Privacy policy regarding the processing of personal data carried out by the DHC CO SRL Company
The company DHC CO SRL, a legal entity of Romanian nationality, with its headquarters in Sat Preajba, Com. Malu Mare, Trandafirilor str., no. 1-3, Jud. Dolj, having order number in the Trade Register J16/1573/1991 and Unique Identifier at European Level (EUID): ROONRC.J16/1573/1991 and CUI 2303850, mail: office@domeniiledascalu.ro and phone: 0725.005.500, will informs you of this policy on the processing of your personal data and the rights you have in accordance with REGULATION (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter referred to as GDPR) and national legislation on data protection and security personal, in force.
In accordance with national (Law 102/2005, amended and supplemented, Law no. 190/2018, Law no. 506/2004) and European (Regulation 2016/679/EU, Directive 2016/680/EC, Directive 2002/58 /CE) in force, the DHC CO SRL Company has the obligation to administer in safe conditions and only for the specified purposes, the personal data provided to it.
1. Definition of terms used in this policy
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to its physical, physiological, genetic, psychological, economic, cultural or social identity.
1. Definition of terms used in this policy
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
“Processing” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating, or otherwise making available, aligning or combining, restricting, erasing, or destroying.
“Controller” means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.
“Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
DHC CO SRL is the “controller” when processing your personal data, and you, as the natural person who is a client or potential client of our products, a website visitor, or someone in any relationship with us, are the “data subject”, meaning an identified or identifiable natural person.
2. Purpose for processing the personal data you provide
The personal data you provide to us directly is processed for the following purposes:
- To conclude and execute a contract between DHC CO SRL and you. The vast majority of personal data is processed for this purpose, which includes, without limitation: processing orders, validating, shipping, issuing fiscal invoices for purchased goods, handling complaints, and responding to them.
- For marketing purposes — to keep you informed about the best offers for products you are interested in by sending you emails containing information on offers or promotions, similar products to those you have purchased, information about new products we sell, etc.
3. Legal basis for processing data
The legal basis for processing the personal data you provide to us is represented by Article 6(1)(a), (b), (c) of GDPR – REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Our legal bases for processing your personal data will generally include: your consent to process personal data, the processing is necessary for the conclusion or performance of a contract between you and us, or processing is necessary for our legitimate interests or those of another party.
4. Source of personal data
DHC CO SRL collects personal data directly from you, the users of our website. If we need to process personal data obtained from third-party legal entities, they are obliged to provide you with the necessary information regarding the use of the personal data provided.
5. Social media platforms Facebook and Instagram
You can access our pages on social media platforms, namely Instagram and Facebook, from the site domain domeniiledascalu.ro. When you visit our pages on these platforms, the Terms and Conditions and Privacy Policies of the platform provider will apply.
Our company DHC CO SRL processes your personal data through our social media pages only to the extent that you interact directly with us by commenting, liking our posts, or sending us messages. The legal basis for these processing activities is your consent under Article 6(1)(a) GDPR, or, in the case of contract-related requests, Article 6(1)(b) GDPR.
6. Categories of personal data we process
DHC CO SRL collects your personal data directly from you, with each user having control over the type of information they provide. For example, but without limitation, we receive information directly from you in the following circumstances:
- When you place an order using the contact details on the website (phone or email), you provide personal data such as your full name, email address, billing address, delivery address, payment method, and phone number.
- When you submit a request/complaint, you provide information such as your full name, email address, and phone number.
- When we issue a fiscal invoice for purchased products, we process data such as the buyer’s full name and billing address.
Please note that if you do not agree to provide your personal data, DHC CO SRL cannot proceed with the necessary steps to respond to your order, return requests, or handle complaints.
Our company’s policy on data protection and security is to collect only the personal data necessary for the purposes mentioned and to request data subjects to provide only those personal data strictly necessary to achieve these purposes.
