In this Privacy Notice regarding the processing of personal data, you can find out how we use your personal information when you visit our website https://www.sostenia.ro/ .
We believe it is important to inform you about how we will use your personal data that you share with us.
2. WHAT IS PERSONAL DATA
Upon registration on our website, we will collect personal data.
Personal data refers to any information about an identified or identifiable individual, such as name, address, location data, online identifiers, etc.
3. CONTACT DETAILS OF THE DATA CONTROLLER
Your personal data is processed by the data controller SOSTENIA S.R.L. located in Bucharest, Sector 1, Str. CLUCERULUI, Nr. 2, CAM.C2, Bloc 3, registration number in the trade register J40/12631/2015, unique registration code RO35130445.
Please send your requests regarding the exercise of rights related to the protection of personal data via email to the following address: dataprotection@sostenia.ro .
4. HOW WE OBTAIN PERSONAL DATA
The personal data we process is provided by you when you create a user/customer account on the online store.
As a visitor, you are not required to provide personal data to use the website https://www.sostenia.ro/ .
However, this site collects standard internet authentication information such as IP address, browser type and language, access times, etc. To ensure the site is well-managed and to facilitate improved navigation, we or our service providers may use cookies. For details regarding the processing of personal data through cookies, please refer to the Cookie Policy .
If we process your personal data from sources other than those mentioned above or in this Privacy Notice, we will contact you to inform you that we are processing your data, unless such action is disproportionate or prejudicial.
5. WHAT PERSONAL DATA DO WE PROCESS
The personal data collected about you includes identification data (name, surname) as well as contact details (address, email, phone number).
Creating a User Account on the Site
To create a user account on our website, certain personal data will be required for your identification:
- First name
- Last name
Providing online commerce services
In order to fulfill orders placed in the online store, delivery details and data required by tax legislation are necessary:
- Full name
- Phone number
- Address
Execution of a contract - Art. 6 para. (1) lit. b) of Regulation (EU) No 679/2016
Improving the services provided
We will process your data when you provide us with feedback on our activities.
- Full name
- Phone number
Legitimate interest- Art. 6 para. (1) lit. f) of Regulation (EU) No 679/2016
Your consent - Art. 6 para. (1) lit. a) of Regulation (EU) No 679/2016
Handling requests or complaints
We use your data to respond to the requests or complaints you send us.
Legitimate interest- Art. 6 para. (1) lit. f) of Regulation (EU) No 679/2016
Sending newsletters, marketing communications to promote products
We want to keep you informed about the best offers for the products you are interested in.
- First name
- Last name
- e-mail,
- Phone number
Your consent - Art. 6 para. (1) lit. a) of Regulation (EU) No 679/2016
On-line recruitment
For the swift and efficient processing of your application for one of the vacant positions at Sostenia, we will collect your identification data as well as the personal data included in your CV:
First name
Last name
Phone number
e-mail
Address
Date of birth
Education
The legal basis for processing is the candidate's steps at the request of the candidate prior to entering into an employment contract according to Article 6(1)(b) of Regulation (EU) No 679/2016, as well as your consent for the processing of personal data after the completion of the initial recruitment process, a process that did not result in the conclusion of an employment contract - Article 6(1)(a) of Regulation (EU) No 679/2016.
The provided data will be kept for future reference for a maximum period of one year after the completion of the selection process unless there is another legal basis for their retention.
6. WHO DO WE DISCLOSE YOUR PERSONAL DATA TO
Sostenia S.R.L. will not sell, trade, or rent your personal information. Your data will not be transmitted to a third party unless Sostenia S.R.L. is legally required to do so.
Your personal data may be transferred to partners/service providers (transport, courier, facilities, IT, etc.), acting as data processors authorized by Sostenia. They undertake to comply with the instructions provided by the data controller regarding the processing of personal data. This information is transmitted/stored and processed in Romania for the purpose of improving our services, namely to respond to your requests.
7. HOW LONG DO WE STORE YOUR DATA
Your personal data is collected and processed for the entire period you visit our website or have an account on it.
Therefore, we will not retain your personal information for longer than necessary for the purpose for which it is collected and only in compliance with applicable legal provisions. Also, personal data will not be stored even if you request the deletion of your account.
After the deletion of your account, the collected personal data will be deleted within 30 days.
8. YOUR RIGHTS REGARDING DATA PROCESSING
In accordance with the applicable legislation on personal data protection, you have the following rights:
8.1. Right of access to processed data
You have the right to know if we use or store your personal data. This right can be exercised by requesting a copy of the data, commonly known as a "data access request." In this case, we will provide a copy of your personal data. For any additional copies requested by you, we reserve the right to charge a reasonable fee based on administrative costs.
8.2. Right to rectify inaccurate or incomplete data
You have the right to request the rectification or completion of your personal data that is inaccurate or incomplete. This right always applies.
In this regard, we will ask you for the following information:
-
- Specify the inaccurate or incomplete data;
- Explain how we should correct the data;
- If possible, provide evidence of the inaccuracy of the data.
8.3. Right to data portability
You have the right to receive in a structured format the personal data concerning you that you have provided to the controller and you have the right to transmit this data to another controller, where the processing is based on your consent or the performance of a contract and is carried out by automated means.
8.4. Right to request deletion of personal data
In certain circumstances, you may request us to delete your personal data. This right is not absolute and applies in the following situations:
-
- The data is no longer necessary for the purposes for which it was processed;
- You have withdrawn your consent (the withdrawal of consent does not affect the lawfulness of processing prior to withdrawal);
- You object to the processing of personal data;
- Personal data has been processed unlawfully.
8.5. Right to request restriction of data processing
By exercising this right, you have the possibility to request us not to use your data in any way and only to store it until we receive another request from you:
-
- You have requested the rectification of the data, until these data are corrected;
- You have objected to the deletion of data in the case of unlawful processing;
- You have requested us to provide you with certain data for the defense of a right.
8.6. Right to object to data processing
You have the right to object to the use of personal data in certain circumstances. If, following the analysis of the request and the conducting of a balancing test, we cannot comply with the request for legitimate reasons, we will notify you of our decision, with reasons.
If the objection is absolute or outweighs our interests, we will stop processing the personal data for the use to which you have objected.
8.7. Right to withdraw consent at any time
To exercise your right to withdraw, you can use the unsubscribe button in the newsletter.
8.8. Right to lodge a complaint with a supervisory authority
This right allows you to address the competent authorities when you believe that the provisions of the law regarding the protection of personal data have been violated.
9. HOW WE SECURE YOUR DATA
Sostenia S.R.L. takes data security seriously, so we use appropriate technologies and procedures to protect personal information. Our policies and procedures are reviewed periodically and updated in accordance with the latest international standards for the protection of personal data. For example:
-We have policies and procedures regarding the protection of personal data;
-We have measures in place to protect against accidental loss and unauthorized access/use/destruction/disclosure of personal data;
-We conduct privacy impact assessments in accordance with GDPR;
-We conduct audits and implement measures for data security;
-We train employees on the protection of personal data;
-All our employees and collaborators have signed confidentiality agreements with us.
The privacy policy may undergo changes and updates by Sostenia, as necessary.
Privacy policy updated on 18.10.2021.