Data Policy

Information notice regarding the processing of personal data of visitors/customers of the VETRO DESIGN SRL website.

VETRO DESIGN SRL, recognizing the importance of your personal data, uses this INFORMATION NOTICE to inform you about the processing methods of your personal data in accordance with EU Regulation 679/2016 of the European Parliament and the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR).

Thus, the present privacy and personal data processing policy will detail, in the following sections, the personal information that we collect from you or that you provide, as well as how this information may be used or disclosed by us.

Information about the operator

VETRO DESIGN SRL, located at Veronica Micle Street, no. 20, bl. M6, sc. B, ap. 72, sector 1, Bucharest, registered in the Trade Register under no. J40/3366/1996, CUI RO8409931, is the operator in the processing of your personal data.

The personal data we process

In the process of processing the personal data we collect from you, we will use contact information such as your name, personal identification number, job title, postal address, professional address, telephone number, mobile phone number, fax number, and email address, date of birth, as well as records and copies of correspondence (including email addresses) in case you contact us and access the online purchasing services for products offered on our website, as well as courier services for the delivery of ordered products;

At the same time, we will process additional information in the context of a contractual relationship with our company or voluntarily provided by you, such as: payments made, information regarding your need for a specific category of products/services.

Information related to the details of your visits to our locations, at the headquarters, or any other details regarding how you interact with us will also be collected, as well as information we collect when you browse our website, including IP addresses, cookies, or similar technologies.

Purpose of processing

VETRO DESIGN SRL, as a personal data operator, collects the information provided by you, including personal information, based on the following purposes:

Advertising, Marketing and Advertising:

We use your personal data to promote Vetro Design SRL products and services, including promotional campaigns and sending newsletters. Your explicit consent is required for each type of marketing activity.

User Requests:

Your personal data is processed to respond to your requests regarding our products and services.

Analysis and Improvement of Services:

We have a legitimate interest in continuously improving our services. The data collected is used to conduct customer satisfaction surveys and to enhance our communications and services.

Management of Contractual Relationships:

We process your data to manage our contractual relationships with our customers, ensuring that it is retained for the necessary duration to fulfill contractual purposes.

WebSite Optimization:

The collected data is used to present the website and its content in a manner that is appropriate and efficient for you and your computer, in order to enhance our collaboration.

Provision of Additional Information:

We use your data to provide you with the additional information you have requested.

Notifications about New Products and Promotional Events:

Your data is processed to inform you about our new products and changes made to them, including direct marketing and promotional events, only with your explicit consent.

Auxiliary Purposes:

Your data may be used for purposes related to those mentioned above, or for any other purpose for which your personal data has been provided to us, in compliance with applicable legislation.

Legal grounds for the processing of data

Any operation involving the processing of your personal data will be carried out based on one of the following legal grounds, in accordance with GDPR:

• The processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contrat (basis: Art. 6 para. (1) letter (b) GDPR).
• The processing is necessary for compliance with a legal obligation to which the operator is subject (basis: Art. 6 para. (1) letter (c) GDPR).
• The processing is based on your explicit consent given for one or more specific purposes, which can be withdrawn at any time (basis: Art. 6 para. (1) letter (a) GDPR).
• The processing is necessary to protect the vital interests or those of another natural person (basis: Art. 6 para. (1) letter (d) GDPR).
• The processing is necessary for the purposes of the legitimate interests pursued by Vetro Design or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms that require the protection of personal data (basis: Art. 6 par. (1) letter (f) GDPR).

Data retention period

Your personal data will be retained, in accordance with GDPR regulations, for the period necessary to fulfill the purposes mentioned above and/or for the duration of contractual relationships with you. After this period, the data will be deleted or anonymized, unless there is a legal obligation to retain it. If you withdraw your consent (if the processing is based on consent), we will cease processing your personal data, provided that there are no other legal grounds that justify the continued processing of such data.

Usage details and IP addresses

During your visit to the site, we may collect statistical information about the equipment, actions, and browsing patterns of users. This information is obtained from your visit and navigation on the site and may include:

• Traffic and communication data, such as logs and other communication data.
• Information about the resources you access on our website.
• Details about your computer and internet connection, including IP address, operating system, and browser type, for system administration and security purposes.

