privacy policy
PRIVACY POLICY within AMAZONAS WEB TRADING SRL.
on EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC
The company AMAZONAS WEB TRADING SRL (hereinafter referred to as the "Company" or "Company") complies with Regulation (EU) 2016/679 of the European Parliament and of the Council - on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "Regulation" or "GDPR") applicable from May 25, 2018.
As it is a European Regulation, it applies directly and uniformly in all member states of the European Union, in order to strengthen and unify security policies in the online environment but also to better protect the data of all European citizens.
Respect for confidentiality and the protection of personal data are fundamental principles to which our organization has understood to give due importance and attention because without their understanding, awareness and implementation, the company's current activity will not be able to comply with the requirements of the aforementioned European Regulation.
One of the fundamental principles of this Regulation is transparency, and through this Privacy Policy we wish to inform you about how we collect, use, transfer and protect your personal data.
We reserve the right to periodically update, review and modify this Privacy Policy. If changes occur, we will post the updated and revised version of the Privacy Policy on our website.
This Policy applies to:
Headquarters and work points belonging to AMAZONAS WEB TRADING SRL.
To all departments and all personnel belonging to AMAZONAS WEB TRADING SRL To all contractors, suppliers and other persons working on behalf of AMAZONAS WEB TRADING SRL.
This Privacy Policy refers to the personal data of all our customers, the legal representatives of our suppliers and partners, all persons who contact us and who visit us and their representatives, potential collaborators and collaborators and applies to data collected through our website www.sophiepack.ro, as well as to all other personal data that we collect via e-mail, contact forms, requests for quotations and through any other documents or personal data that we collect within the events we organize - if applicable.
-
GENERAL INFORMATION:
1.1. Who we are and how you can contact us:
AMAZONAS WEB TRADING SRL is a legal entity of Romanian nationality, with its registered office in Cluj-Napoca, Str. Trifoiului 14B, Cluj County, with the registration number at the Trade Register at the Cluj Courthouse J12/1945/2019 and Unique Identification Code RO41079860.
For the purposes of data protection legislation, we are the OPERATOR when we process your personal data. In order for the data of the individuals concerned to be processed securely, we have made every effort to implement reasonable measures to protect their personal information.
Since we are always interested in hearing your opinions, as well as providing you with any additional information you may need regarding the processing of your data, we inform you that you can contact us at the following e-mail address: contact@sophiepack.ro, or by phone at 0731 369 929
1.1. Terms of the Regulation:
Operator – the entity – in this case – AMAZONAS WEB TRADING SRL, or any other legal person, public authority, agency or non-governmental organization, which processes or determines the purposes and means of processing personal data;
Personal data – any information concerning an identified or identifiable natural person; an identifiable person is that person who can be identified – directly or indirectly, by reference to an identification element: name/surname, address, personal identification number, e-mail, telephone, income, biometric data, image, IP address or by reference to medical, genetic data, data regarding ethnic or racial origin, political, religious, philosophical, cultural beliefs or trade union membership;
The person concerned – any natural person whose personal data may be or are processed by the operator;
1.2. Purpose of the General Privacy Policy:
When a data subject enters into a relationship of any kind with us, they entrust us with their information.
Purpose of this General Privacy Policy is to explain to the individuals concerned what data we process, why we process it and what we do with it – as the controller. We take privacy seriously and never transmit or sell personal data of any nature. Being fully aware that personal information belongs to each individual, we do our best to store it securely and process it carefully. We do not provide information to third parties without informing the individuals concerned in advance or, if the situation requires it, without requesting their consent.
All information in this Privacy Policy is important. We hope you will read it carefully.
This Privacy Policy does not cover third-party applications and websites that individuals may access by clicking on links from our website. This is beyond our control. We encourage everyone to review the Privacy Policy on any website and/or application before providing any personal information.
This Privacy Policy also covers the process of recruiting and selecting candidates for positions offered by the company (e.g. - the company obtains personal data as a result of requesting the completion of a form in an application or by sending a CV - by e-mail). The company informs applicants of the personal data that will be collected, the purpose for which it is collected and how it will be used, in close connection with the existence of the Company's recruitment-specific Privacy Policy.
According to the law, the natural person who benefits from our services or who is in any kind of relationship with us is a "data subject", that is, an identified or identifiable natural person. In order to be completely transparent about data processing and to allow them to easily exercise their rights at any time, we have implemented measures to facilitate communication between us, the data controller and the data subject.
If you are under 16 years of age, you will need your parent or guardian's consent before you provide us with any personal information for registration or other online activities. If you are unsure about the information you see on this site, please ask your parent or guardian for help.
Any processing of personal data of minors will be carried out only in accordance with the law.
1.3. Commitment AMAZONAS WEB TRADING SRL. :
The protection of the personal information of data subjects is very important to us. Therefore, we have committed to complying with the new Regulation (EU) 2016/679, the applicable national legislation on the matter, as well as the following principles:
Legality, fairness and transparency:
We process personal data legally and fairly. We are always transparent about the information we use, and the data subject is properly informed.
