Privacy Policy

This website is operated by SC Abulil X Ofir SRL (hereinafter referred to as "We" ), headquartered in Timișoara, Strada Mircea cel Batrân no. 97, room 1, Timiș county, registered with ONRC under no. J35/3116/2022, with CUI 46424012, a limited liability company of Romanian nationality.

We collect and process various categories of personal data from you as a user of www.abulil.ro , hereinafter referred to as the "website" and according to EU Regulation 2016/679 on the protection of personal data, we have the status of personal data controller.

The protection of your personal data is very important to us!

This Privacy Notice describes the methods used in our collection and use of your personal data. Thus, you will learn what data is collected, how and for what purpose, and you will be informed about the rights you benefit from in relation to your personal data.

This information note is version V_01 and is in effect until it is amended and another version is published.

PRINCIPLES OF PERSONAL DATA PROCESSING

We comply with the principles of personal data processing established by EU Regulation 2016/679, namely:

1. Legality, fairness and transparency – we process personal data legally, fairly and transparently in relation to you;

2. Collection for specified purposes – personal data are collected only for specific, legitimate and explicitly communicated purposes and are not further processed in a manner incompatible with

these purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is not considered incompatible with the initial purposes;

3. Data minimization – the personal data collected are adequate, relevant and limited to what is strictly necessary to achieve the purpose for which they are processed;

4. Data updating – we ensure that personal data is correct and up-to-date, we take all necessary measures to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, are deleted or rectified without delay;

5. Limitation of data storage – we comply with the deadlines imposed by law for data retention, or we keep them only until the purpose of collection is fulfilled, having established deadlines in this regard through internal procedures, and then we delete them;

6. Integrity and confidentiality – we take appropriate technical and organizational measures for the security of personal data, including protection against unauthorized or unlawful processing, against accidental loss, destruction or damage.

HOW WE COLLECT YOUR PERSONAL DATA AND WHAT KIND OF DATA WE COLLECT

Personal data is collected:

• directly from you, through:

– filling out the online newsletter subscription form;

– the emails you send us to one of the addresses indicated on the website pages;

– the order form you fill out when purchasing a product or service;

– creating a customer account in the online store.

• through cookies when you browse our website.

All personal data is processed by us for precise and well-determined purposes, described in the forms through which you give your consent in advance, for the conclusion or proper performance of a contract, to fulfill a legal obligation, or for the purpose of defending a legitimate right in court.

In the online process of providing personal data to us, although we make every effort to protect the information you provide to us, the exchange of information via an internet connection is not 100% secure, therefore, we cannot guarantee the security of personal data transmitted in this way. Once we have received the data, we use strict procedures and security methods to prevent unauthorized access to this information.

Through this website we do not collect or process special personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the unique identification of a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation. Any such personal data that you communicate to us, whether accidentally or intentionally, will be deleted immediately.

PERSONAL DATA OF MINORS. PARENTAL CONSENT.

This website is intended for use by adults, aged 18 and over. In certain cases, however, our services may also be accessed by minors. Their personal data will be stored and processed by us only with the prior, explicit and written consent of the parent or legal guardian. In the absence of this consent, any personal data from a minor will be immediately removed from our database. As parents, we recommend that you actively participate in your children's online exploration and use the parental control options offered by your computer system, the programs you use and/or the internet service provider. Limiting minors' online access is of great benefit to their mental and physical integrity.

WHAT HAPPENS IF YOU DO NOT PROVIDE US WITH YOUR DATA

If you do not provide us with the requested personal data, or if you provide it partially, we may be unable to provide the product or service you requested. The personal data collection form is configured to request the minimum amount of information we need to identify you, to be able to contact you and fulfill your requests, to fulfill the contract or to fulfill our legal obligations. In these situations, we will inform you, if possible, so that you can make an informed decision.

ACCESS TO PERSONAL DATA AND PROTECTION MEASURES

The personal data in our database is processed by our own staff, who are periodically trained to comply with GDPR compliance procedures, drawn up according to the requirements of EU Regulation 2016/679.

We may disclose some personal data to trusted third parties for the purposes set out. We require them to have appropriate technical and operational security measures in place to protect your personal data, in accordance with the legislation on the protection of personal data rules. Personal data will also be transmitted if we need to comply with a legal obligation, at the request of government or executive authorities, to meet certain national security or law enforcement requirements or to prevent certain illegal activities.

