Versiunea de la data 7 martie 2020 12:44

Privacy and security policy for the processing of personal data of the site

Data protection is of the utmost importance for the management of SC B-ZONE.RO SRL ("B-ZONE"). The processing of personal data, such as the name, address, email address or telephone number of a subject matter will always be in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection applicable regulations. B-zone. Through this data protection statement, we would like to inform the general public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, the data subjects are informed, through this data protection declaration, about the rights to which they have the right.

Definitions

B-ZONE data protection statement is based on the terms used by the European legislator for the adoption of the general data protection regulation (GDPR). Our data protection statement should be legible and understandable to the general public, as well as to our customers and business partners. To achieve this, we would like to first explain the terminology used.

In this data protection statement, we use, among other things, the following terms:

a. Personal data Personal data means any information relating to an identified or identifiable natural person ("data subject") An identifiable natural person is one that can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, a identification number, location data, an online identifier or to one or more specific factors physically, physiologically, genetic, mental, economic, cultural or social identity of that natural person.

b. The data subject The data subject is any identified or identifiable natural person, whose personal data are processed by the controller responsible for processing..

c. Processing Processing is any operation or set of operations that is performed on personal data or on personal data sets, whether or not through automated means, such as collection, registration, organization, structuring, storage, adaptation or modification. , finding, consulting, using, disclosing by transmission, dissemination or making available, alignment or combination, restriction, deletion or destruction..

d. Restriction of processing The restriction of the processing represents the marking of the stored personal data in order to limit their processing in the future..

e. Profiling Profiling means any form of automatic processing of personal data consisting of the use of personal data to evaluate certain personal issues relating to a natural person, in particular to analyze or predict aspects regarding the performance of the natural person in the workplace, economic situation, health, personal preferences, interests, reliability, behavior, location or movements..

f. Pseudonymization Pseudonymization is the processing of personal data in such a way that personal data can no longer be assigned to a specific subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that personal data is not attributed to an identified or identifiable natural person..

g) Controlerul sau controlorul responsabil de prelucrare Controlorul sau controlorul responsabil de prelucrare este persoana fizică sau juridică, autoritatea publică, agenția sau orice alt organism care, singur sau în comun cu alții, determină scopurile și mijloacele procesării datelor cu caracter personal; în cazul în care scopurile și mijloacele acestei prelucrări sunt stabilite de legislația Uniunii sau a statelor membre, controlorul sau criteriile specifice pentru desemnarea acestuia pot fi prevăzute de legislația Uniunii sau a statelor membre.

h. Processor The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller..

i) Destinatar Destinatarul este o persoană fizică sau juridică, o autoritate publică, o agenție sau un alt organism, la care datele personale sunt dezvăluite, indiferent dacă sunt terțe sau nu. Cu toate acestea, autoritățile publice care pot primi date cu caracter personal în cadrul unei anchete particulare în conformitate cu legislația Uniunii sau a statelor membre nu sunt considerate destinatare; prelucrarea acestor date de către aceste autorități publice trebuie să respecte normele aplicabile de protecție a datelor în conformitate cu scopurile prelucrării.

j) Terță parte O terță parte este o persoană fizică sau juridică, autoritate publică, agenție sau organism, în afară de persoana vizată, controlor, procesator și persoane care, sub autoritatea directă a controlorului sau a procesatorului, sunt autorizate să prelucreze datele cu caracter personal.

k) Consimțământ Consimțământul persoanei vizate este orice indicație liberă, specifică, informată și lipsită de ambiguitate a dorințelor persoanei vizate, prin care acesta, printr-o declarație sau printr-o acțiune clară afirmativă, semnifică un acord cu prelucrarea datelor cu caracter personal referitoare la acesta.

The name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other data protection provisions is:

• SC B-ZONE.RO SRL
• Iasi
• Romania
• E-mail: contact@b-zone.ro
• Website: http://wiki.b-zone.ro

Cookies

B-ZONE sites, including wiki.b-zone.ro, use cookies. Cookies are text files that are stored in a computer system through an Internet browser.

Many websites and Internet servers use cookies. Many cookies contain a so-called cookie ID. A cookie code is a unique cookie identifier. It consists of a character string through which web pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows the websites and servers visited to differentiate the individual browser of the data subject from other web browsers that contain other cookies. A particular Internet browser can be recognized, identified and authenticated using the unique cookie code.

