Versiunea curentă din 7 martie 2020 12:46

Privacy and security policy for the processing of personal data of the site

Data protection is of the utmost importance for the management of SC B-ZONE.RO SRL ("B-ZONE"). The processing of personal data, such as the name, address, email address or telephone number of a subject matter will always be in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection applicable regulations. B-zone. Through this data protection statement, we would like to inform the general public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, the data subjects are informed, through this data protection declaration, about the rights to which they have the right.

Definitions

B-ZONE data protection statement is based on the terms used by the European legislator for the adoption of the general data protection regulation (GDPR). Our data protection statement should be legible and understandable to the general public, as well as to our customers and business partners. To achieve this, we would like to first explain the terminology used.

In this data protection statement, we use, among other things, the following terms:

a. Personal data Personal data means any information relating to an identified or identifiable natural person ("data subject") An identifiable natural person is one that can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, a identification number, location data, an online identifier or to one or more specific factors physically, physiologically, genetic, mental, economic, cultural or social identity of that natural person.

b. The data subject The data subject is any identified or identifiable natural person, whose personal data are processed by the controller responsible for processing..

c. Processing Processing is any operation or set of operations that is performed on personal data or on personal data sets, whether or not through automated means, such as collection, registration, organization, structuring, storage, adaptation or modification. , finding, consulting, using, disclosing by transmission, dissemination or making available, alignment or combination, restriction, deletion or destruction..

d. Restriction of processing The restriction of the processing represents the marking of the stored personal data in order to limit their processing in the future..

e. Profiling Profiling means any form of automatic processing of personal data consisting of the use of personal data to evaluate certain personal issues relating to a natural person, in particular to analyze or predict aspects regarding the performance of the natural person in the workplace, economic situation, health, personal preferences, interests, reliability, behavior, location or movements..

f. Pseudonymization Pseudonymization is the processing of personal data in such a way that personal data can no longer be assigned to a specific subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that personal data is not attributed to an identified or identifiable natural person..

g. The controller or controller responsible for processing The controller or controller responsible for processing is the natural or legal person, the public authority, the agency or any other body which, alone or jointly with others, determines the purposes and means of processing the personal data; where the purposes and means of such processing are laid down by the law of the Union or the Member States, the controller or the specific criteria for its designation may be provided for by the law of the Union or the Member States..

h. Processor The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller..

i. Recipient The recipient is a natural or legal person, a public authority, an agency or another body, to whom the personal data are disclosed, regardless of whether they are third parties or not. However, public authorities that may receive personal data in a particular investigation in accordance with Union or Member State law are not considered as recipients; the processing of such data by these public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing.

j. Third party A third party is a natural or legal person, public authority, agency or body, other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

k. Consent The consent of the data subject is any free, specific, informed and unambiguous indication of the data subject's wishes, by which he, by a statement or by a clear affirmative action, signifies an agreement with the processing of personal data relating to it.

The name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other data protection provisions is:

• SC B-ZONE.RO SRL
• Iasi
• Romania
• E-mail: contact@b-zone.ro
• Website: http://wiki.b-zone.ro

Cookies

B-ZONE sites, including wiki.b-zone.ro, use cookies. Cookies are text files that are stored in a computer system through an Internet browser.

Many websites and Internet servers use cookies. Many cookies contain a so-called cookie ID. A cookie code is a unique cookie identifier. It consists of a character string through which web pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows the websites and servers visited to differentiate the individual browser of the data subject from other web browsers that contain other cookies. A particular Internet browser can be recognized, identified and authenticated using the unique cookie code.

By using cookies, B-ZONE can offer the users of this website more friendly services that would not be possible without the use of cookies.

Cookies allow us, as mentioned above, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. A visitor who uses cookies does not have to enter the access data every time the website is accessed and the website preferences are kept for the convenience of the visitors. Our shopping cart and customer systems also use cookies to ensure a perfect experience.

The data subject may, at any time, prevent the setting of cookies through our website through an appropriate setting of the Internet browser used and thus may permanently deny the setting of cookies. In addition, existing cookies may be deleted at any time through an Internet browser or other appropriate software; feature that exists in all major Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, not all features of our website will be fully usable.

Data collection and general information

B-ZONE collects a series of general data and information when an automated subject or system accesses the site. This general data and information is stored in the server log files. Collected may be (1) the types and versions of browser used, (2) the operating system used by the access system, (3) the site from which an access system reaches our site (the so-called referrals) , (4) under -5 sites, (5) date and time of access to the website, (6) an Internet protocol address (IP address), (7) Internet access service provider and ( 8) other similar data and information that can be used in case of attacks on our systems and infrastructure.

