We consider ensuring the right to the protection of personal data as a fundamental commitment, so we will devote all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as with any other legislation applicable in Romania. As one of the essential principles of this legal framework is transparency, we have prepared this document in forming you about how we collect, use, transfer and protect your personal data when you interact with us in connection with our products and services, including through our website or through the apps available on your mobile phone.
Who we are and how you can contact us
Adara SPA is the commercial name of ADARA JVN S.R.L, a legal person of Romanian nationality, having its registered office in Bucharest, Horia Macelariu no 24, sector 1 with serial number in the Trade Register J40/3936/2020, unique tax registration code 42413452 (hereinafter “ADARA SPA” or “we”). For the purposes of data protection legislation, we are a controller when processing your personal data.
Since we are always open to finding out your opinions, as well as to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact the DATA Protection Officer at the contact email email@example.com or by post or courier at Horia Macelariu no 24, Sector 1 Bucharest – with the mention: to the DATA Protection Officer OF ADARA SPA.
What categories of personal data do we proccess
In general, we collect your data. directly from you, so you have control over the type of information you provide us. As an example, we receive information from you. Such:
When placing an order, you provide us with information such as: the desired product, first and last name, delivery address, billing details, payment method, phone number, bank card details, etc.
We may also collect and process certain information about your behaviour while visiting our website or using the smartphone app to personalize your online experience and provide you with offers tailored to your profile. We invite you to learn more about this by consulting the section on the purposes of processing below.
We do not collect or otherwise process sensitive data included by the General Data Protection Regulation into special categories of personal data. We also do not wish to collect or process data of minors under the age of 16.
What are the purposes and grounds of processing
We will use your data. for the following purposes:
For the provision of Adara SPA services for your benefit.
This general purpose may include, where appropriate, the following:
a) Processing of orders, including taking, validating, dispatching and invoicing them;
b) Resolution of cancellations or problems of any kind relating to an order, the services purchased;
c) Return of products in accordance with legal provisions;
d) Reimbursement of the value of the products in accordance with the legal provisions;
e) Providing support services, including providing answers to your questions about your orders or Adara SPA services or Adara SPA partners.
Processing your data for these purposes is in most cases necessary for the conclusion and execution of a service between Adara SPA and you. Certain processes subsumed to these purposes are also required by applicable law, including tax and accounting legislation.
We want to keep you up to date on the best deals for the products/services you are interested in. In this respect, we can send you any type of message (such as: e-mail/SMS/telephone/mobile push/webpush/etc.) containing general and thematic information, information on products similar or complementary to those you have purchased, information on offers or promotions, information on added services. We always ensure that these processes are carried out with respect for your rights and freedoms. decisions made on the basis of them have no legal effect on you. and does not affect you to a significant extent.
In most cases, we base our marketing communications on your consent. Advance. You can change your mind and withdraw your consent at any time by:
– Access the unsubscribe link displayed within the messages you receive from us; or by
– Contact Adara SPA using the contact details described above.
In certain situations, we can base our marketing activities on our legitimate interest in promoting and developing our business. In any situation where we use information about you. for a legitimate interest of ours, we take care and take all necessary measures to ensure that your rights and freedoms are not in the right to use the rights and freedoms of the fundamental principles are not affected. However, you can ask us at any time, by the means described above, to stop processing your data. for marketing purposes, and we will comply with your request.
To defend our legitimate interests
There may be situations where we use or transmit information to protect our rights and business. These may include:
– Measures to protect the website and users of the Adara SPA platform from cyberattacks:
– Measures to prevent and detect attempted fraud, including the transmission of information to the competent public authorities;
– Measures to manage the various other risks. The general basis of these types of processing is our legitimate interest in defending our business, being understood that we ensure that all measures we take guarantee a balance between our interests and your rights and freedoms. Fundamental.
How long we keep your personal data
As a general rule, we will store your data. personal data for an indefinite period. You may request that certain information be deleted at any time and we will comply with such requests, subject to the preservation of certain information even after the account is closed, in situations where applicable law or our legitimate interests require it.
Whom do we transfer your personal data to
Where applicable, we may transmit or provide access to certain personal data of yours. the following categories of recipients:
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
We make sure that access to your personal data is available to you. by third-party legal persons governed by private law shall be carried out in accordance with the legal provisions on data protection and confidentiality of information, on the basis of contracts concluded with them.
To what countries do we transfer your personal data
We currently store and process your data. personal data on the territory of Romania.
However, we may transfer some of your data. entities located in the European Union or outside the Union, including countries to which the European Commission has not recognized an adequate level of protection of personal data.
