Processing of personal data

ESAISLOVE  S.R.L. (registered at ONRC Bucharest with no. J40/20254/2023, CUI 49014823, with its headquarters in 42 Gladitei Street, Sector 4, Bucharest, 040297), generically hereinafter referred to as ESA Shop, as author, owner, administrator of the website www.esashop.ro, respects the privacy and security of the information provided by you when using this website, including personal data, the purpose for which you created and apply this Privacy Policy .

Your access / visit to this website is subject to the terms and conditions of use and the privacy policy, implies your explicit acceptance of them and represents the contract between the parties.

ESA Shop reserves the right to change and update at any time the content of the website www.esashop.ro, as well as this Privacy Policy and the Terms and Conditions of Use, without any prior notice. Therefore, please visit this section periodically to check the Terms and Conditions that you have agreed to abide by.

The terms and conditions presented are valid and apply for the site www.esashop.ro and for which ESA Shop has the quality of author / owner / administrator.

DEFINITIONS

  1. Personal data – any information relating to an identified or identifiable natural person; an identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as a name, an identification number, location data, an online identifier, or one or more specific elements of his physical, physiological, genetic, mental, economic, cultural or social identity;
  2. Processing of personal data – any operation or set of operations performed on personal data, by automatic or non-automatic means, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, joining or combining, blocking, deleting or destroying;
  3. Restriction of processing – marking of stored personal data in order to limit their future processing;
  4. Profiling – any form of automatic processing of personal data which consists in using personal data to assess certain personal aspects relating to an individual, in particular to analyze or predict aspects of personal preferences, interests, behavior.
  5. Storage – keeping on any kind of support the personal data collected;
  6.      Sistem de evidență a datelor cu caracter personal – orice structură organizată de date cu caracter personal, accesibilă, potrivit unor criterii determinate, indiferent dacă această structură este organizată în mod centralizat ori descentralizat sau este repartizată după criterii funcționale ori geografice;
  7. Operator – any natural or legal person, private or public law, including public authorities, institutions and their territorial structures, which establishes the purpose and means of processing personal data;
  8. Authorized person – a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
  9. Third party – any natural or legal person, private or public law, including public authorities, institutions and their territorial structures, other than the data subject, the controller or the authorized person or persons who, under the direct authority of the controller or the authorized person , are authorized to process data;
  10. Recipient – any natural or legal person, private or public law, including public authorities, institutions and their territorial structures, to whom data are disclosed, whether or not it is a third party; public authorities to which data are communicated within a special investigative competence will not be considered as recipients;
  11. Destinatar – orice persoană fizică sau juridică, de drept privat ori de drept public, inclusiv autoritățile publice, instituțiile și structurile teritoriale ale acestora, căreia îi sunt dezvăluite date, indiferent dacă este sau nu terț; autoritățile publice cărora li se comunică date în cadrul unei competențe speciale de anchetă nu vor fi considerate destinatari;
  12. Business contact data – data that includes the name, position, business address, telephone number or email address of an employee of an organization, in this capacity. Business contact data do not fall into the category of personal data;
  13. Statistical data – data that have been obtained as a result of the processing by the operator of personal data, but which cannot be used to identify a person and are used exclusively for statistical and / or information, promotion purposes.
  14. Consent of the data subject – any manifestation of free, specific, informed and unambiguous will of the data subject by which he accepts, by an unequivocal statement or action, that the personal data concerning him be processed;
  15. Violation of the security of personal data – breach of security which leads, accidentally or illegally, to the destruction, loss, alteration, or unauthorized disclosure of personal data transmitted, stored or otherwise processed, or to unauthorized access to them .

COLLECTION OF PERSONAL DATA

ESA Shop is the controller of the personal data that you transmit to us and is responsible for them in accordance with data protection legislation.

We can obtain your personal data from different sources:

  • you supplying in the ESA Shop showroom and ESA Shop stores;
  • creating an account on our website, through our social media pages;
  • When visiting the site or social media pages, we may collect certain personal data about your device or how to use it through automatic means, through technologies such as cookies.

Personal data you can provide us:

  1. Contact information (name, address, phone number)
  2. Birth date
  3. Username and password
  4. Shopping history
  5. Site browsing history
  6. Favourite products
  7. Payment information (bank card number and expiration date, billing address, delivery address)
  8. Contact information of family members or friends – for site visit invitation (please provide only the details of those people you know and are interested in receiving information provided by us)
  9. Content and information provided by you (photos, reviews, movies, questionnaire replies or comments)
  10. Information sent on our social media pages when visiting our pages (name, profile photo, your preferences, location, friends list)

ESA Shop may collect personal data from you, but only with your consent and if you provide it to us voluntarily.
In order to be able to buy from www.esashop.ro, it is necessary to register on this website. The account is editable, the data can be modified or deleted at any time.