When using this data and general information, B-ZONE does not draw any conclusions regarding the data subject. Rather, this information is required for (1) the correct delivery of our website content, (2) to optimize the content of our website, (3) to ensure the long-term viability of our systems and infrastructure, and (4) to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. Therefore, B-ZONE statistically analyzes the data and information collected anonymously, in order to increase the data protection and data security of our organization and to ensure an optimal level of protection for the personal data we process. Anonymous data in relevant journals are stored separately from all personal data provided by a data subject.

Possibility of contact through the website

Our website contains information that allows a quick electronic contact to our company, as well as a direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the operator by e-mail or through a contact form, the personal data transmitted by the data subject are automatically stored. These personal data voluntarily transmitted by a subject subject to the data operator are stored for the purpose of processing or contacting the data subject. There is no transfer of such personal data to third parties, unless it is necessary to deliver additional correspondence.

Deleting and blocking of personal data

The data operator processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage or insofar as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject.

If the storage purpose is not applicable or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are usually blocked or deleted in accordance with the legal requirements. If a legal purpose for data storage no longer exists, all applicable personal data and purchase information are erased and deleted from our system after a period of five (5) years.

The rights of the person

a. The right of confirmation Each data subject has the right granted by the European legislator to obtain from the operator the confirmation regarding the processing or not the personal data related to it. If the data subject wishes to use this right of confirmation, he can, at any time, contact any employee of the operator.

b. The right of access Each data subject has the right granted by the European legislator to obtain from the operator free information about his personal data stored at any time and a copy of this information. In addition, European directives and regulations allow the data subject access to the following information:

• processing purposes;
• the categories of personal data in question;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, especially to recipients from third countries or international organizations;
• when possible, the period for which the personal data will be stored or, if not possible, the criteria used to determine the respective period;
• the existence of the right to request from the operator the rectification or deletion of the personal data or the restriction of the processing of the personal data related to the data subject or to oppose this processing;
• the existence of the right to file a complaint with a supervisory authority;
• if personal data are not collected from the data subject, available information regarding their source;
• the existence of automatic decisions, including profiling, referred to in Article 22 (1) and (4) of the GDPR and, at least in these cases, significant information about the logic involved, as well as the significance and expected consequences of such * processing for the person concerned.

In addition, the data subject has the right to obtain information regarding the transfer of personal data to a third country or to an international organization. In this case, the data subject has the right to be informed about the appropriate guarantees regarding the transfer.

If the data subject wishes to use this right of access, he may, at any time, contact any employee of the operator.

c. The right to rectification Each data subject has the right granted by the European legislator to obtain from the operator without undue delay the rectification of inaccurate personal data relating to it. Taking into account the purposes of the processing, the data subject has the right to complete incomplete personal data, including by providing an additional statement. If the data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the operator.

d. The right to delete (The right to be forgiven) Each data subject has the right granted by the European legislator to obtain from the controller the deletion of personal data concerning him without undue delay, and the operator has the obligation to delete personal data without undue delay when one of the following reasons applies, as long as processing is not necessary (for example, in cases where a financial transaction has taken place):

Personal data are no longer required in relation to the purposes for which they were collected or otherwise processed;

• The data subject withdraws consent on which the processing is based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and if there is no other legal basis for processing;
• The data subject opposes the processing in accordance with Article 21 (1) of the GDPR and there are no compelling legitimate reasons for the processing or the data subject opposes the processing in accordance with Article 21 (2) of the GDPR;
• Personal data were processed illegally;
• Personal data must be deleted in order to comply with a legal obligation under the law of the Union or of the Member States to which the controller is subject;
• The personal data have been collected in connection with the information society services offer referred to in Article 8 (1) of the GDPR.
• If one of the reasons mentioned above applies, and a data subject wishes to request the deletion of personal data stored by B-ZONE, he may, at any time, contact any employee of the controller. An employee of B-ZONE shall immediately ensure that the removal request is complied with in accordance with the applicable laws and regulations.

Where the controller has disclosed personal data and is required under Article 17 (1) to delete the personal data, the controller, taking into account available technology and implementation costs, shall take reasonable measures, including technical measures. , to inform other controllers that process the personal data that the data subject has requested the deletion by these controllers of any links or copying or replication of the personal data, to the extent that the processing is not necessary. An employee of B-ZONE will arrange the necessary measures individually.

e. The right to restrict processing Each data subject has the right granted by the European legislator to obtain from the controller the processing restriction when one of the following applies:

• The accuracy of the personal data is contested by the data subject, for a period that allows the operator to verify the accuracy of the personal data;
• The processing is illegal, and the data subject opposes the deletion of personal data and instead asks for the restriction of their use;
• The operator no longer needs the personal data for the purpose of processing, but is requested by the data subject for establishing, exercising or defending legal claims;
• The data subject objected to the processing in accordance with Article 21 (1) of the GDPR, pending the verification that the legitimate motives of the operator exceed those of the data subject.
• If one of the conditions mentioned above is fulfilled and a data subject wishes to request the restriction of the processing of personal data stored by B-ZONE, he may contact any employee of the controller at any time. * The B-ZONE employee will take appropriate measures to restrict further processing.

