Overview

Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation in this document - GDPR, Regulation or RGPD) was adopted by the European Parliament and the Council of the European Union on 27 April 2016, its provisions being directly applicable as of 25 May 2018. This Regulation expressly repeals Directive 95/46 / EC, thus replacing the provisions of Law no. 677/2001 (currently repealed).

The regulation is directly applicable in all Member States, protecting the rights of all natural persons located within the territory of the European Union. From a material point of view, the Regulation applies to all operators who process personal data. The Regulation does not apply to the processing of personal data concerning legal persons and, in particular, undertakings with legal personality, including the name and type of legal person and the contact details of the legal person.

Personal data is defined as any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier or one or more specific elements of his physical, physiological, genetic, mental, economic, cultural or social identity.

The processing of personal data involves any operation or set of operations performed on personal data or data sets, with or without the use of automated means such as collecting, recording, organizing, structuring, storing, adapting or modifying, extracting, consulting, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

The identity of the operator

Having regard to Article 4 (7) of the Regulation, which defines the term "controller" as a natural or legal person, public authority, agency or other body which, alone or jointly with others, sets out the purposes and means of the processing of personal data, the operator that processes personal data through this website is Blue Planet Tourism LLC, Office 06, Morocco Cluster G-02, International City Dubai, with contact details info@4x4desertsafaritours.com, +40 721 375 322.

Collection of personal data

What is the personal data collected

The operator of this website collects, stores and processes the following personal data about you:

• Name surname
• Personal identification number
• Series and identity card number
• Home and / or residence address
• Contact details (such as email, phone, fax)
• IP (Internet Protocol)
• Visual images or sequences (photos, videos)
• Political Views
• Data collected through Job Application platforms

 

The data provided by you regarding the content of the CV are processed pursuant to art. 6 para. 1 lit. a) and b) of the Regulation. The processing of these data takes place as follows:

 

• By registering your CV in our database and by expressly consenting to the access of employers / third parties to its content

 

 

Given that the Regulation mainly prohibits “the processing of personal data revealing racial or ethnic origin, political opinions, religious denominations or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the unique identification of a person. natural persons, data on the health or data on the sexual life or sexual orientation of a natural person ”(according to art. 9 para. 1), then the situations in which the processing of such data is allowed are established:

1. there is the explicit consent of the data subject;
2. processing is necessary for the purpose of fulfilling the obligations and exercising specific rights of the operator or of the data subject in the field of employment and of social security and social protection
3. the processing is necessary to protect the vital interests of the data subject or of another natural person, when the data subject is physically or legally incapable of giving his or her consent;
4. processing is carried out in the course of their lawful activities and with adequate guarantees by a non-profit foundation, association or other non-profit, political, philosophical, religious or trade union organization, provided members of that body or to persons with whom it has permanent contacts in connection with its purposes and personal data not to be disclosed to third parties without the consent of the data subjects;
5. the processing refers to personal data which are manifestly made public by the data subject;
6. the processing is necessary for the establishment, exercise or defense of a right in court or whenever the courts act in the exercise of their judicial function;
7. processing is necessary for reasons of overriding public interest, based on Union or national law, which is proportionate to the objective pursued, respects the essence of the right to data protection and provides for appropriate and specific measures to protect the fundamental rights and interests of the data subject;
8. processing is necessary for purposes related to preventive or occupational medicine, the assessment of the employee's work capacity, the establishment of a medical diagnosis, the provision of medical or social assistance or medical treatment, or the management of health or care systems and services. under Union or national law or under a contract concluded with a medical professional and subject to compliance with the conditions and guarantees provided for in paragraph 3;
9. processing is necessary for reasons of public interest in the field of public health, such as protection against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare and medicines or medical devices, national law, which provides for appropriate and specific measures to protect the rights and freedoms of the data subject, in particular professional secrecy; or
10. the processing is necessary for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in proportion to the objective pursued, respecting the essence of the right to data protection and provides appropriate and specific measures to protect the fundamental rights and interests of the data subject.

Obtaining Consent

Overview

In order for the processing of personal data to be lawful, the GDPR provides that it is carried out on the basis of a legitimate reason, such as the performance or conclusion of a contract, the fulfillment of a legal obligation, or the valid consent expressed by the data subject. In the latter case, the controller is required to be able to demonstrate that the person concerned has given his or her consent to such processing. The consent expressed under Directive 95/46 / EC remains valid if it meets the conditions set out in the GDPR.

The consent must be given by an unequivocal statement or action which constitutes a freely expressed, specific, informed and clear statement of the data subject's consent to the processing of his or her personal data. Where the consent of the data subject is given in the context of a statement, in electronic or written form, which also covers other matters, the request for consent must be made in a form which clearly distinguishes it from other matters, it can even be done by checking a box. In order for the processing of personal data to be lawful, GDPR provides that it is carried out on the basis of a legitimate reason, such as the performance or conclusion of a contract, the fulfillment of a legal obligation, or the valid consent expressed by the data subject. In the latter case, the controller is required to be able to demonstrate that the person concerned has given his or her consent to such processing. The consent expressed under Directive 95/46 / EC remains valid if it meets the conditions set out in the GDPR.

