The Privacy Policy aims to provide information on the collection, use and disclosure to third parties of personal data by the company "DIN SERTAR SHOP SRL, Romanian legal entity with registered office in Str. Gen. H. Berthelot, nr. 92, bloc Corp B, apt. 1, 10172, sector 1, Bucharest, registered at ORC with no. J40/24988/2023, with CUI 48657839.

Since ensuring your protection with regard to the processing of personal data is an extremely important objective for us, we have taken all the necessary steps to comply with the standards required by Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 EC (GDPR), as well as by any other normative act in force on Romanian territory.

This privacy policy relates to personal data of individuals who contact and visit us as well as their representatives, potential and existing collaborators and applies to data collected through our website www.dinsertar.roas well as all other personal data that we collect through e-mail, contact form or other off-line variants.

An important step in achieving this objective is to inform you about how your data will be processed (processing means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction).

The Privacy Policy describes:

  1. The categories of personal data we collect and process;
  2. The purposes for which we collect and use your personal data;
  3. Grounds for processing for such purposes;
  4. Duration of processing of this data
  5. Your rights as data subjects and how you can exercise them;
  6. Who we can disclose personal data to.

​Section 1. Who we are and how we can be contacted:

NameDin Sertar Shop SRL

Address:  Str. Gen. H. Berthelot, nr. 92, bloc Corp B, apt. 1, 10172, sector 1, București

CUI: 48657839

Email: contact@dinsertar.ro

Section 2. Data collection/ types of data

Automatically collected following access (of type)

  • IP Address
  • Date and time of access
  • Time difference from Greenwich Mean Time (GMT)
  • Application content (specific website)
  • Access status/ HTTP status code
  • Volume of data transferred
  • Website access requested
  • Browser, language settings, browser version, operating system and surface

Collected after placing an order or creating an account:

  • Full name;
  • Email address;
  • Phone Number;
  • Collected following newsletter subscription:
  • Email address;

What are?

This Website uses so-called "cookie files". Cookies are small text files that are stored in your terminal's memory by your browser. They store certain information (e.g. your preferred language or website settings) that your browser may retransmit to us (depending on the lifetime of the cookie file) the next time you visit our Website.

What cookies do we use?

  1. Cookies
  2. Google Analytics (site analytics cookies) - used for website analytics purposes;
  3. Google Tag Manager - used for website analytics purposes;
  4. Cookie Consent - used to store user preferences;

Ch.33. Cookies from third parties

Within our Website, we use Google Analytics and Google Tag Manager which is an analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (hereinafter referred to as "Google").

Google will analyze your use of our Website on our behalf. For this purpose we use cookies. The information collected by Google in connection with your use of our Website (e.g. the corresponding URL, the web pages you visit, your browser type, your language settings, your operating system, screen resolution, etc.) will be transmitted to a Google server in the USA, where it will be stored and analyzed. These results will then be made available to us in a pseudonymized form. Google also abides by the EU-US Privacy Shield, which ensures that an adequate level of protection is maintained in connection with Google's data processing in the US.

You can withdraw your consent to the use of web analytics at any time by downloading and installing the provided Google Browser Plug-in.

More information about Google Analytics is available in the Google Analytics Terms of Use, the Google Analytics Privacy and Data Protection Guidelines and the Google Privacy Policy.

We reserve the right to modify and update the Privacy Policy and Cookie Policy

Section 4. Purpose of data processing

  1. For the purposes of the contract
  2. For marketing purposes
  3. We may use that information to improve the products and services we offer you.
  4. In defense of our legitimate interests
  5. For the defense of our legitimate interests (In exceptional situations such as cyber-attacks that may jeopardize the security of our platform or where information is requested by competent public institutions in order to resolve ongoing investigations, we reserve the right to process the information concerned)

In the case of placing an order, the legal basis is the performance of the contract.

In case of newsletter subscription, the consent of the data subject.

Section 6. How long we keep your personal data

  1. The period of time for which your data will be kept is limited and will be determined by the period necessary to fulfill the purposes for which the data are processed, which may not exceed 2 years.
  2. Upon expiry of the storage period of personal data, the Operator shall delete/destroy such data from the processing and storage means.

Section 7. Categories of Third Parties

Chapter 7.1. Google

Purpose: Web analytics

https://www.google.com/analytics/terms/gb.html, https://support.google.com/analytics/answer/6004245

Chap. 7.2 DPD and Sameday

Purpose: product delivery

Policies: https://www.dpd.com/ro/ro/termeni-si-conditii-incepand-cu-01-07-2024/ yes https://sameday.ro/restrictii-si-conditii-de-transport-in-easybox/

Note: If we are legally obliged to do so or if necessary to protect a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that the access to your data by third parties, legal entities under private law, is carried out in accordance with the legal provisions on data protection and confidentiality of information, on the basis of contracts concluded with them.

