Privacy policy
We consider data confidentiality as an essential component in business.
Our data protection policy and practices focus on the appropriate and legal processing, exchange and storage of personal information and also on ensuring transparency, confidentiality, integrity and availability.
In accordance with the General Data Protection Regulation ("GDPR"), (Regulation (EU) 2016/679) and according to the requirements of Law no. 677/2001 for the protection of individuals regarding the processing of personal data and the free circulation of such data, amended and supplemented by Law no. 506/2004 regarding the processing of personal data and the protection of private life in the electronic communications sector, we have the obligation to administer in safe conditions and only for the specified purposes, the personal data that you provide us about yourself, a member of your family or a another person.
Personal data
Personal data means any information that can be linked to an identified or identifiable natural person (subject person). Personal data includes all types of direct or indirect information (i.e. used in connection with other data) that refer to the subject, such as name, date of birth, addresses, e-mail addresses, telephone numbers, etc.
Categories of personal data processed
Kirana Pasal processes the following categories of data:- Contact details - Name and surname, billing address, delivery addresses, telephone numbers, email addresses
- Technical data - IP address, operating system, browser type and version, type of device from which you access the kiranapasal.ro website
- Bank account numbers
- Online identifiers that can be used by third parties to identify the person
Kirana Pasal does not process special categories of personal data ("sensitive data").
Transfer of data to third parties
Some of the personal data may be transmitted to:- FAN COURIER (SC Fan Courier Express SRL): Name and surname, address, telephone numbers, for the purpose of delivery
- NETOPIA (NETOPIA SRL): Name and surname, address, transaction identifier, for the purpose of payment by card
- PatriaBank: Name and surname, bank account, invoice number, for the purpose of refunding the amount in the account
- MAILCHIMP (The Rocket Science Group, LLC): Name and surname, email address - for the purpose of managing subscriptions to the newsletter and sending it by email
- GMAIL (Google, Inc.): First and last name, email address, for the purpose of email communication
- GOOGLE (Google, Inc.): online identifiers, website browsing history - for marketing purposes
- FACEBOOK (Facebook, Inc.): online identifiers, site browsing history - for marketing purposes
- authorities, public institutions, other parties: on the basis of necessity, insofar as it is a legal obligation
- accountants, lawyers, auditors, external consultants: on an as-needed basis, respecting confidentiality
WE ONLY COLLECT THE DATA OF PERSONS OVER 16 YEARS OLD!
Users of our platform, who wish to benefit from our services and provide us with information, may be asked to provide personal data so that kiranapasal.ro can process orders and improve services and business.
We collect, first of all, personal data such as: name and surname, date of birth, home address/residence (for order delivery), e-mail addresses, telephone numbers and in the case of order returns and bank account (to make the money transfer).
The purpose of collecting personal data and the legal basis of their processing
The purpose of data collection is to be able to provide you with our services, to provide you with support regarding your orders, to inform you of changes in our services and any new services that we or our partners offer.
Therefore, the collection of your personal data has its legal basis in both legislation, both that applicable at the national level (domestic law) and that applicable in European law and provides that "the processing is necessary for the execution of a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract" (art. 6 of the GDPR).
You are not obliged to provide the data, but they are necessary for the completion and delivery of an order. In this sense, your consent regarding the collection of data by us must be explicit and free, unconditional and expressed in a clear and simple language.
We also collect personal data for other purposes, such as: informing you about the latest promotions, exclusive discounts for subscribers and the last added products, our campaigns and information about the latest trends in clothing (direct marketing), as well as to optimize orders and deliveries, to promote new product categories and to grant facilities/discounts, based on statistics and order history.
We will process personal data only for the specified, explicit and legitimate purposes or, in exceptional cases, for other purposes required by Romanian law or the authorities.
Your rights
According to the General Data Protection Regulation ("GDPR"), you benefit from the right of access, intervention on the data, the right to be informed, the right not to be subject to an individual decision, the right to request the porting of your data, as well as the right to address you to justice. At the same time, you have the right to object to the processing of personal data or to restrict the processing of data concerning you and to request the deletion of the data, in order to be forgotten.
The rights of data subjects
According to the law, data subjects (you or another person whose data you provide) have the following rights:- The right to be informed . The data subject has the right to receive detailed information on the data processing activities carried out by KIRANA PASAL, such as this document. Upon request, we may provide additional information.
- The right of access to data . Any person has the right to request confirmation of whether or not their data is being processed and, if so, access to that data and any other information regarding it.