Cookies

Cookies are used on this site. They are not harmful to your computer and do not contain viruses, but are intended to help make the site easier, more efficient and safer to use. They are small text files that are saved on your computer and saved by your browser.

Many of the cookies used are called "session cookies", which are automatically deleted after visiting this site. Others remain in your computer's memory until you delete them, making it possible to recognize your browser at a later visit.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser may be set to automatically accept cookies under certain conditions or to always reject them or to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary to enable electronic communications or to provide certain functions that you wish to use (such as your shopping cart) are stored in accordance with the provisions of art. 6 para.1 lit. f) of the GDPR, according to which the processing is legal only if and insofar as it is necessary for the purpose of the legitimate interests pursued by the operator or by a third party. Therefore, the operator of this website has a legitimate interest in the storage of certain cookies, in order to ensure an optimization without technical errors. Other cookies (such as those used to analyze your browsing behavior) are also stored and will be treated separately in this document.

Log files on the server

The provider of this site automatically collects and stores the information that your browser automatically transmits to us via log files. These are:

• Browser type and version
• Operating system used
• The URL of the page that originally generated the request to display the current page or object (Referrer URL)
• Hostname of the accessing computer
• Time to access the server
• IP address

The legal basis for the processing of such data is represented by art. 6 para. 1 lit. b) GDPR, which allows the processing of data when it is necessary for the execution of a contract to which the data subject is a party or to take steps, at the request of the data subject, before concluding a contract.

Contact form

If you send us questions via the contact form, we will collect the data entered in the form, including the contact details you provide, to answer your and other questions. We do not transmit this information without your permission. Therefore, we will process all data that you enter in the contact form only with your consent [in accordance with the provisions of art. 6 para. 1 lit. a) GDPR1]. You can revoke your agreement at any time, as an informal email will suffice. Data processed before your request is received may be legally processed. We will keep the data you provide on the contact form until:

• request data deletion;
• revoke your consent for their storage or if
• the purpose for its storage is no longer valid.

Any mandatory legal provisions, in particular those relating to mandatory data retention periods, are not affected by the above.

Contact by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including any personal data you provide, will be stored and processed by us for the purpose of resolving your request, based on your consent.

Therefore, we will process all data you provide under the following legal provisions in the GDPR, respectively:

• only with your consent - in accordance with the provisions of art. 6 para. 1 lit. a) GDPR
• for the execution of a contract or in the pre-contractual stage - in accordance with the provisions of art. 6 para. 1 lit. b) GDPR
• for the fulfillment of the purpose and the legitimate interest pursued by us, respectively that of efficient processing of the requests sent by you - in accordance with the provisions of art. 6 para. 1 lit. f) GDPR.

We will keep the data you provide in this way until:

• request data deletion;
• revoke the consent for their storage or if the purpose for their storage is no longer valid, in all cases except mandatory data retention periods.

Registration on the site

You can register on this website to access additional features and services offered by our company. In this regard, the data you enter will be used and processed in order to use the service or functions for which you have registered. The required registration data must be provided by you in its entirety, otherwise the registration operation will be rejected.

To inform you of important changes, such as those within the scope of our site or technical changes, we will use the email address you specified at the time of registration.

The processing of personal data, provided in the registration procedure, is done only with your consent and in compliance with the provisions of art. 6 para. 1 lit. a) GDPR. You can revoke your agreement at any time, as an informal email will suffice. We will continue to store data collected during registration as long as you remain registered on this website, but mandatory storage periods remain valid and will be respected.

Facebook login

If you do not want to register directly on this site, you can log in via Facebook (Connect). This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

To log in using Facebook, press "Login with facebook" or "Connect with Facebook" and you will be automatically redirected to this platform, where you will be asked for your username and password details and thus you will be connected to this website with the profile from Facebook. In this way, we will have access to all data stored on Facebook, for example (and not limited to):

• Name
• Profile photo
• Email Address
• Facebook ID
• Network of friends
• Likes
• Birthday
• Gender
• The country
• Language

This data will be used to create and customize your account on this website.

For more information, you can access the Facebook Terms and Conditions, as well as the Privacy Policy, which is available at https://www.facebook.com/privacy and https://www.facebook.com/legal/terms.

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner / Facebook Ireland Limited, Maximillian Schrems), the European Court of Justice has ruled that the protection afforded by the EU-US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of standard contractual clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Facebook uses the Standard Contract Terms as an adequate guarantee of data protection, in accordance with the level of protection guaranteed by the GDPR.

