Privacy Policy

CONTENTS:

 

1. When does it apply?

2. What is the purpose of this policy?

3. What is personal data?

4. For what purpose do we collect it?

  • CONTRACTUAL purposes

  • FUNCTIONAL purposes

  • MARKETING purposes

5. How do we collect it?

6. What rights do you have?

  • Right of access

  • Right to modify and delete

  • Right to restrict processing

  • Right to data portability (export)

  • Right not to be subject to an automated action

  • Right to lodge a complaint

7. To whom do we disclose the data?

8. How do we ensure data security?

9. What are the retention periods?

10. How do we handle requests from minors?

11. What do we do in the event of security incidents?

12. What records do we keep?

 

 1. When does it apply?

 

The Privacy Policy applies to the personal data of those who wish to become, are, or have been customers of REMAX Romania, including data collected, used, or disclosed while using our company's website, available at www.REMAX.ro. When we refer to " REMAX Romania”, "we" or “our company” in this statement, we refer to SC Maximo Franchise S.R.L.

 

You can manage your consent regarding the purposes for which personal data will be used by sending an email to [email protected] , or you can write to us at Bd. 21 Decembrie 1989, no. 77, building B, 1st floor, room 1.1, Cluj Napoca.

 

This policy is valid as of 25.05.2018

 

2. What is the purpose?

 

When you use our website, you entrust us with some of your personal data. We understand and appreciate this. In everything we do, we strive to protect it and to give you the best possible control over it.

 

The Privacy Policy helps you understand what personal data we collect about you, how we use your personal data, and what choices you have regarding its use.

 

We are committed to maintaining the accuracy, confidentiality, and security of your personal data. In order to be consistent with legislative changes and/or the practical realities we face, we reserve the right to adjust this policy at any time, with changes becoming binding from the moment they are published on the website.

 

3. What is personal data?

 

We want you to understand as clearly as possible what “personal data” means.

 

Personal data is information about an identified or identifiable person. Examples of such data: surname, first name, address, telephone number, email, identity card data, personal identification number, banking information, cookies, computer IP address, mobile device IDs, information from your web browser (such as browser type and browser language), the actions you take on our website, etc.

 

4. For what purpose do we collect it?

 

Personal data is collected for the effective conduct of commercial relations, to provide you with the best possible services (fast deliveries, electronic payments, etc.), to constantly improve the functionalities of our website, or to bring advertisements and promotions relevant to you to your attention.

 

We limit the personal data we collect to what is relevant for its particular processing. We do not process your personal data in ways that are incompatible with the purposes for which the information was collected or subsequently authorized by you.

 

CONTRACTUAL data (mandatory) - for starting the process of concluding a contract and for the effective conduct of the commercial relationship

Data (surname, first name, telephone, email, etc.) may be collected so that we can answer your questions about our products and services (including through the use of a dedicated CRM-type sales solution), and so that we can organize the processing and effective delivery of your orders. This data is collected through dedicated forms on the website such as: contact, request offer, online order, request consultancy, my account, etc. This data is generically referred to as “contractual data”. Without it, your order cannot be taken over (for example: we do not know how to answer your questions), cannot be processed (for example, tax documents cannot be issued for collecting the value of the products, etc.) and cannot be delivered (by courier or by other accepted methods). You will not be able to benefit from our services or products using our website without providing this data.

We may disclose your personal data without giving you the opportunity to opt out when we use third-party processors (courier companies, online payment processors, etc.) to perform services on our behalf and according to our instructions.

Customers cannot opt out of receiving emails related to the processing, fulfillment, and delivery of the order (or other processes associated with this purpose).

The legal basis for processing this data is our legitimate interests (Article 6 para. 1 letter (f) of the General Data Protection Regulation).

 

FUNCTIONAL data - for the best possible experience when using the website

Direct data (surname, first name, telephone, email, etc.) may be collected to ensure a better experience when using the website. Data is collected through forms on the website such as: price alert (to receive a notification when a price decreases), stock alert (to be alerted when a product is back in stock), abandoned carts (to remind you of unfinished purchases), review request, etc.

