Privacy Policy
Page content
POLICY
ON THE PROCESSING OF PERSONAL DATA
Respecting your privacy is one of our fundamental commitments and, for this reason, we pay the utmost attention to the processing of your personal data, in accordance with the applicable legislation.
ARESSHIELD S.R.L., with registered office at STR. AVRAM IANCU, BL.9, ET.8, AP.50, Petroșani, Hunedoara, tax identification code 49856767, registered with the Trade Registry Office under no. J2024000495202 ("ARESSHIELD S.R.L.", "we") processes, as controller, your personal data ("Personal Data"). The purpose of this information notice ("Policy") is to detail how ARESSHIELD S.R.L. processes your Personal Data.
1. THE PERSONAL DATA PROCESSED, THE PURPOSES OF PROCESSING AND THE LEGAL BASES FOR PROCESSING
A. Other processing
a. Communication with users
Personal data processed: first name, last name, email address, phone number, any other information found in communications.
|
Purpose of processing |
Legal basis |
|
Communicating with users in relation to the services offered by the company |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
b. Customer opinion (feedback)
Personal data processed: first name, last name, email address, other information mentioned by the customer.
|
Purpose of processing |
Legal basis |
|
Requesting and analyzing customer opinions in order to improve services |
Consent of the data subject (Art. 6(1)(a) GDPR) |
c. Disputes
Personal data processed: first name, last name, home address.
|
Purpose of processing |
Legal basis |
|
Defending legitimate rights and interests and supporting any claims before judicial bodies or any other public authorities |
Legitimate interest of the Company (Art. 6(1)(f) GDPR) |
B. Ordering and delivery of products
a. Making the payment
Personal data processed: first name, last name, amount to be paid.
|
Purpose of processing |
Legal basis |
|
Making payment for the products / services purchased |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
b. Delivery of the order
Personal data processed: first name, last name, products purchased, delivery address, phone number, any additional information provided by the customer.
|
Purpose of processing |
Legal basis |
|
Delivery of the order placed |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
c. Adding to the shopping cart
Personal data processed: first name, last name, product added.
|
Purpose of processing |
Legal basis |
|
Adding the product to the shopping cart |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
d. Placing the order
Personal data processed: first name, last name, products purchased, delivery address, phone number, email address, any additional information provided by the customer.
|
Purpose of processing |
Legal basis |
|
Completing and placing the order |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
e. Issuing the invoice
Personal data processed: first name, last name, home address, products / services purchased, amount to be paid.
|
Purpose of processing |
Legal basis |
|
Issuing the invoice for the products / services purchased |
Compliance with a legal obligation of the Company (Art. 6(1)(c) GDPR) |
C. User account
a. Creating the user account
Personal data processed: first name, last name, email address.
|
Purpose of processing |
Legal basis |
|
Creating the customer's user account |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
b. Completing the user profile
Personal data processed: image.
|
Purpose of processing |
Legal basis |
|
Completing the customer's user profile |
Consent of the data subject (Art. 6(1)(a) GDPR) |
c. Order history
Personal data processed: first name, last name, order date, products ordered, amount to be paid.
|
Purpose of processing |
Legal basis |
|
Displaying the order history |
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) |
D. Promoting the company's services
a. Publishing testimonials
Personal data processed: first name, last name, company, testimonial.
|
Purpose of processing |
Legal basis |
|
Publishing testimonials in order to promote the company's services |
Consent of the data subject (Art. 6(1)(a) GDPR) |
b. Commercial messages
Personal data processed: first name, last name, phone number, email address.
|
Purpose of processing |
Legal basis |
|
Sending commercial messages in order to promote the company's services |
Consent of the data subject (Art. 6(1)(a) GDPR) |
2. PROVIDING PERSONAL DATA
You may refuse to provide certain Personal Data but, in such a case, you may not be able to benefit from certain services specific to the relationship described in this Policy.
3. ABOUT THE LEGAL BASES
The legal basis for processing differs depending on the specific situation and the Personal Data processed.
Where we process your Personal Data on the basis of consent, we will request your freely given, informed, specific and unambiguous consent to that processing. By giving your consent, you agree that we may collect, use, disclose, process and transfer the Personal Data in accordance with this Policy.
4. SOURCE OF PERSONAL DATA
The source of the Personal Data is: the online customer.
5. AUTOMATED PROCESSING OF PERSONAL DATA
Your Personal Data will not be processed to generate decisions based solely on automated processing that would produce legal effects concerning you or significantly affect you, within the meaning of Art. 22(1) GDPR.