We will always take steps to ensure that any international transfer of personal data is carefully managed in order to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, other safeguards, such as standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for the Protection of Personal Data Transferred from within the EU to the United States of America.
You can contact us at any time, using the contact details set out above, to learn more about the countries where we transfer your data and the guarantees we have implemented with respect to these transfers.
How do we protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, in accordance with industry standards.
Transmission of your data personal data is done using encryption algorithms and we store them on secure servers, while ensuring data redundancy.
To make payments we use the services of the MobilPay payment processor. Any payment information is encrypted.
Despite the steps taken to protect your personal data, you may not be personal data, we would like to point out that the transmission of information over the Internet, in general, or through other public networks, is not completely secure, with the risk that the data will be seen and used by unauthorized third parties. We cannot be responsible for such vulnerabilities of systems that are not under our control.
What rights do you have
The General Data Protection Regulation recognizes a number of rights in relation to your data. Personal. You can request access to your data, correct any mistakes in our files, and/or object to the processing of your data. Personal. You may also exercise your right to complain to the competent supervisory authority or to seek justice. If applicable, you may also have the right to request the deletion of your personal data. personal data, the right to restrict the processing of your personal data. and the right to data portability.
More information on each of these rights can be obtained by consulting the table below.
In order to exercise your rights, you can contact us using the contact details set out above. Please note the following if you wish to exercise these rights:
Identity. We take seriously the confidentiality of all records containing personal data. For this reason, please send us your requests. on such records using your email address. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.
Honoraries. We will not charge you any rights to exercise your data. personal data, unless your request is valid. access to information is unfounded, i.e. repetitive or excessive, in which case we will charge a reasonable amount in such circumstances. We will inform you of any fees applied before you resolve your request.
Duration of response. We intend to respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made several requests, in which case we are expected to respond within a maximum of two months. We’ll let you know if we need more than a month. We may ask you if you can tell us exactly what you want to receive or what you are worried about. This will help us act faster and shorten the response time to your request.
Third-party rights. We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.
You can ask us:
- To confirm that we process your personal data;
- To provide you with a copy of this data;
- To provide you with other information about your personal data. personal data, such as the data we
- What we use, to whom we disclose it, if we transfer it abroad and how we protect it, how long we retain it, what rights you have, how you can make a complaint, where we obtained your data, insofar as the information has not already been provided to you by this information.
You may ask us to rectify or supplement your inaccurate or incomplete personal data.
We may try to verify the accuracy of the data before it is corrected.
You can always ask us to delete your personal data.
We are under no obligation to comply with your request. to delete your data. personal data if the processing of your personal data is not related to the personal data. Personal data is required:
- for compliance with a legal obligation;
- for the establishment, exercise or defence of a right in court.
There are certain other circumstances in which we are not obliged to comply with your request. delete data, although these two are the most likely circumstances in which we may refuse this request.
Restricting data processing
You may ask us to restrict the processing of personal data, but only if:
- their accuracy is disputed (see rectification section) to allow us to verify their accuracy;
- processing is illegal, but you do not want the data deleted;
- they are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court;
- you have exercised your right to object and verifying whether our rights prevail is ongoing.
We can continue to use your data. personal data following a request for restriction, where:
- we have your consent;
- to establish, exercise or defend a right in court;
- to protect the rights of Adara SPA or another natural or legal person.
You can ask us to provide your personal data in a structured, commonly used and readable format, or you can request that it be “ported” directly to another data controller, but in each case only if:
processing is based on your consent. or on the conclusion or performance of a contract with you; And
processing is done by automatic means.
You may object at any time, for reasons related to your particular situation, to the processing of your personal data. personal information on the basis of our legitimate interest, if you consider that your rights and freedoms are not valid. fundamental rights prevail over this interest.
You can also object to the processing of your data at any time. for direct marketing purposes, without invoking any reason, in which case we will cease this processing as soon as possible.
You have the right to file a complaint with the supervisory authority about the processing of your data. Personal. In Romania, the contact details of the data protection supervisory authority are as follows:
National Supervisory Authority for Personal Data Processing
General. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212;
Without affecting your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will make every effort to resolve any matter amicably.
Please note that you can contact the DATA Protection Officer at any time by submitting your request in any of the following ways:
– by e-mail to: firstname.lastname@example.org or – by post or courier at: Bucharest, sector 1, Horia Macelariu no 24, 6th floor, ap 11, room 3– with the attention of the DATA Protection Officer ADARA SPA.