Section 8. Territoriality:

Data processing is done only on the territory of Romania, with the exception of pseudonymized data used in the website analytics function described in item 3.1 "Third Party Cookies" which is done in the USA according to the described procedure and is governed by the US-EU Privacy Shield

Section 9. Your Rights

Ch. 9.1. Data subject's right of access

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him or her are being processed and, if so, access to those data and to the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom personal data have been or are to be disclosed, in particular recipients in third countries or international organizations;
  • where possible, the period for which the personal data are expected to be stored or, if this is not possible, the criteria used to determine this period;
  • the existence of the right to request the controller to rectify or erase the personal data or to restrict the processing of personal data relating to the data subject or the right to object to the processing;
  • the right to complain to a supervisory authority;

Chapter 9.2 Right to rectification

The data subject shall have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Having regard to the purposes for which the data have been processed, the data subject shall have the right to obtain the completion of personal data which are incomplete, including by providing an additional statement.

Chapter 9.3 The right to erasure ('right to be forgotten')

(1) The data subject shall have the right to obtain from the controller the erasure of the personal data concerning him or her without undue delay, and the controller shall be obliged to erase the personal data without undue delay if one of the following grounds applies:

(a) the personal data are no longer necessary for the purposes for which they were collected or processed;

(b) the data subject withdraws the consent on the basis of which the processing is taking place, and there is no other legal basis for processing the data;

(c) the data subject objects to the processing pursuant to the Article and there are no legitimate grounds for the processing which prevail or the data subject objects to the processing;

(d) personal data have been processed unlawfully;

(e) personal data must be erased in order to comply with a legal obligation of the controller under Union or national law to which the controller is subject;

(f) the personal data were collected in connection with the provision of information society services referred to in Article 8(1) of Regulation (EU) 2016/679 (the Regulation)

(2) Where the controller has made personal data public and is under an obligation to erasure, the controller shall, taking into account the available technology and the cost of implementation, take reasonable steps, including technical measures, to inform the controllers processing the personal data that the data subject has requested the erasure by those controllers of any links to those data or of any copies or reproductions of those personal data.

(3) Paragraphs (1) and (2a) shall not apply to the extent that processing is necessary:

(a) to exercise the right to freedom of expression and information;

(b) for compliance with a legal obligation to comply with a legal obligation providing for processing under Union or national law applicable to the controller or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(c) for reasons of public interest in the field of public health, in accordance with Article 9(2)(h) and (i) and Article 9(3) of the Regulation;

(d) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the Regulation to the extent that the right referred to in paragraph 1 of this Chapter is likely to make the purposes of such processing impossible or seriously impair the achievement of the objectives of that processing; or

(e) for the establishment, exercise or defense of a right in a court of law.

Chapter 9.4. Right to restrict processing

(1) The data subject shall have the right to obtain from the controller the restriction of processing where one of the following applies:

(a) the data subject contests the accuracy of the data for a period allowing the controller to verify the accuracy of the data;

(b) the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of their use;

(c) the controller no longer needs the personal data for the purposes of the processing but the data subject requests them for the establishment, exercise or defense of legal claims; or

(d) the data subject has objected to the processing in accordance with Article 21(1) of the Regulation for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.

(2) Where processing has been restricted pursuant to paragraph 1 of this Chapter, such personal data may, with the exception of storage, be processed only with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

(3) A data subject who has obtained the restriction of processing pursuant to paragraph (1) of this Chapter shall be informed by the controller prior to the lifting of the processing restriction.

Chapter 9.5. Right to data portability

(1) The data subject shall have the right to receive the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transmit these data to another controller without hindrance from the controller to whom the personal data were provided, if:

(a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the Regulation or on a contract pursuant to Article 6(1)(b) of the Regulation; and

(b) the processing is carried out by automated means.

(2) In exercising his or her right to data portability pursuant to paragraph 1 of this Chapter, the data subject shall have the right to have personal data transmitted directly from one controller to another where technically feasible.

(3) The exercise of the right referred to in paragraph 1 of this Chapter shall be without prejudice to Article 17 of the Regulation. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(4) The right referred to in paragraph 1 of this Chapter shall be without prejudice to the rights and freedoms of others.

Chapter 9.6. The right to be notified of rectification, erasure or restriction of processing of personal data.

(1) The controller shall communicate to each recipient to whom personal data have been disclosed any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 of the Regulation, unless this proves impossible or involves a disproportionate effort. The controller shall inform the data subject of those recipients if the data subject so requests.

Section 10. Data collected in the recruitment procedure

With this note we would like to inform you about:

(i) the purposes for which we collect and process your personal data;

(ii) the lawful basis for processing such data;

(iii) the categories of data we collect from you and process;

(iv) the duration of the processing of such data;

(v) your rights as data subject and how you can exercise them;

(vi) to whom we disclose your personal data.