By using cookies, B-ZONE can offer the users of this website more friendly services that would not be possible without the use of cookies.

Cookies allow us, as mentioned above, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. A visitor who uses cookies does not have to enter the access data every time the website is accessed and the website preferences are kept for the convenience of the visitors. Our shopping cart and customer systems also use cookies to ensure a perfect experience.

The data subject may, at any time, prevent the setting of cookies through our website through an appropriate setting of the Internet browser used and thus may permanently deny the setting of cookies. In addition, existing cookies may be deleted at any time through an Internet browser or other appropriate software; feature that exists in all major Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, not all features of our website will be fully usable.

Data collection and general information

B-ZONE collects a series of general data and information when an automated subject or system accesses the site. This general data and information is stored in the server log files. Collected may be (1) the types and versions of browser used, (2) the operating system used by the access system, (3) the site from which an access system reaches our site (the so-called referrals) , (4) under -5 sites, (5) date and time of access to the website, (6) an Internet protocol address (IP address), (7) Internet access service provider and ( 8) other similar data and information that can be used in case of attacks on our systems and infrastructure.

When using this data and general information, B-ZONE does not draw any conclusions regarding the data subject. Rather, this information is required for (1) the correct delivery of our website content, (2) to optimize the content of our website, (3) to ensure the long-term viability of our systems and infrastructure, and (4) to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. Therefore, B-ZONE statistically analyzes the data and information collected anonymously, in order to increase the data protection and data security of our organization and to ensure an optimal level of protection for the personal data we process. Anonymous data in relevant journals are stored separately from all personal data provided by a data subject.

Possibility of contact through the website

Our website contains information that allows a quick electronic contact to our company, as well as a direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the operator by e-mail or through a contact form, the personal data transmitted by the data subject are automatically stored. These personal data voluntarily transmitted by a subject subject to the data operator are stored for the purpose of processing or contacting the data subject. There is no transfer of such personal data to third parties, unless it is necessary to deliver additional correspondence.

Deleting and blocking of personal data

The data operator processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage or insofar as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject.

If the storage purpose is not applicable or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are usually blocked or deleted in accordance with the legal requirements. If a legal purpose for data storage no longer exists, all applicable personal data and purchase information are erased and deleted from our system after a period of five (5) years.

The rights of the person

a) Dreptul de confirmare Fiecare persoană vizată are dreptul acordat de legiuitorul european de a obține de la operator confirmarea privind prelucrarea sau nu a datelor personale referitoare la acesta. Dacă persoana vizată dorește să utilizeze acest drept de confirmare, acesta poate, în orice moment, să ia legătura cu orice angajat al operatorului.

b) Dreptul de acces Fiecare persoană vizată are dreptul acordat de legiuitorul european de a obține de la operator informații gratuite despre datele sale personale stocate în orice moment și o copie a acestor informații. În plus, directivele și reglementările europene permit persoanei vizate acces la următoarele informații:

• processing purposes;
• the categories of personal data in question;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, especially to recipients from third countries or international organizations;
• when possible, the period for which the personal data will be stored or, if not possible, the criteria used to determine the respective period;
• the existence of the right to request from the operator the rectification or deletion of the personal data or the restriction of the processing of the personal data related to the data subject or to oppose this processing;
• the existence of the right to file a complaint with a supervisory authority;
• if personal data are not collected from the data subject, available information regarding their source;
• the existence of automatic decisions, including profiling, referred to in Article 22 (1) and (4) of the GDPR and, at least in these cases, significant information about the logic involved, as well as the significance and expected consequences of such * processing for the person concerned.

In addition, the data subject has the right to obtain information regarding the transfer of personal data to a third country or to an international organization. In this case, the data subject has the right to be informed about the appropriate guarantees regarding the transfer.

