Personal data security policy www.my-k.ro
- What is personal data?
Any information concerning an identified or identifiable natural person (ie a person who can be identified, directly or indirectly, in particular by reference to an identifier - name, address, identification number, location data, an online identifier or one or several specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity.
- Why do we collect personal data?
The purpose of the data collection results from our trade activity, respectively online store, to provide the products and deliver the services you requested and from the desire to meet your needs by providing you with information about your favorite products, if you opt for communications marketing.
- How do we collect personal data?
- On what basis do we use this data?
The data mentioned above are used to allow you access to the site and to be able to deliver our products and information according to the method you have chosen to receive (purchase of products, their delivery, newsletter, etc.). The legal basis for this processing is the conclusion and execution of an online contract to which you are a party (whenever you request the above operations, you agree to the terms and conditions of supply of those products). For the issuance of invoices and / or if we are required to file tax returns in connection with orders placed by you, we may request detailed tax information such as: your address (required to be entered on the tax invoice), but also other tax data that the law requires us to collect and process in connection with the transaction. In this case, the legal basis for processing will be the obligation to comply with the provisions of domestic law and the storage period will be at least equal to that imposed by the applicable legal provisions in the field, including, but not limited to, the provisions on archiving. Our site also gives you the opportunity to send us a message via the form on the Contact page. The data you send following the use of this contact option is processed on the basis of our legitimate interest in responding to your request and / or keeping a record of your complaint, request for consultancy and the like. This data is stored for 3 years. We do not use your data to send you marketing communications unless you explicitly opt for such communication by checking the newsletter option which you may withdraw at any time (withdraw your consent) either in the communication itself or by checking the NO option in your account. by contacting us.
- Is the data being transferred?
Personal information can be communicated to any of our partners for the purpose of delivering parcels for online orders (GLS Romania), or any other courier company with which we (MY K RETAIL & DISTRIBUTION SRL) establish by contract the distribution of parcels to customers and implicitly the management of information with personal character (Name, Address, Telephone number, etc.), in order to prepare fiscal documents and documents necessary for the distribution of parcels in optimal conditions. SC MY K RETAIL & DISTRIBUTION SRL is an operator within the meaning of the GDPR, the managing company www.my-k.ro, and for carrying out the activity will conclude written contracts with confidentiality obligations with third party suppliers of products and services, which have the status of proxies according to GDPR, e.g. e-Commerce platform of the store, the site hosting company, couriers, payment processors, third parties integrated in the site (Google Analytics, Facebook, etc.), technology and information security system providers, online marketing agencies, companies which ensures the functionality of the site and to other parties, such as public authorities and institutions, accountants, auditors, lawyers and other external consultants, whose activity implies the need to know this data and / or where the law requires us to make this disclosure or if it is in the legitimate interest of www.my-k.ro for business development. Access to personal information is limited to those employees who need to know personal information and may include employees in the marketing, information technology, accounting and security departments. Except as expressly set forth above, we will never disclose, sell or rent personal information to any third party without notice to you and, where applicable, without your consent. We will always verify that any third party to whom we disclose personal information are subject to the obligations of confidentiality and security in accordance with the contracts signed with them and the applicable laws. If we provide any personal information to such third parties outside the EEA, we will take appropriate steps to ensure that the recipient will adequately protect your personal information, such as insurance in the case of US or US-based service providers. other non-EEA countries (including Japan), compliance with standard contractual agreements approved by the European Commission or ensuring that they are part of the Privacy Shield program.
- What rights do you have, as a user of www.my-k.ro?
In addition to existing rights, from the date of application of the GDPR, you benefit from additional rights:
You can exercise these rights, either individually or cumulatively, very easily, by simply sending a written request to our headquarters with Vasile Gherghel Street, number 34, sector 1, Bucharest, or by e-mail, to: [email protected] . We have appointed a person responsible for the protection of personal data within our company who can be contacted if there are any questions regarding any aspect related to the protection of personal data, by sending a request to the contact details mentioned above. Regarding the requests, please also consider the following practical aspects: we will try to respond within 30 days, but we can extend this term depending on the complexity of your request, informing you about it; we may not be able to give you access if this could be subject to certain legal provisions, but we will inform you of the reason for the refusal; In some cases, we may not be able to search for data if the identifiers provided in the request cannot help us identify you as the data subject for the processing of personal data. In this case, please come back and provide concrete and accurate data.
- What steps are we taking to ensure data security?
www.my-k.ro has taken the necessary and reasonable steps, from a technical and administrative point of view, to protect your personal data against loss, misuse, disclosure, alteration, unavailability, unauthorized access and destruction, such as control of physical access to our premises, staff training and blocking physical files in storage and archiving cabinets, the use of encryption, passwords for access to our systems, the use of SSL-type security certificates, for encrypting data in transit, etc. www.my-k.ro has taken reasonable precautions to protect the confidentiality of the data provided on the Internet but with all our efforts it is known that this mode of data transfer is not completely secure so we cannot be held responsible for this way of transmit your data but once we receive it we use the strict internal data security procedures. www.my-k.ro Last updated: May 1, 2021