Control belongs to the individual concerned
Within the limits of the law, we offer her the opportunity to review, modify, delete the personal data she has shared with us and to exercise her other rights.
Data integrity and purpose limitation:
We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that personal data is accurate, complete and up-to-date.
Security:
We have implemented reasonable security and encryption measures to protect your information as best we can. However, please note that no website, application, or internet connection is completely secure.
-
RIGHTS OF THE DATA SUBJECT IN LIGHT OF THE NEW REGULATION:
– The right to withdraw consent where processing is based on consent;
– The right to be informed about the processing of your data;
– Right of access to data;
– The right to rectify inaccurate or incomplete data;
– The right to erasure („the right to be forgotten”);
– The right to restriction of processing; ;
– The right to transmit the data we have about the data subject to another operator; ;
– The right to object to data processing;
– The right not to be subject to a decision based solely on automated processing, including profiling;
– The right to access justice;
– The right to file a complaint with the Supervisory Authority.
-
CATEGORIES OF PERSONAL DATA. PURPOSES AND GROUNDS FOR PROCESSING:
In the context of your interaction with AMAZONAS WEB TRADING SRL, you as a natural person – and within the meaning of the Regulation – a data subject, may be subject to the data processing activities we carry out.
AMAZONAS WEB TRADING SRL may request and/or collect information from you voluntarily when:
3.1. You may request assistance from us or send us comments, suggestions or questions related to our website, our activities and/or services, as well as the processing of your personal data.
In this case, we use your contact details to communicate with you regarding your specific requests. The purpose of the processing in this case is to analyze your requests and provide answers to them.
3.2 We may process some of your data in the context of providing services and products based on obligations imposed by law (for example, the obligation to comply with tax laws). In this case, the basis for processing is the fulfillment of a legal obligation.
3.3. We may also use your contact details to provide you with specialized newsletters about our services, as well as events or promotions organized by us, in electronic form. Sending this information in full compliance with the new regulations can be done if you have subscribed and expressed your express consent for such processing. You can always withdraw your consent, expressing your option not to receive the newsletter in the future by clicking the Unsubscribe button when you receive the respective e-mail or by writing to us at the e-mail address provided.
3.4. In the event that you are, collaborators or potential collaborators, representatives of our suppliers; the personal data we process are: your name and surname, e-mail address, telephone number.
3.5. If you apply for a job at AMAZONAS WEB TRADING SRL:
We use the personal data contained in the CVs we receive to assess the qualifications of applicants for a position within our company. We base this on the steps taken for the purpose of concluding and executing a contract. We also inform you that if you have not been selected to occupy a position within our company, we will keep your CV for a limited period of time only based on your explicit consent.
3.6. If you are a visitor to our premises or work point:
We use your personal data to ensure the security of our premises, assets and personnel.
For this purpose, we have installed cameras that are located in a visible place and are accompanied by icons.
The cameras have been placed to minimize the impact on individual privacy and we conduct periodic assessments to ensure that their use remains justified.
The recorded images will be kept for as long as necessary for an incident to be discovered and for the incident to be investigated. With this in mind, all recordings are deleted after the expiry of the 30-day period, as also stated in the Video Surveillance Policy adopted by our company.
In this case, the data processing is based on the legitimate interest of AMAZONAS WEB TRADING SRL, namely the protection of these spaces, goods and people.
3.7.If you are a visitor to our website:
We use the personal data we collect from you when you visit our website www.sophiepack.ro to process and respond to your questions submitted through the available online forms, as well as to send the newsletter, a service to which you previously subscribed while visiting our website.
We base this data processing activity on our legitimate interest in providing the requested information in relation to our activity, services and products. The categories of data processed in this context are your name, email address and telephone number.
We also use your personal data to monitor traffic and improve the content of the website. We base this data processing activity on our legitimate interest in ensuring the proper functioning of our website and improving it.
-
WHY DOES AMAZONAS WEB TRADING SRL COLLECT?. THIS DATA:
We collect data subjects' information for specified and legitimate purposes as described above in this Privacy Policy, which include, but are not limited to, the following:
– To be able to communicate with candidates for the positions offered by the company;
– To make the right decision regarding their employment;
– In order to conclude and execute an employment contract according to the specialization/qualification of the candidates;
– In order to conclude or execute/modify a contract between the data subjects and the company;
– To respond to questions and requests from data subjects;
– To create accounts on our sites for bidding, ordering, delivery and invoicing operations of our products;
– For marketing purposes, but only if we have the prior consent of the data subject;
– To provide and improve the services and products the company offers;
– To diagnose or fix technical problems;
– To provide personalized advertising and content;
– To defend the company against cyber attacks;
– For the creation and/or maintenance of accounts;
– To comply with legal provisions,
– To establish or claim a right in court;
When data is requested directly from you, AMAZONAS WEB TRADING SRL, asks you to provide all categories of personal data that we request for the aforementioned purposes, as otherwise we will not be able to carry out our activity.