If the data subject wishes to use this right of access, he may, at any time, contact any employee of the operator.

c) Dreptul la rectificare Fiecare persoană vizată are dreptul acordat de legiuitorul european de a obține de la operator fără întârziere nejustificată rectificarea datelor cu caracter personal inexacte referitoare la acesta. Ținând cont de scopurile prelucrării, persoana vizată are dreptul să completeze datele cu caracter personal incomplete, inclusiv prin furnizarea unei declarații suplimentare. Dacă persoana vizată dorește să-și exercite acest drept la rectificare, acesta poate, în orice moment, să ia legătura cu orice angajat al operatorului.

d) Dreptul la ștergere (Dreptul de a fi iertat ) Fiecare persoană vizată are dreptul acordat de legiuitorul european de a obține de la controlor ștergerea datelor cu caracter personal care îl privesc fără întârzieri nejustificate, iar operatorul are obligația de a șterge datele cu caracter personal fără întârzieri nejustificate atunci când unul dintre motivele următoare se aplică, atât timp cât prelucrarea nu este necesară (de exemplu, în cazurile în care a avut loc o tranzacție financiară):

Personal data are no longer required in relation to the purposes for which they were collected or otherwise processed;

• The data subject withdraws consent on which the processing is based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and if there is no other legal basis for processing;
• The data subject opposes the processing in accordance with Article 21 (1) of the GDPR and there are no compelling legitimate reasons for the processing or the data subject opposes the processing in accordance with Article 21 (2) of the GDPR;
• Personal data were processed illegally;
• Personal data must be deleted in order to comply with a legal obligation under the law of the Union or of the Member States to which the controller is subject;
• The personal data have been collected in connection with the information society services offer referred to in Article 8 (1) of the GDPR.
• If one of the reasons mentioned above applies, and a data subject wishes to request the deletion of personal data stored by B-ZONE, he may, at any time, contact any employee of the controller. An employee of B-ZONE shall immediately ensure that the removal request is complied with in accordance with the applicable laws and regulations.

Where the controller has disclosed personal data and is required under Article 17 (1) to delete the personal data, the controller, taking into account available technology and implementation costs, shall take reasonable measures, including technical measures. , to inform other controllers that process the personal data that the data subject has requested the deletion by these controllers of any links or copying or replication of the personal data, to the extent that the processing is not necessary. An employee of B-ZONE will arrange the necessary measures individually.

e) Dreptul de restricționare a prelucrării Fiecare persoană vizată are dreptul acordat de legiuitorul european de a obține de la controlorul restricția procesării atunci când se aplică una dintre următoarele:

• The accuracy of the personal data is contested by the data subject, for a period that allows the operator to verify the accuracy of the personal data;
• The processing is illegal, and the data subject opposes the deletion of personal data and instead asks for the restriction of their use;
• The operator no longer needs the personal data for the purpose of processing, but is requested by the data subject for establishing, exercising or defending legal claims;
• The data subject objected to the processing in accordance with Article 21 (1) of the GDPR, pending the verification that the legitimate motives of the operator exceed those of the data subject.
• If one of the conditions mentioned above is fulfilled and a data subject wishes to request the restriction of the processing of personal data stored by B-ZONE, he may contact any employee of the controller at any time. * The B-ZONE employee will take appropriate measures to restrict further processing.

f) Dreptul la portabilitatea datelor Fiecare persoană vizată are dreptul acordat de legiuitorul european de a primi datele cu caracter personal care îl privesc, care au fost furnizate unui operator, într-un format structurat, utilizat în mod obișnuit și care poate fi citit automat. El sau ea vor avea dreptul de a transmite aceste date unui alt operator, fără a se împiedica de la controlorul căruia i-au fost furnizate datele cu caracter personal, atât timp cât prelucrarea se bazează pe consimțământ în conformitate cu articolul 6 alineatul (1) litera (a) din GDPR sau litera (a) din articolul 9 alineatul (2) din GDPR sau cu un contract în conformitate cu articolul 6 alineatul (1) litera (b) din GDPR, iar prelucrarea se realizează prin mijloace automatizate, atât timp cât prelucrarea nu este necesară pentru îndeplinirea unei sarcini desfășurate în interesul public sau în exercitarea autorității oficiale învestite în controlor. În plus, în exercitarea dreptului său la portabilitatea datelor în conformitate cu articolul 20 alineatul (1) din GDPR, persoana vizată are dreptul de a transmite date cu caracter personal direct de la un operator la altul, atunci când este posibil din punct de vedere tehnic și atunci când face acest lucru nu afectează în mod negativ drepturile și libertățile celorlalți. Pentru a afirma dreptul la portabilitatea datelor, persoana vizată poate contacta în orice moment orice angajat B-ZONE.

g) Dreptul de a obiecta Fiecare persoană vizată are dreptul acordat de legiuitorul european de a se opune, din motive legate de situația sa particulară, în orice moment, pentru prelucrarea datelor cu caracter personal referitoare la acesta, care se bazează pe litera (e) sau (f) din articolul 6 alineatul (1) din GDPR.

