Security and Privacy Guarantee
1. Personal data and its processing
1.1. Personal data categories
1.2. Purpose of processing personal data
1.3. Transfer of personal data to third parties
2. Personal data security and retention period
2.1. Personal data security
2.2. Duration of processing
3. Data subjects rights
4. Contact us 5
Security and Privacy Guarantee
MALVENSKY CORPORATION S.R.L. with registration no. J40/861/2012, located in Romania, 61A Paris Street, 1st District, Bucharest (hereinafter referred to as `Malvensky`), the operator of the webstore www.malvensky.com, declares that all personal data (hereinafter “data`) is treated as strictly confidential and is handled in accordance with Regulation (EU) 2016/679 of The European Parliament and of The Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
Within this Policy, we would like to inform you about how we collect personal data about you and how we then use it.
1. Personal data and its processing
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.1. Personal data categories
In general, you can use this website without giving us any information. However, additional services may be available if we have certain information about you. In such circumstances, we collect various types of date, depending on which of our service you are using.
1.1.1. When you register for our services, we collect your:
- Name and contact details : first and last name, e-mail address, phone no., fax no. (optional), address, post code;
- Demographic data : country, region/state, city;
- Login details : password.
1.1.2. When you shop from us, we collect your:
- Name and contact details : first and last name, e-mail address, phone no., address, post code, bank details;
- Billing information : first and last name, address, bank details;
- Demographic data : country, region/state, city;
- We also may keep a record of our correspondence with you.
1.1.3. When you login into your account, we collect your:
- Login details : E-mail address and password.
1.1.4. Guest checkout
- Login details : E-mail address – buying without registration.
1.1.5. When you subscribe to our newsletter, we collect:
- Name and contact details : first and last name, e-mail address,
- Demographic data : date of birth.
1.1.6. In other situation (e.g. when you contact us), we may collect:
- Name and contact details : first and last name, e-mail address,
- Demographic data : country, region/state, city, date of birth;
- Information about experiences with our products and contact preferences in order to provide you with further correspondence about our products and services;
- We also may keep a record of our correspondence with you;
· The information above mentioned may also be collected in all cases (register, shop, login, guest, newsletter).
1.2. Purpose of processing personal data
In general, the legal reason for processing your data is the need to fulfil the purchase agreement, and to meet legal obligations (e.g. accounting documents).
We also need to process your personal data for the following reasons:
· providing you with customer service and prevent any problems when fulfilling a purchase agreement;
· communicating with you via e-mail, phone etc., to confirm your order, give you the current status of your order/request, complete your order etc.;
· improving our services and systems on the basis of our legitimate interest derived from the freedom of business and on the basis of the need to improve the services provided for competitive success. To ensure the adequate protection of your rights and interests, we use personal date in an anonymised form for the purpose of marketing improvements to our services.
· Another reason for processing your personal data can be out our legitimate interest, like to ensure the protection and security of our systems and customers, detect and prevent fraud, resolve disputes and enforce our agreements.
We may contact you for marketing offers via e-mail if you are a customer or you have previously asked us for information on our products. Thus:
· regarding your purchase or other matters regarding transactions between us or your customer relationship with us, or send you information on our range of products by email, unless you have asked us not to do so;
· Otherwise, when you provide us with personal information, we will ask you whether you would like us to send you Malvensky informational e-mails;
· If you are not our customer, we will process your data on the basis of your consent.
You can always decline commercial communications via the unsubscribe link found in every e-mail.
If you have permitted cookies on your web browser, we will process some data about you – for more information about this please consult the separate chapter of this policy (`Cookies`).
1.3. Transfer of personal data to third parties
We will not transfer or disclose your personal information to third parties except that it is necessary to fulfil the agreement between you and us. Thus, when we will pass on your data to third parties this transfer is based on legitimate interest, or if you have given your consent to this advance, as follows:
· to carriers to deliver your order or services and to resolve complaints, including withdrawal from an agreement;
- suppliers and vendors engaged by us to help us run our business;
- a purchaser of our business;
- public authorities (e.g. the police).
We can also disclose your data in the following cases:
- when is required or permitted by law;
· in response to inquiries by bona-fide rights owners in connection with allegations of infringement of copyright or other proprietary rights arising from information you have submitted on this website or otherwise provided to Malvensky;
· if Malvensky (and/or one or more of its affiliates) merges with or sells all or substantially all of its assets to a third party, information collected about you on this website may be disclosed to such third party.
If a third party uses data in connection with their legitimate interests, we are not liable for this processing.
2. Personal data security and retention period
2.1. Personal data security
In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Malvensky is committed to protecting the privacy of the personally-identifiable information that we collect from you as you use this website.
Malvensky has implemented generally accepted standards of technology and operation security in order to protect personally-identifiable information from loss, misuse, alteration or destruction. Only authorized Malvensky personnel are provided access to personally-identifiable information, and such employees are required to treat this information as confidential. Notwithstanding these precautions, we cannot guarantee that unauthorized persons will not obtain access to your personally-identifiable information.
Moreover, we require our processors to prove compliance of their systems with GDPR.
2.2. Duration of processing
We process and store personal data:
· for the period necessary to ensure all rights and obligations arising from the purchase agreement (i.e. for the duration of the order and warranty period);
· for the period that Malvensky is obliged by law (accounting documents, such as invoices issued by us are archived according to law for 10 years);
- 5 years after the end of the warranty period to resolve potential disputes;
- one year for the cookies consent, or until consent is withdrawn;
- five years for marketing consent or until is withdrawn;
· In other cases, the processing of data arises from the purpose of the processing is determined by law.
3. Data subjects` rights
- Right to be informed – you have the right to be informed at the time when data are collected. This obligation does not depend on a request from you, rather we must proactively comply with the obligation, regardless of whether you show interest in the information or not.
- Right of access – you have the right to obtain from us, upon request, information about the processing of your personal data, which will be communicated to you in an intelligible manner.
- Right to rectification – you have the right to have your personal data rectified. The accuracy of personal data is essential for us to ensure a high level of data protection.
- Right to erasure (`the right to be forgotten`) – this right does not apply to the personal data Malvensky needs to fulfil its statutory obligations or to protect its legitimate interests.
- Right to restriction of processing – you can temporarily restrict from processing your data by us. You can request us to restrict processing where:
- you contest the accuracy of the personal data;
- the processing is unlawful and you request that the use of the personal data be restricted instead of erased;
- the data must be kept for the exercise or defence of legal claims;
- a decision is pending on the legitimate interests of the data controller prevailing over the interests of the data subject
- Right to data portability – you have the right to ask for data portability in that situation where the data provided to us by you are processed by automated means on the basis of consent, or where the personal data processing is necessary for the performance of a contract and is carried out by automated means. This means that the right to data portability does not apply in situations where the personal data processing is based on legal ground other that consent or a contract.
- Right to object – you can invoke your right to object to personal data processing on ground relating to your particular situation and to data processed for direct marketing purposes. The right to object can be exercised on commercial communications via the unsubscribe link found in every e-mail.
- Rights related to automated decision-making and profiling - automated decisions are decisions taken using personal data processed solely by automatic means without any human intervention. Malvensky does not process data in this way.
4. Contact us
If you have any questions, comments or requests regarding this Policy, please do not hesitate to contact us at the address listed in the footer of this Policy.
Contact: MALVENSKY CORPORATION S.R.L,
46 Lascar Catargiu Blv, 1st District, Bucharest, Romania
+4 0372 534 967
[email protected]
