PLASTIC SYSTEMS SRL Data Protection Statement
- Name and address of Data Administrator
For the purposes of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States and other applicable data protection provisions, the Data Controller is:
PLASTIC SYSTEMS SRL
Sibiu, Soseaua Alba Iulia, nr. 110
Sibiu, Romania
The Data Controller has designated the following person as Data Protection Officer:
Ionescu Doru
Administrator PLASTIC SYSTEMS SRL
office@plasticsystems.ro
- General information on data processing
- Scope of personal data processing
We collect and use our users' personal data only to the extent necessary to provide a functional website, content and services. We collect and use our users' personal data only after we have obtained the user's consent. An exception is where user consent cannot be obtained for genuine reasons and processing is permitted by law.
- Legal basis for processing personal data
Article 6(1)(a) of the GDPR is the legal basis where we obtain the consent of the data subject to process personal data.
Article 6(1)(b) of the GDPR is the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This also applies to processing operations necessary for the implementation of pre-contractual measures.
Article 6(1)(c) of the GDPR is the legal basis where the processing of personal data is necessary for the fulfilment of legal obligations that our company has.
Article 6(1)(d) of the GDPR is the legal basis where the vital interests of the data subject or of another real person require the processing of personal data.
Article 6(1)(f) of the GDPR is the legal basis if the processing is necessary to protect a legitimate interest of our company or of a third party which overrides the interests, fundamental rights and fundamental freedoms of the data subject.
- Data deletion and storage period
The personal data of the data subject shall be erased or blocked as soon as the purpose of their storage has been fulfilled. Longer storage is possible if provided for by the European or national legislator in relevant Union regulations, laws or other provisions governing the data controller. At the same time, the data shall be deleted or blocked after the legal retention period has expired, unless there is a requirement to retain the data for the conclusion or performance of a contract. The data we store includes, among other things, the following:
- Log files for up to 14 days;
- Databases for connections during the existence of the account;
- Site provision and log file generation
- Description and scope of data processing
Our system automatically collects data and information from the accessing computer every time a user visits our website.
The following data are collected:
(1) Information about browser type and version used
(2) User's operating system
(3) The user's Internet service provider
(4) User IP address
(5) Date and time of access
(6) Websites from which the user has been redirected to our website
(7) Websites accessed by the user's system through our website
(8) Duration of user visit
(9) Country of origin of the user
(10) User preferred language
(11) Time of the user's first and most recent visit
This data is also saved in log files in our system. We do not store this data together with other personal user data.
- Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.
- Purpose of data processing
The temporary storage of the IP address by our system is necessary for the purpose of delivering the site to the user's computer. Therefore, the user's IP address must be stored for the duration of the session. Storing data in log files serves to ensure the proper functioning of our website. The data is also used to optimise the site and to protect the security of our IT systems. These purposes represent our legitimate interest in processing data in accordance with Article 6(1)(f) of the GDPR.
- Duration of storage
The data is deleted as soon as the purpose of its collection has been achieved. When data is collected for the purpose of operating the website, this happens as soon as the respective session is ended. Where data is stored in log files, this happens after a maximum period of 14 days. Data may be stored for longer periods in certain circumstances. In this case, the user's IP addresses are deleted or truncated, with the result that it is no longer possible to trace them back to the client who made the access.
- The right to object to and challenge a decision
Collecting data to provide the website and storing data in log files is absolutely essential for the operation of the website. This means that users cannot object to these data collection and storage processes.
- Use of cookies
- Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, cookies may be placed locally on the user's device. This cookie file contains a string of characters representing a unique browser identification code that will be recognised the next time the website is visited.
We use cookies to make our website easier to use. Some elements of our website require that the accessing browser can be identified even after our page has been left.
Cookies store and transmit the following data:
(1) Items in a shopping basket
(2) Connection information
(3) Conversation information
(4) Forms Security Mechanisms (XSRF) [n.t.: cross-site request forgery].
(5) Items from the list of desired items
(6) Google Analytics Services
(7) Facebook Pixel general check
(8) Integrate Google Maps
(9) Universal Messenger data for a targeted website experience
(10) Embedding YouTube clips
Our website also uses cookies that allow an analysis of the user's browsing and use of the website. The following data may be transferred:
(1) Search terms entered
(2) Page views
(3) Use of website features
Data collected on the user is pseudonymised using technical methods. Thus, the data can no longer be traced back to the user who made the access. The data is not merged with other personal data of the user.
When accessing the website, users are informed about the use of cookies for analysis purposes by an information banner which also refers to this data protection statement. This includes information on how the placement of cookies can be prevented by changing browser settings.
- Legal basis for data processing
The legal basis for data processing involving the use of cookies is Article 6(1)(f) of the GDPR.
- Purpose of data processing
The purpose of using strictly necessary cookies is to make the website easier to use. Some features offered on our website may not be available if cookies are disabled. These functions depend on the browser recognising them after the browser has left the website.
The use of cookies is required for the following applications:
(1) Shopping functions (e.g. shopping cart)
(2) Tracking functions (e.g. country of origin)
User data collected through strictly necessary cookies is not used to generate user profiles. Analytics cookies are used solely for the purpose of improving the quality of our website and its content. Analytics cookies provide us with information about how the website is used and how we can continually improve our services.
