Processing of personal data
To ensure compliance with website users’ right to personal data protection, we have implemented specific protection measures, taking into consideration Romanian legislation, as well as the requirements established by Regulation (EU) 2017/679 – applicable throughout the European Union starting from May 25, 2018 (“the Regulation“).
Personal data represents any information through which you can be identified, particularly through an identification element such as a name, identification number, location data, an online identifier or one or more elements related to your physical, physiological, genetic, mental, economic, cultural or social identity.
Our company takes all necessary measures to ensure compliance with your right to personal data protection, and these conditions represent the notification established by art. 13 or 14 of the Regulation through which we explain why we collect your personal data, how we protect this data, as well as what your rights are in connection with this data collection.
We encourage you to read this document carefully and to request any additional information or clarification you deem necessary regarding the content of this notice.
a) General considerations regarding your personal data
In accordance with Regulation (EU) 2017/679, Veroli Medax SRL will administer under secure conditions and only for the specified purposes, the personal data provided by Users. Through the Terms and Conditions, Users are informed that the personal data they provide will be processed for the purpose of providing optimal conditions by Veroli Medax SRL for internet services, goods and services provision services, advertising, marketing and publicity services, and statistical services.
Veroli Medax SRL performs the following processing operations: collection, recording, organization, storage, adaptation, modification, extraction, consultation, use and, in some cases, transmission to third parties, based exclusively and regulated by a commercial contract that ensures the security and confidentiality of data, as well as respect for user rights, of the personal data of Website Users to administer, maintain, improve and obtain information regarding the services it offers, as well as to prevent errors and information leaks through its own IT network, violations of law or contractual terms.
The personal data to be collected may be used, including through automatic profile creation (for those Users who have expressed explicit consent) and to personalize to the greatest extent possible the services offered to Users through the website as well as for marketing purposes. Automatic profile creation will not target minors’ data, their personal data not being processed for this purpose.
Personal data will be provided by Users, at their own option, when creating a valid account on the site or subscribing to a service available on the site, to benefit from the services and products offered through it. When registering on the site, certain personal data are requested from the User, such as first and last name, gender, date of birth, email address, phone, profession, habits/preferences/behavior, as well as other personal information.
The User is solely responsible for all data provided when creating the user account on the site. To confirm the data and account, the User will be notified at the email address declared when creating the account. This confirmation email serves to stop fraudulent actions by users who use other people’s email addresses to create fictitious accounts. If you receive such a message, under conditions where you have not personally registered on the site, please send us an email at contact@drolimpiuharceaga.ro to delete the respective account within a maximum of 3 working days. The email will contain, in pdf format, the current version of this Contract.
The User’s profile form contains fields that can be edited if modification or completion of the data provided when creating the account is desired.
The User is not obligated to provide this data, it being necessary i) for records about website usage and ii) for providing optimal services through it, for bringing promotional campaigns to attention, for advertising purposes, for personalized marketing and publicity actions and for the User’s access to additional facilities. The User’s refusal to provide the requested data results in non-participation in promotional actions organized through the website and non-use of facilities, additional services offered exclusively to Users with an account on this website.
The Website can be used even if the User decides not to create a profile by providing personal data, with the exceptions established within the Cookie Policy (integral part of this Contract)
According to Regulation (EU) 2017/679 and Law no. 677/2001, Users benefit from the right of access, intervention on data, the right not to be subject to an individual decision and the right to address justice. At the same time, Users have the right to oppose the processing of personal data concerning them and to request data deletion.
To exercise these rights, Users can make a written request in this regard, which they will send by email to contact@drolimpiuharceaga.ro with the specification “Personal data request”.
The Site undertakes not to send spam messages (commercial messages for which it does not have the explicit prior consent of the User) and to undertake all accessible technical means to ensure the security and confidentiality of user data.
The Site reserves the right to terminate, without prior notice, the accounts and access of members who violate the Terms and Conditions, who undertake proven activities of fraud, slander or attack on the security and confidentiality of information within the site or the company operating the site.
b) Personal data we collect, grounds for collection and purposes of collection
Within the online communication relationship established between the site and user, we collect and process your personal data, the collection and processing of these data being necessary for providing informational and promotional content to the user, following completion by them of personal data voluntarily, within the site, by accessing one or more of the sections: account creation, account update, newsletter subscription, online questionnaire completion, online form completion, to obtain personalized information or commercial benefits, within campaigns promoted on the site.
The grounds for collecting personal data on the site may be the following:
- the data subject has given consent for the processing of personal data for one or more specific purposes
- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- processing is necessary for compliance with a legal obligation to which the controller is subject.
- processing is necessary in order to protect the vital interests of the data subject or of another natural person
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
In the enumerations below we present in detail what personal data collected as well as the ground, purpose and duration of their collection. Providing the data indicated below is not mandatory for viewing the Website, except for those concerning Cookies.
The indicated data are necessary only to provide specific services for Users who transmit them.
Personal data we collect:
First name, last name, email address, phone number, geographical location data, correspondence address, social media profile links
Grounds for collecting this data: 1), 6)
Purposes of collecting personal data:
For providing access to content and responses to questions and requests transmitted by the user online, for transmitting communications, offers and benefits consisting of access to services and products
Method and period of data collection:
Within the secure database, until explicit expression of deletion desire by the user or up to 10 years from the user’s last activity on the site. After 10 years, the data will be electronically anonymized.