Cookies

We use cookies to collect information about your general internet usage. A cookie is a small file stored on your computer's hard drive. The use of cookies helps us improve our website and provide a better and more personalized service. Cookies allow us to:

• Estimate the size of the audience and usage patterns.
• Store information about your preferences, allowing us to customize the site according to your individual interests.
• Recognize you when you return to our website.

To comply with GDPR, we will ask for your consent before placing non-essential cookies on your device. You can manage and disable cookies through your browser settings, but this may affect the functionality of our website.

Disclosure and Transfer of Your Information

In carrying out our activities, our company may disclose your personal information to third parties only in the following situations:

• To comply with a final court decision or legal obligation.
• In the context of an information exchange for the protection against fraud and to defend our rights or property.
• To the contractual partners of Vetro Design SRL, such as the companies we have partnership relationships with, but only based on a confidentiality commitment from them, which guarantees that the data is kept secure and that the provision of this personal information is done in accordance with applicable legislation.

In exceptional cases, we may transfer your personal data to countries that are part of the European Economic Area (EEA) or to countries that have been recognized by the European Commission as providing an adequate level of protection for personal data. This transfer will only be carried out if necessary for processing in accordance with the purposes described above and in compliance with the provisions of GDPR.

In the case of transfers to third countries that do not benefit from an adequacy decision, we will implement additional measures to ensure the protection of your personal data, in accordance with Art. 46 GDPR.

The rights you  have regarding the processing of your personal data are as follows:

1. Right of access (Art. 15 GDPR): You have the right to obtain confirmation from us as to whether or not we process your personal data and, if so, access to those data and information about how the data is processed. This information will be provided to you in writing or by other means, including electronically, upon request. The access request can be made free of charge once a year, and you will receive a response without undue delay, but no later than one month from the receipt of the request. This period may be extended by two months, taking into account the complexity and number of requests, and you will be informed of any extension within one month of receiving the request.

2. Right to rectification (Art. 16 GDPR): You have the right to request the correction, without undue delay, of inaccurate personal data. Additionally, you have the right to complete incomplete data. Any rectification will be communicated to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

3. Right to erasure ("right to be forgotten") (Art. 17 GDPR): You have the right to request the deletion of your personal data without undue delay in the following cases:

o The data are no longer necessary for the purposes for which they were collected or processed.

o You withdraw your consent and there is no other legal ground for processing.

o You object to the processing and there are no overriding legitimate grounds.

o The data have been unlawfully processed.

o The data must be erased to comply with a legal obligation.

4. Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing in the following situations:

o You contest the accuracy of the data, for a period that allows us to verify their accuracy.

o The processing is unlawful, and you oppose the deletion of the data, requesting instead the restriction of their use.

o We no longer need the personal data for processing, but you require them for the establishment, exercise, or defense of a legal claim.

o You object to the processing, for the duration of time it takes to verify whether the legitimate rights of the operator override those of the data subject.

5. Right to data portability (Art. 20 GDPR): You have the right to receive personal data in a structured, commonly used, and machine-readable format, and you have the right to request that these data be transmitted directly to another operator, where technically feasible.

6. Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation, without affecting the legal obligations of the operator.

7. Right to withdraw consent (Art. 7 GDPR): Regarding marketing communications, you can withdraw your consent at any time by accessing the "Unsubscribe" link at the bottom of each email message received from us.

8. Right not to be subject to automated individual decision-making (Art. 22 GDPR): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where this decision is necessary for the entering into or performance of a contract between you and us, is authorized by law, or is based on your explicit consent.

9. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state where you have your habitual residence, place of work, or the place of the alleged infringement.

To exercise these rights, you can submit a written, signed and dated request to our address or to the email address indicated in our privacy policy. You will receive a response within no more than one month from the receipt of the request, a period that may be extended by two months, taking into account the complexity and number of requests.

Complaint or notification regarding the violation of rights

To exercise your rights regarding the protection of personal data, according to Art. 12-22 of the GDPR, you can submit a written, signed and dated request to the address:

Street Soldat Constantin Drăgan, no. 20, sector 3, Bucharest or to the e-mail address: gdpr@vetro.ro

If you have any concerns regarding a potential violation of your rights related to the  privacy of your personal data, you may submit a complaint to us. We will consider any requests or complaints we receive and will provide you  with a response, in compliance with legal provisions, according to Art. 12 para. (3) of the GDPR.

Requests to exercise your rights (such as access, rectification, objection, restriction of processing, data portability, and erasure of data) can be submitted in writing, signed, and dated.