6. PROCESSING PERIOD
The period for which Personal Data is processed differs depending on the specific processing operation:
|
Operation |
Period |
|
Communication with users |
for as long as the account exists or for the time needed to resolve the request/issue, but no more than 3 years (where there is no account)
|
|
Customer opinion (feedback) |
the time needed to analyze the opinion
|
|
Disputes |
the time needed to resolve the dispute
|
|
Making the payment |
as a rule, 3 years
|
|
Delivery of the order |
the time needed to deliver the products
|
|
Adding to the shopping cart |
until the order is completed or until the products are removed from the cart
|
|
Placing the order |
3 years
|
|
Issuing the invoice |
in accordance with legal archiving obligations
|
|
Creating the user account |
for as long as the account exists
|
|
Completing the user profile |
for as long as the account exists
|
|
Order history |
for as long as the account exists
|
|
Publishing testimonials |
until consent is withdrawn
|
|
Commercial messages |
until consent is withdrawn
|
In certain circumstances, we may keep Personal Data for longer periods in order to have an accurate record of your dealings with us in the event of any complaints or if we reasonably believe there is a prospect of litigation.
7. TRANSFER OF PERSONAL DATA
We may transfer Personal Data, to the extent necessary, to the following categories of recipients: IT service providers, state authorities, payment service providers, Shopify Inc. / Shopify Payments, courier service providers, accounting service providers, marketing service providers.
These recipients may be located in the European Union and/or the European Economic Area, as well as outside them, including in countries that are not recognized as ensuring an adequate level of protection, in which case the transfer of Personal Data takes place only if appropriate safeguards exist, in accordance with applicable law (such as the standard contractual clauses issued by the European Commission). You may request a list of recipients in third countries, as well as a copy of the agreed provisions ensuring an adequate level of protection of the Personal Data.
8. SECURITY OF PERSONAL DATA
The security of your Personal Data is important to us. Therefore, your Personal Data will be processed by applying reasonable technical and organizational measures to protect it, such as limiting access to Personal Data, encrypting or anonymizing Personal Data, and storing it on secure media. However, despite our efforts, we cannot always guarantee the effectiveness of the security measures implemented and, therefore, we cannot guarantee the security of Personal Data at all times.
9. RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
Right of access: You have the right to obtain confirmation from us that your Personal Data is being processed by us, as well as information on the specifics of the processing, such as: the purpose, the categories of Personal Data processed, their recipients, the period for which they are kept, their source, whether we transfer them abroad and how we protect them, your rights, and the right to lodge a complaint with the supervisory authority.
Right to rectification: You may request the rectification of your Personal Data, provided that the applicable legal requirements are met. In the event of errors, after notification, we will correct your Personal Data immediately.
Right to erasure: In certain cases, you may request the erasure of Personal Data, such as when: (i) it is no longer necessary for the purposes for which we collected and processed it; (ii) you have withdrawn your consent to the processing of the Personal Data and we can no longer process the Personal Data on other legal grounds; (iii) the Personal Data is processed unlawfully; (iv) you are exercising a legal right to object. We are not obliged to comply with your erasure request where the processing of Personal Data is necessary for compliance with a legal obligation, or for the establishment, exercise or defense of a legal claim. There are also other circumstances in which we are not obliged to comply with a request for erasure of Personal Data.
Restriction of processing: You may request that we restrict the processing of your Personal Data in the following situations: (i) if you contest the accuracy of the Personal Data, for a period enabling us to verify the accuracy of the Personal Data in question; (ii) if the processing is unlawful and you oppose the erasure of the Personal Data, requesting instead the restriction of its use; (iii) if we no longer need the Personal Data for the purposes of processing, but you require it for a legal claim; (iv) if you have objected to the processing, for the period in which it is verified whether our legitimate rights as controller override those of the data subject. We may continue to use the Personal Data following a restriction request if: (i) we have your consent; (ii) for the establishment, exercise or defense of a legal claim; or (iii) to protect the rights of another natural or legal person.
Right to data portability: To the extent that Personal Data is processed on the basis of your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format and you have the right to transmit this Personal Data to another controller. This right does not adversely affect the rights and freedoms of others.
Right to object: In certain situations, such as when we process your Personal Data on the basis of a legitimate interest, you have the right to object to our processing of your Personal Data. In the event of an unjustified objection, ARESSHIELD S.R.L. is entitled to continue processing the Personal Data. You may also object to the processing of your Personal Data for the purpose of sending commercial messages.
Withdrawal of consent: To the extent that we process your Personal Data on the basis of your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Automated individual decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply where the decision: (i) is necessary for entering into or performing a contract between you and us; (ii) is authorized by law which also lays down suitable safeguards for your rights and freedoms; (iii) is based on your explicit consent.
Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing ("ANSPDCP") regarding any violation of your rights concerning the processing of your Personal Data. ANSPDCP's contact details are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336 Bucharest, Romania; email: anspdcp@dataprotection.ro.
To exercise the rights mentioned above, please contact us at the email address: aresshield@yahoo.com.
10. CONTACT
If you have any questions or concerns about this Policy or its implementation, you can contact us at the email address: aresshield@yahoo.com.