Privacy and security policy on processing personal data

OSSVET CONSULT S.R.L.

    Our goal is to ensure the confidentiality and protection of all the personal data we are processing.

    I. PERSONAL DATA

    The definition as stated in the 679/2016 European Regulation (General Data Protection Regulation): personal data will include any piece of information referring to a person that has been identified or can be identifiable. Basically, all data that can lead to the identification of a certain individual (name, surname, home address, phone number, e-mail address, the social identification number, driver’s license etc).

    II. WHAT IS THE DATA WE COLLECT AND HOW?

    The data our users forward to our company either physically, by phone, by mail or delivery service.

    DATA COLLECTED AUTOMATICALLY

    We do not collect or store trafficking data (e.g. IP addresses)

    We use cookies, in order to improve the user’s website experience and in order to measure our website’s efficiency and functionality.

    We store the content and the information offered by our clients when our services are used, including when an individual account is created on our website.

    We collect information about how our services are used, as well as the contact information provided by our users.

    If our website is used for purchases, we collect the information regarding the acquisition in particular (type of payment-cash, to the delivery service company when the package is delivered-as well as additional information about the user’s account, and the data regarding billing information, delivery address and contact information). The data is processed by OSSVET CONSULT S.R.L. and will not be shared with third parties (except for the Urgent Cargus Delivery service, which is, by contract the delivery company OSSVET works with). Our users’ personal information (name, surname, address, email address, phone number, home/delivery address) are necessary for order administration and for processing it in the best of conditions, which includes our means of communication, billing and delivery. The data cannot be sold to or shared with any third-party company or individual. We do not collect any other personal information other than the ones that are strictly necessary for meeting the purpose of honoring online orders or providing the consultancy services OSSVET CONSULT SRL offers. Any other data that could be additionally required by the delivery company or other third parties we work with, is not required by OSSVET CONSULT SRL, that is why, the responsibility of processing that data pertains strictly to the delivery company and / or third-party providers. OSSVET CONSULT SRL ensures and respects as accurately as possible the principle of minimizing personal data collection.

    After filling out the registration form, the user will be given a username and password assigned to an account, in order to use the service and gain access to order history. The user is solely responsible for maintaining the confidentiality over the username and password. Moreover, the user is solely responsible for all activity and information that has been transmitted to him through the assigned account. However, orders can be placed and honored on the website, without needing to register and account.

    Product delivery will be handled by the above-mentioned delivery company, in 24 to 48 hours. Any responsibility with respect to the products that stand to be delivered, after your order has been picked up from our end by the delivery company, belongs to the latter (Urgent Cargus). We need your approval for handling and processing your order, and that is why, after the order has been placed, you will receive an email/phone call from us, in order to confirm the details. Furthermore, we will start the process of tracking and handling your request in order to honor your order as soon as possible. However, sometimes, some inconveniences might appear(for example, the product/products might be out of the stock, which would mean the delivery can be extended from 1 to 15 business days). In this case, you will be contacted by phone or email so that you can confirm the fact that you accept the order, according to the new, above mentioned terms. We will constantly keep you updated on the status of your order, which would also require keeping in touch via email or phone, so that we can let you know exactly, at any time, the processing status of your order.

    The fee for handling and transportation of the package are calculated based on the amount of the order and delivery location. As soon as the package has arrived at its destination, it needs to be verified in order to establish its integrity. OSSVET CONSULT SRL ensures sending products in their original shape and form. In case you notice anything different while opening the package, you would need to contact us. We do not take responsibility for the products that have manufacturing defects, and we also reserve our right to refuse delivery to clients that have returned a package for more than two times, without conclusive and justified motivation.

We do not take responsibility for:

- the delays in delivery time, on the account of the delivery company;

- excessive collection and processing of personal information handled by the delivery company or third party providers (we strictly collect the following: name, surname, email address, phone number, delivery address);

- handling or impairment of the package after it left our headquarters and until it gets to the delivery address;

- manufacturing defects of the products;

- erroneous information on the delivery address of the client that placed the order. We cannot guarantee that the order will arrive at its correct destination unless you contact us and provide correct data;

- website functionality issues, as a consequence of technical matters (a notification message will be displayed on the website in that regard).

    III. HOW AND WHY WE PROCESS DATA

    Processing personal information:using automated or non-technical means, as well as storing personal information on any kind of platform (either electronical or physical).

    OSSVET CONSULT S.R.L. PROCESSES PERSONAL INFORMATION FOR THE FOLLOWING PURPOSES:

    - Offering products and services solicited by the client

    - Confirming the order of the products and services requested, as well as offering additional information in that regard.

