Privacy policy
We make every effort to ensure that we protect and respect the confidentiality of your personal data by implementing the necessary measures provided for by the rules and regulations in force on data protection, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This chapter aims to inform you about the personal data that we collect from you or that you communicate to us through this website, as well as how we will process this data.
According to the rules and regulations in force on data protection (“GDPR”) – personal data is defined as any information relating to an identified or identifiable natural person. In principle, it represents personal data, which PFA GORDEA MIHAI ANCA DORINA also takes into account: the name and surname of the natural person, domicile, email address, CNP, telephone number, customer codes/attribute of the registered account, identification code, etc.
Your personal data that PFA GORDEA MIHAI ANCA DORINA collects and processes are: the person's name and surname, address (postal address for delivery), email address, CNP, telephone number, customer identification codes/online identifier, billing data (in case of completing an order), voice, banking information (in case of making a return/refund), social media account.
We do not collect or otherwise process sensitive data, as defined in the General Data Protection Regulation (abbreviated GDPR) in special categories of personal data. We also do not want to collect or process data of minors who have not reached the age of 16.
These data are collected/processed/etc. in the ongoing commercial relationship and for which you have validly expressed your consent according to the legislation in force at the time of collection and collection of personal data!
The company informs that the list in art. 1 and following is purely exemplary and that in relation to the service hired by the client, the undersigned collects only those minimum personal data necessary to fulfill the purposes/activities carried out by PFA GORDEA MIHAI ANCA DORINA.
In the process of operating this website, PFA GORDEA MIHAI ANCA DORINA collects certain information ("personal data") relating to identified individuals or who may identify individuals, data provided by users of this website, by voluntarily expressing consent, directly (e.g. name, surname, postal address, e-mail address, telephone number) or indirectly (e.g. IP address).
The purposes of processing personal data provided by a "Client", considered and pursued by the company PFA GORDEA MIHAI ANCA DORINA are the following:
processing orders and returns
companies within the same group of companies
maintaining the relationship with contractual partners for accounting purposes
optimizing marketing activity
resolving requests regarding the fulfillment of an order
marketing communications
account management within the Porumbacu Garden website
statistical purposes
The Company collects, processes and manages your personal data in accordance with the "GDPR" rules and regulations for the following periods of time: (i) in accordance with the provisions of the civil code regarding the legal institution of prescription as well as the contractual conditions assumed by accepting the terms & conditions, the collected personal data are archived/stored by the Company for a period of 3 years from the termination of the contract (for the situation of deliveries and non-intervention of return requests); (ii) the personal data collected are archived/retained by the Company for a period of 3 years and/or the Client has expressed from the date of the last return related to the account.
It is also good to know that we may process personal data to inform you about products and services, promotional offers or for newsletter subscription. As a general rule, these personal data will be processed for direct marketing purposes only with your consent and by using the communication channels (email, sms, etc.) that you indicated when providing consent. In these circumstances, it is important to know that we will use your expressed consent for marketing purposes until its withdrawal, with the possibility of withdrawing this type of consent at any time.
The client, by transmitting personal data, declares and unconditionally accepts that his personal data will be part of, and be archived in the owner's database, thus expressing an express and unequivocal agreement that his personal data will be stored, used and processed according to the purposes specified.
3.
We inform you that processing represents: any operation/set of operations on these data (with or without the use of automated means), namely the collection, recording, organization, structuring, storage, adaptation, modification, extraction, consultation, use, dissemination, making available, alignment, combination, restriction, deletion, destruction, etc. (these operations are indicated by way of example in the Regulation, the notion of processing representing any kind of operation in relation to personal data).
The company PFA GORDEA MIHAI ANCA DORINA is a personal data controller according to the rules and regulations in force, including GDPR.
The company will inform you that in relation to the activity/service chosen by the client, respectively the purpose of collecting personal data, PFA GORDEA MIHAI ANCA DORINA may transmit your data to group companies, third parties or authorities for the fulfillment of the purposes based on the grounds of the processing activities. According to the GDPR Regulation, we inform you that we may transmit or provide access to certain personal data concerning you to the following categories of recipients:
commercial partners for the provision of ordered products/services;
courier service providers;
payment/banking service providers;
accounting service providers, for keeping accounting records through external proxy;
other companies with which we can develop joint programs for offering our goods and services on the market;
public authorities;
We assure you that we will take all due care that the proxy and/or third party contractor offers sufficient guarantees to implement appropriate technical and organizational measures, so that the procedures meet the requirements of legal norms and regulations, including GDPR and ensure the protection of the rights of the data subject (the individual client).
The basis for which we process this personal data and manage this collected data may be, in relation to the purpose of data processing, your consent, granted upon the creation of the online account and its validation, by requesting to become a client in the Cabana Luminis community. At the same time, the basis is also a legal and/or contractual one, based on the contract/commercial relationship that arose between you, the client, and the company/companies PFA GORDEA MIHAI ANCA DORINA, by placing the order and making payments for the ordered products, by making returns of non-compliant and/or refused products, etc., but also a legitimate basis necessary and indispensable for the conduct of the commercial and economic activities of the company PFA GORDEA MIHAI ANCA DORINA as provided for by the Regulation. We will process your personal data to improve and take protective measures, whenever necessary, to protect the use of the website www.cabanaluminis.com against cyber attacks, measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities, measures to manage various other risks.