- The right to rectification . The data subject has the right to obtain from Kirana Pasal, without undue delay, the rectification of inaccurate personal data concerning him and the completion of those data that are incomplete.
- The right to data portability . The data subject has the right to receive the personal data concerning him/her that he/she has provided to us in a structured format and to transmit this data to another operator. The data subject has the right to have this data transmitted directly to another operator, if this is technically feasible.
- Right to Withdraw Consent . The data subject has the right to withdraw his consent at any time regarding the processing of personal data, if the processing is based on consent. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent before its withdrawal.
- The right not to be subject to an automated decision . The data subject has the right to object to a decision based solely on automatic processing, including profiling, which affects him to a significant extent. In this case Kirana Pasal will re-evaluate this decision through a human operator, giving you the opportunity to express your point of view and appeal the decision.
- The right to data deletion ("the right to be forgotten") . The data subject has the right to obtain the deletion of personal data concerning him, without undue delay, in the situations provided for by law (for example when the data are no longer necessary for the purpose for which they were processed, upon withdrawal of consent or opposition to the processing , or if it is found that the processing was not legal).
- The right to opposition . The data subject has the right to object to the processing of personal data concerning him, including the creation of profiles, when the processing is based on the existence of a legitimate interest of Kirana Pasal. When the processing of personal data is for direct marketing purposes, the data subject has the right to object at any time to the processing for this purpose.
- The right to address the Supervisory Authority . If you believe that your rights related to the protection of personal data have been violated, you have the right to file a complaint with the National Supervisory Authority for the Processing of Personal Data
- The right to address the Justice . To the extent you consider necessary, you have the right to approach the competent courts.
To exercise your rights mentioned above and for any additional information on how personal data is processed, please contact us at the email address kiranapasal.ro@gmail.com
You have the right to request at any time access to the rectification, deletion or restriction of the processing of the data collected by us. To help us keep your personal data up-to-date, we recommend that you inform us of any changes or discrepancies. To view or modify personal data, you can access your customer account.
To exercise these rights, you can send a written request, dated and signed, by email to the address: kiranapasal.ro@gmail.com or by post to the address Strada Stefan cel Mare 46, Bucharest.
Use of personal data, access, rectification or deletion of data and storage period
We will use personal data only for the purpose for which it was collected and we will store the data only as long as necessary for that purpose.
Access to personal data is authorized only for operator and courier staff (to be able to deliver orders), and they have the necessary authorization and a clearly defined need to use the data.
We will keep the customer's information for the period in which his account is active, to provide him with services, to comply with our legal obligations or for any of the purposes mentioned above.
In the conditions in which the deletion of the customer account is requested, an unmotivated request is addressed to the operator, by email address: kiranapasal.ro@gmail.com or by post to the address Strada stefan cel Mare 46, Bucharest, and the account closure and data deletion will perform within a maximum of 3 days from the date of the request.
Disclosure of personal data
Personal data will not be disclosed to third parties, with the exception of situations where disclosure is necessary to be able to offer our services. Service providers will be allowed to obtain only the personal data necessary to deliver their services.
Security of processing
We will process data securely, apply and maintain appropriate technical measures to protect personal data against accidental or unlawful destruction or loss, alteration, disclosure or unauthorized access, in particular when processing involves the transmission of data over a network, as well as against any other form of illegal processing.
Responsibility
The Boemurban.ro team is responsible and will be able to demonstrate at any time compliance with the GDPR, as well as with the principles established in this document and, where necessary, will make the information available to the supervisory authorities.
Claims
You have the right to request information from us and to address any complaints related to the processing of your personal data. All questions and complaints will be processed by us, in a timely manner and in accordance with internal procedures, and within a maximum of one month, you will receive an answer.According to art. 12 paragraph 5 of the GDPR: "If the requests from a data subject are clearly unfounded or excessive, especially due to their repetitive nature, the operator can:
- a) either charge a reasonable fee taking into account the administrative costs for providing the information or communication or for taking the requested measures;
- b) or refuse to comply with the request."
In the unlikely event that customers have suffered damages due to the violation of rights, according to the personal data protection policy and the Boemurban.ro Team did not handle the complaint appropriately, customers have the opportunity to send a complaint to the higher authority. At the same time, the operator has the obligation to notify the supervisory authority, within a maximum of 72 hours, from the moment of the personal data security breach.
The provision of information or complaints can be sent by email to the address: kiranapasal.ro@gmail.com or by post to the address Strada Stefan cel Mare 46, Bucharest.