Privacy Policy

The security of your data is the most important for us, that’s why we treat with SERIOUSNESS and INVOLVEMENT every aspect of your data protection. Moreover, we AMBITION to offer you a unique experience both in the online shop and in the showroom in Bucharest, helping you to choose the best solution for your home.

What’s happening starting 25 May 2018?

From this date, Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) known as GDPR (General Data Protection Regulation) will be implemented. This means that any Operator/entity processing personal data must apply these new requirements and provide in a transparent way information on how the data is processed.

Why is my data processed?

Considering the need to comply with the GDPR provisions, as well as the fact that we are dedicated to take care of your personal data (which may include name, surname, e-mail address, etc. depending on the purpose of the processing) that are in our database, we inform you that they are used only for the purpose of successfully fulfilling the processes carried out in relation to you (we mention some processes without limitation: RESERVATION/SALE/DELIVERY OF ORDERS, TRANSPORT and DELIVERY, GUARANTEES and SERVICE, maintenance of customer relations – CUSTOMER SUPPORT SERVICE, recruitment processes).

What options do I have?

To exercise your rights regarding the processing of personal data, please consult the section Rights of the data subject.

How do I find out more about the new regulations?

We are committed to the protection and security of your data and we want you to be informed and make an informed decision about how the information you provide to us is used.

In this regard, please also refer to the following pages for more information on the application of the “GDPR” as of 25 May 2018 and how it translates into our relationship.

How can I contact you?

If you still have any questions or would like further information about data protection, please email us at office@vladila.com and we will get back to you as soon as possible.

Note: AESTHETIC INDESIGN complies with all legislative measures on the protection of personal data.

INFORMATION ON THE APPLICATION OF “GDPR” WITHIN AESTHETIC INDESIGN SRL

0. INTRO:

As of 25 May 2018, Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as “GDPR Regulation” applies.

Please refer to the information in this document as it expresses Aesthetic Indesign’s policy on the processing of personal data.

Within AESTHETIC INDESIGN SRL we process personal data exclusively within the framework of the legal provisions on the protection of personal data see legal basis.

DEFINITIONS:

● Controller = The controller responsible for data processing within the meaning of the GDPR Regulation is AESTHETIC INDESIGN S.R.L., a privately owned company, registered at the Trade Register with No. J15/58/2018, fiscal code 38697577 and registered office at Str. Ciprian Porumbescu 7, Targoviste, Dambovita, hereinafter referred to as “the Controller” or “AESTHETIC INDESIGN”.

● Data Protection Officer (DPO) contact details = Address to which requests for information on the processing of personal data may be sent: Mun. Ciobanasului, 20, AESTHETIC Work Point or at the e-mail address: office@vladila.com

● Cookies = A “cookie” is a small file, usually consisting of letters and numbers. It is downloaded into the memory of a computer or other type of device used for browsing the internet (smartphone, tablet, etc.) when the user accesses a particular website.

● Data subject for the purposes of the GDPR Regulation = an identified or identifiable natural person (who can be identified, directly or indirectly, in particular by reference to an identifier: name, identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity). The data subject may be the applicant for a service offered by the Operator, as well as any other natural person whose personal data is transmitted to the Operator (for example, a client or potential client, a candidate for a specific job vacancy, a user of the Operator’s website, etc.).

● Categories of data processed = Personal data (first name, surname, date of birth, address, telephone number and e-mail address, etc.) are processed by us only when you enter these data in a box on the website or send them to us by e-mail.

● Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. THE PURPOSES AND LEGAL BASIS OF THE PROCESSING OF YOUR DATA:

According to Regulation (EU) 2016/679 and related legislation, the purposes for which we process your personal data are strictly related to the relationship between AESTHETIC INDESIGN and the data subject. The information you provide to us is treated with the utmost confidentiality and exclusively for the purposes for which it was collected.

Please see below for details of the purposes for which we process data and the legal basis:

1.1. Contracting and customer relationship management::

a. Accessing the website:

Each time a user accesses a page of our offer and each time a file is opened, the access data is saved by us and partially by third parties in the form of protocol files. Each set of data includes: the web page from which you access our site, the IP address, the date and time of access, the client’s request, the http response code, the amount of data transferred, information about the browser and the operating system used.

b. Geographic location:

By means of geographic location, using the IP address, it is technically possible to estimate the location of the Internet user. After the end of the current session, the IP address is not stored with us for the purpose of geolocation.

Note: Certain traffic data (such as IP addresses or other identifiers of the devices with which you access our site) may in certain circumstances be personal data and we will treat it as such.

c. Customer account details:

When creating a customer account using the “new customer” option, your data will be saved in the AESTHETIC INDESIGN database. You have the possibility to request the deletion of your data and your customer account at any time. If you place an order on our website, your data will be processed for the purpose of successfully completing the sales process.

d. Data for placing an order:

The stored personal data will be used for the purpose of carrying out contracts and processing your requests. After the conclusion of the contract or your request, your data is saved taking into account the retention periods according to tax and commercial legislation and where applicable for a period necessary to protect the rights of the Operator.

