As in any economic activity, just like other economic operators, our Company also processes a series of personal data of its customers and collaborators.
In accordance with national and European legal provisions, the processing of personal data must be carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR regulation” and the other acts, national or European, issued for its application.
Our company complies with the provisions regarding the processing of personal data, aiming to provide you with all the necessary information about how it processes this data, namely the method of collection, use, transfer and protection when you browse the Website, when you create your Account, when you place an order or contact Us.
Please also consult the Policy regarding cookies modules and the Terms and Conditions of CRIDA PHARM S.R.L., which can be accessed through the Website and are applicable in all interactions you have with Us.
Chapter I – General provisions
- Meaning of some terms
- Capitalized terms used below, unless the context otherwise requires, have the meaning provided in Terms and Conditions Crida Pharn S.R.L.
- About the Company and contact details
- The website is owned by Us, respectively by the company CRIDA PHARM S.R.L., limited liability company organized and operating according to the laws of Romania, registered at the Trade Registry with no. J40/5523/1997, having its registered office in Bucharest, Sector 6, Intr. The wagon, No. 2, Block 101, Staircase 2, Floor P, Apartment 47, Romania and the work point in: Strada Stadionului no. 1, Oltenita, Calarasi county, tax identification number RO9602646, bank account IBAN RO85 RNCB 0068 0043 6851 0003, opened at B.C.R. Ghencea Bucharest branch and IBAN RO94 BACX 0000 0023 9933 0000 opened at Unicredit Bank Victoriei Branch, share capital: 1,000,000 RON, with contact details: email: office@cridapharm.ro, phone: 0214.30.43.99.
- In accordance with the GDPR Regulation, when we process personal data We have the capacity tooperator, and you have the quality of targeted person.
- You can contact us at any time at the contact details mentioned above in case you need additional information regarding the processing of data by the Company.
Chapter II – Categories of processed data, purposes and grounds of processing, storage duration, data recipients and their security
- Categories of processed data
- We are processing some identification data, account data and contact data, such as first and last name, billing and delivery address, email, phone number, username, orders placed and reviews given, for the conclusion and execution of the Remote Contract, to be able to register your Account, to the extent where you choose to create an account, to retrieve orders placed and to be able to contact you about them and the like. We also process some of this data in order to fulfill legal obligations regarding keeping accounting records and, if you agree, for marketing purposes.
- At the same time, we process some payment data, such as the information related to making payments through the bank account or card, to follow the execution of the Remote Contract concluded with you, respectively to verify the fact that the payment has been made or to return the amounts paid to you, in case of withdrawal from the Contract at distance. We also process some of this data in order to fulfill the legal obligations related to keeping accounting records.
- Some are also processed through the Website technical data, such as those related to the IP address, browser type and version, location and time settings, the way of using the Website and the like, to ensure the security of the Website, to provide you with the best possible browsing experience pleasant and to understand the way in which you interact with the Website. For details on the method of processing this data, please also consult the Policy on cookie modules
- Sometimes we also process some marketing date, such as your preferences for receiving commercial materials, by email or phone, and being contacted about them and the reviews you leave. Also, some marketing data can be collected through the cookie modules used by the Website. For more details on this topic, please consult the Cookie Policy.
- We do not process genetic data, biometric data, health or conviction data or data relating to religious denomination, philosophical beliefs, trade union membership, racial or ethnic origin, political opinions, sex life or sexual orientation.
- The purposes and grounds of data processing
- We process the data on the basis of your consent, on the basis of the fulfillment of some legal obligations of the Company, on the basis of the conclusion and execution of contracts with you and in order to achieve the legitimate interests of the Company, such as those related to the achievement of the object of activity, the identification of new customers, the fulfillment of the strategy marketing, performing analyzes on Website traffic and the like.
- We are processing identification data, account data, contact details and payment data in order to conclude and execute the Remote Contract, register Your Account and manage your relationship with Us. We take over these data directly, based on the agreement you provide on the occasion of the transmission of the data, and they are necessary in order to conclude and execute the contract between us and you. To the extent that you do not wish to provide us with this data, you should bear in mind that we may no longer be able to conclude or execute the contract concluded with you.
We also process this data in order to fulfill some legal obligations incumbent on us, such as legal obligations in fiscal matters or those relating to accounting, archiving and similar.
At the same time, based on express consent, we can also process these data for the purpose of realizing the Company's marketing strategy, such as contracting you to present the Company's offers to you, publishing reviews on the Website and the like.
- Technical data we process them in order to provide the most optimal experience when you browse the Website, but also for security and data protection reasons or to understand the way in which you interact with it, such as some preferences you have, while some technical data are processed for marketing purposes. In principle, we process these data based on your consent, but there may also be cases when we process them in order to achieve the legitimate interest of the Company, such as data processed for security and protection reasons, the processing being carried out in this case in order to protecting the Company from various cyber attacks and the like.
- Marketing data we process them in order to develop and follow the Company's commercial policy and in order to send commercial communications, offers regarding the Company's Products and to contact you in connection with them. We collect and use this data based on the consent you give us.