We also want you to be fully informed and understand that you are familiar with the Principles established by EU Regulation 679/2016 and the User's Rights regarding personal data.
The European Regulation on the protection of personal data regulates a number of 6 principles to be respected by the operator (the company PFA GORDEA MIHAI ANCA DORINA) when processing personal data:
the principle of legality, fairness (correctness) and transparency. According to this principle, the company must ensure (1) that data processing must be carried out only in accordance with the legal provisions, any other processing will be considered unlawful, (2) that it processes data only in the ways that the person concerned would reasonably expect and (3) that the processing must be transparent, meaning that the operator must clearly and openly communicate to the subjects how he intends to use the personal data;
the principle of limitation of the purpose for which the data is collected. Our company complies with this principle by committing itself to collect/process personal data only for the purpose determined and transmitted to the person;
the principle of minimization of the processed data. Our company complies with this principle by collecting/processing only the minimum data necessary to carry out the operations, adopting rules to ensure that it will not collect unnecessary data in relation to the commercial operation.
the principle of accuracy, current data. Our company will collect/process from its customers only accurate and current data.
the principle of keeping data for a period necessary to fulfill the purposes for which they are processed. Our company complies with the principle regulated by the European regulation by archiving/keeping your data only for the period of time necessary for us cessation of the fulfillment of the purposes.
the principle of integrity and confidentiality. Our company has implemented all security measures and has established at the level of its own departments norms that are intended to ensure security against unauthorized and unlawful processing and against accidental data loss, destruction or damage.
The European Regulation has stated that individuals (PFA GORDEA MIHAI ANCA DORINA clients) benefit from 8 (eight) rights as follows:
the right to information (art. 13, art. 14). Please note that in the introductory part of the document "terms and conditions" as well as in this chapter, information is presented about: the identity and contact details of the operator and its representative; contact details of the data protection officer; the purpose of the processing and the legal basis; recipients or categories of recipients; information about the transfer of data to a third country; adequate guarantees; storage period; its rights; the right to file a complaint; possible consequences of providing data; the existence of an automated decision-making process.
right to access (art. 15). The right to access of individuals is respected by the Company and concerns the following: confirmation of data processing; access to processed data; provision of a copy of personal data, which are the subject of processing; obtaining additional information (for a reasonable fee); remote access through a system that allows the data subject to view the data; verification of the identity of the person requesting information.
right to rectification (art. 16, art. 19). The right to access of individuals is respected by the Company and concerns: rectification of indexed data; completion of data;
right to erasure (art. 17, art. 19). The Company respects the right to erasure exercised by individuals only under the conditions in which this right is exercised in a motivated/founded manner
right to restriction (art. 18, art. 19). The Regulation grants this right to individuals, which can be exercised as follows:
cases: contesting the accuracy of data; unlawful processing; data is no longer necessary;
the operator can only store the data;
any processing of restricted data requires the consent of the data subject;
the operator communicates to all recipients the rectification, deletion or restriction of data.
the right to portability (art. 20). According to the provisions of the Regulation, the Company respects the right of individuals to request the portability of their data, in a simple, easy-to-read format and to transmit them to another operator chosen by the person exercising their right.
the right to opposition (to cease processing activity – art. 21) can be exercised only for the following purposes: direct marketing; research, scientific, historical, statistical; performance of a task in the public interest, exercise of public authority; legitimate interests of the operator or a third party.
the right not to be evaluated by automatic profiling (art 22), implies:
(I) the unlawful nature of the creation of profiles regardless of the purpose: assessing the capacity and quality of the employees' work; granting scoring - credits;2. exception: the existence of the person's consent.
It is good to know that you can also contact the Data Protection Officer at Porumbacu Garden:
by e-mail at: cabanaluminis@gmail.com
by phone: 0774589710
We assure you that we will make the necessary efforts to promptly respond to your requests and to provide you with the details you need!
We also inform you that you have the right to file a complaint with the supervisory authority regarding the processing of your personal data. in Romania, the contact details of the data protection supervisory authority are as follows:
To exercise the rights provided above, as a client of the company PFA GORDEA MIHAI ANCA DORINA you have the right to address a written request, dated and sent to the address Jud. BraÅŸov, Sat Cristian, Comuna Cristian, Strada
GRIVIÅ¢EI, No. 8, through which you can fairly and lawfully exercise your guaranteed right of intervention, regarding: (I) the rectification, updating, blocking or deletion of data whose processing does not comply with the provisions of EU Regulation 679/2016, which can be exercised for all the actions mentioned above, especially when the data is incomplete or inaccurate;
(II) anonymization of personal data, (III) notification to third parties to whom the data were presented/disclosed, provided that this notification does not involve a disproportionate effort compared to the legitimate interest that could be harmed, respectively for (IV) cessation of processing of his personal data to the extent that this is possible according to the purpose of the processing. As Operator, we inform you that we will cease immediately processing of personal data if the purpose for which we collected it has ceased.