If you provide our company AMAZONAS WEB TRADING SRL with the personal data of other individuals, please inform them, prior to this disclosure, of the manner in which AMAZONAS WEB TRADING SRL intends to process the personal data, as described in this privacy policy.
-
DATA STORAGE WITHIN AMAZONAS WEB TRADING SRL.
As a principle, AMAZONAS WEB TRADING SRL processes your personal data for as long as necessary to achieve the processing purposes mentioned above.
If you are a client, we will process your data for the entire duration of the contractual relationship and subsequently, according to the legal obligations incumbent on AMAZONAS WEB TRADING SRL (e.g., in the case of financial and accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the last financial year in which these documents are recorded).
If you withdraw your consent for data processing for marketing purposes, AMAZONAS WEB TRADING SRL will cease processing your personal data for this purpose, without affecting the processing carried out by our company based on the consent expressed by you before its withdrawal.
It is important to note that in certain expressly regulated situations, we store data for the period required by law.
At the same time, if data is not collected in the context of an agreement, such data will be retained for as long as necessary to achieve the purpose of the intended data collection or any other longer period required by law.
In the case of video surveillance – the company decided to base its processing on the legal basis of „legitimate interest” – art. 6 para. (2) let. (f) of Regulation (EU) 679/2016: „processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.” – as follows from the Video Surveillance Policy adopted by the company. The data are retained for a maximum period of 30 days so that an incident can be discovered and the incident can be investigated. After this period, the data are deleted.
-
SHARING YOUR INFORMATION WITH THIRD PARTIES:
AMAZONAS WEB TRADING SRL will not disclose the data obtained from data subjects to other third-party companies without having previously obtained express and separate consent in this regard.
The company confirms that the personal data obtained is stored securely or destroyed, meaning that we inform the data subjects that there are data processing agreements with the software provider/s through which they have in turn assured the company that they are compliant with the GDPR.
AMAZONAS WEB TRADING SRL may disclose the data of the individuals concerned, in compliance with applicable law, to business partners or other third parties, such as its own proxies.
We always make reasonable efforts to ensure that these third parties have implemented appropriate protection and security measures. We have contractual clauses with these third parties so that your data is protected. We will always inform the data subjects of the identity of these companies before the transmission or within a reasonable period and we will ensure that any transfer is legitimate, based on their consent or other legal basis.
For example, we may provide personal data to other companies, such as IT or telecommunications service providers, accounting, legal services and other third parties with whom we have a contractual relationship. These third parties are selected with particular care so that this data is processed only for the purposes that we indicate.
The company may also share the data of the individuals concerned with business partners as a result of a joint effort to provide a product or service.
Personal information may also be provided to the prosecutor's office, police, courts and other authorized state bodies, based on and within the limits of legal provisions and as a result of expressly formulated requests.
Within reasonable limits, the company will ensure that the data of the data subjects do not leave the European Economic Area, but, to the extent that it will transfer data to states outside the EEA, it will ensure, in all cases, that the transfers are legitimate, based on the explicit consent of the data subject or another legal basis.
-
AMAZONAS WEB TRADING SRL. informs any natural person concerned that:
– You may withdraw your consent to the processing of sensitive data and/or for direct marketing at any time by following the unsubscribe instructions in each email or other electronic message.
– If he wishes to exercise his rights, he can do so by registering a written request, which is submitted to the headquarters/work point of AMAZONAS WEB TRADING SRL or by a written request sent to the email address: contact@sophiepack.ro.
– The rights listed above are not absolute. There are also exceptions, therefore each request received will be analyzed in order to decide whether it is well-founded or not. To the extent that the request is well-founded, the company will facilitate the exercise of the rights. If the request is unfounded, it will reject it, but will inform the data subjects of the reasons for the refusal and of their rights to file a complaint with the Supervisory Authority and to seek legal action.
– The company will try to respond to your request within 30 days. However, the deadline may be extended depending on various aspects, such as the complexity of the request, the large number of requests received, or the impossibility of identifying you within a reasonable time.
– If, despite making every effort, the company fails to identify the data subject, and the data subject does not provide additional information to be able to identify them, the company will not be obliged to comply with the request.
-
REQUESTS AND EXERCISE OF RIGHTS:
In the event that you wish to exercise any of the rights listed above in this Privacy Policy, to make observations or obtain additional information or clarifications regarding the processing of your personal data, if you have questions or concerns regarding the processing of your information or wish to exercise your legal rights or have any other request regarding the confidentiality of your data, please contact AMAZONAS WEB TRADING SRL at the e-mail address: contact@sophiepack.ro to ensure that AMAZONAS WEB TRADING SRL complies with all GDPR requirements.
The response to all requests will be sent to you in the shortest possible time frame, which will not exceed one month from receipt of the request, with the possibility of extending the duration by a maximum of 2 months if we are talking about complex processing or a large volume of such requests.
It is also good to know that the National Authority for the Supervision of Personal Data Processing ("ANSPDCP") operates at the Romanian level and that you have the right to file a complaint when you consider that your rights have been violated, by accessing the website www.dataprotection.ro.