Last updated: June 2020

I. General information

The confidentiality of your personal data is one of the main concerns of SC DUM-GRAF EXPERT SRL, based in as data operator.
This document has the role of informing you about the processing of your personal data, in the context of using the website Sitesfy.ro

II. Categoriile de date cu caracter personal prelucrate

II.1. If you are a customer of this website, SC DUM-GRAF EXPERT SRL will process your personal data, such as name and surname, telephone, e-mail address , billing address, delivery address, data on how you use the website, for example your behavior / preferences / habits within SC DUM-GRAF EXPERT SRL , as well as any other categories of data that you provide directly in the context of the creation of the user account, in the context of placing an order through the website or in any other way resulting from the use of the website.

If you use your Facebook or Google account to create a user account on the website, SC DUM-GRAF EXPERT SRL will process the following public profile data displayed of the respective applications: username, e-mail address.

II.2. If you are a visitor to the website, SC DUM-GRAF EXPERT SRL will process your personal data that you provide directly in the context of using the website, such as the data that you provide in the contact / questions / complaints section, to the extent that you contact us in this way.

III. Purposes and grounds for processing

•III.1. If you are a customer of the website, SC DUM-GRAF EXPERT SRL processes your personal data as follows:

• for the development of the contractual relationship between you and SC DUM-GRAF EXPERT SRL , respectively for taking over, validating, shipping and invoicing the order placed on the website, informing you about the status of the order, organizing the return of ordered products, etc.

Rationale: The processing of your data for this purpose is based on the contract concluded between you and SC DUM-GRAF EXPERT SRL , defined in the Terms and Conditions. The provision of your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of conducting contractual relations between you and SC DUM-GRAF EXPERT SRL .

• for the fulfillment of the legal obligations incumbent on SC DUM-GRAF EXPERT SRL in the context of the services provided through the website, including the obligations in fiscal matters as well as in archiving.

Rationale: The processing of your data for this purpose is required under legal obligations. Providing your data for this purpose is necessary. The refusal to provide the data may result in the impossibility of SC DUM-GRAF EXPERT SRL to comply with its legal obligations and therefore in the impossibility of offering you the services through the website.

• for marketing activities, respectively for the transmission, through the means of distance communication (e-mail, sms) of commercial communications regarding the products and services offered by SC DUM-GRAF EXPERT SRL, through the website’s community.

Rationale: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can consent to the processing of data for this purpose by checking the appropriate box at the time of account creation, or after account creation, in the My Account Information section. You can also consent to the processing of your data by clicking on the ‘OK’ button on the bottom of the website, in the cookie policy section. To unsubscribe from receiving such commercial communications you can use the option at the end of each email / sms containing commercial communications. In addition, you can unsubscribe by accessing the My Account Information section.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

• in order to perform various analyzes, reports on the operation of the website, the creation of consumption preference profiles, mainly in order to improve the experience offered on the website.

Rationale: The processing of your data for this purpose is based on the legitimate interest of SC DUM-GRAF EXPERT SRL to permanently improve the customer experience on the website. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

•III.2. If you are a visitor of the website, SC DUM-GRAF EXPERT SRL processes your personal data as follows:

• for marketing activities, respectively for the transmission, through the means of distance communication (e-mail, sms), of commercial communications regarding the products and services offered by SC DUM-GRAF EXPERT SRL.

Rationale: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by filling in and checking the appropriate box on the newsletter subscription form available on the website. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email / sms containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

• to resolve complaints, grievances and monitor traffic and improve your experience with the website.

Rationale: The processing of your data for this purpose is based on the legitimate interest of SC DUM-GRAF EXPERT SRL to ensure the proper functioning of the website, as well as to permanently improve the experience visitors to the website, including by resolving various comments, questions or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have a negative effect on you.

IV. The length of time we process your data

In principle, SC DUM-GRAF EXPERT SRL will process your personal data as long as necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently in accordance with the legal obligations incumbent on SC DUM-GRAF EXPERT SRL (eg in the case of documents financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year during which they were drawn up).

