Personal data security policy www.my-k.ro

This information has been updated in accordance with the provisions of European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) and aims to increase the level of protection of personal data and the creation of a a climate of trust that allows each person to control their own data. To the extent that other legal provisions or necessary technical or organizational measures necessary for the above purpose intervene, we reserve the right to change our privacy policy and practices so please review this information periodically. INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA SC MY K RETAIL & DISTRIBUTION SRL, the owner of the site www.my-k.ro (the operator) has the obligation to manage safely and only for the specified purposes, the personal data that users provide about them, a family member or another person.

1. What is personal data?

Any information concerning an identified or identifiable natural person (ie a person who can be identified, directly or indirectly, in particular by reference to an identifier - name, address, identification number, location data, an online identifier or one or several specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity.

2. Why do we collect personal data?

The purpose of the data collection results from our trade activity, respectively online store, to provide the products and deliver the services you requested and from the desire to meet your needs by providing you with information about your favorite products, if you opt for communications marketing.

3. How do we collect personal data?

www.my-k.ro collects personal data received directly from you by filling in the forms on the site (as a result of placing an order, as a result of subscribing to newsletters www.my-k.ro ). Forms include fields such as name, email address, mobile phone number, password, details about your company's registered office, etc. Our site automatically collects information such as the IP of the device you are using, the general location from which you visit the site, the type of browser, the history of the pages accessed, the operating system or mobile device from which you visit the online store. This data is justified by our legitimate interest in facilitating your access from all types of devices, adapting our site to the needs and trends of visitors, to provide an easy experience of interaction, to observe and correct any technical problems. which our servers may have when delivering content to certain types of devices. Our site uses cookies and other similar technologies (small text files that are placed on your device to make it easier to read the information that you have already sent to our site, for example, user, for storing options in the shopping cart, visit history). Cookies provide users with a pleasant browsing experience and support the efforts of many websites to provide comfortable services to users: e.g. online privacy preferences, site language options, shopping carts, or advertising relevant to online shopping preferences. These are the "direct" cookies set by the domain you are currently visiting, e.g. www.my-k.ro but there are also "third party" cookies set by domains other than the one visited, random placed through third parties / providers that may occupy a certain section of content (eg news box, a video or an advertisement). They may also place cookies through the site and they are called "third party cookies" because they are not placed by the owner of the website. Third party providers must also comply with applicable law and the privacy policies of site owners. Cookies that target the performance of the site itself do not require personal information in order to be used and, in most cases, do not personally identify internet users. You can adjust your browser privacy settings to block all cookies. however, this could seriously affect your browsing experience, as many websites may not work properly. This website uses Google Analytics, an internet traffic analysis program provided by Google, Inc. (“Google”). Google Analytics uses cookies to help www.my-k.ro analyze how users use the site to report on it. Google complies with the provisions of the GDPR, the compliance policy being in line with the requirements of the European Regulation on the protection of personal data.

4. On what basis do we use this data?

The data mentioned above are used to allow you access to the site and to be able to deliver our products and information according to the method you have chosen to receive (purchase of products, their delivery, newsletter, etc.). The legal basis for this processing is the conclusion and execution of an online contract to which you are a party (whenever you request the above operations, you agree to the terms and conditions of supply of those products). For the issuance of invoices and / or if we are required to file tax returns in connection with orders placed by you, we may request detailed tax information such as: your address (required to be entered on the tax invoice), but also other tax data that the law requires us to collect and process in connection with the transaction. In this case, the legal basis for processing will be the obligation to comply with the provisions of domestic law and the storage period will be at least equal to that imposed by the applicable legal provisions in the field, including, but not limited to, the provisions on archiving. Our site also gives you the opportunity to send us a message via the form on the Contact page. The data you send following the use of this contact option is processed on the basis of our legitimate interest in responding to your request and / or keeping a record of your complaint, request for consultancy and the like. This data is stored for 3 years. We do not use your data to send you marketing communications unless you explicitly opt for such communication by checking the newsletter option which you may withdraw at any time (withdraw your consent) either in the communication itself or by checking the NO option in your account. by contacting us.

