STORM MEDIA TECHNOLOGY

PRIVACY POLICY AND PERSONAL DATA PROTECTION

GDPR, General Notions

Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, also known as GDPR (General Data Protection Regulation), provides that any operator/entity processing personal data must comply with the requirements of this Regulation and provide transparent information on how the data is processed.

Your data security is important to us, which is why we take seriously any aspect regarding the protection of your data. Furthermore, in this regard, we offer you more options within the online store, contributing to choosing the best solution for your space.

The Need for Data Processing

Considering the need to comply with the provisions of the GDPR, as well as the care for your personal data (which may include name, surname, email address, etc., depending on the processing purpose) that are found in our database, we inform you that these are used only for the successful completion of the processes carried out in relation to you, such as: product reservations, sales, order processing, transportation and deliveries, warranties and service, maintaining customer relations, customer support service, etc.

We want you to be informed about how the information you provide us is used, and in this regard, please carefully consult this document to know your rights regarding the processing of personal data.

How to Contact Us

If you have any uncertainties or need further information regarding data protection, please send us an email at office@marketaroma.ro, and we will respond as soon as possible.

APPLICATION OF GDPR WITHIN STORM MEDIA TECHNOLOGY SRL

Within STORM MEDIA TECHNOLOGY SRL, we process personal data exclusively within the legal provisions regarding the protection of personal data, applying Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

DEFINITIONS:

Operator: The operator responsible for processing data is STORM MEDIA TECHNOLOGY SRL, registered with the Trade Registry under No. J40/2043/2016, VAT RO35639369, headquartered in Bucharest, Sector 3, Eufrosina Popescu Street, No. 46.

Cookies: A cookie is a small file, typically consisting of letters and numbers. It is downloaded to a computer’s memory or another type of device used for internet browsing (smartphone, tablet, etc.) when the user accesses a particular website.

Data Subject within the meaning of the GDPR: An identified or identifiable natural person by the following identification elements: name, identification number, location data, online identifier, or specific elements related to their physical, physiological, genetic, mental, economic, cultural, or social identity. The data subject may be the applicant of a service offered by the Operator, as well as any other natural person whose personal data is transmitted to the Operator (for example, a client or potential client, user of the Operator’s website, etc.).

Categories of processed data: Personal data (name, surname, date of birth, address, phone number, email address, etc.). This data is processed by STORM MEDIA TECHNOLOGY SRL only if you enter this data in a section on the website or send it to us via email. Processing personal data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

PURPOSES AND LEGAL BASIS OF DATA PROCESSING:

According to Regulation (EU) 2016/679 and related legislation, the purposes for which we process your personal data strictly concern the relationship between the Operator and the data subject. The information you provide us is treated with maximum confidentiality and exclusively for the purposes for which it was collected.

CONTRACTING AND MANAGING CUSTOMER RELATIONSHIPS:

Website access:

Each time a user accesses a page from our offer and each time a file is opened, access data is saved by us and partially by third parties in the form of protocol files. Each set of data includes: internet page from which you access our page, IP address, date and time of access, client request, HTTP response code, amount of data transferred, information about the browser program and operating system you use.

Geographic location:

Through geographic location, with the help of the IP address, it is technically possible to estimate the location of the internet user. In order to directly view our offers and products, the IP address is stored and used for geographic location. Certain traffic data (such as IP addresses or other device identifiers with which you access our website) may, under certain circumstances, constitute personal data, and we will treat them as such.

Data for the customer account:

When creating a customer account using the “new client” option, your data will be saved in the database of STORM MEDIA TECHNOLOGY SRL. You have the possibility to request the deletion of your data and your customer account at any time. If you place an order on our website, the data will be processed for the purpose of carrying out the sales process.

Data for placing an order:

Personal data stored will be used for contract execution and processing your requests. After completing the contract execution or your request, your data will be stored according to retention periods as required by tax and commercial legislation and, where applicable, for a duration necessary to protect the rights of the Operator.

Data for the newsletter service:

În momentul în care vă oferiți datele pentru a beneficia de serviciul nostru de newsletter, datele dumneavoastră sunt utilizate de STORM MEDIA TECHNOLOGY SRL doar în scopul trimiterii de mesaje de marketing direct. Prin acțiunile de marketing direct vă putem ține la curent cu produsele, serviciile și campaniile noastre, respectând dispozițiile legale în vigoare. Utilizarea datelor încetează de îndată ce renunțați la serviciul newsletter. Aveți posibilitatea de a renunța oricând și în mod gratuit la serviciul newsletter prin bifarea opțiunii “Dezabonare” sau trimiterea unui email la adresa office@marketaroma.ro prin care solicitați în mod expres dezabonarea.

Business Administration: COOKIE POLICY

To improve your online browsing experience, we use cookies that facilitate the use of the online store by visitors.

The role of cookies is to ensure a quick and easy interaction between users and the website, allowing users to easily resume their activities on subsequent visits to the previously visited website. Essentially, cookies inform the server which pages need to be displayed to the user, without the user needing to remember the pages they navigated or navigate the entire site from the beginning.