For more details, visit: https://www.facebook.com/legal/EU_data_transfer_addendum

Comments section

By accessing the Comments section, certain personal data (such as, but not limited to, email address, username, IP address) will be processed and stored, some of which is necessary to prevent illegal actions or defamatory content.

 

There is also the possibility to register / subscribe to this site in order to receive comments via the email provided, so that:

• The email address may be verified by a confirmation email;
• You can unsubscribe at any time by accessing the link in your email, and the data you provide will be deleted immediately, except for data provided as a result of accessing other sections (for example, with the newsletter subscription) which will remain stored. ;

Purpose of processing the collected data

Some of the data collected on this site is used for:

 

• Providing the services we provide for your benefit (for example, for resolving issues of any kind related to our products and services, for providing support services, etc.)
• Optimal operation and optimization of this site (statistical and analytical) - We always want to give you the best experience on our site, which is why we can collect and use certain information about the satisfaction you have had. While browsing this site, we may invite you to complete suggestion questionnaires or similar.
• Online advertising and promotion activities. You may request us at any time, by the means described in this document, to stop the processing of your personal data for marketing purposes, and we will process your request as soon as possible.
• Regular user information - We want to keep you informed about our offers. In this regard, we may send you any type of message containing general and thematic information, information about offers or promotions, and other commercial communications such as market research and opinion polls. For communications of this type, we have as a basis the consent obtained in advance from you. You can change your mind and withdraw your consent at any time.
• To defend our legitimate interests. There may be situations in which we use or transmit information to protect our rights and business. These may include: measures to protect the website and the user of our site from cyber attacks; measures to prevent and detect fraudulent attempts, including the transmission of information to the competent public authorities; other risk management measures.

 

The processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation, based on both the consent of the data subject and the reasons for the proper performance of contracts or the legitimate interests of the controller (unless the interests prevail or the fundamental rights and freedoms of the data subject, which require the protection of personal data, especially when the data subject is a child).

User rights

Your rights regarding personal data and the means of exercising them are: Right to information, Right of access, Right of rectification, Right to deletion of data, Right to restrict processing, Right to data portability, Right to object, Right not to is subject to a decision based solely on automatic data processing, the right to lodge a complaint and to apply to the courts, the right to withdraw consent.

• Right to information - you can request information on the processing of your personal data, on the identity of the controller and his representative or on the recipients of your data;
• Right of access- you can obtain confirmation from the operator that personal data concerning you are being processed or not and, if so, access to that data and to the following information: the purposes of the processing; the categories of personal data concerned; recipients or categories of recipients to whom personal data have been or are to be disclosed, in particular recipients from third countries or international organizations; where possible, the period for which personal data are expected to be stored or, if this is not possible, the criteria used to determine this period;
• Right to rectification - you can rectify or inaccurate personal data;
• The right to delete data - you can obtain the deletion of data, if their processing was not legal or in other cases provided by law;
• The right to restrict the processing - you can request the restriction of the processing in case you dispute the accuracy of the data, as well as in other cases provided by law;
• Right to data portability - you may, under certain conditions, receive the personal data you have provided to us, in a format that can be read automatically, or you may request that such data be passed on to another controller.
• Right to object - you may object in particular to data processing which is based on the legitimate interest of the controller;
• The right not to be subject to a decision based solely on automatic data processing - you can request and obtain human intervention on that processing or you can express your own views on this type of processing;
• The right to file a complaint and to apply to the courts - you can file a complaint regarding the processing of personal data with the National Authority for the Supervision of Personal Data Processing and / or you can contact the courts for the observance of your rights;
• Right of withdrawal of consent - in cases where the processing is based on your consent, you may withdraw it at any time. Withdrawal of consent will have effect only for the future, the processing carried out prior to withdrawal will still be valid.

Obligations of the data controller

Hosting

The personal data registered on this website are stored on the servers of AdyDev Media SRL. The processing of the data provided and stored complies with the following legal provisions:

• art. 6 para. 1 lit. a) GDPR - data processing by AdyDev Media SRL is based on your consent, obtained after a correct and complete information;
• art. 6 para. 1 lit. b) GDPR - data processing by AdyDev Media SRL takes place in order to fulfill the contractual obligations assumed;
• art. 6 para. 1 lit. f) GDPR - data processing by AdyDev Media SRL is performed for the purpose of legitimate interests pursued by the operator 

Regardless of the purpose for which the processing of personal data takes place, the principles of legality, fairness and transparency are observed, but also the purpose according to which the personal data processed are adequate, relevant and limited to what is necessary in relation to the purposes for which are processed.

For more information on the processing of personal data by AdyDev Media SRL, visit https://adydevmedia.com/privacy/

 

We have a contract / agreement / legal act (including the possibility of including and agreeing to the terms of the Website Terms and Conditions) concluded with AdyDev Media SRL to ensure the processing of personal data in accordance with legal regulations in the field. We comply with our obligations under Article 28 of the GDPR by choosing an external service provider that provides sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing complies with the requirements of the Regulation and ensures the protection of your rights.

