The terms and conditions presented are valid and apply for the site www.esashop.ro and for which ESA Shop has the quality of author / owner / administrator.
Personal data – any information relating to an identified or identifiable natural person; an identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as a name, an identification number, location data, an online identifier, or one or more specific elements of his physical, physiological, genetic, mental, economic, cultural or social identity;
Processing of personal data – any operation or set of operations performed on personal data, by automatic or non-automatic means, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, joining or combining, blocking, deleting or destroying;
Restriction of processing – marking of stored personal data in order to limit their future processing;
Profiling – any form of automatic processing of personal data which consists in using personal data to assess certain personal aspects relating to an individual, in particular to analyze or predict aspects of personal preferences, interests, behavior.
Storage – keeping on any kind of support the personal data collected;
Sistem de evidență a datelor cu caracter personal – orice structură organizată de date cu caracter personal, accesibilă, potrivit unor criterii determinate, indiferent dacă această structură este organizată în mod centralizat ori descentralizat sau este repartizată după criterii funcționale ori geografice;
Operator – any natural or legal person, private or public law, including public authorities, institutions and their territorial structures, which establishes the purpose and means of processing personal data;
Authorized person – a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Third party – any natural or legal person, private or public law, including public authorities, institutions and their territorial structures, other than the data subject, the controller or the authorized person or persons who, under the direct authority of the controller or the authorized person , are authorized to process data;
Recipient – any natural or legal person, private or public law, including public authorities, institutions and their territorial structures, to whom data are disclosed, whether or not it is a third party; public authorities to which data are communicated within a special investigative competence will not be considered as recipients;
Destinatar – orice persoană fizică sau juridică, de drept privat ori de drept public, inclusiv autoritățile publice, instituțiile și structurile teritoriale ale acestora, căreia îi sunt dezvăluite date, indiferent dacă este sau nu terț; autoritățile publice cărora li se comunică date în cadrul unei competențe speciale de anchetă nu vor fi considerate destinatari;
Business contact data – data that includes the name, position, business address, telephone number or email address of an employee of an organization, in this capacity. Business contact data do not fall into the category of personal data;
Statistical data – data that have been obtained as a result of the processing by the operator of personal data, but which cannot be used to identify a person and are used exclusively for statistical and / or information, promotion purposes.
Consent of the data subject – any manifestation of free, specific, informed and unambiguous will of the data subject by which he accepts, by an unequivocal statement or action, that the personal data concerning him be processed;
Violation of the security of personal data – breach of security which leads, accidentally or illegally, to the destruction, loss, alteration, or unauthorized disclosure of personal data transmitted, stored or otherwise processed, or to unauthorized access to them .
COLLECTION OF PERSONAL DATA
ESA Shop is the controller of the personal data that you transmit to us and is responsible for them in accordance with data protection legislation.
We can obtain your personal data from different sources:
you supplying in the ESA Shop showroom and ESA Shop stores;
creating an account on our website, through our social media pages;
When visiting the site or social media pages, we may collect certain personal data about your device or how to use it through automatic means, through technologies such as cookies.
Personal data you can provide us:
Contact information (name, address, phone number)
Username and password
Site browsing history
Payment information (bank card number and expiration date, billing address, delivery address)
Contact information of family members or friends – for site visit invitation (please provide only the details of those people you know and are interested in receiving information provided by us)
Content and information provided by you (photos, reviews, movies, questionnaire replies or comments)
Information sent on our social media pages when visiting our pages (name, profile photo, your preferences, location, friends list)
ESA Shop may collect personal data from you, but only with your consent and if you provide it to us voluntarily. In order to be able to buy from www.esashop.ro, it is necessary to register on this website. The account is editable, the data can be modified or deleted at any time.
To send you promotional materials and information about our products and services (newsletters)
To inform you about the status of your account, sending and invoicing placed orders, resolving issues of any kind regarding an order
The browsing history of users on the site is based on the legitimate interest of the site owner in order to protect against cyber attacks on the site
To create and manage your account on optimal terms, including access to your order history
To process bank card transactions
To discuss and answer your questions
To provide you with services and functionalities on our site
To provide you with services and functionalities on our site
To comply with our legal requirements, policies and relevant standards.
To improve access security.
To improve usability and provide you with the best possible service.
ESA Shop may disclose personal data to third parties (delivery agents in connection with product delivery, media agencies for newsletter distribution, and credit rating or debt collection agencies for the purpose of creditworthiness, identity verification, and debt collection) if this is required by law or in cases of good faith where such actions are necessary for: (a) compliance with the law; (b) protect and protect the property rights of ESA Shop and its websites, or (c) act under exigent circumstances to protect the personal safety of employees, users of products or services, or the public. When we are requested to provide personal data or we are allowed to do so, only those data necessary to fulfill the purpose of the request will be disclosed.
ESA Shop does not sell, exchange or rent personal data to third parties.
COLLECTION OF PERSONAL DATA ON THE SITE www.esashop.ro
In addition to the above, the collection of personal data on the site www.esashop.ro involves:
The online payment forms submitted to you when making an eCommerce transaction will need to be completed with all required and marked information, including personal data.
We use personal data collected on the website www.esashop.ro for the following purposes:
Invoicing of the products / services ordered by you;
ESA Shop does not collect data for online payments. Online payments are made through outsourced services such as Netopia Payments. Personal data may be disclosed without your consent in case of litigation / disputes regarding payment fraud to the following recipients: Banks involved in online payments, International Card Organizations and Service / Product Providers, according to the provisions of Law 677/2001, to competent institutions.
USE OF STATISTICAL DATA AND ANONYMOUS DATA
ESA Shop may use statistical data or anonymous data resulting from processing as an operator for the following purposes:
conducting analyzes / reports;
publishing, promoting, offering the products / services offered by ESA Shop.
