Order Package
    0
    Order Package

    Privacy policy
    www.fabricatinro.ro

    WHO ARE WE?

    FABRICATINRO S.R.L. (hereinafter referred to as “the Operator” or “Fabricatinro”) places great importance on your personal data, constantly making the necessary efforts to ensure that data processing complies with the legal requirements in this field. For this reason, we have drafted this commitment through which we undertake to respect the confidentiality of your personal data and through which we explain what categories of personal data Fabricatinro processes, how these data are used, and the purpose for which they are subject to processing operations.

    This Privacy Policy applies only to the personal data we process through our website www.fabricatinro.ro (hereinafter referred to as the “Site” or “Platform”) in the context of your interactions with it, such as filling in available forms, placing an order, subscribing to the newsletter, simply browsing the site, or contacting our staff via telephone calls (inbound or outbound). We assure you that we have taken all necessary measures to ensure the confidentiality of your data, which is processed only by the Operator’s staff. These individuals have been previously trained and authorized regarding personal data processing and have made firm commitments to confidentiality.

    Your data is processed by Fabricatinro securely, with the Operator having implemented a series of technical and organizational measures to protect personal data against incidents such as destruction, loss, accidental or unlawful modifications, unauthorized use, disclosure, or access, especially when processing involves data transmission over a network, as well as against any other form of unlawful processing.

    To “meet” us virtually, we provide our identification details below.

    The Operator that processes your personal data when you browse or interact with the online platform www.fabricatinro.ro is FABRICATINRO S.R.L., with its registered office in Iasi County, Iasi City, Hlincea Street No. 65, Bl. S1, Sc. B, Floor 3, Apt. 16, registered with the Trade Register under no. J22/965/2020, having CUI 42471925.

    For any questions or concerns regarding personal data protection, you are invited to send a request to the above-mentioned postal address or to the email address office@fabricatinro.ro. Those who send such requests to Fabricatinro are asked to mention in the email subject/ on the envelope information such as “data protection”, “GDPR” or “personal data”, to ensure that requests are treated with priority.

    As such, you will receive a response within a maximum of 30 days from the date Fabricatinro receives your request, with this period being extendable only in exceptional situations. In such cases, you will be duly informed regarding the extension.

    DEFINITIONS

    “Personal data” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity.

    ! For the purposes of this policy, the personal data subject to processing may include: name, surname, telephone number, email address, delivery and billing address, etc., as described below.

    “Processing of personal data” means any operation or set of operations performed on personal data, whether by automated or non-automated means, such as: collection, registration, organization, storage, adaptation or alteration, extraction, consultation, use, disclosure to third parties by transmission, dissemination or otherwise making available, alignment or combination, blocking, deletion, or destruction.

    ! For the purposes of this policy, processing refers to those operations carried out when you browse the website www.fabricatinro.ro, interact with it by filling out forms available on the site, or in the context of placing product orders from the Operator’s portfolio.

    “Operator” means the person who, alone or jointly with others, determines the purposes and means of processing personal data.

    ! For clarity, within this Privacy Policy, the data controller is FABRICATINRO S.R.L.

    “Data subject” means the individual whose personal data is subject to processing.

    ! For the purposes of this Policy, the data subject is the Internet user who browses www.fabricatinro.ro or places an order through it.

    “Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

    ! Data processing conducted via the website and based on consent is exclusively for newsletter subscription and acceptance of cookies other than those necessary (essential), as highlighted in the cookie pop-up and detailed in the Cookie Policy.

    “Third party” means any natural or legal person, public authority, agency, or body other than the data subject, operator, processor, and those who, under the direct authority of the operator or processor, are authorized to process personal data.

    “Processor” means a person who processes personal data on behalf of the operator. This can include the Operator’s partner companies, such as delivery, IT, legal, marketing service providers, etc.

    “Site”/ “Website”/ “Platform” refers to fabricatinro.ro.

    WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

    Your navigation on the Site and interaction with it involves the processing of two categories of personal data:

    1. Personal data you voluntarily disclose to the Operator (e.g., through the order form, newsletter subscription, or telephone calls to the Operator), which are collected individually;
    2. Data you provide involuntarily, simply by browsing our site.

    Fabricatinro collects, based on the voluntary provision of the data subject, the following personal data:

    When placing an order:

    • Name and surname
    • Telephone number
    • Email address
    • Residence/ home address for product delivery
    • Billing address, if different from delivery address
    • Any other information you provide to the Operator in the “Order notes” box

    Note: For card payments, the Operator uses the services of the online payment processor NETOPIA PAYMENTS exclusively for the purchase of promotion packages. In this case, your data will not be processed by the Operator; the payment activity falls under the Privacy Policy of the partner payment processor. When opting for payment by card, you will be redirected to the NETOPIA PAYMENTS platform, where the transaction is carried out in complete safety. For more information on the data processing specifics of NETOPIA PAYMENTS, please consult their privacy policy.

    In the context of returning ordered products:

    • Name and surname
    • Telephone number
    • Email address
    • Residence/ home address for collection
    • Bank account (for refund)
    • Information regarding the order to be returned (ordered product/ product ID, order date, order amount, etc.), if applicable
    • Any other information you provide in the context of the return

    For contacting the Operator via email:

    • Name and surname
    • Email address
    • Any other information you provide in the email body

    When filling out the contact form for a service provider promoted on the website:

    • Name and surname
    • Email address
    • Telephone number
    • Any other information provided in the “Message” section

    When filling out the contact form:

    • Name and surname
    • Email address
    • Telephone number
    • Any other information provided in the “Details” section

    For newsletter subscription:

    • Email address
    • Name and surname (optional)
    • Date of birth (optional)
    • Position (optional)

    Newsletter subscription is conditioned on your consent to receive commercial and marketing messages.

    These data contribute to the provision of services by Fabricatinro, as well as communication with the Operator or sending marketing communications, but only with the prior agreement of the user.

    The user is properly informed regarding the processing of personal data when submitting their data via the site’s forms, thus Fabricatinro fulfills its legal obligation to inform users.

    In the context of inbound/outbound phone calls:

    • Voice
    • Telephone number
    • Other categories of personal data provided during the call, which may refer to:
      • Name and surname
      • Email address
      • Product delivery address
      • Bank account (for refunding returned product amounts)

    When creating a user account:

    • Email address
    • Name and surname (may result indirectly from the email address if it is in the format firstname.lastname@x.com)
    • Username
    • Password (not viewable by the Operator but may be saved by the browser used to access the website)

    When resetting the password for a user account:

    • Username
    • Email address
    • Name and surname (may result indirectly from the email address if in the format firstname.lastname@x.com)

    When estimating a delivery fee in the “Cart” section:

    • Residence/ home address

    When publishing a review:

    • Name and surname
    • Email address
    • Any other information provided in the “Message” section

    The Operator also processes marketing and communication data only based on the users’ prior consent, as well as technical data and navigation actions through cookies and similar technologies, in accordance with the Cookie Policy.

    If you provide us with data that is not necessary for the purposes below (fulfilling orders, resolving complaints, or providing additional information), we reserve the right to immediately delete them from our database.

    The Operator may also inadvertently collect other personal data such as: IP address, browser version, time zone setting and location, operating system, and platforms used to access our site, etc. These will not be used to identify individuals and will not be made public except as provided in this Privacy Policy and the Cookie Policy.

    The Operator reserves the right to request additional information, accompanied by supporting documents, via email, in print, or any other suitable means, if necessary.

    The online payment processing provider will process the following categories of personal data: card data (card number, CVC, etc.), cardholder’s name and surname. This provider processes your data as an independent data controller, and therefore such processing is subject to its own Privacy Policy.