Data encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential information. This encryption can be recognized by you by the lock icon that appears in the browser bar and by changing the address of that browser from http: // to https: //. Once such encryption is enabled, transmitted or transferred data will not be visible to third parties.

According to GDPR, if the breach of personal data security is likely to pose a high risk to your rights and freedoms, the operator of this website will inform you, without undue delay, of this breach, unless the supplementary provisions become incidental. of the same Regulation (art. 34 para. 3).

Data protection officer

The provisions of the GDPR are not applicable (art. 37 para. 1 - according to which the Operator and the person authorized by the operator designate a data protection officer whenever:

1. the processing is carried out by a public authority or body, with the exception of courts acting in the exercise of their judicial function;
2. the main activities of the controller or of the person authorized by the controller consist of processing operations which, by their nature, scope and / or purpose, require regular and systematic monitoring of the persons concerned on a large scale; or
3. the main activities of the controller or of the controller are the large-scale processing of special categories of data pursuant to Article 9 or of personal data relating to criminal convictions and offenses referred to in Article 10)

Regarding the obligation to appoint a Data Protection Officer, for any information or clarifications regarding the operation of this website, please contact us at the following dates:

• Name: Adrian Neațu
• E-mail: info@adydevmedia.com
• Tel: 0371 023 777
• Fax: 0371 024 777
• Correspondence address: Str. Vasile Alecsandri Nr.6A, Constanța

Records of processing activities

According to the GDPR Regulation, the controller or the person authorized by the controller should keep, for a reasonable period of time, records of the processing activities under his responsibility. Thus, these records will contain all the following information:

• the name and contact details of the operator 
• processing purposes;
• description of the categories of data subjects and of the categories of personal data;
• the categories of recipients to whom the personal data have been or will be disclosed;
• if applicable / possible:
  • transfers of personal data
  • expected deadlines for deleting various categories of data
  • a general description of the technical and organizational security measures

The obligation set out above does not apply to an enterprise or organization with less than 250 employees, unless its processing is likely to pose a risk to the rights and freedoms of data subjects, the processing is not occasional or the processing includes special categories. data or personal data relating to criminal convictions and offenses.

Appropriate technical and organizational measures

Given the current state of technology, the context and purposes of the processing, as well as the risks to the rights and freedoms of individuals, the controller shall implement appropriate technical and organizational measures to ensure that, by default, only personal data that are processed are processed. required for each specific purpose of the processing.

Notification of the supervisory authority in case of breach of security of personal data

According to art. 33 para. 1 of the GDPR, in case of a breach of personal data security, we will notify this to the National Authority for the Supervision of Personal Data Processing without undue delay and, if possible, within a maximum of 72 hours from the date on which I became aware of it, unless it is unlikely to pose a risk to the rights and freedoms of individuals.

Inform the data subject about personal data breach of personal data

Compared to the provisions of art. 34 of the GDPR, if the breach of security of personal data is likely to pose a high risk to the rights and freedoms of individuals, we will inform the data subject without undue delay about such breach, unless:

• appropriate technical and organizational safeguards have been implemented, and these measures have been applied to personal data affected by personal data breaches, in particular measures to ensure that personal data become unintelligible to anyone who does not is authorized to access them, such as encryption;
• further steps have been taken to ensure that the high risk to the rights and freedoms of the persons concerned referred to above is no longer likely to materialize;
• it would require a disproportionate effort. In this case, public information shall be provided instead or a similar measure shall be taken to inform the data subjects in an equally effective manner.

Social Media

Facebook plugins (Like & Share Button)

This service uses social plugins ("plugins") managed by the social network facebook.com. Plugins can be identified by a Facebook logo (a white "f" on a blue plate or a "thumbs up" sign) or are tagged by adding the phrase "Facebook Social Plugin". The list and appearance of Facebook plugins can be seen here:  https://developers.facebook.com/docs/plugins/ . As long as you use the Like extension, you will appreciate the Facebook page of our site without having to leave it. To the extent that you use the Share extension, you will share our site or any of its content on your personal Facebook page without leaving the site. 

Through the plugin, Facebook receives the information that you access on our site. If you are logged in to Facebook at the same time, Facebook may assign the actions performed on the page to your account and, implicitly, to you personally. When you interact with plugins, for example by clicking the Like button or distributing certain content on the site, the relevant information is transferred directly from your browser to Facebook and stored there. Even if you are not a Facebook member, there is still the possibility that the social network will obtain and store your IP address. 

By clicking on one of these buttons, you agree to the use of this plugin and therefore to the transfer of personal data to Facebook. We have no control over the nature and purpose of this transmitted data, as well as over its further processing. Regarding the purpose and extent of the data collection, the processing and subsequent use of the data by Facebook, as well as the permissions and settings to protect your privacy.