f. The right to data portability Each data subject has the right granted by the European legislator to receive the personal data concerning him, which have been provided to an operator, in a structured format, commonly used and which can be read automatically. He or she shall have the right to transmit this data to another operator, without prejudice to the controller to whom the personal data were provided, as long as the processing is based on consent in accordance with Article 6 (1) point (a) of the GDPR or point (a) of Article 9 (2) of the GDPR or a contract in accordance with Article 6 (1) (b) of the GDPR, and the processing is done by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of the official authority vested in the controller. In addition, in exercising his right to data portability in accordance with Article 20 (1) of the GDPR, the data subject has the right to transmit personal data directly from one operator to another, when technically possible and in doing so it does not adversely affect the rights and freedoms of others. To assert the right to data portability, the data subject can contact any B-ZONE employee at any time.

g. The right to object Each data subject has the right granted by the European legislator to oppose, for reasons related to his particular situation, at any time, for the processing of personal data relating to it, which is based on letter (e) or (f) of the article 6 paragraph 1 of the GDPR.

This also applies to profiling based on these provisions. ZONE B will no longer process personal data in the case of the objection, unless we can demonstrate legitimate compulsory reasons for processing that replace the data subject's interests, rights and freedoms or for establishing, exercising or defending the law. claims.

If B-ZONE processes personal data for direct marketing purposes, the data subject has the right at any time to oppose the processing of personal data concerning him for such marketing. This applies to profiling insofar as it is related to such direct marketing. If the data subject opposes the processing of B-ZONE for direct marketing purposes, B-ZONE will no longer process personal data for these purposes.

In addition, the data subject has the right, for reasons related to his particular situation, to oppose the processing of personal data relating to it by B-ZONE for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless the processing is necessary to perform a task performed for reasons of public interest.

In order to exercise the right to object, the data subject may contact any employee of B-ZONE. In addition, the data subject is free in the context of using the information society services and, despite Directive 2002/58/EC, to use his right to oppose by automatic means using technical specifications.

h. Making automated individual decisions, including profiling Each data subject has the right granted by the European legislator not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects on him or her, or in a similar manner significantly affects him, as long as the decision ( 1) it is not necessary to conclude or execute a contract between the data subject and a data operator, or (2) it is not authorized by the law of the Union or the Member States to which the controller is subject and which also establishes appropriate measures for protect the rights and freedoms and legitimate interests of the data subject or (3) are not based on the explicit consent of the data subject.

If the decision (1) is necessary to conclude or fulfill a contract between the data subject and a data operator or (2) is based on the specific consent of the person concerned, B-ZONE will implement appropriate measures to protect the rights and the freedoms of the data subjects and the legitimate interests, at least the right to obtain human intervention from the operator, to express his point of view and to challenge the decision.

If the data subject wishes to exercise his / her rights regarding the automatic decision-making of the individual, he / she may, at any time, contact any employee of the B-ZONE.

i. The right to withdraw the data protection consent Each data subject has the right granted by the European legislator to withdraw his consent for the processing of his personal data at any time.

If the data subject wishes to exercise his right to withdraw his consent, he may, at any time, contact any employee of the B-ZONE.

Legal basis of processing

Art. 6 (1) lit. a GDPR serves as the legal basis for the processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the execution of a contract to which the data subject is a party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, processing is the basis Article 6 (1) letter b GDPR. The same applies to processing operations that are necessary to perform pre-contractual measures, such as investigations into our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of fiscal obligations, processing is done on the basis of art. 6 (1) lit. c GDPR. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. The processing would be based on art. 6 (1) lit. d GDPR. Finally, processing operations could be based on Article 6 (1) letter. f GDPR. This legal basis is used for processing operations that are not covered by any of the legal grounds mentioned above, if processing is necessary for the legitimate interests pursued by our company or by a third party, unless these interests are over-demanded by interests. or the fundamental rights and freedoms of the data subject who need the protection of personal data.

Legitimate interests pursued by the controller or by a third party

If the processing of personal data is based on Article 6 (1) letter. f GDPR our legitimate interest is to carry out our activity in favor of the welfare of all our employees and shareholders.

Period for which personal data will be stored

The criteria used to determine the period of storage of personal data are the legal period of storage. After the expiration of this period, the corresponding data are routinely erased, as long as it is no longer necessary for the performance of the contract or the initiation of a contract.

The provision of personal data as a legal or contractual requirement; The requirement necessary to conclude a contract; Obligation of the data subject to provide personal data; possible consequences of the failure to provide this data

Sometimes it may be necessary to establish, in accordance with the contractual obligation, the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with him. The provision of personal data to us would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee. The employee must clarify to the data subject whether the provision of personal data is required by law or contract or is necessary for the performance of the contract, if there is an obligation to provide the personal data and the consequences of not providing such data.