INTRODUCTION

Ensuring the right to effective protection of personal data is a fundamental commitment we make to our customers. We make every effort to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as with the legislation applicable on the territory of Romania.

We reserve the right to periodically update and amend this Personal Data Processing Policy (hereinafter, the GDPR Policy), to reflect any changes in the way we process your personal data or any changes in the legal requirements in this area. In the event of any such changes, we will display the updated version of the GDPR Policy on our website.

 

ABOUT US

E-fishent SRL, a Romanian legal entity, acting as a personal data controller, with its registered office at Stefanestii de Jos, Linia de Centura 5, CTPark Bucharest North, Ilfov, 077175, registered at the Trade Register under no. J23/4049/2018, having TIN (CUI) RO39795280, processes your personal data as necessary in connection with your activity on the Website.

Since we are always open to hearing your opinions, as well as providing you with any additional information you may need regarding the processing of your data, you can contact us using the following contact details:

Address: Linia de Centura 5, CTPark Bucharest North, Stefanestii de Jos, Ilfov, 077175

Phone: 0374 496 500

Email: contact@micul-fermier.ro

 

CATEGORIES OF PERSONAL DATA WE PROCESS

The personal data we process is collected directly from you, in connection with the activity carried out on our Website, as defined below:

Identification data: name, surname, date of birth, billing address, delivery address, email address, telephone number.

Specific personal data: bank account, payment method, data regarding transactions related to the products/services purchased, and similar.

Personal data is collected directly from you, so that you have control at all times over the type of information you wish to provide us. By way of example, we receive information from you by filling in registration/order/account creation forms, by providing the billing address for the purpose of issuing the fiscal invoice, etc.

We may also collect and process certain information regarding your online behavior when visiting our website, in order to personalize your online experience and provide you with offers tailored to your profile.

We invite you to find out more details in this regard by consulting the section on the purposes of processing below.

On our website, we may store and collect information in cookies and similar technologies, in accordance with the Cookie Policy.

We do not collect or process sensitive data, as defined in the General Data Protection Regulation (such as data relating to the health of customers). Furthermore, we do not collect or process personal data of minors under the age of 16.

We also offer you the possibility to register on the Website through your Facebook or Google account.

If you opt for one of these options, you will be redirected to a page managed by Facebook Inc / Google LLC, where you will be informed about the transfer of your data to the Website. You can consult the Facebook and Google privacy policies using the following links:

https://www.facebook.com/about/privacy

https://policies.google.com/privacy

 

LEGAL BASIS FOR PROCESSING

The legal basis for the processing of personal data is represented by Art. 6(1)(b) of the Regulation, namely that processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract; Art. 6(1)(f) of the Regulation, according to which processing is necessary for the purposes of the legitimate interests pursued by the Controller; as well as Art. 6(1)(a) of the Regulation, specifically the express, voluntary, and freely given consent of the user. Additionally, certain processing activities are required by applicable legislation, including fiscal and accounting legislation.

 

PURPOSES OF PROCESSING

Your personal data will be processed for the purpose of purchasing products from the website.

This general purpose may include, as applicable, the following:

  • Creating and managing the account within our platform;
  • Processing orders, including validation and shipping of products to you;
  • Resolving any issues related to an order, with reference to the services and products purchased;
  • Providing warranty services, support services, including answering your questions regarding orders placed on the website.
  • Accessing the unsubscribe link displayed in the messages you receive from us;
  • Contacting us at the email address: contact@micul-fermier.ro
  • Measures to protect the website and our platform users against potential cyberattacks;
  • Measures to prevent and detect fraud attempts, including the transmission of certain information to the competent public authorities;
  • Measures to manage other types of risks.
  • Courier service providers;
  • Payment/banking service providers;
  • Marketing service providers;
  • Market research service providers;
  • IT service providers;
  • Insurance companies;
  • Public authorities and courts of law, where we have a legal obligation or where it is necessary to defend a legitimate interest, depending on the context;
  • Other companies with which we may develop joint programs for offering our goods and services on the market.

 

To Improve Our Services

We constantly work to improve our platform so that it becomes a useful tool in the hands of our customers. For this purpose, we may collect and use certain information regarding your behavior on the site, we may invite you to complete questionnaires, or we may conduct, directly or with the help of partners, market studies and research.

 

For Marketing

If you give your express consent, we may send you any type of message (such as: email/SMS/mobile push/web push, etc.), containing general and thematic information, information about other products that may interest you, information about offers or promotions, as well as other commercial communications such as market research and opinion polls. We may also display personalized recommendations for you on our website.

In certain circumstances, we may base our marketing activities on our legitimate interest to promote and develop our business. In any situation where we use information about you for a legitimate interest of ours, we take care and all necessary measures to ensure that your fundamental rights and freedoms are not affected.