If you don't want Facebook to associate your visit on this site with your Facebook account information, you can log out.

 

Instagram Plugin

This service uses social plugins ("plugins") managed by the Instagram social network, functions provided by Instagram Inc., based at 1601 Willow Road, Menlo Park, CA 94025, USA. Plugins can be identified by an Instagram logo or are tagged by adding the phrase "Instagram Social Plugin". 

Through the plugin, Instagram is informed about the actions you take on our page. If you are also connected to your personal account on the social network at the same time, it can assign the actions performed on the page of your Instagram account and, implicitly, your personal. When you access the plugins, the relevant information is transferred from your browser to the social network and stored there. Even if you're not an Instagram member, it's still possible to get and store your IP address. 

By clicking on one of these buttons, you agree to the use of this plugin and therefore to the transfer of personal data to Instagram. We have no control over the nature and purpose of this transmitted data, as well as over its further processing. Regarding the purpose and extent of data collection, the processing and subsequent use of data by Instagram, and the permissions and settings to protect user privacy, you can consult Instagram privacy policies at:  https://help.instagram.com/155833707900388 . 

If you are a member of Instagram and do not want it to collect your data through the plugin and link it to data already stored on Instagram, you need to log out of the social network before visiting this site.

 

Tumblr plugin

This site uses certain Tumblr plugins, which are operated by Tumblr Inc., based at 35 East, 21st. Street, 10th Floor, New York, NY 10010, USA. These plugins allow you to post a post or page on Tumblr. When you visit this site using Tumblr, the browser establishes a direct connection to the Tumblr servers. We have no influence on the volume of data accessed by Tumblr and transmitted through this plugin. In my own experience, the IP address and URL of that site may be transmitted.

More information can be found in Tumblr's privacy policy:  https://www.tumblr.com/privacy

 

Twitter plugin

This service uses social plugins ("plugins") managed by the twitter.com social network. Plugins can be identified by a Twitter logo. 

Through the plugin, Twitter receives the information that you access on our page. If you are connected to the social network at the same time, Twitter may assign the actions performed on the page to your Twitter account and, implicitly, to you personally. When you interact with plugins, the relevant information is transferred directly from your browser to Twitter and stored. Even if you're not a Twitter member, it's still possible for them to obtain and store your IP address. 

By clicking on one of the plugin buttons, you can agree to use them and therefore to transfer personal data to Twitter. We have no control over the nature and purpose of this transmitted data, as well as over its further processing. For the purpose and scope of data collection, the processing and subsequent use of data by Twitter, and the permissions and settings to protect user privacy, you can consult Twitter's privacy policies at:  https://twitter.com/en/privacy . 

If you are a member of Twitter and do not want it to collect your data through the plugin and link it to data already stored on Twitter, you need to log out of the social network before visiting the site.

 

Google+ plugin

This service uses social plugins managed by the Google+ social network. Plugins can be identified by a Google+ logo. 

Through the plugin, Google receives the information that you access on our page. If you're connected to the social network at the same time, Google may assign actions on the page to your Google+ account and, by default, to you personally. When you interact with plugins, the relevant information is transferred directly from your browser to Google+ and stored there. Even if you're not a Google+ member, it's still possible to get and store your IP address. 

By clicking on one of the plugin buttons, you can agree to use them and therefore transfer personal data to Google+. We have no control over the nature and purpose of this transmitted data, as well as over its further processing. With regard to the purpose and extent of data collection, the processing and further use of data by Google+, and the permissions and settings to protect user privacy, you can view Google+ privacy policies at:  https://policies.google.com/privacy ? hl = en . 

If you are a member of Google+ and do not want it to collect your data through the plugin and link it to data already stored on Google+, you must sign out of the social network before visiting the site.

 

Pinterest plugin

This service uses social plugins managed by the Pinterest social network. 

Through the plugin, Pinterest receives information about your activity on our website. If you're connected to the social network at the same time, Pinterest can assign actions taken on your account page and, by default, your personal. When you interact with plugins, the relevant information is transferred directly from your browser to Pinterest and stored there. Even if you're not a Pinterest member, it's still possible for them to obtain and store your IP address. 

By clicking on one of the plugin buttons, you can agree to their use and therefore to the transfer of personal data to Pinterest. We have no control over the nature and purpose of the data transmitted, as well as over their further processing. Regarding the purpose and extent of data collection, the processing and subsequent use of data by Pinterest, and the permissions and settings to protect the privacy of users, you can consult Pinterest's privacy policies at:  https://policy.pinterest.com/en / privacy-policy .    

If you are a Pinterest member and do not want them to collect your data through the plugin and link it to data already stored on Pinterest, you need to log out of the social network before visiting the site.

