SC UNIQUE LIGHT THERAPY S.R.L., in its capacity as data controller, sends you this Information Notice to explain how we process and protect personal data.
1. What processing does this Information Notice cover?
This Information Notice applies to the processing of the personal data of visitors and users who use this site.
2. What information do we collect about you?
We collect and process your personal data when you interact with us (for example, the information you provide us by filling in the forms on our websites, or through correspondence with us by telephone, email or in any other way).
This includes information you provide when you contact us by email, when you place an order on our site, and in other social communication activities. The information you provide us may include surname, first name, address, email address and telephone number.
We will not collect or process sensitive personal data relating to you (for example information about racial or ethnic origin, political opinions, religious belief or philosophical convictions, health, sex life or sexual orientation).
Each time you visit this site we automatically collect the following data:
- Technical data — for example, this may include the Internet Protocol (IP) address used to connect your computer to the internet, connection information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device type and mobile device brand; this data may also be collected and processed on our behalf through third-party cookies.
- Data about your visit — for example, this may include full uniform resource locators (URLs), clickstream to, through and from the site (including date and time), the information you viewed or searched for (including top articles read, top categories accessed, page response times, download errors, length of visits to certain pages (including the average time spent on certain pages, viewing of certain content or presentations), the average time spent in an application and the number of views from such applications, the average number of articles viewed on the site, information on page interaction (such as scrolling, clicks and mouse-overs), the methods used to navigate the page, data on visitor behaviour, and any telephone number used to call or any email address used to contact the representatives of our customer service department.
Where we obtain your personal data from a third party, we will provide you with all relevant information about the processing as soon as possible, but in any case no later than one month from obtaining your personal data, including on the categories of personal data being processed, the purpose of the processing and its legal basis.
3. How do we use personal data and what is the legal basis for the processing?
Your personal data is processed in accordance with Regulation (EU) 2016/679 — on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), the Law implementing the provisions of the GDPR, and any other decisions the National Supervisory Authority for Personal Data Processing (ANSPDCP) may issue concerning the protection of personal data. (dataprotection.ro)
4. How and to whom do we disclose your personal data?
We do not sell your personal data to third parties.
Personal data may be communicated to government authorities and/or law enforcement bodies, where this is required by applicable law or where it is necessary in order to exercise our rights, including our terms of use, or to protect our legitimate interests (including the legitimate interests of third parties) in accordance with applicable law.
The company may also disclose personal data to external advisers (for example lawyers, accountants, auditors) where necessary.
5. Storage of your personal data and transfers abroad
The personal data we collect about you is stored in the European Union (“EU”) and the European Economic Area (“EEA”). However, information collected by third parties through cookies will generally serve traffic from a data centre located closest to where the traffic originates. This means that such information, including advertising traffic, may be handled by servers located in the EEA and may be transferred outside the EEA.
In addition, your personal data may be transferred to and stored at a location outside the EU and the EEA. When your personal data is transferred from your own country to another country, the laws and rules protecting your personal data in the country to which your information is transferred may differ from (or may offer less protection than) those in the country in which you work.
We intend not to transfer your personal data outside the EEA unless adequate protections are in place, including: an adequacy decision issued by the European Commission in respect of the country or countries of destination; a “privacy shield” certification; appropriate binding corporate rules; an approved code of conduct, together with binding and enforceable commitments of the controller or processor in the country outside the EU and the EEA; an approved certification mechanism, together with the binding and enforceable commitment of the controller or processor in a country outside the EU and the EEA to apply the appropriate safeguards; or EU standard contractual clauses approved by the European Commission.
6. Your rights
You may ask us to confirm whether or not your personal data is processed by us, to provide you with a copy of your personal data and/or to correct it. In certain circumstances, you have the right to ask us to erase your personal data or, on the basis of the right to portability, to ask us to transfer some of your personal data to you or to other entities.
You also have the right to object to certain processing of your personal data (for example, the use of processing for direct marketing purposes, or certain decisions taken solely by automated processing, including profiling). Where we have asked for your consent to process personal data, you have the right to withdraw that consent without any adverse effects on you.
Where we process your personal data because we have a legitimate interest in doing so (as explained above), you also have the right to object to that processing. You also have the right to restrict the processing of your personal data in certain circumstances.
Please note that your rights described above may be limited in certain situations and are subject to applicable personal data protection laws and regulations; for example, your right to object to the processing of your personal data may be limited where we can demonstrate that we have compelling legitimate grounds for processing your personal data which override your interests.
As a data subject, you have specific legal rights concerning the personal data we collect from you. The Controller will respect your individual rights and will deal with your interests appropriately.
- Right to information: you have the right to be informed, among other things, about what data of yours is processed, why, for what purposes, to whom it is transmitted and what rights you have in this respect.
- Right to withdraw consent: you may withdraw your consent to the processing of personal data at any time.
- Right to rectification: you may obtain from us the rectification of personal data concerning you. We make reasonable efforts to keep personal data that is in continuous use and that is in our possession or control accurate, complete, current and relevant, based on the most recent information available to us.
- Right to restriction: you may obtain from us the restriction of processing of personal data if: you contest the accuracy of the personal data, for the period during which we must verify its accuracy; the processing is unlawful and you request restriction of processing rather than erasure of the personal data; we no longer need your personal data but you require it for the establishment, exercise or defence of a right; or you object to the processing, for the period during which we verify whether our legitimate grounds override yours.
- Right of access: you may ask us for information about the personal data we hold about you, including information about what categories of personal data we have in our possession or control, what it is used for, where we collected it from if it was not collected directly from you, and to whom it has been disclosed, if applicable. You may obtain a copy from us, free of charge, containing the personal data we hold about you.
- Right to portability: at your request, we may transfer your personal data to another controller, where technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract. Rather than receiving a copy of your personal data, you may ask us to transfer your data directly to another controller specified by you.
- Right to erasure: you may obtain from us the erasure of personal data where: your personal data is no longer necessary for us in relation to the purposes for which it was collected or is otherwise processed; you have the right to object to further processing of the personal data and you exercise that right to object to processing; the personal data has been processed unlawfully. Except where processing is necessary in order to comply with a legal obligation requiring processing by us, in particular for statutory data retention requirements, or for the establishment, exercise or defence of a right.
- Right to object: you may object — at any time — to the processing of personal data because of your particular situation, provided that the processing is not based on your consent but on our legitimate interests or those of a third party. In that case, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds and an overriding interest for the processing, or for the establishment, exercise or defence of a right. If you object to the processing, please specify whether you want the personal data erased or the processing of it by us restricted.
- Right not to be subject to an automated decision, including profiling: you have the right to intervene in the case of important decisions concerning you, including the right to withdraw your consent.
- Right to lodge a complaint: in the event of an alleged breach of the privacy legislation in force, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) where the alleged breach took place.
You will need to prove your identity and give us other details to help us respond to your request. We will not charge a fee for responding to your request unless this is permitted by law and, where such a fee is charged, it will be reasonable and proportionate to your request.
If you wish to exercise these rights, please contact us at the email address: Wellness@alexandraneamtu.net. We hope we can answer all your questions about how we process your personal data.
However, you also have the right to lodge a complaint with the data protection supervisory authorities. You may lodge the complaint in the Member State where you live, where you work, or where the alleged breach of data protection law took place.
7. Contact
You can contact us at the email address Wellness@alexandraneamtu.net to find out more about transfers and about the appropriate protective measures we have put in place before collecting and using your personal data.