- When you access our website, some data is collected through cookies.
- What information we collect: name, surname, phone number, product delivery address, e-mail address, company name and identification data needed to issue the invoice (if applicable).
- How we use your data: in particular to contact you and process orders you place through our site (reservations, food commodities) to fulfill our contractual obligations, to promote your goods and our services and our legal rights and obligations.
- Disclosure of data to third parties: Provide the minimum data necessary to fulfill our contractual obligations to you, namely transport providers.
- Your data is not sold to third parties.
- How long is your information stored: Not more than necessary - according to our legal obligations (eg to maintain accounting records), or depending on any other basis on which we use the information (eg: consent, obligations contractual, legitimate interests). Information about specific user data storage periods is in the Duration of your data storage.
- How your data is secure: by using technical and organizational solutions such as: storage of information on secure servers, encryption of data transfers to and from our servers using SSL technology, encryption of site payment transactions using SSL technology, access to your personal data only when necessary.
- Using cookies and related technologies: We use cookies and similar information collection technologies, such as web beacons, on our website including essential, functional, analytical, and targeting cookies. For more information, please visit our cookies policy here: https://www.losan.ro/politica-de-utilizare-cookies.html
- Transferring your personal data outside of the European Economic Area: We will transfer your personal data outside of the European Economic Area only if we are required to do so by law or in order to perform your contractual obligations to you - when we do so, we we ensure that adequate safeguards are in place, for example: the protection of personal data to partners outside the European Union is governed by standard contractual clauses for the transfer of personal data from the Community to third countries.
- Use of automated decision-making processes: we use automated decision-making processes about our website, eg using Google Analytics tools, cookies, web beacons, or using cookies Targeting to show ads to people who visit our site on other websites (for example, using the Google AdWords Network).
- Your rights in relation to your personal data:
- the right to information -; art. 13 and 14 GDPR - You can request information about the processing of your personal data;
- right to rectification -; art 16 GDPR - you can rectify inaccurate personal data or fill it in;
- the right to delete data ("the right to be forgotten"); art 17 GDPR - you can obtain data deletion if the processing was not legal or in other cases provided by law;
- the right to restrict processing; art 18 GDRP - You may request restriction of processing if you challenge the accuracy of the data, as well as in other cases provided by law;
- the right of opposition -; art 21 GDPR - you can oppose, in particular, data processing that is based on our legitimate interest;
- the right to data portability; art 20 GDPR - you may receive, under certain conditions, the personal data you have provided to us in a format that can be read automatically or you may require that the data be transmitted to another operator;
- the right to lodge a complaint - you can file a complaint with the processing of personal data with the National Supervisory Authority for Personal Data Processing;
- the right of withdrawal of the consent; in cases where processing is based on your consent, you can withdraw it at any time. Withdrawal of consent will only have effect for the future, the processing carried out before the withdrawal remains valid;
- Additional rights related to automated decisions: You can ask for and get human intervention about that processing, you can express your own point of view and you can challenge the decision.
You can exercise these rights, either individually or collectively, very easily, simply by sending a request to our headquarters in Brasov, str. Brazilor, nr. 55 or by email at info@losan.ro.
Losan Romania SRL, through its website www.losan.ro, does not request or store any information about bank cards.
Content
- Details about our company
- What information we collect when you visit our website
- What information we collect when you contact us
- What information we collect when you interact with our website
- Using automatic decision-making systems
- How we collect information about you from third parties
- Disclosure and additional uses of your data
- Time of storing your data
- Securing your information
- Your rights to personal data
- Your right to object to data processing for certain purposes
- Sensitive personal data
- Changes to our privacy policy
Details about our company
The data operator of our site is: Losan Romania SRL, Str. Ion Clopotel nr. 14, 507075 Ghimbav, Brasov County, tel: 0268-678 100. You can contact us by writing to the above mentioned address or by e-mail at info@losan.ro.
If you have any questions about this privacy policy, please contact your data carrier.
What information we collect when you visit our website
We collect and use the information from the visitors of the website in accordance with this section and the section titled "Disclosure and Additional Use of Your Data".