Newsletter

In order to receive a newsletter, it is necessary to indicate a valid e-mail address, together with specific information by which the holder of this address can be identified. Your consent is also required for the transmission of the newsletter and we therefore inform you that any other personal data will only be collected and stored under your agreement. The data thus collected is processed only for the transmission of the newsletter. and will not be passed on to third parties.

Therefore, we will process any data that you enter in the contact form only with your consent, in accordance with the provisions of art. 6 para. 1 lit. and GDPR. 

Plugins and Tools

Youtube

Our site uses plugins from the YouTube platform, which is operated by Google. The website operator is YouTube, LLC, Cherry Ave 901, San Bruno, CA 94066, USA.

If you visit a page on our site where a YouTube plug-in has been integrated, a connection to the YouTube servers will be created. As a result, the YouTube server will be notified which pages you have visited

In addition, YouTube will be able to introduce different cookies, with which it will be possible to obtain information about the visitors of our site. Among other things, this information will be used to generate video statistics in order to improve the ease of use of the site and to prevent fraudulent attempts. 

If you're signed in to your YouTube account while visiting our site, please allow YouTube to directly assign your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

Using YouTube is based on our interest in presenting your content online in an engaging way. According to art. 6 para. 1 lit. f) GDPR, this is a legitimate interest.

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems) , the European Court of Justice has ruled that the protection afforded by the EU - US Privacy Shield it does not have an adequate character. Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) should be based on the European Commission's Standard Contractual Clauses (SCC).

For more information on how YouTube handles user data, see the YouTube Privacy Policy at:  https://policies.google.com/privacy?hl=en .

 

Vimeo

Our site uses Vimeo video portal plugins. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of the pages on our site where a Vimeo plug-in has been integrated, a connection to the Vimeo servers will be created. As a result, the Vimeo server will receive information about the pages you have visited. In addition, Vimeo will receive the IP address. This will also happen if you are not logged in to Vimeo or do not have a Vimeo account. The information recorded by Vimeo will be transmitted to the Vimeo server in the United States.

If you are logged in to your Vimeo account, allow Vimeo to assign your browsing patterns directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Using Vimeo is based on our interest in presenting your content online in an engaging way. According to art. 6 para. 1 lit. f) GDPR, this is a legitimate interest.

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems) , the European Court of Justice has ruled that the protection afforded by the EU - US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of Standard Contract Clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. 

Vimeo uses the Standard Contract Terms as an adequate guarantee of data protection, in accordance with the level of protection guaranteed by the GDPR. For more information, visit https://www.activecampaign.com/legal/scc and the full privacy policy available here: https://vimeo.com/privacy .

 

Google Web Fonts

This site uses the web fonts provided by Google to ensure consistent use of the fonts on this site. 

When you visit a page on this website, your browser will load the web fonts needed to display the correct text and fonts as a result of a connection to Google's servers. So, 

The use of Google Web Fonts is based on Art. 6 para. 1 lit. f) GDPR, there is a legitimate interest in the uniform presentation of the font on this website. If there is a consent expressed in this regard (for example, consent to the archiving of cookies), the data will be processed exclusively on the basis of art. 6 para. 1 lit. a) GDPR.

For more information about how Google Web Fonts handles user data, please see the Privacy Policy available at: https://policies.google.com/privacy?hl=en .

 

Google Maps

This site uses Google Maps, a mapping and location service, via an API. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA.

To ensure the protection of your data on our site, you will find that Google Maps has been disabled when you first visited our site. A direct connection to Google's servers will not be established until Google Maps is automatically activated, that is, with your consent in accordance with Article 6 para. 1 lit. a) GDPR. This will prevent data transfer to Google during your first visit to our site. After activating the service, Google Maps will store the IP address. It is usually transferred later to a Google server in the United States, where it is stored. The provider of this website has no control over this data transfer once Google Maps has been activated.

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems) , the European Court of Justice has ruled that the protection afforded by the EU - US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of Standard Contract Clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. 

Google Maps uses the Standard Contract Terms as an appropriate guarantee of your data protection in accordance with the level of protection guaranteed by the GDPR. For more information, please see the Google Data Privacy Statement at https://policies.google.com/privacy

 

Google reCaptcha

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our site. The provider is Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). The purpose of reCAPTCHA is to determine whether the data entered on our site (for example, the information entered in a contact form) is provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of site visitors based on a variety of parameters. This analysis is automatically triggered as soon as the site visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (for example, the IP address, the time the site visitor spent on the site, or the user-initiated cursor movements). The data tracked during these analyzes is sent to Google. ReCAPTCHA scans run entirely in the background. Visitors to the site are not warned that an analysis is in progress. The data are processed based on art. 6 para. 1 lit. f) GDPR. The operators of the website have a legitimate interest in protecting the operator's web content against misuse by automated industrial espionage systems and against SPAM. 

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems) , the European Court of Justice has ruled that the protection afforded by the EU - US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of Standard Contract Clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. 

