Thank you for visiting our website. When you visit the www.gdaservices.com website, when you contact us, or when you request our services, you provide your information to us.
Please read this document carefully.
www.gdaservices.com (or „the Website”) is the presentation website of SC GREEN DESIGN AUTOMATION SRL, with head office in Șoseaua Tudor Vladimirescu, numărul 393, cod poștal 077090, Domnești Business Park, Domnești, Ilfov, Romania, telephone: 40 371 689 733, email firstname.lastname@example.org.
When we say „GDPR”, we are referring to Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data and on free movement of such data and repealing Directive 95/46/EC.
„Personal data” means any information relating to an identified or identifiable natural person („data subject”).
QUESTIONS AND REQUESTS
If you have questions or concerns about the processing of your personal data or if you want to exercise your legal rights with regard to the data in our possession, you can contact us by e-mail: email@example.com.
WHAT INFORMATION DO WE COLLECT?
a) Information you provide us with by sharing voluntarily
When you use the forms on the website, when you try products on the website, when you contact us by telephone or e-mail, or communicate with us by any means, you are voluntarily offering us the information we then process. This information includes your name, first name, e-mail address, delivery address, invoice details, telephone number, as well as any other such voluntary data you offer to access the website.
b) Information we collect automatically
When you browse our website, we may collect information about your visit on the website. This information may include the IP address, operating system, browser, browsing history, and other information about the way you have interacted with the website. We can collect this information by using cookies or other similar technologies.
TYPES OF PERSONAL DATA WE COLLECT:
• Contact information – such as name, address, telephone number, e-mail address, and login information;
• Information about your company, your position, the company’s needs in the field of services we provide;
• Information about you and your career (by means of the CV you may send through the Careers page);
• Data concerning consumer satisfaction and feedback – such as results on consumer satisfaction and feedback studies;
• Data collected during your visit on our website – such as data collected through cookies and other data collected automatically to offer you a good browsing experience;
• Details such as traffic information, location data, and other communications data (including the IP address and type of browser) collected when you use our services;
• Information about the device, including unique device identifier;
• Pages visited and content viewed, links, and buttons accessed, URLs visited before and after using our service.
WHAT IS THE LEGAL BASIS FOR PROCESSING?
With regard to the data you voluntarily provide to us by filling in and sending forms, testing products through the website, or contacting us through any means, the legal basis is „to take action at the request of the data subject before conclusion of a contract” (art. 6(1)(b) of Regulation (EU) 679/2016). This also includes actions such as contacting to obtain information and clarification for making an offer, negotiations, the contracting itself, and any other activities related to the smooth execution of the contract.
With regard to the data you voluntarily provide us, potentially by posting a comment on a blog article, the grounds for processing is our legal obligation to support the exercise of the right to information, as well as our legitimate interest to offer transparency and information to the readers’ of our blog.
Under the current legislation, including GDPR (applicable since May 25, 2018), your consent is not required when the processing is necessary to take steps to sign a contract, fulfill a legal obligation or legitimate interest.
With regard to the data we collect automatically by using cookies or other similar technologies, the basis for processing is consent. Once you access the website, you effectively consent to the processing of your data.
HOW WE COLLECT PERSONAL DATA:
– When you visit our website, when you create and activate your account (e.g. for Support functions), when you order a product or service through contact forms, when you participate in our campaigns, when you create an evaluation of the product or when you download and use an application;
– From publicly available sources;
– From social media, e.g. Facebook / LinkedIn / YouTube, if you choose to use these to facilitate connection to our websites/apps.
You may choose to not provide certain types of personal data. However, this may affect our ability to provide you with certain services, products or promotional offers, as well as your ability to use certain features, apps and/or services on the websites.
FOR WHAT PURPOSES DO WE COLLECT DATA?
To provide the products and services you have requested or information about these;
To help develop, test, improve and modify our products and services;
To send you market communications, if you have previously given your voluntary consent in this regard;
For internal purposes regarding the business, including security, analysis, audit for our main operational activities;
To interpret your feedback when you rate/review our products or services;
To interpret and operate our websites and apps, including online registration;
To take the appropriate steps to conclude a contract;
To answer your questions and requests;
To protect ourselves from cyber-attacks.
HOW LONG DO WE STORE YOUR DATA?
We will retain your personal data for as long as needed according to the law or to the requirements mentioned above. In the absence of a legal requirement, we will keep your information for as long as necessary for the purpose or purposes for which it was collected.
