GDPR
​
General informations
Thank you for choosing to be part the community developed by ARTE DEVELOPMENT & MANAGEMENT SRL ("company", "we", "us" or "our"). We are committed to protecting your personal information and your right to privacy and the processing of personal data. If you have any questions or concerns about our policy or our practices regarding your personal information, please contact us using the contact form. Our policy is consistent with Regulation (EU) 2016/679.
When you visit our website and use our services, you trust us with your personal information. We take privacy very seriously, and in this privacy notice, we describe our privacy policy. We seek to explain to you as clearly as possible what information we collect, how we use it and what rights you have in relation to it. We hope you will take some time to read it carefully because it is important. If there are any terms in this privacy policy with which you do not agree, please discontinue using our site and our services.
This privacy policy applies to all information collected through our website and/or any related services, sales, marketing or events (we refer to them collectively in this privacy policy as the “Sites”).
Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us. This document is intended to inform you about the processing of your personal data, in the context of using the website www.cdrf.ro.
Categories of personal data processed
If you are a customer of the Website, ARTE DEVELOPMENT & MANAGEMENT SRL will process your personal data, such as name and surname, telephone, e-mail address, billing address, delivery address, data related to the way in which use the website, for example your behavior/preferences/habits within the online store, as well as any other categories of data that you provide directly in the context of creating a user account, in the context of placing an order through the Site or in any other way resulting from the use of the Site.
If you are a visitor of the website www.cdrf.ro, ARTE DEVELOPMENT & MANAGEMENT SRL will process your personal data that you provide directly in the context of using the website, for example the data that you provide in the section of contact, to the extent that you contact us in this way.
Purposes and grounds of processing
If you are a customer of the website, ARTE DEVELOPMENT & MANAGEMENT SRL processes your personal data as follows:
- for carrying out the contractual relationship between you and ARTE DEVELOPMENT & MANAGEMENT SRL, respectively for taking over, validating, sending and invoicing the orders placed on the Site, informing you about the status of the order, organizing the return of ordered products, etc.
Grounds: The processing of your data for this purpose is based on the contract concluded between you and ARTE DEVELOPMENT & MANAGEMENT SRL, defined in the Terms and Conditions. The provision of your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of carrying out contractual relations between you and ARTE DEVELOPMENT & MANAGEMENT SRL.
- for fulfilling the legal obligations incumbent on ARTE DEVELOPMENT & MANAGEMENT SRL in the context of the services provided through the Site, including obligations in fiscal matters, as well as in matters of archiving.
Grounds: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. The refusal to provide the data may result in the impossibility of ARTE DEVELOPMENT & MANAGEMENT SRL to comply with its legal obligations and therefore in the impossibility of offering you the services / workshops or providing you with the products through the Site.
- for marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms) of commercial communications regarding the products, services and workshops offered by ARTE DEVELOPMENT & MANAGEMENT SRL through the website www.cdrf.ro
Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent to the processing of data for this purpose by checking the appropriate box at the time of completing the order or by subscribing to the newsletter, filling in the email in the appropriate box on the main page. To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications. Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for your order.
- for the purpose of carrying out various analyses, reports on the website's operation mode, creating profiles of consumer preferences, mainly in order to improve the experience offered on the Site.
Grounds: The processing of your data for this purpose is based on the legitimate interest of ARTE DEVELOPMENT & MANAGEMENT SRL to permanently improve the customer experience on the Site. And in this case, providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for your order.
If you are a visitor to the website, ARTE DEVELOPMENT & MANAGEMENT SRL processes your personal data as follows:
- for marketing activities, respectively for the transmission, through means of remote communication (e-mail, sms), of commercial communications regarding the products and services offered by ARTE DEVELOPMENT & MANAGEMENT SRL, through the Website www.cdrf.ro
Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent for data processing for this purpose by subscribing to the newsletter, filling in the email in the appropriate box on the main page. To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications. Providing your data for this purpose is voluntary. The refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
- to resolve complaints, complaints and to monitor traffic and improve your experience on the website.
Grounds: The processing of your data for this purpose is based on the legitimate interest of ARTE DEVELOPMENT & MANAGEMENT SRL to ensure the correct functioning of the Site, as well as to permanently improve the experience of the Site's visitors, including by solving various comments, questions or complaints . Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.
The duration for which we process your data
As a principle, ARTE DEVELOPMENT & MANAGEMENT SRL will process your personal data as much as is necessary to achieve the processing purposes mentioned above.
If you are a customer, we will process your data for the entire duration of the contractual relationship and thereafter according to the legal obligations falling under the charge of ARTE DEVELOPMENT & MANAGEMENT SRL (e.g., in the case of financial and accounting supporting documents for which the retention period provided by law is 10 years from the end of the financial year during which they were drawn up).