Google reCatpcha uses the Standard Contract Terms as an appropriate guarantee of data protection in accordance with the level of protection guaranteed by the GDPR. For more information, please see the Google Privacy Statement available here: https://policies.google.com/privacy   and here https://policies.google.com/terms?hl=en

Chat Online

Online Chat Platforms

Facebook Messenger

On this website we use Facebook Messenger, a free instant messaging application, thus ensuring the instant exchange of text messages with one or even several people or computers at once. It is an American messaging application and platform developed by Facebook, Inc. Originally developed as a Facebook Chat in 2008, the company renewed its messaging service in 2010.

With Facebook Messenger, we can provide you with prompt assistance, enabling you to interact with us, including tracking your purchases, receiving notifications, and initiating personal conversations with your company's customer service representatives.

The legal basis for the processing of personal data through Facebook Messenger is represented by art. 6 para. 1 lit. f) of the Regulation, based on our legitimate interest in the lawfulness of the processing. With regard to the processing of personal data, Facebook Ireland may be contacted online or by post at the following Facebook address Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.

The data collected through Facebook Messenger is used, among other things, to provide, personalize and improve the chat, to allow the provision of analysis services, but also to communicate with you. 

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems) , the European Court of Justice has ruled that the protection afforded by the EU - US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of Standard Contract Clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. 

Facebook Messenger complies with the provisions of the GDPR and the Standard Contractual Clauses (SSC) approved by the European Commission, and is constantly taking into account its decisions regarding data transfers to the United States and other countries. The European Commission has recognized countries such as Andorra, Argentina, Canada (trade organizations), the Faroe Islands, Guernsey, Israel, the Isle of Man, Japan, Jersey, New Zealand, Switzerland and Uruguay as providing adequate protection. 

More information is available here https://www.facebook.com/privacy/explanation and here  https://www.facebook.com/legal/EU_data_transfer_addendum

 

WhatsApp

Through WhatsApp, we ensure effective communication with our customers. For those who live in a country in the European Economic Area (including the European Union) and any other country or territory included (collectively referred to as the "European Region"), Whatsapp is operated by WhatsApp Ireland Limited, based in 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

According to the WhatsApp policy, which can be consulted and analyzed here: https://www.whatsapp.com/legal/#privacy-policy , Whatsapp Ltd. is also part of the Facebook Companies, through this service data is collected and processed in accordance with the principles of security and confidentiality applicable at European (in particular, RGPD) or international level (in the case of services provided by Whatsapp Inc. - EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework) .

Whastapp processes:

• data provided even by users (such as those related to the user account - phone number, profile name, photo - user connections. As for the messages sent, they are not stored on WhatsApp servers, except could be sent (for example, to an offline user) and stored for 30 days before being deleted.
• data collected automatically (last seen status) user information, user preferences stored via cookies, IP address, browser information, some transaction and payment information - for payment terms and conditions, we recommend see https://www.whatsapp.com/legal/?eea=0#payments-in ).

The legal basis for the processing of personal data through Whatsapp is represented by art. 6 lit. f) of the Regulation, based on our legitimate interest in the lawfulness of the processing.

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems) , the European Court of Justice has ruled that the protection afforded by the EU - US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of Standard Contract Clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

WhatsApp uses Standard Contract Terms as an adequate guarantee of data protection, in accordance with the level of protection guaranteed by GDPR, according to the information available here https://www.whatsapp.com/legal/#privacy-policy-our-global-operations

Audio-Video Communications

Audio-Video communication services

We use online conference-specific tools to communicate with our clients. If you choose to communicate with us through one of these tools, your personal data will be collected and processed by both us and the provider.

These tools collect all the information you provide (for example, your email address or phone number). Other information such as the duration of the conference, the time spent at the conference, the number of participants, other information specific to the operation of these tools, as well as technical data (such as: IP addresses, type of devices used, type and version of operating system) are processed. details about the camera and microphone used, but also data and content information - text messages, voice messages, photos and uploaded files, etc.).

The legal bases for the processing of personal data through these tools are represented by:

art. 6 lit. b) of the Regulation, in order to communicate effectively with our contractual partners and with current or potential clients;

art. 6 lit. f) of the Regulation, based on our legitimate interest in the legality of the processing, from the perspective of simplifying and accelerating communication with us.

However, we would like to inform you that we do not have full control over all procedural and legal issues regarding the processing of personal data, in which sense please consult the privacy policies of the suppliers of such video-audio tools. communication. To the extent that your consent has been sought, use of that tool will be made on the basis of that consent until it is withdrawn.

With regard to the duration of the storage of data processed as a result of the use of these tools, outside the legal storage periods, at your request or if storage is no longer necessary, personal data will be deleted by us. However, for more details regarding the storage of data by audio-video communication tool providers for their own purposes, please contact them and study their privacy policies.