Once the processing period indicated above has expired and SC GREEN DESIGN AUTOMATION SRL has no legal or legitimate reasons to process your personal data, the data will be deleted in accordance with the procedures, which may involve archiving, anonymizing or destroying it.
HOW DO WE DISCLOSE YOUR INFORMATION?
We will not disclose your data to third parties to be used for their own marketing or commercial purposes without your consent. However, for the Processing purposes mentioned above, we may share or disclose your personal data to the following entities:
Service providers. We may disclose your information to other companies that provide services to us and that act as authorized persons, such as companies that help us with invoicing, accounting, payments, shipping, financing, communication, advertising, or that send e-mails on our behalf. These entities are carefully selected to ensure that they meet the specific requirements for the protection of personal data, which they do not use for purposes other than those stated.
Courts of law, prosecutor’s offices or other public authorities, in order to comply with the law or in response to an enforceable legal procedure.
Other parties, with your consent or according to your instructions.
In order to carry out the above, we may transfer your data to entities established in countries outside the European Union, such as those that provide marketing services, web hosting, online store platforms. These entities have been carefully selected and are fully compliant with GDPR.
WHAT ARE YOUR RIGHTS?
If you are in the EU or if your personal data is processed by our company in a way other than this policy, you have the following rights:
The right to withdraw your consent: In case the processing is based on consent, you may withdraw your consent at any time and free of charge by sending an e-mail at firstname.lastname@example.org, with the subject line „withdrawal of consent”.
The right to lodge a complaint with a supervisory authority.
The right to bring proceedings before a court.
The right of access: You have the right to obtain from us a confirmation whether your personal data is processed or not and, if so, you have the right to access this personal data.
The right to rectification: You have the right to obtain from us, without undue delay, the rectification of your personal data that is inaccurate. Taking into account the purposes for which the data have been processed, you have the right to obtain completion of incomplete personal data, including by way of providing a supplementary statement.
The right to erasure („the right to be forgotten”): In situations where (1) the data is no longer necessary in relation to the purposes for which it was processed, (2) consent has been withdrawn and there is no legal basis for processing, (3) you object to processing and there are no overriding legitimate grounds for the processing, or (4) the personal data has been unlawfully processed, you have the right to obtain the erasure of your personal data, without undue delay.
The right to restriction of processing: You have the right to obtain from us the restriction of processing if one of the following cases applies:
(a) you contest the accuracy of the data, for a period that allows us to verify the accuracy of the data;
(b) the processing is unlawful and you object to your personal data being erased, requesting that its use be restricted instead;
(c) we no longer need personal data for the purpose of processing, but you request it to establish, exercise or defend a legal right;
(d) you have objected to the processing pursuant to article 21(1) of GDPR, for the time frame in which it is verified whether our legitimate rights prevail your rights.
The right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to send this data to another controller, without hindrance from us, in situations where:
(a) processing is based on consent, pursuant to article 6(1)(a) or article 9(2)(a) of the GDPR, or based on a contract, pursuant to article 6(1)(b) of the GDPR; and
(b) processing is done with automated means.
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.
You do not have this right if the decision is authorized pursuant to EU or national legislation applicable to the controller and which also establishes appropriate safeguards to protect the data subject’s rights, freedoms and legitimate interests; or
To stop receiving promotional messages, you can follow the unsubscribe instructions included in each e-mail.
If you have questions regarding these rights or if you wish to exercise any of these rights, you can do so in writing, by e-mail or by filling in the contact form at www.gdaservices.com.
Please note that exercising these rights may affect our ability to provide you with certain products, features or services.
SECURITY OF YOUR PERSONAL DATA
SC GREEN DESIGN AUTOMATION SRL will take appropriate technical and organizational measures, taking into account the nature of the information and costs related to implementation, in accordance with the applicable data protection laws, including by requesting service providers, business partners or professional consultants to use adequate measures to protect your personal data.
PLEASE NOTE THE FOLLOWING:
We will try to respond to any requests within 30 days. However, the time limit may be extended for specific reasons relating to the specific legal right or the complexity of your request.
Restricting access: in certain situations, we may not be able to offer you access to all or some of your personal data, due to legal provisions. If we reject your request to access, we will inform you of the reason for rejection.
Impossibility to identify you: in some cases, we may not be able to search your personal data, because of the identifiers you provide in your request. An example of personal data we cannot consult when you provide us with your name and e-mail address are the data collected through browser cookies.
In such cases, if we cannot identify you as data subject, we are unable to comply with your request, unless you provide additional information that would allow identification.