If you withdraw your consent for data processing for marketing purposes, ARTE DEVELOPMENT & MANAGEMENT SRL will stop processing your personal data for this purpose, without affecting the processing carried out by ARTE DEVELOPMENT & MANAGEMENT SRL based on the consent expressed by you before its withdrawal.
Disclosure of personal data
In order to fulfill the processing purposes, ARTE DEVELOPMENT & MANAGEMENT SRL may disclose your data to partners, to third parties or entities that support ARTE DEVELOPMENT & MANAGEMENT SRL in carrying out the activity through the website (for example, courier companies, IT service providers) , or to the central/local public authorities, in the following exemplary cases listed:
- for the administration of the website: in situations where this communication would be necessary for the awarding of prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by ARTE DEVELOPMENT & MANAGEMENT SRL through the website www .cdrf.ro
- for maintaining, customizing and improving the website and the services provided through it
-to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users
- for the transmission of commercial marketing communications, under the conditions and limits provided by law when the disclosure of personal data is provided by law, etc.
- for the national interest according to art. 6 para. (1) lit. e) and art. 9 lit. g) from the General Data Protection Regulation
- for vital interests: We may disclose your information where we believe it is necessary to investigate, prevent or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and activities illegal or as evidence in litigation in which we are involved.
Transfer of personal data
The personal data provided to ARTE DEVELOPMENT & MANAGEMENT SRL can be transferred outside of Romania, but only to countries in the European Union.
In short: We only share information with your consent, to comply with the law, to protect your rights, or to fulfill our business obligations. We may process or share data based on the following legal basis:
Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
Legitimate interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
National interest: it is possible to process your data. If their processing is necessary for the performance of a task that serves a public interest according to art. 6 para. (1) lit. e) and art. 9 lit. g) from the General Data Protection Regulation.
We keep your information safe
We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please note that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, the transmission of personal information to and from our sites is at your own risk. You should only access the Services in a secure environment.
We do not collect information from minors.
We do not knowingly collect or market data from children under the age of 13.
By using the Site, you represent that you are at least 13 years of age, or that you are the parent or guardian of such a minor, and you consent to such minor under 13's use of the Site. If you are aware of any data we have collected from children under 13, please contact us using the contact form on our website.
If we learn that personal information has been collected from users under the age of 13, we will disable the account and take reasonable steps to promptly delete such data from our records.
​
Your rights
According to Regulation (EU) no. 679 of April 27, 2016, you have the right to request:
The right to access your data (art. 15) - you have the right to request information from data operators regarding the processing of personal data by them.
Rectification of data (art. 16) - you have the right to request the data operators to correct incorrect personal data.
Deletion of data (art. 17) - you have the right to request the data operators to delete personal data in certain situations, such as: the personal data are no longer necessary to achieve the processing purpose for which they were collected, it was withdrew consent for their processing by the operators, etc. It is possible that, following the data deletion request, ARTE DEVELOPMENT & MANAGEMENT SRL will anonymize these data (thus depriving them of their personal character) and continue processing for statistical purposes under these conditions.
Restriction of processing (art. 18) - you have the right to request data operators to restrict processing in certain situations, such as when the accuracy of processed personal data is disputed or the processing of personal data is not carried out in accordance with the law.
The right to object to processing (art. 21) - you have the right to object at any time, for well-founded and legitimate reasons related to your particular situation, to personal data being the object of processing, except in cases where there are legal provisions to the contrary.
The right to withdraw consent: you have the right to withdraw the consent expressed through this statement regarding the processing of sensitive personal data, at any time, specifying that the withdrawal of consent will not affect the legality of the data processing carried out before the withdrawal of consent.
The right to portability (art. 20): you have the right to request the data operators to transmit the processed personal data to you or to another entity that will process your personal data.
The right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider necessary. You can access more information at www.dataprotection.ro.
Controls for "do-not-track" features
Most web browsers and some mobile operating systems and mobile apps include a Do-Not-Track ("DNT") feature or setting that you can enable to signal your privacy preference not to monitor and collect activity data your online browsing. No uniform technology standard for the recognition and implementation of DNT signals has been finalized. As such, we currently do not respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard is adopted for online tracking that we must follow in the future, we will inform you of that practice in a revised version of this privacy policy.
We are updating this policy
We may periodically update this privacy policy as necessary to comply with relevant laws. The updated version will be indicated by an updated "Revised" date, and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of those changes or by sending you a notice directly. We encourage you to frequently re-read this privacy policy to be informed of how we protect your information.
If you have questions or comments about this policy, you can send us an email using the contact form on our website.