This also applies to profiling based on these provisions. ZONE B will no longer process personal data in the case of the objection, unless we can demonstrate legitimate compulsory reasons for processing that replace the data subject's interests, rights and freedoms or for establishing, exercising or defending the law. claims.

If B-ZONE processes personal data for direct marketing purposes, the data subject has the right at any time to oppose the processing of personal data concerning him for such marketing. This applies to profiling insofar as it is related to such direct marketing. If the data subject opposes the processing of B-ZONE for direct marketing purposes, B-ZONE will no longer process personal data for these purposes.

In addition, the data subject has the right, for reasons related to his particular situation, to oppose the processing of personal data relating to it by B-ZONE for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless the processing is necessary to perform a task performed for reasons of public interest.

In order to exercise the right to object, the data subject may contact any employee of B-ZONE. In addition, the data subject is free in the context of using the information society services and, despite Directive 2002/58/EC, to use his right to oppose by automatic means using technical specifications.

h) Luarea deciziilor individuale automatizate, inclusiv profilarea Fiecare persoană vizată are dreptul acordat de legiuitorul european de a nu fi supus unei decizii bazate exclusiv pe prelucrarea automatizată, inclusiv profilarea, care produce efecte juridice asupra lui sau a acesteia, sau în mod similar îl afectează în mod semnificativ, atât timp cât decizia (1) nu este necesar pentru a încheia sau pentru a executa un contract între persoana vizată și un operator de date sau (2) nu este autorizat de legislația Uniunii sau a statelor membre la care este supus controlorul și care de asemenea stabilește stabilește măsuri adecvate pentru a proteja drepturile și libertățile și interesele legitime ale persoanei vizate sau (3) nu se bazează pe consimțământul explicit al persoanei în cauză.

If the decision (1) is necessary to conclude or fulfill a contract between the data subject and a data operator or (2) is based on the specific consent of the person concerned, B-ZONE will implement appropriate measures to protect the rights and the freedoms of the data subjects and the legitimate interests, at least the right to obtain human intervention from the operator, to express his point of view and to challenge the decision.

If the data subject wishes to exercise his / her rights regarding the automatic decision-making of the individual, he / she may, at any time, contact any employee of the B-ZONE.

i) Dreptul de a retrage consimțământul privind protecția datelor Fiecare persoană vizată are dreptul acordat de legiuitorul european de a-și retrage consimțământul pentru prelucrarea datelor sale personale în orice moment.

If the data subject wishes to exercise his right to withdraw his consent, he may, at any time, contact any employee of the B-ZONE.

Legal basis of processing

Art. 6 (1) lit. a GDPR serves as the legal basis for the processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the execution of a contract to which the data subject is a party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, processing is the basis Article 6 (1) letter b GDPR. The same applies to processing operations that are necessary to perform pre-contractual measures, such as investigations into our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of fiscal obligations, processing is done on the basis of art. 6 (1) lit. c GDPR. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. The processing would be based on art. 6 (1) lit. d GDPR. Finally, processing operations could be based on Article 6 (1) letter. f GDPR. This legal basis is used for processing operations that are not covered by any of the legal grounds mentioned above, if processing is necessary for the legitimate interests pursued by our company or by a third party, unless these interests are over-demanded by interests. or the fundamental rights and freedoms of the data subject who need the protection of personal data.

Legitimate interests pursued by the controller or by a third party

If the processing of personal data is based on Article 6 (1) letter. f GDPR our legitimate interest is to carry out our activity in favor of the welfare of all our employees and shareholders.

Period for which personal data will be stored

The criteria used to determine the period of storage of personal data are the legal period of storage. After the expiration of this period, the corresponding data are routinely erased, as long as it is no longer necessary for the performance of the contract or the initiation of a contract.

The provision of personal data as a legal or contractual requirement; The requirement necessary to conclude a contract; Obligation of the data subject to provide personal data; possible consequences of the failure to provide this data

Sometimes it may be necessary to establish, in accordance with the contractual obligation, the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with him. The provision of personal data to us would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee. The employee must clarify to the data subject whether the provision of personal data is required by law or contract or is necessary for the performance of the contract, if there is an obligation to provide the personal data and the consequences of not providing such data.