Information about the web server log
We use a third-party server to host our website called ROMARG.ro, whose privacy policy is available here: https://www.romarg.ro/termeni-conditii-utilizare.html. Our web server automatically registers the IP address you use to access our website as well as other information about your visit, such as the pages you access, the information requested, the date and time of the request, the source of the website access (for example, the website or URL (link) that referred to our site) and the version of the browser and operating system.
Use of information in the web server's logs for IT security purposes
Our provider collects and stores server logs to ensure IT security. This includes analyzing log files to help identify and prevent unauthorized access to our network, malicious code distribution, predicting DDOS attacks and other cyber attacks by detecting unusual or suspicious activity. If we do not investigate suspect or potential criminal activity, we do not and do not allow our provider to make any attempt to identify you based on the information collected through the server logs.
Legal basis for processing: Compliance with the legal obligations to which we are subject (Article 6 (1) (c) of the General Data Protection Regulation).
Legal Obligation: Registering access to our website using server log files is a technical measure to ensure an adequate security level to protect the information gathered from our website in accordance with Article 32 (1) of the General Data Protection Regulation.
Cookies and similar technologies
Cookies are data files that are sent from a website to a browser to record user information for different purposes.
We use cookies on our website, including essential, functional, analytical and targeting cookies and web beacons. For more information on using cookies, check out our cookie policy, which is available here: https://www.losan.com/politics-de-utilization-cookies.html
You may reject some or all of the cookies we use on our website by modifying your browser settings or disabling nonessential cookies using our cookie control tool, but by rejecting them you may affect the operation of your website or features of the website. For more information about cookies, including changing your browser settings, visit www.allaboutcookies.org or consult our cookie policy.
What information we collect when you contact us
We collect and use the information from the persons who contact us in accordance with this section and the section titled "Disclosure and Additional Use of Your Information".
- E-mail
When you send a message to the email address shown on our website, we collect your email address and any other information you provide in that email (such as your name, your phone and information contained in any signature block in email).
Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: To answer questions and messages we receive and to keep track of correspondence.
Legal basis for processing: it is necessary to execute a contract or to start the employment process in a contract at your request (Article 6 (1) (b) of the General Data Protection Regulation).
The reason it is required for a contract: if your message is about supplying goods or taking action on your request before supplying our goods (for example, providing information about such goods) ; we will process your information to do so.
- Phone
When you contact us by phone, we collect your phone number and any information you provide us during the conversation with us.
The legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation)
Legitimate interest: to answer questions and messages we receive and to keep track of correspondence.
Legal basis for processing: it is necessary to execute a contract or start the employment process in a contract at your request (Article 6 (1) (b) of the General Data Protection Regulation).
The reason it is needed to execute a contract: if your message is about delivering goods or taking action on your request before supplying our goods traded (for example, providing information about such goods) ; we will process your information to do so).
Transfer and store your information
Your call information, such as your phone number and the date and time of your call, is processed by our phone service providers:
- Vodafone Romania, with the privacy policy at: https://www.vodafone.ro/personal/servicii-si-tarife/termeni-si-proceduri-legale/confidentialitate/index.htm.
- Telekom Romania, with the privacy policy at the link: https://www.telekom.ro/images/docs/Legal_docs/utilizare_site/PROTECTIA_DATELOR_CU_CARACTER_PERSONAL_telekom.ro.pdf
- Post
If you contact us by post, we will collect all the information you provide to us in any postal communications you send to us.
The legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation)
Legitimate interest: to answer questions and messages we receive and to keep track of correspondence.
Legal basis for processing: it is necessary to execute a contract or start the employment process in a contract at your request (Article 6 (1) (b) of the General Data Protection Regulation).
The reason it is needed to execute a contract: if your message is about delivering goods or taking action on your request before supplying your traded goods (for example, providing information about such goods and services) ; we will process your information to do so).
What information we collect when you interact with our website
We collect and use data from people who interact with certain features of our website in accordance with this section and the section titled Disclosure and Additional Use of Your Information.
