PRIVACY AND PERSONAL DATA PROCESSING POLICY

This Privacy and Personal Data Processing Policy („Policy”) explains how Isolde Lavender Operator, collects, uses and manages your personal information. Each time you use this site, this Policy will apply to you, containing information regarding:

• Who will process your personal data
• The categories of personal data we process
• The purpose of processing personal data
• Subscription to the newsletter
• Legal basis for processing your personal data
• Expected duration of the processing of personal data
• Your rights and how to exercise these rights
• Recipients of personal data
• Transfer of your personal data abroad
• Updating your data
• Cookie information
• Creation of profiles
• Changes to this policy

I. Who will process your personal data?

The processing of your personal data will be done by Isolde Lavender, with registered office in Str. Calea Unirii, nr. 177, et 2, ap 22, Craiova, registered at the Trade Register Office under no. J16/716/2012, with CUI RO 25238033, tel. +40 785 203 555, which makes every effort to protect the right to personal data protection of the users of this site.

II. Categories of personal data processed

Isolde Lavender processes the following categories of personal data, as appropriate:

name, surname, date and place of birth, domicile, residence, CNP, ID card number and series, image, telephone, e-mail address, fax,

profession, job, position,

data on education and training, data on professional experience, data on professional performance,

data from video recordings, as video surveillance cameras are installed in plain view at our workplaces,

payment, account and bank card data,

data resulting from your navigation on our website collected through cookies and similar technologies,

opinions and views you share with us or post about us on social media or other public channels,

any other personal data you choose to provide to us through the site, through communications and requests you send to us,

As a user (data subject) you are obliged to provide us with true and accurate data about yourself. At the same time, you undertake not to provide us with any material containing viruses, copyrighted material unless you are the author or have the author’s permission to publish such material, obscene, defamatory, threatening, malicious material or any other such material or information. In case of non-compliance with this obligation, Isolde Lavender may delete such information and take all legal measures against you.

III. Purpose of processing personal data

We process your personal data for the following purposes:

To enter into a contract with you, i.e. for the provision of our goods and services,

to take steps at your request prior to the conclusion of a contract, i.e. to be able to provide you with a quotation based on your request,

to be able to communicate with you in relation to your requests to us

in order to fulfil our legal obligations (such as, for example, the obligation to organise and keep accounts, the obligation to archive files, etc.),

to deal with requests, queries or complaints you make via the site,

to satisfy legitimate interests of ours, such as administering our website, monitoring traffic and improving its content, ensuring the security and protection of persons, property and assets, improving and promoting our products and services,

to establish, exercise or defend a right of ours in court.

If Isolde Lavender intends to further process your personal data for a purpose other than that for which it was collected, we will provide you, prior to such further processing, with information on that secondary purpose and any additional relevant information in accordance with applicable law.

IV. Newsletter subscription

Isolde Lavender may process your personal data for direct marketing purposes to send you information about our offers, promotions and products only if you consent to this by subscribing to the newsletter. In the absence of your consent, the newsletter subscription cannot be completed.

We also inform you that you have the right to withdraw your consent and object at any time and free of charge to the processing of your personal data for direct marketing purposes by using the unsubscribe/unsubscribe link in the content of the e-mail or by sending a new request to info@isoldelavender.ro.

If you withdraw your consent or object to the processing of your data for direct marketing purposes, your data will no longer be processed for this purpose, but the withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.

V. Legal basis for processing personal data

Any processing of your personal data will be carried out on the basis of one of the following legal grounds:

• The processing is carried out on the basis of your consent to the processing of personal data – Article 6(1)(a) of Regulation (EU) No 2016/679,
• the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract – Article 6(1)(b) of Regulation (EU) No 2016/679,
• processing is necessary for compliance with a legal obligation – Article 6(1)(c) of Regulation (EU) 2016/679
• processing is necessary for our legitimate interests or those of a third party – Article 6(1)(f) of Regulation (EU) No 2016/679,

VI. Duration of processing of personal data

The data will be processed for the entire period of time necessary to achieve the purpose for which they were collected, with appropriate security measures.

For example, your data that are collected for purposes related to the conclusion of a contract will be kept for the duration of the execution of the contract as well as afterwards, for the period of time required by the legislation in force for keeping documents. Data from video recordings will be kept for a period of 30 days. The processing of your personal data for direct marketing purposes will be done strictly for the time necessary to achieve the purpose for which they are collected or until you withdraw your consent or object to such processing.

Isolde Lavender will periodically review the data collected, analysing to what extent their retention is necessary for the purposes mentioned and if no longer necessary the data will be deleted.