If you withdraw your consent for the processing of data for marketing purposes, SC DUM-GRAF EXPERT SRL will stop processing your personal data for this purpose, without affect the processing carried out by SC DUM-GRAF EXPERT SRL based on the consent expressed by you before its withdrawal.

V. Disclosure of personal data

For the purposes of processing, SC DUM-GRAF EXPERT SRL may disclose your data to partners, third parties or entities that support SC DUM-GRAF EXPERT SRL in carrying out the activity through the website (for example courier companies, IT service providers), or to the central / local public authorities, in the following exemplary cases listed:

• for the administration of the website;
• in situations where this communication would be necessary for the awarding of prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by SC DUM-GRAF EXPERT SRL through the website;
• to maintain, personalize and improve the website and the services provided through it;
• for performing data analysis, testing and research, monitoring usage and activity trends, developing security features and user authentication;
• for the transmission of commercial marketing communications, under the conditions and limits provided by law;
• when the disclosure of personal data is required by law, etc.

VI. Transfer of personal data

Personal data provided to SC DUM-GRAF EXPERT SRL can be transferred outside Romania, but only to European Union countries .

VII. Your rights

Under the conditions provided for by the legislation on the processing of personal data, as data subjects, you enjoy the following rights:

• the right to information, respectively the right to receive details regarding the processing activities performed by SC DUM-GRAF EXPERT SRL , as described in this document;
• the right to access data, respectively the right to obtain confirmation from SC DUM-GRAF EXPERT SRL regarding the processing of personal data, as well as details regarding processing activities such as the way in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc .;
• the right to rectification, respectively the right to obtain the correction, without justified delays, by SC DUM-GRAF EXPERT SRL of inaccurate / unjustified personal data, such as and filling in incomplete data; The rectification / completion shall be communicated to each addressee to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.
• the right to delete data, without undue delay, (“right to be forgotten”), if one of the following reasons applies:
  • they are no longer necessary for the purposes for which they were collected or processed;
  • if the consent is withdrawn and there is no other legal basis for the processing;
  • if the data subject opposes the processing and there are no legitimate reasons prevailing;
  • if personal data has been processed illegally;
  • if personal data must be deleted in order to comply with a legal obligation;
  • personal data have been collected in connection with the provision of information society services under Union or national law under which the controller is located.

It is possible that, following the request to delete the data, SC DUM-GRAF EXPERT SRL may anonymize this data (thus depriving it of personal character) and continue processing under these conditions for statistical purposes:

• the right to restrict processing to the extent that:
• the person disputes the accuracy of the data, for a period that allows us to verify the correctness of the data;
• the processing is illegal and the data subject opposes the deletion of personal data, instead requesting the restriction of their use;
• the controller no longer needs personal data for the purpose of processing, but the data subject requests it for the establishment, exercise or defense of a right in court; or
• the data subject has objected to the processing (other than direct marketing), for the period during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
• the right to data portability, namely (i) the right to receive personal data in a structured, commonly used and easy-to-read format, and (ii) the right to have such data transmitted by SC DUM-GRAF EXPERT SRL to another data controller, insofar as the conditions provided by law are met;
• the right to object – in respect of processing activities may be exercised by submitting a request as indicated below;
  • at any time, for reasons related to the particular situation of the data subject, that the data concerning him be processed on the basis of the legitimate interest of SC DUM-GRAF EXPERT SRL < / span> or in the public interest, unless SC DUM-GRAF EXPERT SRL can demonstrate that it has legitimate and compelling reasons justifying the processing and prevailing over the interests , the rights and freedoms of data subjects or that the purpose is to establish, exercise or defend a right in court;
  • at any time, free of charge and without any justification, that the data concerning it be processed for the purpose of direct marketing.
• the right not to be subject to an automatic individual decision, ie the right not to be the subject of a decision taken solely on the basis of automatic processing activities, including profiling, which produces legal effects concerning the data subject or affects him or her in similarly to a significant extent;
• the right to contact the National Authority for the Processing of Personal Data or the competent courts, to the extent deemed necessary.

For any further questions regarding the processing of personal data and to exercise your rights mentioned above, please contact the following e-mail address: contac@sitesfy.com.

This website uses cookies. For more information on how to use these files, please visit the following link: Cookie Policy