5. Is the data being transferred?

Personal information can be communicated to any of our partners for the purpose of delivering parcels for online orders (GLS Romania), or any other courier company with which we (MY K RETAIL & DISTRIBUTION SRL) establish by contract the distribution of parcels to customers and implicitly the management of information with personal character (Name, Address, Telephone number, etc.), in order to prepare fiscal documents and documents necessary for the distribution of parcels in optimal conditions. SC MY K RETAIL & DISTRIBUTION SRL is an operator within the meaning of the GDPR, the managing company www.my-k.ro, and for carrying out the activity will conclude written contracts with confidentiality obligations with third party suppliers of products and services, which have the status of proxies according to GDPR, e.g. e-Commerce platform of the store, the site hosting company, couriers, payment processors, third parties integrated in the site (Google Analytics, Facebook, etc.), technology and information security system providers, online marketing agencies, companies which ensures the functionality of the site and to other parties, such as public authorities and institutions, accountants, auditors, lawyers and other external consultants, whose activity implies the need to know this data and / or where the law requires us to make this disclosure or if it is in the legitimate interest of www.my-k.ro for business development. Access to personal information is limited to those employees who need to know personal information and may include employees in the marketing, information technology, accounting and security departments. Except as expressly set forth above, we will never disclose, sell or rent personal information to any third party without notice to you and, where applicable, without your consent. We will always verify that any third party to whom we disclose personal information are subject to the obligations of confidentiality and security in accordance with the contracts signed with them and the applicable laws. If we provide any personal information to such third parties outside the EEA, we will take appropriate steps to ensure that the recipient will adequately protect your personal information, such as insurance in the case of US or US-based service providers. other non-EEA countries (including Japan), compliance with standard contractual agreements approved by the European Commission or ensuring that they are part of the Privacy Shield program.

6. What rights do you have, as a user of www.my-k.ro?

In addition to existing rights, from the date of application of the GDPR, you benefit from additional rights:

• The right to information - art. 13 and 14 GDPR - information on our personal data processing activities may be requested; The right to access data - art. 15 GDPR - you can obtain confirmation whether or not we process personal data concerning you, and if so, access to that data and other useful information. • The right to rectification - art. 16 GDPR - you can rectify inaccurate or complete personal data; • The right to delete data (“the right to be forgotten”) art. 17 GDPR - you can obtain the deletion of data, if their processing was not legal or in other cases provided by law; • The right to data restriction - art. 18 GDPR - you can request the restriction of the processing in case you dispute the accuracy of the data, as well as in other cases provided by law; • The right to oppose art. 21 GDPR - you may object, in particular, to data processing that is based on our legitimate interest, for example when it is processed for direct marketing purposes. To make it clearer how this right can be exercised, it should be mentioned, for example, that in all newsletters that come from www.my-k.royou will always be able to unsubscribe. • The right to data portability art. 21 GDPR - you may receive, under certain conditions, the personal data you have provided to us, in a format that can be read automatically or you can request that the data be transmitted to another operator; • The right to file a complaint - you can file a complaint regarding the processing of personal data with the National Authority for the Supervision of Personal Data Processing; contact details: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania. +40.318.059.211 / +40.318.059.212, [email protected]. • Right of withdrawal of consent - in cases where the processing is based on your consent, you can withdraw it at any time provided that the withdrawal of consent will have effect only for the future, the processing performed prior to withdrawal still remains valid; • The right not to be subject to a decision based solely on automatic processing, to express your views on it, including the creation of profiles, which produce legal effects concerning the data subject or similarly affect him in a significant measure. www.my-k.rodoes not make such profiling to be followed by automated decisions with legal or similar effect significant to the data subject. At the time we make such profiling, we will notify and change this privacy policy of your personal data.

You can exercise these rights, either individually or cumulatively, very easily, by simply sending a written request to our headquarters with Vasile Gherghel Street, number 34, sector 1, Bucharest, or by e-mail, to: [email protected] . We have appointed a person responsible for the protection of personal data within our company who can be contacted if there are any questions regarding any aspect related to the protection of personal data, by sending a request to the contact details mentioned above. Regarding the requests, please also consider the following practical aspects: we will try to respond within 30 days, but we can extend this term depending on the complexity of your request, informing you about it; we may not be able to give you access if this could be subject to certain legal provisions, but we will inform you of the reason for the refusal; In some cases, we may not be able to search for data if the identifiers provided in the request cannot help us identify you as the data subject for the processing of personal data. In this case, please come back and provide concrete and accurate data.

7. What steps are we taking to ensure data security?

www.my-k.ro has taken the necessary and reasonable steps, from a technical and administrative point of view, to protect your personal data against loss, misuse, disclosure, alteration, unavailability, unauthorized access and destruction, such as control of physical access to our premises, staff training and blocking physical files in storage and archiving cabinets, the use of encryption, passwords for access to our systems, the use of SSL-type security certificates, for encrypting data in transit, etc. www.my-k.ro has taken reasonable precautions to protect the confidentiality of the data provided on the Internet but with all our efforts it is known that this mode of data transfer is not completely secure so we cannot be held responsible for this way of transmit your data but once we receive it we use the strict internal data security procedures. www.my-k.ro Last updated: May 1, 2021