GDPR POLICY / PERSONAL DATA PROTECTION POLICY

 

This GDPR Policy is applicable to the operator: DITA VON HELEN BRAND- SC ALPHARD TRADE S.R.L., a limited liability company of Romanian nationality, with its registered office located in Romania, Bucharest City, Sector 2, 23 Aurel Vlaicu Street, registered at the Trade Register Office attached to the Bucharest Tribunal under no. J40 /6315/2016, Unique European Identifier (EUID) ROONRC.40/ 6315/2016, Unique Registration Code (CUI) RO 36027279.

1. Our commitment to your personal data

1.1. DITA VON HELEN  will process personal data in accordance with this Personal Data Protection Policy ("GDPR Policy"), in accordance with applicable law.

1.2. The GDPR policy is based on the provisions of Regulation no. 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC ("General Data Protection Regulation" or "GDPR"), which in force since 25 May 2018, as well as on the applicable national legislation.

1.3. The GDPR defines personal data as any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity ”.

1.4. DITA VON HELEN undertakes to make every effort to implement the highest standards of confidentiality and transparency regarding the personal data it processes in its current activity. The protection and total transparency regarding the processing of your personal data in our activity are our most important objectives.

1.5. Please also consult the Cookies Policy, the Video Surveillance Policy, as well as the Terms and Conditions available on the website www.ditavonhelen.com which completes this GDPR Policy.

1.6. Any information regarding the processing of your personal data can be requested in writing to the address of the above-mentioned registered office or to the e-mail address: office@ditavonhelen.com

2. Agreement

2.1. Your use of our services is subject to this GDPR Policy. By using our services, you agree to the terms of this GDPR Policy. The purpose of the GDPR Policy is to inform our customers about the collection, storage and use of personal data.

3. Categories of personal data collected

The personal data we process as a result of your use of the site may include:

• details of your visits to our website (in this sense we recommend that you read the Cookies Policy);

 

• other information that you send to us, when making a request on the site or as a result of sending it by email or phone.

 

• the data necessary for the issuance of fiscal invoices, as well as any other relevant data.

 

4. Ways of collecting your personal data

4.1. We collect your data mainly following a visit to the www.teilor.ro website, launching an online order, launching an order in physical stores, using DITA VON HELEN applications or visiting our physical stores.

4.1.1. We collect and process personal data relating to your last name, first name, email address, telephone number in order to maintain correspondence or communication with you. Thus, if you make a request by email or phone, we will process your data in order to resolve it.

4.1.2. In this context, if required by your request, we may send your contact details to financial and governmental institutions, transport companies or the post office.

4.2. We collect your data as a result of a request to be contacted.

4.2.1. We collect personal data that refers to your name, surname, email address, telephone number, interest in contracting and which come as a result of the fact that you requested to be contacted, filling in the fields on the site.

4.2.2. In this regard, our consultants will contact you to provide you with more information.

4.2.3. After completing the contact form, your data is imported into the DITA VON HELEN database.

4.2.4. If you have expressly consented to your personal data being processed for marketing purposes by DITA VON HELEN, respectively for sending newsletters, information about our products and services or events, contests organized by us, DITA VON HELEN or proxies will process your data for this purpose.

 

5. The purposes for which we process your personal data

 

We may collect and process personal data for the following purposes:

 

• offering our products and services;

 

• sending invitations for organized events;

 

• compliance with our legal obligations (such as obligations to keep records and supporting documents);

 

• analyzing, improving our services and communications to you;

 

• protecting the security and management of websites and other systems, preventing and detecting security threats, fraud or other criminal or malicious activities;

 

• their transmission to third parties, if you have expressly consented;

 

• marketing campaigns, customer surveys, market reviews, raffles, contests or other promotional activities or events, if you have expressly consented;

 

• ensuring the physical security of the spaces, according to the special legislation applicable in the field;

 

• the relationship with public authorities, according to the applicable legal norms in civil and criminal matters;

 

• for any purpose related to and / or ancillary to any of the above or any other purpose for which your personal data has been provided to us.

 

6. Direct marketing

 

6.1. We promote our services to you and others. We use customer information to send out invitations and communications that promote the products and services we provide.

 

6.2. In all cases, you will be able to unsubscribe from receiving marketing information by accessing the unsubscribe link that you will find in each such communication or by submitting a written request to the above-mentioned registered office, or to the e-mail address: office@ditavonhelen.com

 

6.3. Please note that in the event of a unsubscribe request, there may be a time limit of up to 48/72 hours in which you may receive further information or marketing communications for reasons related to the operation of system changes. Unsubscribing from marketing emails does not preclude further transmission of transactional emails through which we can inform you of the status of the transaction that we may conclude.

