According to Regulation (EU) 2016/679 (“General Regulation on Data Protection” or “GDPR”) on the processing of personal data and their free movement, SC Digital Stressless SRL processes and manages in a safe manner the personal data provided and limits their use only for the purpose for which they are provided.
A. What data is collected?
For the order:
Name and surname
Company name and details (if applicable)
Address
Phone number
Email
For Newsletter;
Email
For asking questions through the contact form:
Name and surname
Email
B. Legal purposes and grounds of processing
1. Purpose of data processing
For the order:
• Informing customers about the status of the order, its validation, shipping and invoicing.
• Resolving, canceling or requesting information regarding the order or products
• View the status and orders placed in the customer account
For Newsletter;
• Sending regular newsletters, only by e-mail
For asking questions through the contact form:
• Sending answers to specific questions asked by the people who contact us.
2. The basis for processing
The processing of your data is based on your consent. The agreement to be able to process this data is expressed by the customer at the end of the order, subscribing to the newsletter or submitting the contact form, this being done clearly, explicitly, by checking "I have read and accept the terms and conditions". If data processing is not desired, the order / request will not be completed and SC Digital Stressless SRL will not retain any completed information in the order section.
C. Period of time for which we store personal data in the case of orders is 10 years according to the obligation provided by the provisions of the accounting law. In the case of contact forms, the term is 1 year, if the processing does not continue on other grounds (for example, the occurrence of a contract between the parties).
D. Communication of personal data
SC Digital Stressless SRL communicates your personal data only to those staff members and collaborators who need access to personal data in particular to ensure the delivery of orders, the sending of newsletters, the provision of answers or the establishment of meetings.
Personal data may also be disclosed to third parties such as service providers (IT service providers, online tools, server hosting services, transport service providers, public authorities, courts, consultants (lawyers, accountants , auditors, etc.)) whose activity involves the need to know the data (and only to the extent necessary to provide the service) or where required by law. In the case of providers to whom such data is disclosed, we ensure by contractual regulations that they process personal data in accordance with European data protection legislation, in order to guarantee a high level of data protection. SC Digital Stressless SRL does not transfer your personal data to third countries.
E. Your rights regarding the processing of personal data
❖ Right of access - you can obtain confirmation that your personal data is being processed and, if so, you have the right to access that data. If it is necessary to exercise your right of access, please contact us and request a confirmation by e-mail. Please note that there may be situations that are not subject to the right of access, such as information that identifies other people or that is subject to confidentiality obligations.
❖ Right to rectification - you can request the rectification of inaccurate personal data held, as well as their completion.
❖ Right to data deletion - in situations expressly regulated by law, you may request the deletion of your personal data. Please note that there is a possibility to delete personal data if its processing is illegal as well as if the data processing is based on your consent, which you have withdrawn.
❖ The right to restrict the processing of data - you can obtain the restriction of the processing of your personal data. Please note that this right can only be exercised in certain cases, such as when you challenge the accuracy of your personal data. During the period necessary to rectify your data, you can request the restriction of the processing of your personal data.
❖ The right to data portability - you can receive personal data in a structured, usual and computer-processed format and you have the right to subsequently transmit that data to another operator (if the processing takes place by automated means).
❖ The right to object to the processing of your personal data, for reasons related to your particular situation.
❖ Right to file a complaint - you can challenge the way your personal data is processed by the competent data protection authority.
❖ The right to withdraw your consent for various processing operations, if the consent is the legal basis for processing. Processing operations based on your consent cease from the moment of withdrawal, without affecting the processing of data that took place prior to the withdrawal in question.
F. Exercise of rights
In order to exercise your legal rights, or if you wish to obtain additional information or clarifications regarding the processing of your personal data, please contact us through your designated Data Protection Officer at the following contact details: hello @ stressless. ro.