    Note: Fabricatinro has concluded data processing agreements with its contractual partners who sell products and promote services via www.fabricatinro.ro, as well as with its service providers (e.g., IT/online system administration, legal services, payment processing, marketing services, etc.), but is not responsible for processing performed by these providers in their own name, when acting as independent controllers. The data subject will be duly informed about any data transfer between Fabricatinro and companies providing services to the Operator.

    Your personal data may be disclosed by Fabricatinro for processing to processors, including contractual partners, authorities, financial institutions, courts, or competent bodies, at their request and for the purpose of providing the services offered by the Operator.

    Fabricatinro may store your personal data even after a deletion request if such storage is for one of the purposes provided in Art. 17 of the GDPR, such as:

    • Execution of a contract
    • Fulfillment of a legal obligation under EU or national law applicable to the Operator
    • Exercising the right to freedom of expression and information
    • Protecting the vital interests of data subjects
    • Performing a task carried out in the public interest
    • Archiving in the public interest, scientific or historical research, or statistical purposes
    • Defending the legitimate interests of the Operator or a third party, unless the interests or fundamental rights and freedoms of the data subject override and require the protection of personal data, especially where the data subject is a child
    • Establishment, exercise, or defense of legal claims

    FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE PROCESS PERSONAL DATA?

    Fabricatinro processes your personal data for the following purposes and on the following legal bases:

    • Processing is necessary for the execution of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) of Regulation (EU) 679/2016, “GDPR”), specifically to ensure access to products and services offered via www.fabricatinro.ro and for concluding distance sales and service contracts.
    • Processing is based on the data subject’s consent (Art. 6(1)(a) GDPR), for sending commercial and marketing communications, and accepting cookies other than those necessary (essential).
    • Processing is necessary for the purposes of the legitimate interests pursued by the Operator (Art. 6(1)(f) GDPR), to resolve any issues regarding the site’s content or the products/services offered by the Operator and its contractual partners, as well as actions involving interaction with the online platform.
    • Processing is necessary to comply with a legal obligation (e.g., fiscal obligations) incumbent on the Operator – Art. 6(1)(c) GDPR.

    Your personal data will be processed to enable Fabricatinro to:

    • Improve the website and the products/services provided through it
    • Determine the usefulness/popularity of web content presented on the site
    • Send technical, support, or administrative notifications
    • Fulfill requests and resolve complaints received from users
    • Facilitate user access to Operator’s services
    • Communicate relevant information to site users
    • Protect the rights of the Operator

    DURATION OF PERSONAL DATA PROCESSING

    Personal data processed by Fabricatinro via www.fabricatinro.ro are retained for a reasonable period considering the purpose of processing, in accordance with legal data archiving requirements.

    For example, if you are a client of the Operator, your data will be processed for the entire duration of the contractual relationship and afterward, according to legal obligations incumbent on Fabricatinro. For example, financial-accounting documents are archived for 10 years from their issuance.

    Regarding the email address provided for newsletter subscription, the Operator will process this data only while your consent is valid, and it will be deleted from the database once consent for direct marketing is withdrawn.

    Any other category of personal data not previously mentioned will be retained for the period necessary to achieve the purpose for which it was processed, respecting the general three-year statute of limitations for deletion.

    TRANSFER OF PERSONAL DATA. DATA RECIPIENTS

    Your data is processed within the European Union, on secure internal servers. However, via certain social media plugins (e.g., YouTube), as third-party recipients, your data may also be transferred outside the EU/EEA and stored on servers in third countries. The Operator has implemented appropriate measures to ensure compliant data processing.

    Fabricatinro undertakes that the collected data will only be processed according to the declared purposes and will not be disclosed, sold, rented, licensed, or otherwise transferred to unauthorized third parties, except when transfer/access/viewing is required by competent authorities under applicable regulations.