Personal data we collect:
Cookies, timestamps (date and time of access), site browsing history
Grounds for collecting this data: 1), 6)
Purposes of collecting personal data:
For monitoring site traffic and access history, for creating content hierarchy and identifying the most relevant content for the user.
Method and period of data collection:
Within the secure database, until explicit expression of deletion desire by the user or up to 10 years from the user’s last activity on the site. After 10 years, the data will be electronically anonymized.
c) How we store your personal data, location, retention period
We will store your personal data for a period that does not exceed the period necessary to fulfill the purposes for which the data is processed, and, in cases where we have a legal obligation to retain your personal data for a certain period of time, the retention period will be that provided by law. Depending on the specific situation, this period will vary, and may be between 1 day and 10 years.
For a good understanding of the storage method, the location where your personal data will be stored and the exact period for which this data will be kept in our records or systems, please consult the table above.
In order to guarantee the user’s right to be protected regarding the processing of personal data, we implement, for certain categories of data having a sensitive character or which are capable of affecting rights in a significant manner, special technical and organizational measures, which protect these categories of personal data.
d) User rights regarding personal data and their exercise
In order to protect data at the highest standard, the user has a series of rights regulated by law, which we present briefly below, asking you that for any additional details do not hesitate to contact the data protection officer within our Company, using the following contact details: contact@drolimpiuharceaga.ro, Str. Piata Republicii 23 Turda, phone 0745169946.
Right of access
The User has the right to obtain access to their personal data that we process, as well as the right to obtain copies thereof. At the user’s request, the first such copy will be provided by us free of charge, with any additional copies you request being subject to a fee corresponding to the effort required for extraction and formatting for transmission. The copy of personal data can be provided either in electronic format or in physical format, depending on your request and the nature of the requested data. To request information about existing personal data on the site, as well as to request partial or total deletion of this data, a request must be addressed using the email address contact@drolimpiuharceaga.ro or a letter must be sent by post or courier to the registered office of Veroli Medax SRL.
Also, the user has the right to obtain any relevant additional information (such as the reason for processing personal data, categories of personal data we collect, information regarding the processing and disclosure of this data and any other such information).
Right to data rectification
The User has the right to obtain rectification of any inaccuracies concerning their personal data processed by us. Also, they have the right to obtain completion of any personal data that is incomplete. Any user is encouraged to contact the site at contact@drolimpiuharceaga.ro whenever they observe that there is an inaccuracy regarding their personal data or that their personal data processed by Veroli Medax SRL is incomplete.
Right to data erasure
The User has the right to erasure of personal data. This right is not an absolute right, which means that the law establishes certain limitations regarding the exercise of this right (“the right to be forgotten“).
Right to restriction of data processing
The User has the right to obtain restriction of processing of their personal data that we collect and process, especially in case they contest the accuracy of the data, in case the data processing is illegal or in case the processing of this data is no longer necessary, according to law.
Right to object
The User has the right to object to the processing of personal data by us, especially in case the processing is carried out for marketing purposes or for reasons related to the particular situation in which they find themselves, in which case their data must be anonymized as soon as possible from the notification of the objection from the site’s database and their anonymization must be confirmed to the user.
Right to withdraw consent
For personal data processed based on consent, the user has the right to withdraw their consent at any time, as easily as they initially granted it. Withdrawal of consent will not affect the legality of data processing that we performed before the withdrawal of consent. The right to withdraw consent is not an absolute one, which means there are cases where data will not be deleted as a result of consent withdrawal (for example in case personal data is used for the site to comply with a legal obligation). Application of consent withdrawal applies from the moment of its registration and operation of consent withdrawal will be carried out within a maximum of 3 working days from registration.
Right to file a complaint with the competent authority
The User has the right to file a complaint with the National Authority for Supervision of Personal Data Processing regarding aspects concerning the processing of personal data by our Company.
Automated decision-making process, including profiling and the right to request that decisions based on automated data processing or which significantly affect be made by natural persons, not exclusively by computers
Personal data is collected and processed through an automated decision-making process in order to personalize the information and commercial communications addressed to you. The automated decision-making process involving health data is based on your express consent.
Within these processes, your data is protected by special security measures such as data encryption and advanced security at the database server level.
You have the right to request the modification of the way your personal data is processed automatically, by requesting the verification of the automated process through human intervention. For this purpose, please contact us at the email address contact@drolimpiuharceaga.ro.
e) Exercising your rights
In order for the user to exercise the rights specified above, to ask us any questions regarding these rights, or to ask us for clarifications regarding any of the provisions of this information, please contact us at any time using the contact information.
How to submit requests or complaints – contact person
To find out more information regarding personal data, regarding how data is collected, processed, and protected, or to ask for any clarifications regarding the items mentioned in these Terms and Conditions, any user can contact the company’s personal data protection officer at any time by emailing contact@drolimpiuharceaga.ro or by postal correspondence to Str. Piata Republicii 23 Turda.
