Privacy policy

Browsing the pages of our website is possible without any declaration of personal data. However, for certain specific situations such as completing a commercial transaction/purchasing a product on www.divaniesofa.ro , completing a quiz, a questionnaire or participating in a competition, certain personal data may be collected and processed from data subjects. If the processing of personal data is necessary and there is no statutory basis for this processing, we undertake to obtain consent from the data subject. The processing of personal data – such as the name, surname, address, e-mail address, telephone number of a data subject – will always be carried out in accordance with the provisions of Regulation no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“the Regulation”) and in accordance with the data protection regulations specific to the country in which it operates. www.divaniesofa.ro . Through this Policy our company would like to inform the general public about the nature, scope and purpose for which we collect and process personal data. In addition, the data subjects are also informed about their rights, rights regulated by the Regulation. As the operator, LUXURY FURNITURE SRL has implemented numerous technical and organizational measures to ensure complete protection of personal data.

1. Definitions

This Policy is based on the Regulation as well as any and all applicable laws regarding the protection of personal data. The Policy must be understandable both to the general public and to our customers and business partners. To ensure this, we will explain the terminology used. In this Policy we will use, inter alia, the following terms:

Personal data or Personal data refers to any information that makes it possible to identify a natural person (data subject).

Data subject – means an identified or identifiable natural person. An “identifiable” natural person is one who can be identified, directly or indirectly, including by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity,

Processing – means performing any operation or set of operations on Personal Data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure (by transmission, dissemination or otherwise making available), alignment or combination, blocking, erasure or destruction,

Restriction of processing – refers to the marking of processed personal data with the aim of limiting their processing in the future,

Profiling – refers to any authorized form of processing of personal data consisting of using personal data to evaluate certain personal aspects characteristic of a natural person, in particular to analyze or predict aspects relating to a natural person's performance at work, economic situation, health, personal preferences, interests, reliability, location or movements,

Pseudonymization – is the processing of personal data in such a way that the personal data can no longer be attributed to a data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person,

Controller or processor responsible for processing – is the natural or legal person, public authority, agency or other body which, alone or with the assistance of third parties, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for his nomination may be provided for by Union or Member State law,

Recipient – ​​is a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular investigation in accordance with Union or Member State law shall not be considered recipients; the processing of those data by public authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing.

Third party – is a natural or legal person, public authority, agency or other body other than the data subject, operator, processor and persons who, under the direct authority of the operator or processor, are authorized to process personal data,

Consent – ​​the data subject's consent is any freely given, specific, informed and clear indication by which the data subject, by a statement or by a clear affirmative action, signifies agreement to the processing of his or her personal data.

2. Name and address of the operator www.divaniesofa.ro

LUXURY FURNITURE SRL based in Otopeni, Ilfov County, Phone: 0731 839 768, Email: divaniesofa@gmail.com, Website: www.divaniesofa.ro .

3. Address of the data protection officer

Any data subject may at any time contact us directly with any questions or suggestions regarding the protection of personal data at the following e-mail address dpo@divaniesofa.ro

4. Cookies

Internet pages www.divaniesofa.ro use cookies. Cookies are text files that are stored on a computer by the Internet browser. Many websites and servers use cookies. Many cookies contain a code called a cookie. A cookie ID is a unique identifier for the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the Internet browser in which the cookie was stored. This allows visited websites and servers to differentiate the individual browser of the data from other Internet browsers that contain other cookies. A particular Internet browser can be recognized and identified using a unique cookie code. By using cookies, www.divaniesofa.ro can provide website users with more user-friendly services that would not be possible without the setting of cookies. With the help of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as mentioned above, to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. The user of a website that uses cookies, for example, does not have to enter access data every time the website is accessed, because this is taken over by the website and the cookie is thus stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart by means of a cookie. During use, we may automatically collect information such as the IP addresses from which you access the site and the browser you use, and you agree to the storage of certain information on your computer ("cookies"), all in order to ensure optimal access to the site and its operation by you.