- Duration of data storage
- In principle, except as mentioned below, we keep the data collected during the period in which you have your Account registered through the Website. After the account is closed, the data will be kept only for the time necessary to fulfill the previously specified purposes and no more than 5 years from the date of account closure, except in situations where it is necessary to keep them for another, longer period provided by law, strictly in order to fulfill the legal obligations that the Company has, such as, for example, those of archiving accounting documents and others (such as the case of supporting financial-accounting documents for which the retention period stipulated by law is 10 years from the end of the financial year during which they were drawn up).
- If you do not choose to create an account, the data will be stored for a period necessary to fulfill the purposes for which it is collected, but not more than 5 years, except in situations where it is necessary to keep it for another period provided by law, longer, strictly in order to fulfill the legal obligations that the Company has, such as, for example, those of archiving accounting documents and the like (as is the case, for example, of financial-accounting supporting documents for which the retention period provided by law is 10 years from the end of the financial year during which they were drawn up).
- The technical data will be stored according to your preferences. For more information about these data, please also consult the Policy regarding the cookie modules.
- Marketing data will be stored until you withdraw your consent or, in the absence of this event, until the purpose for which it was collected is fulfilled.
- Recipients of the data
- As in any economic activity, We also have a series of commercial partners with whom we collaborate in order to carry out our activity in the best possible conditions.
- In this context, in some cases, it is necessary to transmit some collected data to these business partners.
- Thus, in some cases, we transmit the collected data to:
- Payment processors with whom we collaborate in order to facilitate payments via bank cards;
- The company with which we collaborate in order to keep the accounting records, in accordance with the legal provisions;
- To the transport companies with which we collaborate in order to deliver the Products to you.
- We do not intend to transfer Your data to a non-EU country. However, we use the services of Google (Google Analytics) and Facebook to achieve the legitimate interests of the Company, in which sense please also consult the privacy policies of these entities.
- Data security
- We maintain data security according to industry standards by implementing technical, physical and organizational measures to prevent the destruction, alteration or unauthorized access of data.
- We seek to take the necessary technical measures to protect the security and confidentiality of the processed data, prohibiting any unauthorized access to them. The data is disclosed only to those persons or entities entitled to know it.
- We ensure that our partners and people who have access to data process it only for the necessary purposes for which they have been given access and we ensure that they respect data confidentiality.
- In case of security risks or incidents regarding the processed data, we will fulfill all the obligations provided by the GDPR Regulation, taking all the necessary measures for their removal and management. In all cases, we will inform you, in accordance with the GDPR Regulation, about these situations.
Chapter III – Your Rights
- Exercise of rights
- You can always contact the Company in order to exercise the rights described below, at any of the Company's contact details.
- The right of access to processed personal data
- You have the right to obtain a confirmation from us regarding the personal data we process about you and information regarding: a) the purposes of the processing; b) categories of personal data processed; c) categories of data recipients; d) data storage duration; e) the right to request the rectification or deletion of processed data or the right to restrict or oppose their processing; f) the right to file a complaint before the ANSPDCP.
- The right to rectify personal data processed
- You have the right to ask us to correct or complete inaccurate personal data that we have about you.
- The right to delete processed personal data
- You have the right to ask us to delete the personal data we hold about you.
- However, in certain situations we cannot comply with your request. For example, we cannot delete data if we have a legal obligation to keep it for a certain period, such as legal obligations that require us to keep data for the period provided by law, for tax and accounting reasons. Also, to the extent that it is necessary to keep the data for establishing, exercising or defending a right in court, we will not be able to comply with your request.
- The right to restrict the processing of personal data
- You can obtain the restriction of data processing in the cases described in art. 18 of the GDPR Regulation.
- The right to object to the processing of personal data
- You have the right to object to data processing in the situations described by art. 21 of the GDPR Regulation.
- The right to port the processed personal data
- You have the right to receive the personal data that you have provided to us and that we have about you, under the conditions described in art. 20 of the GDPR Regulation.
- The right to withdraw your consent to the processing of personal data;
- At any time, you have the right to change or withdraw your consent/agreement regarding the processing of the data you have provided to us.
- You must bear in mind that in this case we may no longer be able to carry out commercial relations with you. At the same time, you must also take into account the fact that, following the modification or withdrawal of the consent granted, it is possible that this will not affect the data processing carried out previously or will not cause the deletion of certain data for which the Company has a legal obligation to process or a legitimate interest in keeping them.
- The right to lodge a complaint with the national supervisory authority for the processing of personal data.
- You have the right to file a complaint with the National Supervisory Authority for the Processing of Personal Data, based in Bd. G-ral. Gheorghe Magheru, No. 28-30, Sector 1, 010336, Bucharest, Romania, website: https://www.dataprotection.ro/?page=contact&lang=ro
- Without in any way affecting this right, if you have any uncertainty or notification regarding the processing of personal data by the Company, you can address it to us at the provided contact details, and We will do our best to clarify any aspect .
Chapter IV – Other aspects
- From time to time, we will revise the Privacy Policy. In this regard, please consult it every time you consider it necessary, and if the changes made harm you in any way, inform us to discuss this situation.
- Any questions you have regarding the processing of personal data by the Company can be addressed to: office@cridapharm.ro or to the telephone number: 0214.30.43.99.
- This Privacy Policy was updated on 08.10.2023.
.png){kind=small}