7. Categories of personal data recipients
Your personal data is intended for use by DHC CO SRL to fulfill the purposes mentioned above and for which you have given us your consent and may be disclosed to the following recipients: courier companies for delivering your orders, companies providing banking services, marketing service providers, and companies providing IT services.
If we have a legal obligation or it is necessary to defend a legitimate interest, we have the right to disclose certain personal data to public authorities.
We ensure that access to your personal data by third-party legal entities is carried out in accordance with data protection regulations and confidentiality requirements, based on contracts between our company and these third parties.
8. Personal data storage period
We store your personal data only for the period necessary to fulfill the purposes, but no longer than 3 years from the termination of the contract or your last interaction with us. After this period, personal data will be destroyed or deleted from the information systems. Regarding billing data — the buyer’s full name and billing address — they will be stored for a period of 10 years in accordance with tax legislation.
9. Your rights and how to exercise them
Data subjects’ rights aim to provide more control over their personal data and ensure transparency and accountability from data controllers. The main rights of data subjects under GDPR legislation include:
- Right to information: Data subjects have the right to be informed about the processing of their personal data, including the purpose, categories of data processed, the recipients to whom the data is disclosed, and the retention period.
- Right of access: You have the right to request and obtain from us confirmation whether or not personal data concerning you is being processed, and, if so, access to the respective data and the information provided for in Article 15(1) of the GDPR.
- Right to rectification of your data: You can ask us to rectify or complete your inaccurate or incomplete personal data that we hold (Article 16 of the GDPR).
- Right to erasure: In the situations provided for in Article 17 of the GDPR, you have the right to request and obtain the deletion of your personal data. We are not obliged to comply with your request to delete your personal data if the processing is necessary to comply with a legal obligation or for the establishment, exercise, or defense of legal claims.
- Right to restriction of processing: In the cases provided for in Article 18 of the GDPR, you have the right to request and obtain a restriction of processing.
- Right to transmit your data to another controller (“right to data portability”): The data subject has the right to receive the personal data that concerns them and that they have provided to the controller in a structured, commonly used, and machine-readable format and has the right to transmit that data to another controller without hindrance from the controller to whom the personal data was provided (Article 20 of the GDPR).
- Right to object to processing of data: The data subject has the right to object, at any time, on grounds relating to their particular situation, to processing of personal data concerning them based on Article 6(1)(e) or (f), including profiling based on those provisions. The controller will no longer process personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims (Article 21 of the GDPR).
- Right not to be subject to a decision based solely on automated processing: Data protection law provides that you have the right not to be subject to a decision based solely on automated means if the decision produces legal effects concerning you or similarly significantly affects you. A decision produces legal effects when it impacts your legal rights. In addition, processing can significantly affect you if it influences your circumstances, behavior, or choices.
- Right to seek legal recourse to defend your rights and interests.
10. Links to other websites
Occasionally, our website may contain links to other websites. Please note that these websites are not under the control of DHC CO SRL, so any operations conducted through these websites will be subject to their respective Terms and Conditions and Privacy Policies, and DHC CO SRL is not in any way directly or indirectly responsible for the privacy practices or actions of these websites or their operators.
11. Final provisions
To exercise your rights, please contact us directly using the following contact information, and our company will make every effort to respond to you as soon as possible.
DHC CO SRL company
headquarters: Village Preajba, Com. Malu Mare, Trandafirilor str., no. 1-3, Jud. Dolj
mail: office@domeniiledascalu.ro
For any kind of uncertainty regarding the way in which your personal data is processed, please send us a notification to the address mentioned above in order to resolve it amicably, but we inform you that you can also file a complaint with the National Supervisory Authority of Personal Data Processing:
The National Supervisory Authority for the Processing of Personal Data with headquarters in B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania, mail: anspdcp@dataprotection.ro.
We inform you that we will periodically update and modify this Privacy Policy, depending on the modification of our company’s policies regarding the way we process your personal data but also in relation to any legislative changes, which is why we ask you to periodically check the content of this Privacy Policy.
This personal data privacy policy entered into force on 26.07.2024