PRIVACY POLICY – Andreea Raicu
Menu
0 Search
0
Cart

PRIVACY POLICY

Andreea Raicu International SRL , with registered office in Str. Paris no. 7A, Floor 1, Apartment 2, Sector 1, Bucharest, registered at the Trade Register under no. J40/20720/2017, CUI 38619315 (hereinafter referred to as " the Company "), ensures the protection of your personal data, as a data operator.

Your privacy is very important to us. Therefore, we take the greatest care to process your personal data in accordance with the principles provided by the legislation on the protection of personal data applicable in Romania, including Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals physical regarding the processing of personal data and regarding the free movement of such data and the repeal of Directive 95/46/CE (" GDPR "), Law no. 190/2018 regarding GDPR enforcement measures, Law no. 506/2004 on the processing of personal data and the protection of private life in the electronic communications sector.

This Privacy Policy (" Policy ") is intended to inform you about the processing of your personal data, in the context of using the website (shop.andreeraicu.ro) (" the Website "), including when you purchase our products through the Site, as well as in the context of your interaction with the Company.

This Policy is duly supplemented with the Terms and Conditions of the Website and the Cookies Policy, which you can find on our Website .

I. What personal data do we process and for what purpose? 

In the context of the interaction with the Company and/or the Site, we generally process your personal data in the following situations: 

1.1. If you are a visitor to the Site

If you are a visitor to the Site, we process your personal data that you provide us voluntarily, through the contact form and/or by subscribing to the newsletter.

Through the contact form, we process the following personal data: name, e-mail address, telephone number, as well as any other personal data that is provided by you, voluntarily, by completing the " message " field in the this one.

In this context, we process your personal data in our legitimate interest, to provide you with the information requested in relation to our activity and/or products, as well as to resolve your requests sent through the contact form.

Subscribe to the newsletter by filling in the specific form, available on our website. In this case, we process the personal data you provide us based on your consent. More information on subscribing to the newsletter can be found in article 1.6 below.

Also, through cookies we can involuntarily collect other personal data that belong to you: IP address, time zone setting, browser version, operating systems, devices used to access the Site, etc. This information will not be used to identify natural or legal persons and will not be made public except under the conditions set out in this Policy, completed with the Cookies Policy that you can find on our Website.


Our site uses its own cookies, as well as cookies placed by third parties to ensure the functionality of the Site, to improve the performance of the Site, as well as to offer you services and products adapted to your needs and interests, respectively : 

  1. Necessary cookies – which ensure the proper functioning of the Website; 
  2. Preference cookies – which allow the Site to remember information that changes according to the way the Site behaves or looks (e.g. user preferences when browsing the website, such as the language in which it was read or the region from which the website was accessed);
  3. Statistical cookies – which help us understand how visitors interact with the Site by collecting and anonymously reporting information;
  4. Marketing cookies – which are used to track users from one site to another. The intention is to display relevant advertising according to your interests.

To analyze the traffic and performance of the Site, we use analysis tools provided by Google Analytics, which store information about the pages accessed, the duration of the visit to the Site, the device accessing the Site, location, etc. More information on how Google stores and uses this information can be found here .

For the use of necessary cookies, we base our processing on our legitimate interest in ensuring that the Site functions properly.

For the use of preference, statistical and marketing cookies, we base our processing on your consent. You can withdraw your consent to the use of preference, statistical and/or marketing cookies at any time.

For more information about cookies, you can access the Cookies Policy that you can find on the website. 

1.2. When you create an account on the Site

To create an account on the Site, we process the following personal data that you provide us voluntarily: name, surname and e-mail address. 

To create the account, it is necessary to set a password by you. You, as the user of the account, are solely responsible for the safety of the password set as well as for the activity carried out through the account. Any action taken by you, as an account user, through your account will be deemed to be initiated by you.

Creating an account on the Site is not conditional on submitting an order. However, creating an account allows you to place an order through the Site.

In the user account created on the Site, you can add one or more mailing addresses, where we can deliver the products ordered through the Site. For this purpose, we request the following personal data: name, surname, mailing address, telephone number. 

In this context, personal data is processed based on your consent given during the registration process by accepting the Terms and Conditions of the Site, as well as in our legitimate interest to provide and manage your user account.

In this case, we can process your personal data also based on our legitimate interest, for the prevention and detection of fraud attempts, for the defense of our rights as well as in the situation where the applicable legislation requires it.

You can withdraw your consent at any time, by deleting the user account or by sending a deletion request to the following e-mail address: contact@andreeraaicu.ro . 