 

 

7. Sharing and transferring your personal data

 

7.1. We may provide access to personal data provided to us by our authorized persons under contracts concluded for this purpose, but we will retain control of your personal data and use appropriate safeguards, in accordance with applicable law, to ensure the integrity and security of your personal data.

 

7.2. We may also disclose personal data to you when instructing or giving us permission to do so or when required to do so by applicable law, requests from judicial or official bodies to do so, or for the purpose of investigating fraudulent activities or criminal, actual or suspected.

 

7.3. We will not transfer personal data outside the EEA, unless one or more of the specified safeguards or exceptions apply to the transfer, or an adequacy decision, Privacy Shield, mandatory corporate rules.

 

7.4. In the absence of an adequacy decision, membership of the Privacy Shield, mandatory corporate rules, the transfer of personal data to a third country or to an international organization shall take place only under the following conditions:

 

7.4.1. the data subject has explicitly agreed to the proposed transfer after being informed of the possible risks of such transfers for the data subject, due to the lack of an appropriate decision and appropriate security measures;

7.4.2. the transfer is necessary for the performance of a contract between the data subject and the controller or for the performance of pre-contractual arrangements adopted at the request of the data subject;

 

7.4.3. the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person;

 

7.4.4. the transfer is necessary for important reasons of public interest;

 

7.4.5. the transfer is necessary for the establishment, exercise or defense of legal claims.

 

8. Storage and security of personal data

 

8.1. Ensuring the confidentiality of the personal data you transmit to us is an important concern for us. We have implemented technical and organizational measures to maintain the confidentiality and security of your personal data, in accordance with our internal procedures regarding the storage, disclosure and access of personal data. Personal data may be stored on our personal data technology systems, those of our contractors or in print, for a period of 5 years or any other period in accordance with applicable legal regulations.

 

8.2. The website www.ditavonhelen. is protected by the standard SSL (Secured Socket Layer) encryption system. This technology encrypts all your personal data that you transfer to DITA VON HELEN.

 

9. Your rights

 

9.1. We would like to inform you that in the new personal data protection regulations provided for in the EU General Data Protection Regulation 679/2016, if we process your personal data, you have the following rights listed below, as well as of any other applicable legal rights:

 

• the right of access, provided by art. 15 of the GDPR, based on which you can ask us, free of charge, to confirm whether or not we process personal data concerning you. You may also request a copy of the data we process about you. Requests must include relevant information in order to identify you in our database. We will resolve your request within the legal deadline;

 

• the right to information - implies the information in a concise, transparent and easily accessible manner of the data subjects regarding the processed data;

 

• the right to rectification, provided by art. 16 of the GDPR, which you can exercise, by formulating a request by which you can ask us to modify the information we already have about you. You can make such a request when you notice that your data is incomplete or inaccurate;

 

• the right to restrict the processing, provided by art. 18 of the GDPR, which you can exercise when you challenge the accuracy of the data, consider that the processing is illegal or oppose the deletion of the data. Following the exercise of this right, we will still be able to store your data, other processing operations being possible only with your consent, except as expressly provided by law;

 

• the right to portability, provided by art. 20 of the GDPR, which you can only exercise in cases where the processing is based on your consent or contract and only if your data is processed by automated means. If you meet the conditions, you can send us a data porting request to the operator you want;

 

• the right to oppose the processing of data for marketing purposes, provided by art. 21 of the GDPR. You can exercise this right at any time, and we guarantee that your data will no longer be processed for this purpose. However, it may take a reasonable amount of time (up to 72 hours) to register and resolve your request, and you may still receive marketing information from us;

 

• the right to cancellation, provided by art. 17 of the GDPR, based on which we have the obligation to delete the personal data we process about you. This right is not an absolute one, having applicability only in certain situations expressly provided by law. When requesting a deletion, please note that deleting them can be a complex process.

 

• the right to address the National Authority for the Supervision of Personal Data, the Romanian public authority, based in G-ral Blvd. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, web page http://www.dataprotection.ro, which aims to protect the fundamental rights and freedoms of individuals, especially the right to privacy , family and private, in connection with the processing of personal data and the free movement of such data ("ANSPDCP"), in case you report a breach of the GDPR.

 

9.2. In order to exercise these rights, please send us a written request to the above-mentioned registered office or to the e-mail address: office@ditavonhelen.com, with the subject ˝Request for personal information˝.

 

Also, if you wish to withdraw your consent to direct marketing purposes, you may use the "unsubscribe" option which is included in each marketing communication.

10. Updating the GDPR Policy

 

We reserve the right to periodically update and modify this GDPR Policy to reflect any changes to the way we process your personal data or any changes to legal requirements.

 

In the event of any such change, we will display on our website www.teilor.ro the modified version of the GDPR Policy and / or make it available in another way.

 

11. Contact

 

For further information on the content of the GDPR Policy, please contact us in writing at the above-mentioned registered office or by e-mail: office@ditavonhelen.com