This data is generically referred to as “data for functional purposes”.

Indirect data may be collected and used to create a better-structured website (e.g., Google Analytics reports, etc.). This data helps us see the visitors' navigation flow on the website, the browsing volume, as well as other useful information relevant to improving the website, in order to offer you the best possible browsing experience.

All these functionalities are designed to provide you with the best information and purchase options.

If you do not agree to the use of data for this purpose, you cannot benefit from  the advantages of these functionalities.

The legal basis for collecting this data is consent (Art. 6 paragraph (1) letter (a) of the General Data Protection Regulation).

 

MARKETING data - for a better-structured website, relevant advertising, and social media information

Personal data is collected, such as direct data (surname, first name, telephone, email, etc.) or indirect data (cookies, computer IP address, location, mobile device IDs, etc.).

Direct data is collected for newsletter subscriptions (sending newsletters, commercial offers, etc.). If you no longer wish to receive such materials, you can access the "unsubscribe" link located at the bottom of our company's marketing emails.

Cookies are data files that are sent from a website to a browser in order to record information about users for various purposes. We use cookies and similar technologies. For additional information, please see the page on our website containing the cookie policy.

The data may also be used to display advertisements tailored to your preferences (e.g., Google Remarketing, Facebook Pixel, etc.). You may be shown advertisements for products in which you have been interested or which you have viewed.

Our website allows you to connect with social media networks, such as Facebook (facebook.com), Linkedin (linkedin.com) and Twitter (twitter.com) ("Social Media"). By connecting, your IP address and the page you visit on our website may be collected. A cookie is also set to allow social media applications to function properly. You may be offered an option by your social media accounts to post information about your activities on your personal profile page on the social media network, to allow other users access to that information in your network.

We generically refer to this data as ”data for marketing purposes”.

The legal basis for collecting this data is consent (Art. 6 paragraph (1) letter (a) of the General Data Protection Regulation).

 

5. How do we collect it and how do you manage your consent?

 

When you interact with our website, we offer you the possibility to give and withdraw your consent for the use of your data at any time.

 

We provide website visitors and customers who provide personal data with the means to choose how we use this data. Consent regarding the processing of personal data may be requested when creating an account, when placing an order (with or without an account), when submitting a form, as well as for any other purpose that involves granting consent, by accessing a general control panel (cumulative or individual, for each data category or individual purpose) or by another technical manner created for this purpose.

 

You will have the possibility to explicitly give your consent regarding the purposes for which personal data will be used and to manage it subsequently, in accordance with the regulations in force.

 

6. What rights do you have?

 

We make every effort to guarantee the rights you have, in accordance with the legislation in force.

 

You have the right to access your personal data. Accordingly, where applicable, we provide you with access to the personal data we keep about you. We also give you the option to choose whether you wish to receive offers and promotions from us, as well as to correct, modify, or delete your information.

 

We may limit or refuse access to personal data if the efforts or expenses of providing access would be disproportionate to the risks to your privacy, or if the rights of persons other than you would be violated. Other reasons for refusing or limiting access may include restrictions imposed by the legislation in force or other similar, justified aspects.

 

You have the right to modify and delete your personal data, especially incomplete or inaccurate data, for example, if some of the personal data you have provided (telephone number, email address, authorized person, etc.) is no longer current. 

We take reasonable measures to ensure that the personal data we process is suitable for its intended use and is accurate, complete, and up to date. In this regard, we rely on you to update and correct your personal data to the extent necessary for the purposes for which  it was collected or subsequently authorized by you.

Requests to access, modify, or delete information will be handled within 30 days.

 

You have the right to restrict processing, to object to the processing of personal data concerning you, and to request the rectification, updating, or deletion of data under the conditions of the law. This right may be exercised at any time, free of charge and without justification, except for data for which processing is a legal obligation.

 

You have the right to request portability (export) of personal data. We may limit or refuse the portability of personal data if the efforts or expenses of providing access would be disproportionate to the benefits provided in that case.