➢ LEGAL GROUNDS: the legitimate interest of the Operator to avoid online fraud and to ensure the general functionality of the website, the performance of a contract and the consent of the data subject, as appropriate.

1.2. Business administration: COOKIES Policy

●To improve your online browsing experience, we use cookies to facilitate visitors’ use of the AESTHETIC INDESIGN online store.

●In general, the role of cookies is to ensure quick and easy interaction between users and websites. Cookies are also used so that users can easily resume their activities the next time they visit a previously visited website. Basically, cookies tell the server which pages to display to the user, without the user having to remember which pages they have browsed or to browse the whole site from the beginning. Please refer to the Cookies Policy for detailed information.

➢ LEGAL GROUNDS: the legitimate interest to continuously provide improved services to users of the AESTHETIC INDESIGN website.

Note: In the event that we intend to process your personal data for a purpose other than those mentioned above, we will provide you, prior to such further processing, with information on the secondary purpose and any relevant information.

2. YOUR RIGHTS AS A DATA SUBJECT WITH REGARD TO THE PROCESSING OF PERSONAL DATA PROVIDED:

2.1. Rights of the data subject and how they can be exercised

According to the GDPR Regulation, as a data subject you benefit from a combination of rights, namely:

a. Right to information and access to personal data: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, access to that data.

b. Right to rectification: the right to request from the Operator and to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or to obtain the completion of personal data that are incomplete, with the mention that in the case of an online account these changes can be made personally in the editing section of the account data.

c. Right to erasure of data (“right to be forgotten”): the right to obtain the erasure of personal data relating to you without undue delay if certain grounds mentioned in the GDPR Regulation apply.

d. Right to restriction of processing: the right to obtain restriction of processing in certain cases.

e. The right to data portability: the right to receive your personal data and to transmit them to another controller.

f. Right to object: the right to object at any time to the processing of personal data concerning you, in accordance with the GDPR Regulation.

g. The right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent.

h. The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that your data has not been processed in accordance with the law.

➢ How can you exercise these rights?

To exercise the rights mentioned above, please send a written request, dated and signed to the e-mail address: office@vladila.com, or to the postal address: str. Ciobanasului nr 20, Bucharest, to the attention of the data protection officer.

➢ How soon do we respond to your requests?

Within a maximum of one month, calculated from receipt of your request, you will be provided with information on the action taken or, where applicable, on the reasons why the requested action cannot be taken.

Note: Please note that in order to comply with a request for access to personal data we will take all reasonable steps to verify the identity of the data subject.

Also, according to the GDPR Regulation, the above-mentioned response time may be extended by up to two months if necessary, taking into account the complexity and number of requests, and we will inform you about this, if necessary.

3. THE RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA:

Recipients processing personal data within the European Union are obliged to comply with the same legal provisions, providing the same level of protection as the Controller.

3.1. Transmission of data for order processing purposes

Personal data stored by AESTHETIC INDESIGN is transmitted to our collaborators for the purpose of order completion/delivery. For example, your data will be transmitted to courier companies if you opt for delivery by courier.

If you select the option to pay online with a bank card, it is important to know that this is done securely on the website provided by the payment processor, and AESTHETIC INDESIGN only transmits to the payment processor data related to your order (AESTHETIC INDESIGN does not access or process any personal data related to your bank card).

3.2. Forwarding to public institutions, courts, as well as authorities competent to investigate the commission of criminal acts

In special cases, when required by law, AESTHETIC INDESIGN may provide the competent institutions with information on personal data.

3.3. Transmission to other third parties

In order to provide you with the most enjoyable online experience, we are constantly working to improve/maintain the software we use. To this end, we have signed development contracts with companies specialising in the field of programming and software maintenance.

3.4. Transmission of data to organisations outside the EU

Exceptionally, your data may also be transferred to or accessed by entities outside the European Union, including in countries to which the EU does not recognise an adequate level of personal data protection. These situations arise in particular when we are talking about the use of online platforms/programs/tools for order processing, promotion or related IT infrastructure. For example, in the case of the use of Amazon Web Services infrastructure or applications offered by Google or Microsoft, although the infrastructure as such is located in the European Union, it can be accessed by the parent organisations in the country of origin. In all such situations, AESTHETIC INDESIGN will take the necessary measures to ensure that your data is protected, such as standard contractual clauses issued by European bodies or relevant certifications on the matter and recognized within the European Union.

4. LEGAL BASIS

For even more details you can consult the legal basis:

●Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (accessible at http://dataprotection.ro/?page=Regulamentul_nr_679_2016 ).

● Law No 506/2004 on the processing of personal data and protection of privacy in the electronic communications sector.

● Clauzele contractuale standard (CCS) la linkul:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Top management is committed to ensuring that this privacy policy is respected by all employees through the implementation of internal procedures specific to personal data protection rules, in accordance with the legal basis for their processing.