Except as described above, we will never disclose, sell or lend any of your personal data to any third party without your prior consent.

We are committed to protecting personal data against any loss, misuse, disclosure, alteration, unauthorized access, and destruction and take all reasonable steps to ensure the confidentiality of such data. We also constantly assess the risks that may arise during the processing of personal data and update our work procedures.

HOW LONG DO WE KEEP PERSONAL DATA?

We will only retain personal data for as long as is necessary to fulfil the purpose for which it is processed. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it and whether we can achieve those purposes by other means. Some personal data is retained for necessary and specific periods of time, expressly provided for by law, to comply with our legal obligations.

When we no longer need the personal data, we will securely delete or destroy it, or, if such a measure involves disproportionate expense, we will anonymize or encrypt it so that it becomes inaccessible. We will also consider the possibility of ensuring that personal data is anonymized so that it can no longer be associated with an identifiable person, in which case we may use that information for statistics, studies, evaluations and the like, without further notice.

YOUR RIGHTS

EU Regulation 2016/679 grants you a series of rights that we respect and we undertake to respond to your requests as promptly as possible.

1. Right to access: is the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, access to that data, including information on the categories of data held, the purpose of their use, the source of collection, etc. Upon your request, we will provide you with a copy of your personal data free of charge. Requesting multiple copies of your personal data may incur a reasonable fee based on administrative costs.

2. The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

3. The right to rectification of personal data concerning you that is inaccurate. Taking into account the purposes for which the data were processed, you have the right to obtain the completion of personal data that is incomplete, including by providing a supplementary statement.

4. The right to restrict the processing of your personal data, if:

• contest the accuracy of your personal data, for the period we need to verify the accuracy;

• the processing is unlawful, if you request restriction of processing instead of deletion;

• we no longer need your personal data but you request it for the establishment, exercise or defense of a right in court;

• you object to the processing while we verify whether our legitimate grounds prevail.

5. The right to erasure, or “right to be forgotten”, under which you can request the deletion of personal data that is processed about you. We must comply with this

requests, without undue delay, with the following exceptions where the data are necessary:

• for the exercise of the right to freedom of expression and information;

• to comply with a legal obligation we have;

• for archiving purposes in the public interest, scientific, for historical studies or for statistical purposes;

• for the establishment, exercise or defense of a right in court.

6. The right to data portability ensures that you have the right to receive the personal data concerning you and to transmit it to another personal data controller. Where technically feasible, you may request that we transmit your personal data (which you have provided to us) to another organisation.

You have this right if, cumulatively:

• We process your personal data by automated means,

• We rely, in processing your personal data, on your consent or our processing of your personal data is necessary for the conclusion or performance of a contract to which you are a party;

• Your personal data is provided to us by you and the transmission of your personal data does not have a negative effect on the rights and freedoms of other persons.

7. The right to object, under which you may object, at any time, to the processing of your personal data, provided that the processing is not based on consent but on the legitimate interests of the controller or a third party. In this case, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You can always object to the processing of your personal data for direct marketing purposes, regardless of the reason.

COMMUNICATION METHODS

We will communicate to each recipient to whom the personal data have been disclosed any rectification or erasure of personal data, or restriction of processing, unless this proves impossible or involves disproportionate effort. All your requests will be fulfilled within the legal deadline of 30 days.

To exercise your rights, please send a written request to Address: Mircea cel Batran no. 97, room 1, Timisoara, Timis. You can also submit the request in person, or you can contact us by e-mail at hello@abulil.ro

Any communication and action taken as a result of your exercise of your rights is provided to you by Us free of charge. However, if you make unfounded, excessive or repetitive requests, We have the legal option to refuse to act on your request or to charge a fee in accordance with the administrative costs necessary to fulfill your request.

If you are not satisfied with the response you receive, you have the option of contacting the National Supervisory Authority for Personal Data Processing .

This information notice may be modified by us at any time, without prior notice, when it can be improved or when practices and/or legislation in the field of personal data protection are updated. For this reason, we invite you to visit this page periodically, as your personal data will be treated in accordance with the information notice on the basis of which it is collected, unless we have your consent to treat it differently.