SECURITY OF COLLECTED DATA
ESA Shop uses security methods and technologies, together with employee policies and work procedures, including control and audit, to protect personal data collected in accordance with applicable law. The server on which the site is hosted is protected from physical and remote access, being installed in technically and security-appropriate premises. We make all reasonable, commercially justified efforts to protect your personal data collected, analyze new technologies in the field and, if necessary, apply them to upgrade our security systems.
To ensure that we process personal data in an open, legal and accurate manner, we have appointed a personal data protection officer. He can be contacted at the e-mail address firstname.lastname@example.org.
LEGISLATION: PROTECTION OF PERSONS REGARDING THE PROCESSING OF PERSONAL DATA
ESA Shop has the obligation to manage in a safe manner and only for the purposes specified below, the personal data that the data subjects provide. As a guarantee of achieving the stated purpose of the framework law, the rights of the data subject have been expressly provided by the legislator:
the right to information
the right to access data
the right to portability
the right to rectification
the right to delete data
the right to oppose direct marketing
the right to restrict processing
For any information regarding the rights listed above, ESA Shop can be contacted at: email@example.com
THE RIGHT TO INFORMATION
If personal data are obtained directly from the data subject, ESA Shop is required to provide the following information to the data subject:
The identity of the operator and, where applicable, the identity of his representative.
The purpose for which the operator uses personal data.
Adjacent information related to recipients / categories of data recipients.
Information the provision of which is required by order of the supervisory authority.
If the data are not obtained directly from the data subject, the controller is obliged to provide at least the identity of the controller at the time of data collection or, if it is intended to disclose them to third parties, at the latest by the time of the first disclosure. and his representative, if any; the purpose for which the data is processed; additional information, such as: recipients or categories of recipients of the data; if the following information, unless the data subject already possesses that information:
the identity of the operator and his representative, if any;
the purpose for which the data is processed;
Additional information, such as: categories of data concerned, recipients or categories of recipients of the data, the existence of the rights provided for by law for the data subject, in particular the right of access, data intervention and opposition, and the conditions under which they may be exercised ;
any other information the provision of which is required by order of the supervisory authority, taking into account the specifics of the processing.
THE RIGHT OF ACCESS TO DATA
You have the right to request information about your personal data that we hold. You can contact us and we will provide you with the required information by e-mail.
Any data subject has the right to obtain from ESA Shop, by a written request, confirmation that personal data are not and have not been processed, as well as the following information:
Information on the purposes of the processing, the categories of data considered and the recipients or categories of recipients to whom the data are disclosed.
Communication of the data being processed as well as any available information on the origin of the data.
Information on the principles of operation of the mechanism by which any automatic processing of data concerning that person is carried out.
Information on the existence of the right to intervene in the data and the right to object, as well as the conditions under which they may be exercised.
The ESA Shop operator is obliged to communicate the requested information, within 30 days from the date of receipt of the request.
THE RIGHT TO PORTABILITY
ESA Shop processes personal data by automatic means based on your consent and you have the right to obtain a transfer of a copy of your personal data in a frequently used structured format that can be processed automatically. This includes the personal data you have provided to us.
THE RIGHT TO RECTIFICATION
You have the right to rectify your personal data if it is incorrect or to supplement the data if it is incomplete. If you have an account on www.esashop.ro you can edit your personal data.
THE RIGHT TO OPPOSE PROCESSING BASED ON LEGITIMATE INTEREST
You may object to the processing of your personal data based on a legitimate interest. ESA Shop will not continue to process personal data unless we can demonstrate a legitimate reason for the processing that prevails over your rights and interests or based on legal proceedings.
THE RIGHT TO DELETE DATA
You have the right to request the deletion of personal data at any time, except in the following situations:
If you have an order in progress
If you have made a purchase, we will retain your personal data used in that transaction for 10 years, in accordance with accounting law.
If you have a request for processing in Customer Service
If you have an unpaid debt, regardless of the method of payment
THE RIGHT TO OPPOSE DIRECT MARKETING
You have the right to object to the use of personal data for direct marketing purposes, including profile analysis.
You can unsubscribe from direct marketing practices by the following means:
You can request a restriction on the processing of your personal data in the following situations:
If the processing of personal data is illegal
If the personal data are incorrect, it may be requested to restrict the processing until the correctness of the data is verified.
If you object to the processing of personal data on the basis of legitimate interest, ESA Shop will restrict the processing of data until the legitimate interest is confirmed.
You have the right to make certain choices regarding your personal data, such as how we communicate with you or how we process your information.
UNSUBSCRIBE NEWSLETTER: If you no longer wish to receive marketing e-mails, click on the unsubscribe link in the e-mails received, or you can send us your request to firstname.lastname@example.org
WITHDRAWAL OF CONSENT: You have the right to refuse or withdraw your consent to the processing of your personal data. In some cases, the refusal or withdrawal of consent to the processing of personal data means that you can not take advantage of certain information about the launch of new products, promotions, discounts. You can send us your request to email@example.com
REVIEW, UPDATE AND MODIFICATION OF PERSONAL DATA: You have the right to request access and to be communicated details of your personal data that we process, to intervene (to update or correct incomplete / incorrect data), to restrict, to withdraw or delete information. You may object, for legitimate reasons, to the processing of your personal data and take legal action in court, where appropriate. We may take steps to verify identity before granting access to data or making changes. You can send us your request to firstname.lastname@example.org
RIGHT TO SUBMIT A COMPLAINT TO A SUPERVISORY AUTHORITY: If you believe that ESA Shop is processing your personal data in an incorrect manner you can send us a complaint to email@example.com or file a complaint with the supervisory authority .