- Registration on our site
When you register and create an account on our website, we collect the following information: name, surname and e-mail address. If you do not provide all the information required by the registration form, you will not be able to register or create an account on our website.
Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: Registering and managing accounts on our website to allow you to access the history of purchased services and invoices.
Transferring and storing your data
The information you provide through the registration form on our website will be stored in the European Economic Space on the servers of Romarg.ro web hosting provider in Romania. Your privacy policy is available here: https://www.romarg.ro/termeni-conditii-utilizare.html
Legal basis for processing: required for the execution of a contract (Article 6 (1) (b) of the General Data Protection Regulation).
The reason it is needed for the execution of a contract: we need the information collected through the order form to fulfill our obligations under the contract, namely sending the goods ordered.
Legal basis for processing: Compliance with a legal obligation (Article 6 (1) (c) of the General Data Protection Regulation).
Legal Obligation: We have a legal obligation to issue you an invoice for the goods and services you have purchased from us where you are registered for VAT purposes and request the required information collected for this purpose by our payment form.
Optional information
Also, please let us know if you want to receive marketing communications from us. For more information, see the "Marketing Communications" section below.
The legal basis for processing: our legitimate interests (Article 6 (1) (a) of the General Data Protection Regulation).
Legitimate Interests: You agree to process any optional information you provide by submitting this information to us so that you are permanently informed about our offers and services.
Marketing communications
Upon completion of the order, you will have the option to receive marketing communications from us by checking the option that indicates you want to receive marketing communications from us.
Transfer and store your information
Information collected or obtained from third parties
If we inadvertently receive information about you from a third party and / or we do not have a legal basis for processing this information, we will delete your information.
Use of automatic decision-making mechanisms
We use automatic decision-making mechanisms on our website. We do not believe that this has a legal effect on you or affects you in a similar way. You have the right to oppose your use of the automated decision making and profiling mechanisms described in this section. You can do so by renouncing cookies and similar technologies in accordance with the method described in the relevant section of this privacy policy. If you do not want us to process your real IP address (usually the IP address attributed by the Internet Service Provider) when you visit our site, you can use a virtual private network (VPN) or a free service such as Tor .
Using automatic advertising decision making mechanisms
Automatic decision-making mechanisms are those decision-making mechanisms by means of technology (through a machine) without human involvement.
We automate the display of ads containing our products on other websites you visit by using cookies. For more information about the types of cookies we use, please consult our cookie policy, available herehttp://www.losan.com/policies-policy-cookies.html.
Using automatic ad serving methods to people who visited our website increases the efficiency of the publications. Thus, cookies will be used to recognize that you have visited our site to display ads (unless you have blocked such cookies) and will collect information about your online behavior.
How can you oppose: You can block these types of cookies by using browser settings. For more information, please refer to our cookie policy:
https://www.losan.ro/politica-de-utilizare-cookies.html
Disclosure and Additional Uses of Your Data
This section sets out the circumstances in which we will disclose your data to third parties and any other additional purposes for which we use your data
Disclosure of your service provider information
We use a range of third party services that are required to run the business that processes your information for us on our behalf, namely:
- Providers of telephony services
- Providers of e-mail services
- IT service providers
- Website developers
- Provider (s) of web hosting services
- Marketing service providers
- Provider of e-mail marketing services
- Providers of transport services
Your information will be shared with these service providers where necessary to provide you with the products you have ordered. We did not display the identity of our service providers publicly for security reasons and for reasons of competitiveness. If you still want additional information about the identity of service providers, please contact us directly by email at info@losan.ro and we will provide you with such information if you have a legitimate reason to ask for it.
Legal basis for processing: legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: If we share your information with these third parties in a different context than if it is necessary to make a contract (or following your request to do so), we will share your information with such third parties to enable us to manage and manage the business effectively.
Legal basis for processing: it is necessary to complete a contract or to take action on your request to conclude a contract (Article 6 (1) (b) of the General Data Protection Regulation).
The reason it is required for a contract: it is possible to share information with our service providers to enable us to fulfill our obligations under that contract or to take the steps you have requested before concluding a contract with you.
Disclosure of your information to other third parties
We disclose your information to third parties in certain circumstances, as shown below.