In the event that we intend to process your personal data for a purpose other than those mentioned above, we will provide you, before such further processing, with information regarding the respective secondary purpose and any relevant information.

YOUR RIGHTS AS A DATA SUBJECT REGARDING THE PROCESSING OF PROVIDED PERSONAL DATA

According to the GDPR Regulation, as a data subject, you benefit from a set of rights, namely:

a. The right to information and access to personal data: the right to obtain confirmation of whether or not personal data concerning you are being processed and, if so, access to that data.

b. The right to rectification: the right to request from the Operator and to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data, noting that in the case of an online account, these changes can be made personally from the account data editing section.

c. The right to erasure of data (“the right to be forgotten”): the right to obtain the erasure of personal data concerning you without undue delay if certain reasons mentioned in the GDPR Regulation apply.

d. The right to restriction of processing: the right to obtain the restriction of processing in certain cases.

e. The right to data portability, the right to receive the personal data concerning you and to transmit it to another controller.

f. The right to object: the right to object at any time to the processing of personal data concerning you, under the conditions of the GDPR Regulation.

g. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

h. The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that your data have not been processed in accordance with legal provisions.

Exercising rights

To exercise the above-mentioned rights, please address a written request, dated and signed, to the email address: office@marketaroma.ro, or to the postal address: Bucharest, Sector 3, Eufrosina Popescu Street, No. 46, attention to the data protection officer.

Within a maximum of one month from receiving your request, you will be provided with information on the actions taken or, where applicable, the reasons why the requested measures cannot be taken. We note that to comply with a request for access to personal data, we will take all reasonable measures to verify the identity of the data subject.

Also, according to the GDPR Regulation, the response period mentioned above may be extended by a maximum of two months if necessary, taking into account the complexity and number of requests, and we will inform you about this if necessary.

RECIPIENTS OF PERSONAL DATA

Recipients processing personal data within the European Union are obliged to comply with the same legal provisions, providing the same level of protection as the Operator.

Transferring data for order processing

The personal data stored by STORM MEDIA TECHNOLOGY SRL is transmitted to our collaborators for the finalization/delivery of orders. For example, your data will be transmitted to courier companies if you choose to have the order delivered by courier.
If you choose the option to pay online with a bank card, it is important to know that this operation is carried out securely on the website provided by the payment processor, and STORM MEDIA TECHNOLOGY SRL transmits to the payment processor only data regarding your order (STORM MEDIA TECHNOLOGY SRL does not access or process any personal data related to the bank card).

Transferring data for the newsletter service

To ensure that this service functions as desired, we use a third-party specialized in email delivery. You can unsubscribe from the newsletter service at any time – either from your account on the website or by sending an email to office@marketaroma.ro requesting explicit unsubscription.

Transferring data to public institutions, courts, and competent authorities to investigate criminal offenses

In special cases, when required by law, STORM MEDIA TECHNOLOGY SRL may provide competent institutions with information regarding personal data.

Transferring data to other third parties

To provide you with the most pleasant experience online, we constantly strive to improve/maintain the software programs used. In this regard, we have contracts for development with companies specialized in programming and software maintenance.

Social media plugins

Our website uses plugins from social media operators (e.g., www.facebook.com). All social media plugins on our website are clearly marked and distinct.

Google Adwords/Analytics web analysis service

Our website uses the “Google Adwords/Analytics” web analysis service provided by Google Inc., for statistical purposes.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”), which in turn uses cookies. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

If IP anonymization is activated, your IP address will be shortened within the member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. IP anonymization is activated on this site. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage.

Your browser’s IP address transmitted for Google Analytics purposes will not be associated with any other data held by Google. You can refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also opt-out from being tracked by Google Analytics in the future by downloading and installing

Google Analytics Opt-out Browser Addon for your browser: https://tools.google.com/dlpage/gaoptout?hl=en .
Note: Additional information is available on the following pages: Google Analytics terms of service and Google Analytics.

Transferring data to organizations outside the EU

Exceptionally, your data may be transferred or accessed by entities outside the European Union, including in countries to which the EU does not recognize an adequate level of personal data protection. These situations occur especially when we talk about the use of online platforms/programs/tools for order

processing, promotion, or related IT infrastructure. For example, in the case of using the Amazon Web Services infrastructure or applications offered by Google or Microsoft, although the infrastructure itself is located in the European Union, it may be accessed by parent organizations from the country of origin. In all such situations, STORM MEDIA TECHNOLOGY SRL will take the necessary measures to ensure that your data is protected, such as standard contractual clauses issued by European bodies or relevant certifications recognized within the European Union.

LEGAL BASIS

For more details, you can consult the legal basis:
Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (accessible at http://dataprotection.ro/?page=Regulamentul_nr_679_2016).
Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.
Standard Contractual Clauses (SCCs) at the link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en