1.3. When you place an order through the Site

When you place an order on the Site, you provide us with the following personal data: name, surname, delivery address/addresses, telephone number, billing data, bank card data (card number, cardholder name, expiry date, CVV2 / CVC), as well as any other personal data are provided by you voluntarily by filling in the " add a note to the order " field.

In this context, we process your personal data for the execution of the contract concluded with you by accepting the Terms and Conditions of the Site, respectively for taking orders, validating, sending and invoicing them, for solving cancellation requests or problems of any nature related to an order, to return the products according to the legal provisions, to reimburse the value of the products according to the legal provisions, to ensure the transport services, including providing support and/or answers to your questions regarding the order and/or regarding our products. 

Also, in this context, we can process your personal data also based on our legitimate interest, for the prevention and detection of fraud attempts, for the defense of our rights as well as in the situation where the applicable legislation requires it.

1.4. When you contact us on our social media pages

We process your personal data through our social media pages (Facebook, Instagram, Linkedin, etc.) if you contact us to place an order and/or request information about our products.

In this case, we can process your personal data (surname, first name, e-mail, telephone, mailing/delivery address, as well as any other personal data you provide us, voluntarily, through our social media pages ) in order to provide our products, to answer your questions and to provide you with the information requested about our products.

We may also process your personal data based on our legitimate interest in providing you with our products and managing our relationship with you as a customer.

1.5. If you are a representative, employee, collaborator, contact person of a customer or potential customer 

We process your personal data if you are a representative, employee, collaborator, contact person of a client or a potential client, such as: name, surname, function, e-mail address, telephone number, address contact information, as well as any other personal data are provided by you, voluntarily, to the extent that the processing is necessary for the fulfillment of the purposes mentioned in this article 1.5.

In this context, we process your personal data in order to prepare and supply the products requested by our customer/potential customer, based on a contract concluded by us with him or in order to conclude this contract.

We may also process your personal data based on our legitimate interest in managing the relationship with our customers/potential customers, to communicate data/information to you in relation to your requests and any other relevant aspects related to the business relationship regarding our collaboration or possible collaboration. 

It is possible to process your personal data in order to fulfill some of our legal obligations.

In all cases above, your personal data is provided to us either directly by you or by your representative.

1.6. Processing of personal data for marketing purposes

We want to process your contact data: name, surname, e-mail address, telephone number, mailing address, to keep you informed about our products, to send you offers, promotions, advertising materials, newsletters newsletters, information about promotional campaigns, loyalty programs, to ask you to participate in surveys, to conduct market research in order to improve our products, to send you any other similar materials related to our products , as well as to ask you for feedback about our products or about your experience of interacting with our Site (collectively referred to as " marketing communications ").

In order to send you marketing communications, we may contact you via electronic means of communication, such as: e-mail, telephone (calls made with human operators), sms, WhatsApp or any other type of electronic mail.

We rely on your consent when we send you marketing communications by email, SMS, WhatsApp, or any other type of electronic communication.

If you have purchased a product from us, we may process your personal data in our legitimate interest. In this case, we may send you marketing communications by telephone (calls made with human operators).

At any time you can withdraw your consent to the processing of your personal data for marketing purposes (when such processing is based on your consent) or you can object to the processing (where the basis of the processing is our legitimate interests) after as follows: 

  • by using the unsubscribe link included in each e-mail sent for marketing purposes;
  • by sending an unsubscribe request to the following e-mail address: contact@andreeraaicu.ro . 

Subscribe to the newsletter

On our Website you have the possibility to subscribe to our newsletter: (i) by filling in the specific form, which you can find at the bottom of the page; (ii) through the specific pop-up; (iii) by ticking the specific box at the time of placing the order or at the time of creating the user account.

Subscription to the newsletter is free and takes place based on your prior consent.

Subscribing to the newsletter involves providing your e-mail address, which from the GDPR perspective falls under the category of personal data.

In addition to your email address, we may request the following personal data: date of birth, information about your interests, in order to send relevant newsletters and/or to benefit from various promotions and/or loyalty programs dedicated to our customers. The provision of these personal data is optional and free, with the possibility to subscribe to the newsletter without completing these data.

If the e-mail address provided is a business address ( such as office@companie.com ), it does not fall under the category of personal data and is not subject to the GDPR. However, even in this case you have the possibility to unsubscribe from the newsletter through the methods mentioned in this article 1.6. 

1.7. If you are our employee or if you are applying for a job

If you are our employee, we process your personal data in accordance with our internal privacy policy, in order to execute the employment contract concluded with you, for the purpose of managing, planning, organizing or terminating the employment relationship, as well as in order to fulfill our legal obligations.