 

You have the right not to be subject to an automated individual decision.

 

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.), as well as to address the courts, in accordance with the legal provisions in force

 

7. To whom do we disclose your data and where do we transfer it?

 

We collaborate with courier companies, authorized electronic payment processors, and internet companies: Google, Facebook, etc. - all for the best possible experience with our website.

 

We may share your personal data with contracted service providers for the processing and delivery of orders (such as payment processors, courier service providers, etc.), to improve the experience of using the online store (e.g., Google Analytics, etc.) or to provide services in marketing, advertising, and publicity (Google, Facebook, Mailchimp, etc.), as well as for other purposes: accounting services, legal services, consultancy, affiliates, business partners, etc. Data disclosure is based on the fact that the services necessary for the conduct of our business cannot be provided by us. We make every effort to obtain a confidentiality commitment from them, by which they guarantee that this data is kept secure and that the provision of this personal information is carried out in accordance with the legislation in force. If our providers of hosting services, newsletter sending services, or other similar services are transferred outside the European Economic Area (EEA), efforts are made to ensure appropriate safeguards.

 

We may disclose your personal data as required by law, legal process, litigation and/or requests from public and governmental authorities in your country of residence or outside it. We may also disclose personal information about you if we determine that disclosure is reasonably necessary to ensure compliance with our terms and conditions or to protect our operations or users. Relevant information can also be found in notices regarding specific data processing activities.

 

We may also transfer personal data in the event of an audit, or in the event of the sale or total or partial transfer of our business or assets (including in the case of a merger, acquisition, joint venture, reorganization, dissolution, or liquidation).

 

8. How do we ensure data security?

 

The security of your data is important to us. We make all necessary efforts in this regard.

 

We take reasonable and appropriate measures to protect personal data against loss, misuse, and unauthorized access, disclosure, modification, and destruction, taking into account its nature. We take all internal measures to identify and ensure the security of  information, the measures being regularly checked and adapted to the state of the art. Our company uses related service providers with a reputation on the market (e.g., hosting services, software development services, marketing solutions, etc.) to achieve this objective.

 

9. What is the retention period?

 

We keep information according to legal specifications and for as long as you agree.

 

Personal data is stored for the periods specified by the legislation in force, in order to maintain records related to the activities carried out, to protect rights in court and exercise other rights according to the law and concluded contracts, and to fulfill any archiving requirements, in accordance with legal provisions. Personal data necessary for benefiting from the functionalities of our website and from promotional activities is stored for an indefinite period of time, until your account is deleted.

 

10. How do we handle requests from minors?

 

We DO NOT provide services and DO NOT deliver goods to minors except in the cases expressly provided by law.

 

Our company DOES NOT pursue, in its data processing activities, the processing of personal data of minors under the age of 16. We do not carry out direct marketing promotional activities aimed at minors. 

 

Any person who provides us with personal data guarantees that they are of legal age, respectively that they have full legal capacity. If, however, personal data is processed for a person who is not of legal age, we will stop processing this data as soon as we become aware of this fact.

 

Any processing of personal data of minors is carried out in accordance with legal requirements and in strictly determined cases. Minors who have reached the age of 14 may purchase services,  request and receive communications from our company only if they have the consent of their legal representative or guardian, according to the law.

 

11. What do we do in the event of security incidents?

 

Informing you and the authorities is the first step. Remedying the situation that has arisen is our priority.

In the event of a personal data breach, we will notify the competent data protection authorities within 72 hours, depending on the degree of risk to the customer or the website visitor. Affected customers or website visitors will also be notified regarding the breach.

 

We will take all necessary measures to remedy the situations that have arisen, in order to protect your rights.

 

12. What records are kept?

 

We keep records to demonstrate compliance with the requirements of this policy.

 

We will keep relevant records about:

a. the purpose of processing personal data;

b. the categories of data subjects and of personal data processed;

e. where possible, the expected retention periods for different categories of personal data;

f. a general description of the security measures used to protect personal data;

g. the exercise of the rights you have.