ESA Shop collects information and processes it into statistical data. The information processed refers to: the pages accessed inside the site, including the IP address from which the site is visited. ESA Shop may use cookies on the site, temporarily storing personal data (IP addresses, names, e-mail addresses, telephone numbers, address).
We use personal data collected for the following purposes:

  1. To send you promotional materials and information about our products and services (newsletters)
  2. To inform you about the status of your account, sending and invoicing placed orders, resolving issues of any kind regarding an order
  3. The browsing history of users on the site is based on the legitimate interest of the site owner in order to protect against cyber attacks on the site
  4. To create and manage your account on optimal terms, including access to your order history
  5. To process bank card transactions
  6. To discuss and answer your questions
  7. To provide you with services and functionalities on our site
  8. To provide you with services and functionalities on our site
  9. To comply with our legal requirements, policies and relevant standards.
  10. To improve access security.
  11. To improve usability and provide you with the best possible service.

ESA Shop may disclose personal data to third parties (delivery agents in connection with product delivery, media agencies for newsletter distribution, and credit rating or debt collection agencies for the purpose of creditworthiness, identity verification, and debt collection) if this is required by law or in cases of good faith where such actions are necessary for: (a) compliance with the law; (b) protect and protect the property rights of ESA Shop and its websites, or (c) act under exigent circumstances to protect the personal safety of employees, users of products or services, or the public.
When we are requested to provide personal data or we are allowed to do so, only those data necessary to fulfill the purpose of the request will be disclosed.

ESA Shop does not sell, exchange or rent personal data to third parties.

COLLECTION OF PERSONAL DATA ON THE SITE www.esashop.ro

In addition to the above, the collection of personal data on the site www.esashop.ro involves:

  1. The online payment forms submitted to you when making an eCommerce transaction will need to be completed with all required and marked information, including personal data.
  2. We use personal data collected on the website www.esashop.ro for the following purposes:
  • Invoicing of the products / services ordered by you;
  • Their delivery;

ESA Shop does not collect data for online payments. Online payments are made through outsourced services such as Netopia Payments.
Personal data may be disclosed without your consent in case of litigation / disputes regarding payment fraud to the following recipients: Banks involved in online payments, International Card Organizations and Service / Product Providers, according to the provisions of Law 677/2001, to competent institutions.

USE OF STATISTICAL DATA AND ANONYMOUS DATA

ESA Shop may use statistical data or anonymous data resulting from processing as an operator for the following purposes:

  1. conducting analyzes / reports;
  2. making information;
  3. publishing, promoting, offering the products / services offered by ESA Shop.

SECURITY OF COLLECTED DATA

ESA Shop uses security methods and technologies, together with employee policies and work procedures, including control and audit, to protect personal data collected in accordance with applicable law.
The server on which the site is hosted is protected from physical and remote access, being installed in technically and security-appropriate premises. We make all reasonable, commercially justified efforts to protect your personal data collected, analyze new technologies in the field and, if necessary, apply them to upgrade our security systems.

To ensure that we process personal data in an open, legal and accurate manner, we have appointed a personal data protection officer. He can be contacted at the e-mail address contact@esashop.ro.

LEGISLATION: PROTECTION OF PERSONS REGARDING THE PROCESSING OF PERSONAL DATA

The privacy policy is subject to the Romanian legislation, respectively to the provisions of Law no. 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data, amended and supplemented and the provisions of Law no. 506/2004 on the processing of personal data and the protection of privacy in the online environment. As well as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC ( General Data Protection Regulation).

ESA Shop has the obligation to manage in a safe manner and only for the purposes specified below, the personal data that the data subjects provide. As a guarantee of achieving the stated purpose of the framework law, the rights of the data subject have been expressly provided by the legislator:

  1. the right to information
  2. the right to access data
  3. the right to portability
  4. the right to rectification
  5. the right to delete data
  6. the right to oppose direct marketing
  7. the right to restrict processing

For any information regarding the rights listed above, ESA Shop can be contacted at: contact@esashop.ro

THE RIGHT TO INFORMATION

If personal data are obtained directly from the data subject, ESA Shop is required to provide the following information to the data subject:

  1. The identity of the operator and, where applicable, the identity of his representative.
  2. The purpose for which the operator uses personal data.
  3. Adjacent information related to recipients / categories of data recipients.
  4. Information the provision of which is required by order of the supervisory authority.