Chap.1 Purpose for which data are collected and processed

  1. Providing services "Din Sertar Shop SRL..;
  2. Communicating with you;
  3. Data processing as a legal obligation;
  4. Newsletter forwarding;
  5. To provide you with specialized electronic newsletters about our news. You may at any time withdraw your consent to not receive future newsletters by activating the "unsubscribe" option when you receive the e-mail or by writing to us at _______.

Chapter 2 Legal basis for data processing

 The processing of personal data is necessary for the conclusion and performance of a contract for the provision of services/sale/purchase. In this regard, the legal basis for the processing is Article 6(1)(b) of the GDPR Regulation.

Chapter 3 Categories of data collected and processed

The personal data we process are the data you provide us with and include, among others: name and surname, photograph, home address and/or residence address, personal e-mail address, personal telephone number, date of birth, gender, marital status, nationality, professional experience, education, skills and knowledge, and any other personal data you submit.

To the extent that the documents you submit to us also contain the personal data of other natural persons (e.g. contact persons for reference checking), please inform those persons before submitting their personal data to us of how their personal data will be processed by the company.

Chapter 4. Duration of the processing of these data

 The personal data you provide to us will be stored and processed for the duration necessary to achieve the intended purpose of data collection, namely the taking and processing of your orders or any other longer period required by law, by a record-keeping regulation or by public authorities, and will be deleted upon the achievement of the purpose for which the data was collected.

Recipients of personal data. Transfer of personal data

"Din Sertar Shop SRL" does not transfer the personal data that you provide in the process of purchasing products on our website to other third parties.

Chapter 6 Security of processing

"Din Sertar Shop SRL" will ensure the security of the processing of your data from the moment of their conception by implementing appropriate technical and organizational measures.

Also, "Din Sertar Shop SRL" will inform you, without undue delay, if a possible breach of data security is likely to create a high risk for your rights and freedoms, except in the cases indicated in Article 34 of the Regulation.

Chapter 7 Your rights as a data subject

In your capacity as data subject, you have the following rights:

  1. The right to be informed about all essential aspects of data processing;

The right of access to the processed data and to a range of information, as provided by law, which allows you to be informed whether your personal data is being processed by us, as well as the details available in this regard (including but not limited to the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data has been or will be disclosed, etc.),

  1. The right to obtain rectification and/or completion of personal data without undue delay;
  2. The right to obtain erasure of personal data without undue delay in the cases provided for by law (for example, when personal data are no longer necessary for the purposes for which they were collected or processed);
  3. The right to obtain restriction of processing in the cases provided for by law (for example, where you contest the accuracy of the data, for a period allowing the controller to verify the accuracy of the data).
  4. The right to data portability You have the right to obtain personal data processed in a structured, commonly used and machine-readable form for the purpose of transmitting these data to another controller without obstacles on the part of the controller, in the cases provided for in Article 20 of the Regulation.
  5. Right to object You have the right to object, on grounds relating to your particular situation, to processing on grounds of public interest or legitimate interest of the controller or for direct marketing purposes, including profiling on those grounds, except as provided for in Article 21 of the Regulation.
  6. The right not to be subject to a decision based solely on automated processing, apart from the exceptions provided for in Article 22 of the Regulation.
  7. The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
  8. The right to appeal before Romanian courts.

Chapter 8 How to exercise your rights

In order to exercise any of the above rights, please make a written or verbal request, indicating your status as data subject and the subject of the request, to Din Sertar Shop SRL using the contact details below:

Attention: Department ____

E-mail: contact@dinsertar.ro

To the extent that you request a copy of the personal data being processed by Din Sertar Shop SRL, it will be provided to you in hardcopy or electronic format, according to your choice. Any subsequent copies of the same data will be provided for a fee.

"Din Sertar Shop SRL" will analyze the merits of your requests and will provide you with an answer without undue delay and in any case no later than one month after receipt of your request. This period may be extended by two months where the complexity and number of requests so requires. For requests submitted by you in electronic format, replies will also be sent in electronic format, unless you expressly request that they be provided in another format.

Section 11. Miscellaneous

As the data subject, we wish to inform you that you are subject to the following obligations:

  • To provide accurate data;
  • To inform "Din Sertar Shop SRL", without unjustified delay, about any change regarding the processed data.

Without prejudice to your right to contact the supervisory authority at any time, you can contact us in advance at contact@dinsertar.ro and we will make every effort to resolve any problems.

You have the right to complain to the supervisory authority about the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are as follows: National Supervisory Authority for Personal Data Processing B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania

Phone: 0772 123 000

E-mail:anspdcp@dataprotection.ro