Română
Magyar
Privacy Policy
PROCESSING OF PERSONAL DATA
SECPRAL PRO INSTALAȚII S.R.L., based in Cluj Napoca, str. Vlad Țepeș, number 2, with no. Reg.Com.:J12/140/1998,CUI: RO10166281 (hereinafter referred to as “SPI”) values the trust you have placed in us by providing us with your personal data. This document describes how we treat this data in accordance with the privacy policy, the laws in force and your wishes.
How and what personal data do we process?
Your personal data is processed as follows:
When you place an order (via the internet or by phone) - when you order products, you must provide us with your personal data so that we can process your order.
When you place an order, SPI processes the following data provided by you: name, surname, e-mail address, telephone number, personal purchase history, password in the case of an online order (only the hashed/encrypted version of the password is stored), delivery address of the goods/services, IP address - the address of your internet terminal, time of order (timestamp), as well as any other data mentioned in the online form and provided by you.
The payment for the ordered products/services is processed by a third party, ING BANK Romania and the payment processor EuroPayment S.R.L., which acts as an independent personal data operator (SPI does not have access to payment data), and details about the data processing carried out by this third party can be found at: [https://ing.ro/ing-in-romania/informatii-utile/protectie-date-personale] and [https://www.euplatesc.ro/politica-de-confidentialitate].
The processing takes place for the purpose of delivering the products and providing the services ordered by you and to send you communications related to your order, the processing being necessary: a) in the case of natural persons - for the execution of the contract with you (i.e. processing the order) or to take steps at your request before concluding the contract or b) in the case of legal persons - based on the legitimate interest of SPI to document the execution of the contract and the management of the business relationship with the legal person.
Personal data found in supporting documents that form the basis of accounting records (invoices) are kept for 5 years from the date of closing the financial year in which the documents were drawn up, according to the law. The data will not be transferred outside the European Union.
When you register - SPI offers you the possibility to register, so that you do not have to enter delivery information every time you order a product. Registration is not required for purchases and it is your choice whether you want to register or not.
When you register, SPI processes the following data provided by you: name, surname and e-mail address, password (only the hashed/encrypted version of the password is stored), IP address - the address of your internet terminal, as well as any other data mentioned in the online form and provided by you.
The processing takes place for the purpose of administering your user account, being necessary: a) in the case of natural persons - for the execution of the contract with you or to take steps at your request before concluding the contract or b) in the case of legal persons - based on the legitimate interest of SPI to document the execution of the contract and the management of the business relationship with the legal person.
The data associated with your account are kept for 30 days from the date of closure of the account for any reason.
When you participate in prize competitions - various personal data are collected through prize competitions. Please review the terms and conditions of each prize competition before entering.
When you use our website (register, order), your browser sends information about you via our servers, including your IP address, the date and time of your visit and information about the time spent on our website, the referring URL (the website you came from); the pages you visited on our websites; and device and browser information (e.g. browser type and version, operating system).
In addition, we may collect certain data through cookies and other similar devices. [https://spishop.ro/ro/content/cookies] to consult our cookie policy for more information about how we use cookies and similar devices.
When using our websites, you can also enable your location information. All browsers will ask you if you agree to
sharing this information. Therefore, only in such cases will your location information be communicated to SPI.
When you contact us online to send us a request or a complaint, SPI processes the email address and the content of the request / complaint, in order to respond to you or resolve the complaint. We process this data based on our legitimate interest in providing you with a means of contact.
The data is kept for 3 years, the general limitation period.
What are your rights regarding personal data?
The General Data Protection Regulation recognizes a series of rights in relation to this data. In order to exercise any of these rights, you can contact us using the following contact details: Florin Alexandru , e-mail: florin.alexandru@secpralpro.ro
The right of access allows you to request any of the following:
to confirm or deny whether we are processing your personal data.
to provide you with a copy of all your personal data that we use
to provide you with other information about your personal data that we have collected, namely what we use it for, to whom we disclose it, how we protect it, for how long we keep it, where we obtained it, etc.
The right to rectification gives you the opportunity to ask us to rectify or complete your inaccurate or incomplete personal data.
The right to erasure allows you to request that we delete your personal data if:
it is no longer necessary for the purposes for which it was collected;
you have withdrawn your consent on the basis of which it was collected;
you exercise a legal right to object;
it has been processed unlawfully;
we are subject to a legal obligation to delete it.
However, when the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims, we will not comply with your request to delete the data.
The right to restrict the processing of data can be exercised by you if:
you contest their accuracy, and you want the processing to be restricted until we verify their accuracy;
the processing is unlawful, but you do not want us to delete your data;
they are no longer necessary for the purposes for which we collected them, but you need them to establish, exercise or defend legal claims;
you have exercised your right to object to the processing, and the verification of whether our rights prevail is ongoing.
However, when we have your consent or when we maintain, exercise or ensure the defense of a right in court or when we protect our rights or those of another natural or legal person, we may continue to use your personal data following the request for restriction.
The right to data portability gives you the possibility to ask us to provide you with the personal data that we have collected from you in a structured, commonly used and machine-readable format in order to provide it to another controller, or you can request that they be ported directly to another data controller.
In each of the two situations, portability is only possible when:
the processing is based on your consent or on the conclusion or performance of a contract with you and
the processing is carried out by automated means.
The right to object allows you to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms override this interest.
Also, when we process for direct marketing purposes, you can object at any time, without giving any reason, in which case we will cease this processing as soon as possible.
You have the right not to be subject to a decision based solely on automated processing when that decision produces legal effects concerning you or similarly significantly affects you.
This right does not apply, however, if the decision reached as a result of automated decision-making:
is necessary for us to enter into or perform a contract with you;
is authorised by law and there are appropriate safeguards for your rights, freedoms and legitimate interests;
is based on your explicit consent.
The right to complain allows you to file a complaint with the Supervisory Authority regarding the processing of personal data.
personal data. In Romania, the contact details of the supervisory authority for data protection are as follows:
National Authority for the Supervision of Personal Data Processing, B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania, Telephone: +40.318.059.211 or +40.318.059.212; E-mail: anspdcp@dataprotection.ro
In order to exercise any of these rights, it is necessary to send us a request in this regard, to which we will respond within one month of receiving it. However, we may extend this period by a maximum of two months when, taking into account the complexity and number of requests, this is necessary.