supervisory Authority regarding the processing of personal data. In Romania, the contact details of the supervisory authority for data protection are as follows:

National Authority for the Supervision of Personal Data Processing, B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania, Phone: +40.318.059.211 or +40.318.059.212; E-mail: anspdcp@dataprotection.ro

In order to exercise any of these rights, it is necessary to send us a request to this effect, to which we will respond within one month at most from its receipt. However, we will be able to extend this period by a maximum of two months when, taking into account the complexity and number of requests, this will be necessary.