• The right to be informed about the processing of your personal data,
• the right of access to data, i.e. the right to obtain confirmation from us whether or not we are processing your data and, if so, access to that data and information about how it is processed.
• the right to rectify inaccurate personal data concerning you,
• the right to erasure of personal data concerning you („right to be forgotten”),
• the right to object, i.e. the right to object to the processing of personal data when it serves a public interest or a legitimate interest of ours,
• the right to restrict the processing of your personal data,
• the right to data portability, i.e. the right to receive, in certain cases, your personal data in a structured machine-readable form and the right to have such data transferred directly to another controller,
• the right to lodge a complaint with the supervisory authority, i.e. the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro),
• the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent (the right not to be subject to an individual decision),
• 2021the right to take legal recourse.

Also, where data processing is carried out on the basis of your consent, you have the right to withdraw your consent at any time and free of charge, without affecting the lawfulness of the processing carried out on the basis of consent prior to the withdrawal of consent. In cases where you withdraw your consent, Isolde Lavender will no longer process your personal data unless there is another legal basis for such processing.

If you want to exercise your rights above, you can submit a written request, signed and dated, to Isolde Lavender’s point of work located at Str. Calea Unirii, nr. 177, et 2, ap 22, Craiova or by e-mail at info@isoldelavender.ro. If necessary, we may request a copy of your identity card proving your identity or other additional information necessary to confirm the identity of the data subject.

Isolde Lavender facilitates the exercise of your rights set out above and will not refuse to comply with your request to exercise your rights unless it is not exercised in accordance with the law or we are unable to identify you. Isolde Lavender also undertakes to provide you with any additional information necessary to ensure fair and transparent processing of your personal data, taking into account the specific circumstances and context in which such data is processed.

Isolde Lavender will provide you with information on the actions taken following a request without undue delay and in any case no later than one month after receipt of the request. This period may be extended by two months where necessary, taking into account the complexity and number of requests. In any case, Isolde Lavender will inform you of any such extension within one month of receipt of the request, giving the reasons for the delay. If you submit a request in electronic format, the information will be provided to you in electronic format where possible, unless you request another format.

Isolde Lavender will respond to requests where you exercise your rights free of charge. If your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, Isolde Lavender may: (a) either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the requested action; (b) or refuse to comply with the request.

VIII. Recipients of personal data

We store your personal data in secure environments and protect it from unauthorized access, disclosure, use, modification or destruction by any organization or individual. Your data may be stored in paper or electronic format on our own servers or those of our trusted service providers.

Your personal data may be disclosed to our employees in the performance of their duties, to suppliers of services and goods (such as lawyers, accountants, tax experts, etc.), our contractual partners, persons authorised to process personal data on our behalf, auditors, central/local public authorities and institutions, courts, etc. In any case, Isolde Lavender will not sell your personal data to third parties.

IX.  Transfer of your personal data abroad

Isolde Lavender will in principle not transfer your personal data to countries outside the European Union. However, if such a transfer is necessary for processing in accordance with the purposes described above, it will only be made to those third countries that have been recognised by the European Commission as ensuring an adequate level of protection of personal data.

The transfer of your data to third countries that have not been recognised by the European Commission as ensuring an adequate level of protection will only be possible on the basis of adequate safeguards such as standard contractual clauses approved by the European Commission in compliance with the General Data Protection Regulation (EU) 2016/679 and other applicable legal provisions. You can contact us at any time, using the contact details in this policy, if you would like further information about these safeguards.

X. Updating your personal data

If the personal data you have provided to us changes or if you become aware that we hold any incorrect personal data about you, please contact us by email at: info@isoldelavender.ro. We will not be liable for any loss arising from incorrect, unauthentic, insufficient or incomplete personal data you provide to us.

XI. Information about Cookies

By this policy, Isolde Lavender informs you that the isoldelavender.ro website uses „cookies”. A cookie is a small text file that a website saves on your computer or mobile device when you visit it. The information associated with cookies is not used to identify you personally.

Thanks to cookies, the site remembers, for a period of time, your actions and preferences (language, font size and other display preferences). The cookie is completely „passive” (contains no software, viruses or spyware and cannot access the information on your hard drive). Cookies are not used for any purpose other than those described here.

Enabling cookies is not strictly necessary for the operation of the site, but it may improve your browsing experience. You can delete or block cookies, but if you do so, some features of the site may not function properly.

Isolde Lavender uses the following cookies on the isoldelavender.ro website, described in the cookie policy available HERE: (https://isoldelavender.ro/politica-cookies)

You can control and/or delete cookies as you wish. You can delete all cookies from your computer and you can set most browsers to block the placement of cookies. If you do this, you may need to manually set some preferences each time you visit the site. Also, some services or options may not work.

XII. Creating profiles

Our respect for your data includes giving it the human attention it needs, through our staff. In this regard, we inform you that:

we do not use your personal data for profiling purposes.

We never make automated decisions about you that produce legal effects or affect you.

we do not process data for secondary purposes incompatible with the purposes for which we collected it.

We use technical means to store your personal data securely.

XIII.  Changes to the Privacy Policy

The most recent update to this Policy was made in 2021. Isolde Lavender has the right to periodically update this policy, with changes posted on this page.

If you have any questions, comments, suggestions or requests regarding the information contained on this page, please email info@isoldelavender.ro.