    Your data will be disclosed to our contractual partners who sell products and offer services via www.fabricatinro.ro, for order processing and fulfillment, and for concluding and executing service contracts. These partners act as independent data controllers and their processing is governed by their own Privacy Policies. Fabricatinro is not responsible for data processing by contractual partners in their own name.

    Your data may also be disclosed to other companies that provide us with services and act as processors, such as website maintenance, IT, legal, courier services, etc.

    Additionally, your data may be processed by our payment processing partner, exclusively for processing your online payment.

    These entities are carefully selected to meet data protection requirements. They can only use your information for providing the relevant services.

    Other than as described in this Privacy Policy, we may disclose your information to third parties to whom you consent or request us to make such disclosure.

    We will process your data securely and maintain appropriate technical measures to protect your personal data against accidental or unlawful destruction or loss, alteration, unauthorized disclosure or access, especially when processing involves data transmission over a network, as well as against any other form of unlawful processing. Questions about personal data confidentiality can be sent to office@fabricatinro.ro.

    LINKS, HYPERLINKS, THIRD-PARTY SITES

    The website www.fabricatinro.ro may contain links to third-party sites that may themselves collect your personal data, including through cookies or similar technologies.

    When connecting to a third-party website, this Privacy Policy does not apply to your browsing on that site.

    WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

    Any natural person browsing our site, as a data subject, has the following rights in relation to Fabricatinro as personal data operator:

    • Right of access: to obtain confirmation whether or not their personal data are being processed and, if so, to access them and information on how they are processed;
    • Right to rectification: to correct inaccurate personal data or complete them if incomplete, by sending an email to office@fabricatinro.ro;
    • Right to erasure (“right to be forgotten”): to have their personal data erased without undue delay if: they are no longer needed for the purposes for which they were collected, consent is withdrawn, there is no other legal basis for processing, they object to processing and there are no overriding legitimate grounds, the data have been unlawfully processed, the data must be erased to comply with a legal obligation, or the data were collected in relation to the offer of information society services;
    • Right to restriction of processing: to request restriction of processing in which case data will only be used for exercising other legal rights or responding to requests/complaints;
    • Right to data portability: to receive their personal data in a structured, commonly used, machine-readable format and the right to transmit those data to another controller where processing is based on consent or contract and carried out by automated means, if technically feasible;
    • Right to object: to object to the processing of personal data when processing is necessary for a task carried out in the public interest or legitimate interest of the Operator;
    • Right not to be subject to automated individual decision-making: the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects the data subject. However, this right does not apply if the decision is necessary for the conclusion or performance of a contract, is authorized by law with appropriate safeguards, or is based on the data subject’s explicit consent;
    • Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP): if the data subject considers that their rights have been violated, they may address ANSPDCP by submitting a complaint.

    Contact details for ANSPDCP:

    To exercise the above rights, the data subject should contact Fabricatinro using the postal or email addresses indicated in the first section of this Policy.

    SPECIAL PROVISIONS REGARDING MINORS

    The Operator pays special attention to the data of minors that may be provided through the website, to ensure that any processing of minors’ personal data is done in accordance with legal requirements and in strictly determined cases.

    The Operator does not conduct direct marketing promotions to minors. However, if a minor places an order/contacts the Operator, it is considered that the minor has done so with the consent of their legal representative.

    Minors under 16 years of age are not permitted to purchase products, contract services offered on the website, or participate in contests or campaigns organized by the Operator unless these actions are performed on their behalf by their legal representative or guardian, according to the law.

    Anyone providing data to the Operator via the website or other applications or devices covered by this Policy guarantees that they are of legal age and have full capacity.

    Any processing of minors’ personal data will only take place in accordance with the law and with the above provisions.

    FINAL PROVISIONS

    If FABRICATINRO S.R.L. deems it necessary to change the privacy rules, the Operator will publish such changes to inform data subjects about the information collected and how it is used.

    The provisions of this Privacy Policy are supplemented by the Cookie Policy available on www.fabricatinro.ro.

    FABRICATINRO S.R.L.