 

Zoom

We use Zoom to facilitate communication with you. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, see Zoom's privacy policy: https://zoom.us/en-us/privacy.html .

Having regard to the judgment of 16 July 2020 (Case C-311/18 - Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems), the European Court of Justice ruled that the protection afforded by the EU-US Privacy Shield it does not have an adequate character.

Therefore, the transmission of personal data to the United States and other countries outside the European Economic Area (EEA) is based on the European Commission's Standard Contractual Clauses (SCC). The Commission has issued two sets of Standard Contract Clauses for data transfers from EU data controllers to data controllers established outside the EU or the European Economic Area (EEA). It also issued a set of contractual clauses for data transfers from EU operators to processors established outside the EU or the EEA. For more information on these Terms, we recommend that you visit https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Data transmission to the United States via Zoom is based on the European Commission's Standard Contract Terms (CCS). Details can be found here: https://zoom.us/de-de/privacy.html .

 

Skype

We use Skype to facilitate communication with you. The provider of this service is Skype Technologies SARL (also known as Skype Software SARL, Skype Communications SARL, Skype Inc. and Skype Limited) which is a telecommunications company based in Luxembourg, Luxembourg (23-29 Rives de Clausen, L -2165) and in Palo Alto, CA, United States.

Details on the processing of personal data can be found here: https://privacy.microsoft.com/en-us/privacystatement

 

Microsoft Teams

We use Microsoft Teams to facilitate communication with you. Microsoft Teams is a business communication platform developed by Microsoft as part of the Microsoft 365 product family.

Microsoft has adhered to the EU-US and Switzerland-US Privacy Shields transfer principles, but the Privacy Shield Framework as a legal basis for transfers of personal data must be interpreted and applied in the light of the EU Court of Justice ruling in Case C-311 / 18.

Details on the processing of personal data can be found here: https://privacy.microsoft.com/en-us/privacystatement

 

Google Meet

We use Google Meet to facilitate communication with you. The provider of this service is Google Inc., based in the United States, 1600 Amphitheater Parkway, Mountain View, CA 94043. In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited incorporated and operating in in accordance with Irish law (registration number: 368047), based in Gordon House, Barrow Street, Dublin 4, Ireland.

For more details on the processing of personal data, we recommend that you consult the policy available here:  https://policies.google.com/privacy

E-Commerce and Payment Methods

Pay online

According to the Regulation,  “in order to maintain security and prevent processing in breach of this Regulation, the controller or the controller should assess the risks inherent in the processing and implement measures to mitigate such risks, such as encryption”  - recital 83. the availability of strong and efficient encryption is a must to ensure the protection, confidentiality and integrity of personal data.

During the process of buying the products sold through this website, your bank details are safe! 

We use secure encryption methods, the data being transmitted over high security connections to financial units. Therefore, the data you provide for payment is not passed on to third parties and is not saved in databases.

  

PayPal

Among other options, we offer payment via PayPal on our website. The provider of this payment processing service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

If you choose to pay with PayPal, certain data and information that you enter with PayPal will be shared for the purposes and reasons set forth below:

• to provide the services requested or authorized by you - certain data will be disclosed to other legal entities affiliated with PayPal;
• for processing transactions - necessary data and information will be directed to third parties, service providers who perform functions in the interest and on behalf of PayPal;
• for the provision of other financial benefits - certain personal data will be shared with other financial institutions and entities 
• to improve user experiences and help merchants better understand the use of payment services (including dispute resolution or fraud prevention and detection)

The legal basis for the transfer of your data with PayPal, in the ways described above, is Art. 6 para. 1 lit. a) GDPR (obtaining your consent), as well as art. 6 para. 1 lit. b) GDPR (processing for the fulfillment of obligations arising from a contract). You have the option to withdraw your consent to the processing of your data at any time. Such revocation has no impact on the effectiveness of data processing transactions that have taken place in the past.

For more details, go to: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

 

Other payment methods

According to the information available at https://stripe.com/en-ro/privacy, Stripe's computer system provides you with appropriate methods for protecting the personal data of users, as well as the operations, transactions that they perform through Stripe

The purposes of the processing, the data processed, the conditions of their transfer and distribution, the security of operations and the data processed and stored, as well as all other information provided by Stripe, are based on some of the mechanisms to ensure the lawfulness of processing, according to GDPR , respectively: the consent of the data subject (art. 6 paragraph 1 letter a), the execution of a contract (art. 6 paragraph 1 letter b) and the realization of the legitimate interest of the operator (art. 6 paragraph 1 letter f).

Conclusion

This policy on the processing of personal data is generated in accordance with the provisions of Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, but also with the other applicable national legal provisions.

We reserve the right to make any additions or changes to this policy. We recommend that you consult the Policy regularly for accurate and up-to-date information regarding the processing of personal data.

For further details regarding this GDPR Policy, as well as for the exercise of any of the aforementioned rights, a written notice may be sent to the contact details indicated above.