Providing information to third parties, such as Google Inc., Facebook. Google collects information by using Google Analytics on our website. Google, Facebook, uses this information, including IP addresses and cookie information, for many purposes, such as improving the quality of our services and your browsing experience. Information is collected by Google and Facebook anonymously.
Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interests: Improve the quality of our services.
Disclosure and use of your information for legal reasons
Indication of possible criminal acts or threats to public safety to a competent authority. If we suspect that there has been criminal or potential behavior, we will, in some circumstances, need to contact a competent authority such as the police. This could be the case, for example, if we suspect that a fraud or a cybercrime has been committed or if we receive threats or bad intentions towards us or third parties.
In general, we will only need to process your information for this purpose if you have been involved or affected by such an incident in one way or another.
Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: Prevention of suspected criminal or criminal activity (such as fraud).
In connection with the potential application or enforcement of our legal rights
We will use your information in connection with the implementation or enforcement of our legal rights, including, for example, the exchange of information with debt collection agencies, unless you pay the amounts due when you are contractually bound to do so . Our legal rights may be contractual (if we have a contract with you) or non-contractual (such as our legal rights under copyright or tort law).
The legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: to impose our legal rights and take steps to ensure our legal rights.
In connection with a litigation or legal or potentially legal proceeding
We may need to use your information if we are involved in a dispute with you or a third party, for example, either to settle the dispute or as part of a mediation, arbitration or court order or a similar process.
The legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: resolving disputes or possible litigation.
For the continued observance of laws, regulations and other legal requirements
We will use and process your information to comply with the legal obligations to which we are subject. For example, it may be necessary to disclose your information based on a court order or quote if we receive one.
Legal basis for processing: Compliance with a legal obligation (Article 6 (1) (c) of the General Data Protection Regulation).
Legal Obligation: Legal Obligations to Disclose Information Set Up in Our Task By Internal or International Legislation (for example, in the form of an international agreement that Romania has signed).
Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).
Legitimate interest: if legal obligations are part of the laws of another country and have not been integrated into the legal framework of Romania, we have a legitimate interest in complying with these obligations.
Data storage time
This section determines how long we store the collected data. We have set specific storage periods wherever possible. If this was not possible, we set the criteria we use to determine the retention period.
Retention times
Server logs: keep server logs information for a 6-month period.
Information on placed orders: When placing an order for goods, we retain this information for ten years after the end of the financial year in which you placed the order, in accordance with our legal obligation to keep records for tax purposes.
Correspondence: When you make a request or contact us for any reason, either by e-mail or by telephone, we will keep your information as long as necessary or until your express request to delete your data, which will be applied in a way corroborated with the legal obligations established in our task.
Newsletter: We keep the information you have used to sign up for our newsletter as long as you remain a subscriber (as long as you do not unsubscribe) or if we decide to cancel our newsletter service.
Criteria for setting retention periods
In any other circumstances, we will only keep your information as long as it may be necessary, taking into account the following:
- the purpose and use of your information both now and in the future (for example, if we need to continue storing that information to continue to fulfill our obligations under a contract with you or to contact you in the future;
- if we have a legal obligation to continue processing your information (such as any record keeping obligations imposed by law or relevant regulations);
- if we have any reason to continue processing the information (such as your consent);
- if we have a legitimate interest in continuing to process your data;
- the levels of risk, cost and responsibility involved in continuing to hold the information.
Secure your information
We take appropriate technical and organizational measures to provide you with information and to protect it against unauthorized or unlawful use and accidental loss or destruction, including:
- Sharing and providing access to your data to the minimum extent required, subject to confidentiality restrictions, where applicable and anonymously, whenever possible;
- using secure servers for storing information;
- verifying the identity of any person requesting access to information before giving them access to information;
- using the Secure Sockets Layer (SSL) standard to encrypt any information you send us through any form on our web site;
- We transfer your data only through a closed system or encrypted data transfers.
Transmitting information to us via email
The transmission of information on the Internet is not entirely secure and if you send us information via the Internet (by e-mail or in any other way), do so entirely at your own risk.