5. Subscribe to our newsletters

On the website www.divaniesofa.ro users are given the opportunity to subscribe to the company's newsletter. www.divaniesofa.ro informs its customers and business partners regularly by means of a newsletter about the company's offers. The company's newsletter can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers to receive the newsletter. A confirmation email will be sent to the email address registered by the data subject for the first time for the newsletter, for legal reasons, via the double opt-in procedure. This confirmation email is used to prove whether the holder of the email address is authorized to receive the newsletter. During the registration for the newsletter, we store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary to understand possible inappropriate uses of a data subject's email address at a later date, and therefore serves the purpose of legal protection. The personal data collected as part of the registration for a newsletter will only be used to send the newsletter. In addition, those who register for the newsletter will be informed by email, as long as this is necessary for the newsletter service or for a registration in question, as this may be the case in the event of changes to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of the personal data collected by the newsletter service to third parties. Registrations for our newsletter can be terminated by the data subject at any time. The consent to the storage of personal data, given by the data subject for the receipt of the newsletter, can be revoked at any time. There is a link in each newsletter for unsubscribing.

6. Possibility of contact via website

Websites www.divaniesofa.ro contain information that enables a brief electronic contact with our company, as well as direct communication with us, by including a general email address. If a data subject contacts us by email or via the contact form, the personal data voluntarily transmitted by him/her are automatically stored. Such personal data, voluntarily transmitted by a data subject to the controller, are stored for the purpose of processing and contacting the data subject.

7. Routine deletion and blocking of personal data

LUXURY FURNITURE SRL will process and store personal data of the data subject only for the period necessary to fulfill the purpose of the storage, or for the period that is provided for by the European legislator or by other applicable laws. If the purpose of the storage is not applicable, or if the storage period provided for by the applicable legislation in force expires, the personal data are deleted, in accordance with legal requirements.

8. Rights of the data subject

The data subject's right of access. In order to exercise the right of access, the data subject may at any time contact www.divaniesofa.ro with a request in this regard to obtain a report of personal data;

Right to rectification. Each data subject has the right to obtain rectification of personal data when they are incorrect or have undergone certain changes or need to be completed.

Right to erasure. Each data subject has the right to request the erasure of personal data as follows: i) when the data are no longer necessary for the purposes for which they were collected or processed, ii) the data subject withdraws his or her consent on the basis of which the processing is carried out, iii) the data subject objects to the processing in accordance with Article 21(1) of the Regulation and there are no legal grounds for the processing, or the data subject objects to the processing in accordance with Article 21(2) of the Regulation, iv) the personal data have been processed unlawfully or a legal provision in force requires their erasure.

Right to restriction of processing. Each data subject has the right to obtain restriction of processing where one of the following applies: i) the accuracy of the personal data is contested by the data subject, ii) the processing is unlawful and the data subject opposes the erasure of the personal data but requests the restriction of their use instead, iii) www.divaniesofa.ro no longer needs the personal data for the purposes of processing them, but they are required by the data subject for the establishment, in order to exercise certain rights, iv) the data subject has objected to the processing in accordance with Article 21(1) of the Regulation pending the verification of whether the legitimate grounds of the www.divaniesofa.ro prevail over those of the data subject.

The right to data portability. Each data subject has the right to request the transfer of personal data to a third party or to the data subject himself.

Right to object. Each data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her based on points (e) and (f) of Article 6(1) of the Regulation. This also applies to profiling. www.divaniesofa.ro will no longer process personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. If www.divaniesofa.ro processes personal data for direct marketing purposes, where there is prior consent, the data subject shall have the right to object at any time to processing of his or her personal data for such marketing. This applies to profiling to the extent that it relates to such direct marketing. If the data subject objects to the processing carried out by www.divaniesofa.ro for direct marketing purposes, then www.divaniesofa.ro will no longer process his/her personal data for these purposes. In addition, the data subject has the right, on grounds relating to his/her particular situation, to object to processing of his/her personal data by the www.divaniesofa.ro for scientific or historical research purposes, or for statistical purposes, in accordance with Article 89(1) of the Regulation, unless the processing is necessary for the performance of a task carried out in the public interest.