Submission address: Strada Soldat Constantin Drăgan no. 20, sector 3, Bucharest. Email address for submission: gdpr@vetro.ro.

All requests or complaints received will be considered and a response will be provided within a reasonable time frame, complying with legal provisions. The response to requests will be given without undue delay, at most one month from the receipt of the request. This period may be extended by two months if necessary, taking into account the complexity and number of requests. The requesting person will be informed about the extension within one month from the receipt of the request.

If you are not satisfied with our response or believe that the processing of data is being done in violation of applicable law, you have the right to lodge a complaint with the data protection authority in Romania, in accordance with Art. 77 of GDPR:

The National Authority for the Supervision of Personal Data Processing (ANSPDCP)

Address: Bulevardul General Gheorghe Magheru 28-30, Bucharest 010336, Romania

Website: www.dataprotection.ro

Telephone: +40.318.059.211

Email: anspdcp@dataprotection.ro

Additions to our Privacy Policy

Our policy is to publish any changes made to this section, in accordance with Art. 13 para. (3) and Art. 14 para. (4) of GDPR, as required by law or necessary in the current context.

If the changes are substantial and affect the purposes for which we process your personal data, we will seek your explicit consent for these changes, in accordance with Art. 7 of GDPR, before applying them.

We will inform you clearly and explicitly about the nature of these changes and your rights in this context.

Confidentiality and security of personal data in the seller-buyer relationship

Processing of personal data:

The seller processes the personal data of Users/Buyers to inform them via email about the orders placed, for advertising, marketing, and publicity purposes, and for electronic communication services, in accordance with GDPR (Art. 6 para. 1 letters a, b, and f). We are committed to managing the personal data you provide to us in a secure manner.

Confidentiality of information:

The Buyer shall not make any public statement, promotion, or disclosure to third parties regarding the Order/Contract without the prior written consent of the Seller.

Use of transmitted information:

By transmitting information through this site, you grant the Seller the right to use, display, modify, transmit, and distribute this information, in accordance with Art. 6 para. 1 letters a and f of GDPR. You also agree that the Seller may use this information, ideas, concepts, or techniques sent through the site for its own purposes, within legal limits.

Notifications and Partnerships:

The Seller may notify users about current offers through online newsletters and may send discount vouchers or other special messages, based on your consent (Art. 6 para. 1 letter a GDPR). Additionally, the company may provide your personal data to other companies with which it has partnership relationships (e.g., marketing service providers or other services) based on a contract that guarantees these informations are kept secure and that their provision is made in accordance with applicable legislation (Art. 28 GDPR).

Providing data to authorities:

Your personal information may be provided to the Prosecutor's Office, Police, Courts, and other authorized state bodies, based on and within the limits of legal provisions and as a result of expressly formulated requests (Art. 6 para. 1 letter c GDPR).

Rights of the data subjects:

In accordance with GDPR, you have the following rights:

1. Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether your personal data is being processed and, if so, access to it.
2. Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data or the completion of incomplete ones.
3. Right to data deletion (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain conditions.
4. Right to restrict processing (Art. 18 GDPR): You have the right to request the restriction of data processing under certain conditions.
5. Right to data portability (Art. 20 GDPR): You have the right to receive personal data in a structured format and transfer it to another operator.
6. Right to object (Art. 21 GDPR): You have the right to object to the processing of personal data under certain conditions.
7. Right not to be subject to automated individual decision-making (Art. 22 GDPR): You have the right not to be subject to a decision based exclusively on automatic processing, including profiling, which produces legal effects concerning you or significantly affects you.

Technical and organizational measures implemented to protect processed data

The company has adopted a series of technical and organizational measures to ensure the protection of personal data processed by Vetro Design SRL, in accordance with security policies and internal regulations.

• Technical measures:

1. Management of IT Accounts;
2. Data Backup;
3. Information Protection and Security.

• Organizational measures

4. Responsibilities and Procedures;
5. Access Control;
6. Physical Protection of Equipment;
7. Policies and Instructions.

Modification of communication preferences:

The Buyer/User can modify their option regarding the consent given to the Seller for commercial communications containing general and thematic information, including information about offers or promotions, at any time by:

- Changing the settings in the Personal Account on the website.

- Accessing the unsubscribe link displayed in the commercial communications received from the Seller.

- Directly contacting the Seller.