    - For billing, contracts and offers.

    - In legal basis.

    - Informing clients about special offers, our products and services we provide to our clients.

    - Rendering the services requested by our users.

    - Communication with our clients.

    - Sending out marketing campaigns (to all users) so long as you do not refuse.

    - Evaluating the performance of our services.

    IV. HOW DO WE PROTECT YOUR INFORMATION?

    As far as data security is concerned, OSSVET CONSULT S.R.L. has been continuously and constantly taking the adequate measures, both technical and organizational in order to ensure that. Personal information is processed under safe conditions. OSSVET CONSULT SRL ensures the integrity, availability, confidentiality and authenticity of the personal information we collect. We use advanced means and security technologies and well-organized policies and work procedures, in order to protect personal information processing, according to the current legal provisions. OSSVET CONSULT SRL works on a contract based policy with the internet provider as well as the hosting service, which ensures they have taken all the necessary security measures such as: limiting the access (physically and electronically), as well as limiting the long-distance access, as it constantly undergoes security check-ups.

    OSSVET CONSULT SRL has implemented the necessary technical and organizational measures in order to ensure the strict processing of personal information, for the above-mentioned purposes only. Despite our efforts, we cannot, however, guarantee, the total security of this data during the processes of transmitting and storing it in our systems.  In case of a security breech, which would jeopardize the confidentiality of your personal information, you will be immediately informed (by phone, email, via website messaging etc).

  V. CLIENT RIGHTS: INFORMATION, ACCESS, RECTIFICATION, DELETION AND OBJECTION

    1) THE RIGHT TO STAY INFORMED AND HAVE CONSTANT ACCESS

    OSSVET CONSULT SRL is obliged to inform and allow access to the personal information processing status to the individuals in question, unless they have offered them voluntarily.

    2) THE RIGHT TO RECTIFICATION

    OSSVET CONSULT SRL is obliged to modify/correct/ complete personal information, as long as that is required by the client, and also to offer the users the possibility to update their information.

    3) THE RIGHT TO DATA PORTABILITY (should it be the case)

    OSSVET CONSULT SRL is obliged to offer their processed personal information to the users that request that, in a structured form. If necessary, OSSVET CONSULT SRL will take additional measures to verify the identity of  the individual who solicits the data.

    4) THE RIGHT TO DELETION

    OSSVET CONSULT S.R.L. is obliged to delete the personal information of the individuals who request that, unless there are legal provisions that require the company to withhold the information, or if there isn’t any legitimate interest to attest that right. After data deletion, there is a possibility that not all copies can be immediately deleted. They will, however, be removed as quickly as possible.

    5) THE RIGHT TO RESTRICT DATA PROCESSING

    OSSVET CONSULT SRL is obliged to stop personal data processing, should an individual require that, if there aren’t any legal provisions that prevent that from happening. This can cause difficulty for the client to benefit from the services we provide.

    6) THE RIGHT TO OPPOSE TO DATA PROCESSING

    OSSVET CONSULT SRL needs to stop any data processing, should an individual oppose to that. The only exception are legal provisions, or a legitimate interest that involves the company. Individuals have the right to oppose to data collection and processing at any time, and without any justification.

    7) THE RIGHT TO OPPOSE TO AN AUTOMATED DECISIONAL PROCESS

    An individual has the right to oppose to an automated decisional process of data collection, including profiling. He/She also has the right to obtain human intervention, to express their point of view and contest the decision, if an automated decisional process has already been created.

    8) THE RIGHT TO FILE A COMPLAINT OR  ADDRESS A COURT OF LAW

    Individuals whose personal information have been processed can address a court of law and also to the:

    - Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

    - Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1 poștal code 010336, București, România;

    - Site: www.dataprotection.ro

    You can contact us at any time, and we will keep you informed with respect to the personal information we process,their purpose and legal basis. You can also contact us at any time, as you have the right to have any of the information corrected.

    VI. HOW CAN YOU EXERT THESE RIGHTS

    These rights can be exerted by sending a request either by email or mail, to the addresses listed below, and it needs to contain the name of the person, telephone number and the reason for submission. We may request additional information in order to confirm your identity. Also, we can reject requests that are not justified, groundless, repetitive or abusive.

    VII. HOW TO CONTACT US

For any questions, feel free to contact us: OSSVET CONSULT S.R.L.

Address: Cluj-Napoca, Str. Traian nr. 41, Jud. Cluj;

Phone: +40748944779, E-mail: contact@ossvet.ro