PRIVACY AND DATA PROTECTION POLICY

SC Build One A.G. SRL, SRC RO32938978, registered at Arges County Trade Register with J03/393/2014, as a personal data controller collects and processes data in accordance with the provisions of Law no. 677 of 21.11.2001, and since 25.05.2018 and with the provisions of Regulation no. 679 of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

The purpose of this document is to inform you accurately, specifically and unequivocally about how, for what purpose this data is collected, how it is processed, the period for which this data is kept, how to exercise your individual rights as well as information about the secondary purpose of the processing, if the data are processed for a purpose other than the one for which it was collected by the associated controllers.

When processing this data, we take into account the laws in force regarding the protection and processing of personal data. To this end, we conducted an internal audit on the collection, processing and transmission of personal data, we took appropriate technical measures and established a series of internal technical and administrative procedures, we conducted training within the team in order to raise awareness and empower team members.

Personal data collected by our website

If you are a customer of our website, we collect and process the following data for the legitimate purpose of invoicing and delivering orders in optimal conditions:

• your name, e-mail address, phone number, in order to answer the request placed through the contact form on the website
• if the person opts to subscribe to the newsletter of the company without being a customer, the email is collected for the purpose of marketing communications.

If you are a visitor, only the data recorded by the cookies accepted by the visitor at the time of the first visit to the site, via the cookie policy notification window and described in the Cookie Policy page, are recorded.

If you have opted to subscribe to the company newsletter, we keep your email address and your name for commercial communications.

Duration of the processing of personal data

The duration of storage and processing of personal data is linked to the existence of the user account on our site, the data being deleted at the explicit request of the account holder or as long as necessary to achieve the purposes stated through this page. The data necessary for the conclusion of invoices are kept for a period necessary to accomplish the legal obligations (fiscal, archiving) imposed by Romanian law.

Recipients of personal data

Personal data might be disclosed to or accessed by the following persons or entities as part of the daily work process:

• to the employees of our company in order to carry out the activity (confirmation and processing of orders placed on the site, preparation of invoices and shipping documents)
• to the collaborators of the company, restrictively, in order to carry out the activity of the company in good conditions (courier companies with which our company has an agreement, in order to deliver orders to the accounting service providers)
• where such communication would be necessary for the awarding of prizes or other facilities to data subjects, obtained as a result of their participation in various promotional campaigns organized by Build One A.G. SRL through the Website or associated promotional channels, e.g. Facebook page, Instagram etc.
• for conducting data analysis, testing and research, monitoring usage and activity trends, developing safety features
• where the disclosure of personal data is required by law.

• to providers of automated and LIMITED (via cookies) marketing and promotional services, such as:
  • Google.com
  • Facebook.com
  • YouTube.com
  • Instagram.com
  • WordPress.com

Information on how data is collected and consent to collection

Each user of our website is submitted at the time of the first visit to the site with a list of modules that collect, in one way or another, explicitly or implicitly, data that may fall into the category of personal data. This is achieved through the notification at the bottom of the site, through which the visitor has the possibility to accept all modules or individually (e.g: Facebook.com, YouTube.com etc). Apart from the necessary modules, which are related to the actual functioning of the shop, if the visitor does not agree a certain module, its functioning is disabled, the module in question no longer collecting data. For example, if the visitor does not agree the data collected by YouTube through the insertion of the YouTube code in our page, he/she can deactivate it.

In case the visitor changes his/her mind about some previously accepted modules, he/she can display the settings window again by going to the Show cookie settings menu at the bottom of the website.

In the case of forms, they are only submitted if the data collection and protection policy has been read and accepted, as certified by the mandatory ticks at the bottom of each form requiring this, such as the contact form.

Rights of the persons whose data is collected

a) Right of access to data and to information. The Persons whose data have been collected have the right to be informed about the data that have been collected, the purpose and duration of the collection of these data.

b) Right to intervene on the data. The persons whose data have been collected have the right to obtain on request the data collected, to ask for correction, updating, completion or deletion of these data, especially inaccurate data.

The request for modification, update, deletion of data shall be addressed in writing or to the email address contact@buildone.ro and shall include information on the option of communicating the response, i.e. in physical or electronic form. The response to such requests will be communicated within 30 days of receipt of the request.

c) Right of objection. Persons whose data have been collected may object at any time to the processing of personal data concerning them, unless this is contrary to the legislation in force (tax, archiving).

For this purpose, as well as for any other purpose concerning personal data, the data subjects shall write to the address of the company or send an e-mail to office@buildone.ro, and the reply shall be sent within 30 days from the date of receipt of the request.

For any questions about how the data of data subjects are used or if any further clarification is needed about any aspect of data processing, they can contact the Data Protection Officer of the company by email office@buildone.ro, by mail or by personally submitting a holographically signed notification to our working point located at Build One A.G. SRL, Calea Campulung, Nr 3E, Pitesti, Arges County.