If the data are not obtained directly from the data subject, the controller is obliged to provide at least the identity of the controller at the time of data collection or, if it is intended to disclose them to third parties, at the latest by the time of the first disclosure. and his representative, if any; the purpose for which the data is processed; additional information, such as: recipients or categories of recipients of the data; if the following information, unless the data subject already possesses that information:

  1. the identity of the operator and his representative, if any;
  2. the purpose for which the data is processed;
  3. Additional information, such as: categories of data concerned, recipients or categories of recipients of the data, the existence of the rights provided for by law for the data subject, in particular the right of access, data intervention and opposition, and the conditions under which they may be exercised ;
  4. any other information the provision of which is required by order of the supervisory authority, taking into account the specifics of the processing.

THE RIGHT OF ACCESS TO DATA

You have the right to request information about your personal data that we hold. You can contact us and we will provide you with the required information by e-mail.

Any data subject has the right to obtain from ESA Shop, by a written request, confirmation that personal data are not and have not been processed, as well as the following information:

  1. Information on the purposes of the processing, the categories of data considered and the recipients or categories of recipients to whom the data are disclosed.
  2. Communication of the data being processed as well as any available information on the origin of the data.
  3. Information on the principles of operation of the mechanism by which any automatic processing of data concerning that person is carried out.
  4. Information on the existence of the right to intervene in the data and the right to object, as well as the conditions under which they may be exercised.

The ESA Shop operator is obliged to communicate the requested information, within 30 days from the date of receipt of the request.

THE RIGHT TO PORTABILITY

ESA Shop processes personal data by automatic means based on your consent and you have the right to obtain a transfer of a copy of your personal data in a frequently used structured format that can be processed automatically. This includes the personal data you have provided to us.

THE RIGHT TO RECTIFICATION

You have the right to rectify your personal data if it is incorrect or to supplement the data if it is incomplete. If you have an account on www.esashop.ro you can edit your personal data.

THE RIGHT TO OPPOSE PROCESSING BASED ON LEGITIMATE INTEREST

You may object to the processing of your personal data based on a legitimate interest. ESA Shop will not continue to process personal data unless we can demonstrate a legitimate reason for the processing that prevails over your rights and interests or based on legal proceedings.

THE RIGHT TO DELETE DATA

You have the right to request the deletion of personal data at any time, except in the following situations:

  1. If you have an order in progress
  2. If you have made a purchase, we will retain your personal data used in that transaction for 10 years, in accordance with accounting law.
  3. If you have a request for processing in Customer Service
  4. If you have an unpaid debt, regardless of the method of payment

THE RIGHT TO OPPOSE DIRECT MARKETING

You have the right to object to the use of personal data for direct marketing purposes, including profile analysis.

You can unsubscribe from direct marketing practices by the following means:

  1. Modyfing your account settings
  2.  Following the steps from the marketing e-mail
  3.      Sending an email with the request to contact@esashop.ro

RIGHT TO RESTRICTION OF PROCESSING

You can request a restriction on the processing of your personal data in the following situations:

  1. If the processing of personal data is illegal
  2. If the personal data are incorrect, it may be requested to restrict the processing until the correctness of the data is verified.
  3. If you object to the processing of personal data on the basis of legitimate interest, ESA Shop will restrict the processing of data until the legitimate interest is confirmed.

YOUR RIGHTS

You have the right to make certain choices regarding your personal data, such as how we communicate with you or how we process your information.

  1. UNSUBSCRIBE NEWSLETTER: If you no longer wish to receive marketing e-mails, click on the unsubscribe link in the e-mails received, or you can send us your request to contact@esashop.ro
  2. WITHDRAWAL OF CONSENT: You have the right to refuse or withdraw your consent to the processing of your personal data. In some cases, the refusal or withdrawal of consent to the processing of personal data means that you can not take advantage of certain information about the launch of new products, promotions, discounts. You can send us your request to contact@esashop.ro
  3. REVIEW, UPDATE AND MODIFICATION OF PERSONAL DATA: You have the right to request access and to be communicated details of your personal data that we process, to intervene (to update or correct incomplete / incorrect data), to restrict, to withdraw or delete information. You may object, for legitimate reasons, to the processing of your personal data and take legal action in court, where appropriate. We may take steps to verify identity before granting access to data or making changes. You can send us your request to contact@esashop.ro
  4. RIGHT TO SUBMIT A COMPLAINT TO A SUPERVISORY AUTHORITY: If you believe that ESA Shop is processing your personal data in an incorrect manner you can send us a complaint to contact@esashop.ro or file a complaint with the supervisory authority .

PRIVACY POLICY UPDATES

The privacy policy may be updated periodically, without prior notice to you, to convey changes to our personal data practices.