We can not be responsible for any expenses, loss of profits, damage to reputation, damages, debts or any other form of loss or damage suffered by you as a result of your decision to transmit information to us by such means.
Your rights to personal data
Subject to certain restrictions, you have the following rights in relation to your data that you may exercise by submitting a written request sent to Losan Romania SRL -; www.losan.ro, at:
Str. Ion Clopotel nr. 14, 507075 Ghimbav, Brasov county or by sending an e-mail to info@losan.ro:
- You have the right to access your data and receive information about its use
- You have the right to request the correction and / or completion of the information (right to rectification)
- you have the right to request the deletion of the data (the right to be forgotten)
- You have the right to restrict the use of the data
- You have the right to receive data in a portable format
- You have the right to oppose your processing of your data.
- You have the right to withdraw your consent to processing your data.
- you have the right to appeal to a supervisory authority - in accordance with Article 77 of the General Data Protection Regulation. For this purpose, in Romania, the supervisory authority is: www.dataprotection.ro.
Verify your identity if you request access to your information.
In case you request access to your information, we are legally required to use all reasonable measures to verify your identity before doing so.
These steps are designed to protect your information and reduce the risk of identity fraud, identity theft or unauthorized general access to your information.
How we check your identity
If we have appropriate information about you in the database, we will try to verify your identity using this information.
If it is not possible to identify you based on this information or if we do not have sufficient information about you, we may request copies or certificates of documents to be able to verify your identity before your data can be accessed.
We will be able to confirm the exact information we need to verify your identity in your specific circumstances if and when you make such a request.
Your right to object to data processing for certain purposes
You have the following rights in respect of your data that you may exercise by submitting to Losan Romania SRL at:
Str. Ion Clopotel nr. 14, 507075 Ghimbav, Brasov county or by sending an e-mail to info@losan.ro.
- object to the use or processing of information by us to perform a task in the public interest or in our legitimate interest, including the analysis or prediction of your behavior based on your information;
and
- Object the use or processing of your data for direct marketing purposes (including any profile we involve in relation to this direct marketing).
You may also exercise the right to object to the use or processing of your data for direct marketing purposes:
- by clicking the unsubscribe link at the bottom of any marketing email we send you and following the instructions that appear in your browser after clicking that link
- by sending an SMS message containing only the word "DISABLED" in response to any marketing communication we send by text message or by accessing the link indicated in the received SMS; or
- by sending an email to info@losan.ro, requesting us not to send any marketing communications or by including the words "DISABLING";
For more information about how you can object to the use of data collected through cookies and related technologies, please consult our cookie policy, available here: https://www.losanromania.com/politics-help-cookies.html
Sensitive personal data
"Sensitive personal information" is information about an individual who discloses racial or ethnic origin, political opinions, religious or philosophical beliefs, or membership of a trade union, genetic information, biometric information for the sole purpose of identifying an individual, health or information on the sexual life or sexual orientation of a natural person.
In specific situations, we collect "sensitive personal data"; on the membership of a trade union. We process personal data on the membership of a trade union because, based on partnerships with certain unions, members of those unions may benefit from certain facilities and discounts.
If, however, you intentionally or by mistake provide us with other sensitive personal information, you will be deemed to have explicitly given us consent to process sensitive personal information in accordance with Article 9 (2) (a) of the General Regulation on data protection. We will use and process your sensitive personal information for the purpose of deleting it.
Changes to our privacy policy
We update and periodically update our privacy policy.
Minor changes to our privacy policy
If we make minor changes to our privacy policy, we will update the Privacy Policy. The processing of your information will be governed by the practices set forth in the new version of the Privacy Policy from its effective date.
Major changes to our privacy policy or the purposes for which we process your information
If we make any major changes to our privacy policy or intend to use your data for a new purpose or for a purpose other than the purposes we initially collected, we will notify you by e-mail (if possible) or by posting an ad on our web site.
We will provide you with information about the change in question and about the purpose and any other relevant information before using your information for the new purpose.
Whenever necessary, we will obtain your prior consent before using your information for a purpose other than the purposes for which we have originally collected it.