If you apply for a job, we process the following personal data: name, surname, e-mail address, telephone number, contact address, data on former employers and/or positions held, details on education and professional training, your professional qualifications, as well as any other personal data that you include in your CV sent to us.

In this context, we process your personal data for the purpose of recruiting and concluding an employment contract with you.

In the case of concluding an employment contract, any other information related to the processing of your personal data is detailed in our internal privacy policy, as well as in the notice on the processing of personal data of employees.

1.8. When you participate in contests, conferences, sweepstakes, webinars, events, trainings

In the event that you register for the contests, conferences, raffles, webinars organized by us, (hereafter referred to collectively as " Events "), we process your personal data that you provide us, voluntarily, on the occasion of registration at these Events.

In this case, we rely on your consent to participate in the Events. Consent can also be expressed by participating/connecting to the Events organized online, with the audio and/or video functions activated.

If the Events are recorded and/or conducted online, we may also process your voice and/or image, based on your consent. For online Events, if you do not agree to registration please log in with these features disabled. If you log in with these features enabled, you can always withdraw your consent by deactivating them. In other cases, you can withdraw your consent by sending an e-mail to the following address: contact@andreeraaicu.ro . 

When you participate in Events, the basis of the processing may also be our legitimate interest, in order to keep a record of the people who participate in the Events organized by us, to facilitate access and to prevent any security issues. 

1.9. When you visit our premises or the stores where our products are found

In this case, the basis for the processing is our legitimate interest in protecting our premises, goods and/or staff or the stores where our products are found.

The categories of personal data that we can process in this context are: name, surname and other personal data that can be provided to us directly by you.

II. How long do we keep your personal data?

We keep your personal data: (i) as long as necessary to achieve the purposes mentioned in Chapter I above or, as the case may be, (ii) for the period provided by law or established by a public authority/institution, under the conditions of the law, or (ii) in the case of claims/complaints/reports/investigations/litigation, until they cease.

If you withdraw your consent or object to the processing of your personal data for marketing purposes, the personal data will no longer be processed for this purpose from the moment you withdraw your consent, or as the case may be, from the moment you object to the processing.

After the storage period expires, your personal data will be destroyed, deleted or anonymized.

III. Security measures

We guarantee compliance with the provisions on the protection of personal data, through physical security measures as well as through appropriate technical and organizational measures, implemented to ensure a level of security appropriate to the risks posed by the processing, in particular to prevent accidental or illegal destruction, loss, modification, disclosure or unauthorized access of personal data, such as:

  • The conclusion of contracts with our partners and collaborators by which they have assumed the obligation to preserve the confidentiality of the processed personal data and to comply with the applicable legislation in the field of personal data protection;
  • Our personnel/employees have assumed, through confidentiality agreements, the obligation to respect the confidentiality of personal data to which they have access in the exercise of their duties;
  • Our staff/employees are regularly trained on the legal provisions on the protection of personal data;
  • Implementation of internal policies and procedures regarding the protection of personal data;
  • Implementation of information security measures.

In the event of a personal data security incident, you will be notified without undue delay, unless an authority determines that notification would impede a criminal investigation or harm national security. In this case, the notification will be delayed according to the instructions of the authority. 

We will promptly respond to your requests regarding such a breach of personal data security.

IV. Who do we disclose your personal data to?

In order to fulfill the processing purposes, we may disclose your personal data to third parties, such as: 

  • Partners we contract for the administration of the Site;
  • Partners or agents involved in the delivery of products ordered through the Site;
  • Partners we engage to provide marketing communications or other types of communications;
  • IT service providers, including Site maintenance, customization and improvement services;
  • Providers of accounting and/or financial services;
  • Companies involved in processing and/or making payments related to orders placed through the Site;
  • Public authorities/institutions, in order to fulfill our legal obligations;
  • Third parties involved in the provision of services related to cookies and similar technologies.

V. When and how do we transfer your personal data?

We generally store your personal data at our locations in Romania.

However, we may transfer your personal data both to countries in the European Economic Area (EEA) and to countries outside the EEA that have been granted an adequate level of protection by a decision of the Commission of the European Union.

In certain situations, we may transfer your personal data to countries other than those indicated above, for example, if our servers (for example, those on which we store personal data), or our suppliers and service providers located in or providing services from countries outside the EEA. In these cases, we will ensure that your personal data is properly protected and that we implement appropriate safeguards for the transfer, as set out below. 

As a rule, we will enter into appropriate agreements with those suppliers or providers regarding the transfer of data in accordance with standard contractual clauses approved by the European Commission Standard Contractual Clauses (SCC) - European Commission or, where applicable, agreements containing clauses negotiated with those suppliers or service providers, subject to their approval by the European Commission.