Nevertheless, you may request at any time that we stop processing your personal data for marketing purposes, and we will comply with your request as soon as possible.

Withdrawal of consent can be done by:

 

To Protect Our Legitimate Interests

There may be situations where we will use or transmit the collected information to protect our rights and business activity. These may include, but are not limited to:

 

PERSONAL DATA RETENTION PERIOD

As a general rule, we will store your personal data for as long as you have an account on our platform, for as long as we maintain contractual relations, and for as long as necessary for the fulfillment of rights and obligations arising from the contractual relationship (grace periods, warranty periods, exercise of legal actions, etc.).

You may request at any time the deletion of certain information or the closure of your account, and we will comply with such requests, subject to the retention of certain information even after account closure, to the extent required by applicable legislation or our legitimate interests.

We review the data we collect at least once a year, analyzing the extent to which their retention is absolutely necessary for the mentioned purposes, your legitimate interests, or the fulfillment of legal obligations incumbent upon us.

 

TRANSFER OF PERSONAL DATA

We may transmit or grant access to certain personal data that you have provided to us to the following categories of recipients:

Currently, we store and process your personal data on the territory of Romania.

 

YOUR RIGHTS AS A DATA SUBJECT

The General Data Protection Regulation recognizes a number of rights in relation to your personal data.

These are as follows:

 

Right to information – you may request information regarding the processing activities of your personal data, the identity of the controller and its representative, or regarding the recipients of your data.

Right to rectification – you may rectify inaccurate personal data or complete it.

Right to erasure (right to be forgotten) – you may obtain the erasure of data, without undue delay, where the processing was not lawful or in other cases provided by law.

Right to restriction of processing – you may request the restriction of processing where you contest the accuracy of the data, as well as in other cases provided by law.

Right to object – you may object, in particular, to data processing based on the legitimate interest of the Controller.

Right to data portability – you may receive the personal data you have provided to us in a machine-readable format, or you may request that such data be transmitted to another controller.

Right to lodge a complaint and to address the courts – you may lodge a complaint regarding the manner in which personal data is processed with the National Supervisory Authority for Personal Data Processing and/or you may address the courts to enforce your rights.

Right to withdraw consent – in cases where processing is based on your consent, you may withdraw it at any time. The withdrawal of consent shall only have effect for the future; processing carried out prior to the withdrawal shall remain valid.

Right not to be subject to automated decisions or additional profiling related to automated decisions – you may request and obtain human intervention regarding such processing, or you may express your own point of view regarding this type of processing.

Right to address the National Supervisory Authority for Personal Data Processing – your right to lodge a complaint with the supervisory authority located at B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania, phone: +40.318.059.211 or +40.318.059.212, email: anspdcp@dataprotection.ro – in accordance with Art. 77 of the GDPR.

 

Without prejudice to your right to contact the Supervisory Authority (ANSPDCP) at any time, we kindly ask you to contact us first, and we assure you that we will make every effort to resolve any issue amicably.

You may contact our company at any time regarding the processing and protection of data by submitting your request through any of the following means:

Address: Linia de Centura 5, CTPark Bucharest North, Stefanestii de Jos, Ilfov, 077175

Phone: 0374 496 500

Email: contact@micul-fermier.ro

 

To exercise any of these rights, you may contact us using the contact details set out above.

 

Please note the following:

We take the confidentiality of all records containing personal data seriously. For this reason, we kindly ask you to send us your requests using the email address associated with your user account. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.

We will not charge a fee for exercising any right regarding your personal data. We will respond to any request from you within a maximum of one month from receipt of the request.

We may extend this period by two months where necessary, taking into account the complexity and number of requests. If we extend the deadline, we will inform you of any such extension within one month of receipt of the request, stating the reasons for the delay.

 

HOW WE PROTECT THE SECURITY OF YOUR PERSONAL DATA

We ensure the security of personal data by implementing various physical, electronic, and administrative procedures to protect the information we collect. The transmission of your personal data is carried out using state-of-the-art encryption algorithms, with data stored on secure servers.

Access to personal data is granted only to authorized personnel or authorized collaborators, and only for the performance of specific tasks to fulfill the mentioned purposes, under the obligation to maintain their confidentiality.

For making payments, we use the services of the payment processor MobilPay. For more details regarding MobilPay’s policies, please visit https://netopia-payments.com/politica-de-confidentialitate/ or https://netopia-payments.com/termeni-si-conditii-generale/

In the event of a personal data security breach, we have the legal obligation to comply with the specific regulations in this area, namely to notify both you and the National Supervisory Authority for Personal Data Processing of the security breach within 72 hours of its occurrence.

Through this notice and our ongoing efforts, we align with the provisions of the GDPR and once again assure you of our positive intentions.

Products to compare (/5)