Dear Client,
In light of the change in legislation brought by the General Data Protection Regulation no. 679/2016 (GDPR), we inform you that we have updated the ROFERT.RO Personal Data Protection policy.
We process your personal data (data related to orders and transactions, identification data, data that you provide us or that we receive by virtue of the law or the contract in order to be able to deliver products and services to you) - in general for the provision of goods and services, to interact with you, to transmit, with your consent, details about our activity, products and promotions.
The processing of your personal data takes place:
a) in order to conclude and execute a contract that you concluded with us, the resolution of complaints and requests from customers, including aspects related to orders, such as delivery, invoicing, product returns, the resolution of potential disputes submitted to the courts, the recovery of debts;
b) to comply with a legal obligation, including, but not limited to communications or reports to the authorized authorities, institutions or state or governmental agencies;
c) if you want to apply for one of the vacancies displayed in the "Careers" section, for the purpose of personnel recruitment;
d) by virtue of our legitimate interest, which includes the following purposes: ensuring the necessary security measures (video surveillance and access to secure spaces), identifying clients, detecting and preventing potential fraud, internal reporting or to other entities of the group of which rofert is a part , photos at events in stores;
e) based on your consent for the following purposes:
1) statistics, respectively marketing, newsletter, direct mailing actions, offering products and services, advertising;
2) automatic processing, including profiling;
3) the processing of your data of a special nature processed under the conditions of Art. 9 para. (2) GDPR, indispensable for the provision of goods and services.
The categories of recipients to whom the collected personal data can be sent:
state authorities (including but not limited to tax authorities, consumer protection authorities, state bodies competent in criminal matters, etc.), as a result of a legal obligation of the Operator;
the suppliers directly/indirectly involved in the supply of goods and services (e.g. IT service developers, etc.);
providers of marketing services, market research, customer satisfaction studies and other similar services;
other companies within the ROFERT Group of companies;
judicial or arbitration courts, notaries public, lawyers, bailiffs, authorized translator offices, other authorized services.
We also inform you that the store/space is video-surveilled based on the legitimate interest and the fulfillment of the legal obligation to monitor access to the premises in order to ensure the security of people and goods, according to Law 333/2003 on the protection of objectives, goods, values and protection people. The collected images are indispensable for ensuring the mentioned purpose. The images are used by the operator and can be communicated to the competent public authorities, in accordance with the law. The images are stored for 30 days and when the deadline is reached, they are automatically deleted. The images are not transferred abroad or to another operator. If you do not agree with the processing, the operator will be able to limit your access to the store/space.
Transfer of personal data to a country outside the European Economic Area
Storage of personal data
Personal data will be processed at least for the duration of the validity of the concluded contract, as well as subsequently, for the duration necessary for the execution of the contractual obligations by any of the parties. Personal data will be stored as long as necessary for the purposes mentioned above or for a period of time provided by the legal provisions, in accordance with our internal data retention policy.
If you agree to the processing for marketing purposes, the personal data collected will be kept until you inform us about the withdrawal of the consent granted for this purpose.
With the entry into force of the GDPR as a customer, you have the following rights:
The right to information and access
You have the right to be informed, upon request, if your personal data is being processed and if so, you have the right to request access to it. You have the right to obtain a copy of your processed personal data.
The right to rectification
You have the right to obtain from us the rectification of your incorrect personal data and you can complete the incomplete data whenever you consider it necessary.
The "right to be forgotten" or the right to erasure
You have the right to request the restriction of the processing of your personal data. In this case, the data can be marked and can be processed by us only for certain purposes.
The right to withdraw your consent
Consent can be withdrawn at any time, when the processing of personal data concerning you has been carried out based on your consent.
The right to restriction of processing
Presupposes the right to request and obtain the restriction of the processing of personal data concerning you, in certain circumstances, such as (i) you dispute the accuracy of the data, during the period that would allow us to verify the accuracy of those data, (ii) your data. were processed illegally, and you oppose their deletion, requesting the restriction of their use.
The right to data portability
You have the right to receive your personal data that you have provided us, in a structured, usual format that can be identified by devices and you have the right to transmit this data to another entity, without objections from us.
The right of opposition
You have the right to object at any time to our processing of your personal data, especially for direct marketing purposes; you can request that we no longer process your personal data in our legitimate interest. If you have and exercise the right to object, we will no longer process your personal data for that purpose. Exercising this right does not involve costs. This right can be invalidated in particular if the processing of your personal data is necessary for the formalities related to the conclusion of a contract or for the fulfillment of a contract already concluded.
The right to submit a complaint to us and/or to the competent data protection authority - the National Authority for the Supervision of the Processing of Personal Data (ANSPDCP) - www.dataprotection.ro
The right to go to court
You can exercise the rights mentioned above by submitting a written, dated and signed request to:
email address This email address is being protected from spambots. You need JavaScript enabled to view it..
In the request, please mention if you want the information to be communicated to a certain address (postal or e-mail) or through a courier service that ensures that you will receive the information personally. Please note that, before responding to any such request, we reserve the right to verify your identity, to ensure that the request comes from you.
Dearfully,
The ROFERT.RO team