In the absence of the above agreements, we will only transfer your personal data to a country outside the EEA based on mechanisms expressly recognized by law as ensuring adequate protection of your personal data (such as under international treaties with the third country, the mandatory corporate rules approved by the competent authority, etc.) or, as the case may be, under mechanisms permitted by law.

VI. Provision of personal data

If personal data is requested directly from you, please provide us with all categories of personal data that we request for the purposes mentioned in Chapter I of this Policy. Otherwise, we may not be able to provide you with, among other things, our products.

If you provide us with the personal data of other natural persons, please inform them in advance of the provisions of this Policy, including the manner in which we intend to process their personal data, as well as, when appropriate, obtain their prior consent.

Our site is not directed at persons under the age of 16, and we do not knowingly collect personal data from such persons. However, despite the fact that we undertake to control and prevent the processing of personal data of persons under the age of 16, it is not possible to guarantee the total avoidance of such processing.

If a user under the age of 16 has provided personal data without the prior consent of his legal representative, the latter can request, at any time, the deletion of the personal data provided by the minor by sending us an email -mail to the following address: contact@andreeraaicu.ro .

VII. What are your rights regarding the protection of personal data?

In your capacity as a data subject, the GDPR regulates a number of rights that you can exercise, respectively: 

(a) the right of access – this right allows you to obtain confirmation of whether or not your personal data is being processed by us and, if so, the relevant details of these processing activities;

(b) the right to rectification – this right allows you to request the rectification of your personal data if it is inaccurate;

(c) the right to erasure – this right allows you to obtain the erasure of your personal data in certain cases (for example, where the personal data is no longer necessary in relation to the purposes for which it was collected or processed) . We will not be able to comply with such a request in all cases, such as when the law requires us to keep personal data for a certain period or when the processing of personal data is necessary in our legitimate interest, such as for defending a right in court;

(d) the right to restriction of processing – this right allows you to obtain the restriction of the processing of your personal data in certain cases (for example: (i) when you dispute the accuracy of your personal data, for a period that allows us to verify this accuracy; (ii) when you have objected to the deletion of your personal data by requesting the restriction of their use, in the case of illegal processing; (iii) when you have requested us to provide you with certain personal data for ascertainment, exercise or the defense of a right in court, when we no longer need your personal data for the purpose of processing; (iv) when you have objected to the processing of your personal data for the period of time in which it is verified whether the legitimate rights of the operator prevail on your rights);

(e) the right to object – this right allows you to object to the further processing of your personal data under the conditions and limits provided by law. Depending on the specific situation, if we have a legitimate interest in the processing that overrides your interests, or if we need to process your personal data to establish, exercise or defend our rights in official proceedings, we may continue to process your personal data for related purposes. If we process your personal data for direct marketing purposes, based on our legitimate interest, you have the right to object at any time to the processing of your personal data; 

(f) the right to personal data portability – this right allows you to: (i) receive the personal data about you that you have provided to us in a structured, commonly used format that can be automatically read or (ii) transmit this personal data to another data controller. The law obliges us to comply with such a request only for your personal data previously processed on the basis of your consent or on the basis of the execution of the contract concluded with us and only if the processing is carried out by automated means.

You can exercise the above rights freely and at any time and learn more about your personal rights by: 

(i) registration/transmission by post or courier of a written request in this regard at the Company's headquarters in Str. Paris no. 7A, Floor 1, Apartment 2, Sector 1, Bucharest; 

(ii) sending a request to the following e-mail address: contact@andreeraaicu.ro . 

You also have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing with its headquarters at the following address: Boulevard G-ral. Gheorghe Magheru no. 28 - 30, Sector 1, Bucharest, Romania, postal code 010336.

We encourage you to contact us immediately if you believe that your personal data has been provided by another person without your consent. We are committed to always treating your requests with the utmost care and answering any questions regarding this Policy and your personal data as soon as possible.

VIII. Updates to the Policy 

This Policy is updated periodically. Each time we make such a change, we will display it on our Site accordingly. 

IX. Links to Third Party Sites

Our website may provide links to third party websites. We are not responsible for the security and content of these third party sites. Therefore, make sure you read that company's privacy and cookie policies before using their site or providing your personal data on that site.

X. Contact

For any additional questions about how your personal data is processed, as well as to exercise your rights mentioned in this Policy, please send a written request: (i) registered, sent by post or courier to our headquarters in Str. Paris no. 7A, Floor 1, Apartment 2, Sector 1, Bucharest ; (ii) by e-mail, at the following address: contact@andreeraaicu.ro . 

×