Individual decision-making, including profiling. Each data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, as long as the decision is not based on the data subject's explicit consent. www.divaniesofa.ro will implement appropriate support measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of www.divaniesofa.ro , to express their point of view and to challenge the decision.

The right to withdraw consent. Each data subject has the right to withdraw consent to the processing of personal data at any time.

The right to lodge a complaint with the supervisory authority – if the data subject considers that his or her legitimate rights in connection with the processing of personal data have been violated, he or she may lodge a complaint in this regard with the National Supervisory Authority for the Processing of Personal Data, headquartered at B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania.

If you wish to exercise your rights or send us a notification/request, please contact us at the contact details indicated in this Policy. www.divaniesofa.ro will respond to you as soon as possible but no later than 30 days. For any delays we will notify you and provide you with justified reasons for the delay.

9. Legal basis for processing

Art. 6(1) lit. of the Regulation serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when the processing operations are necessary for the supply of goods or for the provision of any other service, the processing is based on Art. 6(1) lit. b of the Regulation. The same applies to processing operations that are necessary for the performance of pre-contractual measures, for example in the case of inquiries regarding our products or services. Our company is subject to a legal obligation that requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c of the Regulation. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor was injured in our company and the name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) lit. d of the Regulation. Finally, the processing operations could be based on Art. 6 (1) lit. f of the Regulation. This legal basis is used for processing operations that are not covered by any of the legal grounds mentioned above, if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, unless these interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are specifically permitted because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is the controller's customer (recital 47 of sentence 2 of the Regulation).

10. Legitimate interests pursued by the operator or a third party

Where the processing of personal data is based on Article 6(1)(f) of the Regulation, our legitimate interest is to conduct our business in the interests of the well-being of all our employees and shareholders.

11. The period for which personal data will be stored

Personal data will be kept only for the period necessary for the purpose for which they were collected. After the expiry of that period, the corresponding data will be deleted. Only those personal data that are part of acts / documents for which the law provides for an archiving period will be kept and upon expiry of the legal archiving period they will be destroyed.

12. Providing personal data as a legal or contractual requirement

The requirement necessary to conclude a contract; The obligation of the data subject to provide personal data; the possible consequences of failure to provide such data

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information about the contractual partner). Sometimes it may be necessary to conclude a contract under which the data subject provides us with personal data, which must then be processed by us. The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with him or her.

13. Protection of personal data

www.divaniesofa.ro applies an internal framework of policies and minimum standards regarding the protection of personal data. These policies and standards are updated periodically to comply with regulations and market developments. In accordance with the legal provisions in force, we take appropriate technical and organizational measures (policies, procedures, security, etc.) precisely to ensure the confidentiality and integrity of personal data as well as to ensure the necessary framework for their processing.

By creating a user account on our website, the user expressly declares that he has acknowledged his rights and obligations in accordance with the provisions of these regulations and undertakes to comply with the terms and conditions of use of the website.

At the same time, the user expressly agrees that his personal data will be processed, within the limits and conditions described herein, by LUXURY FURNITURE SRL, for future commercial communications. The data will be kept by the operator until the moment of unsubscribing. At the moment of unsubscribing, the data will be deleted from the database of the operator and the authorized persons (if applicable). The user expressly declares that he has become aware that he can exercise free of charge the right to information, access, restriction, rectification, deletion, the right to data portability, opposition, not to be subject to an automated individual decision-making process, the right to address the courts or to file a complaint with the ANSPDCP by means of a written request sent by email to the address: dpo@divaniesofa.ro. The withdrawal of consent at any time will not affect the legality of the processing carried out based on the consent before its withdrawal. The data will be kept by the operator for a maximum period of 3 years from the date of preparation of this statement. At the end of the retention period, the data will be deleted from the database of the operator and the authorized persons (if applicable).