These purposes represent our legitimate interest in processing data in accordance with Article 6(1)(f) of the GDPR.
- Duration of storage, right to object and to challenge a decision
The user's computer stores and transmits cookies to our website. This means that our users have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing your internet browser settings. Cookies already placed can be deleted at any time. This can be set to automatic mode. If you have cookies disabled, you may not be able to use the full range of functions offered on our website.
- Newsletter
- Description and scope of data processing
Our website offers users the opportunity to subscribe to a free newsletter. The data entered in the registration form will be transmitted to us.
During registration, the following data is also collected:
(1) The IP address of the computer from which the access is made
(2) Date and time of registration
Your consent to data processing is obtained during the registration process, where you are also referred to this Data Protection Statement.
If you send us your email address when purchasing goods or services through our website, we may then use this data to send you a newsletter. In this case, the newsletter will only contain direct advertising for similar products or services offered by our company.
The data is not disclosed to third parties as part of the data processing in relation to the sending of newsletters. The data is used exclusively for the purpose of sending the newsletter.
We also use newsletter tracking, which means that emails sent by us contain small image files, also called web beacons or tracking pixels; these are included in the emails but not directly contained in the emails (only in the form of a link to a web address). They are downloaded from the external server via the webmail application running in the browser. Information about the call, the IP address, and information about the client making the access is collected.
- Legal basis for data processing
The legal basis for processing the data after the user has subscribed to the newsletter and consented to the use of his/her data is Article 6(1)(a) of the GDPR. Newsletter tracking is also based on Article 6(1)(f) of the GDPR.
- Purpose of data processing
The collection of the user's e-mail address is used to deliver the newsletter. Tracking the newsletter service serves to perform statistical analysis to determine how many emails are read when links are accessed frequently and which ones. In this case, the use does not allow referrals to individuals. The information is used to optimise the content of newsletters or to better tailor the newsletter to the email clients used by the recipients.
The collection of other personal data during the registration process serves to prevent misuse of the services or e-mail addresses used.
- Duration of storage
The data is deleted as soon as the purpose of its collection has been achieved. Accordingly, the user's e-mail address will be stored as long as the user remains subscribed to the newsletter. Data for analysis purposes are deleted after three months. Any other personal data collected during the registration process is usually deleted after seven days.
- The right to object to and challenge a decision
Subscription to the newsletter can be cancelled (unsubscribed) by the user at any time. All newsletters contain an unsubscribe link. This also gives the user the possibility to withdraw his/her consent to the storage of personal data collected during the registration process.
- Registration
- Description and scope of data processing
Our website offers users the possibility to register by providing their personal data. The data is entered into a form, transmitted to us and then stored by us. Data is not disclosed to third parties unless a payment processing service is involved in an e-commerce transaction. During the registration process, the following data is collected:
(1) First name
(2) Name
(3) E-mail address
(4) Word
(5) Address
(6) Postal code
(7) City
(8) Date of birth
(9) Telephone number
(10) Fax number
(11) Tax Code
(12) Company
(13) Company website
When registering, the following additional data is stored:
(1) Date and time of registration
(2) Date and time of confirmation of registration
(3) Date and time of consent to the Data Protection Declaration
(4) The website on which the registration was made
The user's consent to the processing of this data is obtained during the registration process. This data is also collected during an e-commerce transaction.
- Legal basis for data processing
The legal basis for processing data with the user's consent is Article 6(1)(a) of the GDPR.
Where the recording serves the performance of a contract with the user or the implementation of pre-contractual measures, the legal basis for processing is also Article 6(1)(b) of the GDPR.
The processing of data in the course of an e-commerce transaction is based on Article 6(1)(b) of the GDPR.
- Purpose of data processing
User registration is required to provide certain content and services on our website. Users may also be required to register for the purpose of performing a contract with them or implementing pre-contractual measures.
- Duration of storage
The data is deleted as soon as the purpose of its collection has been achieved. For data collected during the registration process, this happens when registration on our website is cancelled or changed.
Data required for the performance of a contract or for the implementation of pre-contractual measures may also be erased if the data are no longer necessary for the performance of the contract. It may be necessary to store personal data of a contractual partner for a longer period of time than necessary for the conclusion of a contract for the purpose of fulfilling contractual or legal obligations. This means that as soon as a user requests deletion of his/her account, the data specified in F.1. will be deleted; unless this is contrary to a law requiring PLASTIC SYSTEMS SRL to retain the data (i.e. legally required retention periods).
- The right to object to and challenge a decision
Users can cancel their registration at any time. You can ask us at any time to change your data stored by us. You can update your profile data in PLASTIC SYSTEMS SRL at any time (if the creation of an account will be allowed). If the data is necessary for the performance of a contract or the implementation of pre-contractual measures, an earlier deletion of data is only possible insofar as this deletion does not contravene legal requirements.
- Contact form and e-mail contact
- Description and scope of data processing
Our website provides a contact form that can be used to send us electronic mail. The data entered in this form will be sent to us and stored by us. This is the data displayed in the input mask. The following additional data are stored when the form is sent:
(1) User IP address
(2) Language and URL of the page accessed
(3) User's browser and operating system
(4) User reference page
(5) Date and time of contact
With regard to the processing of their data, users are referred to the Data Protection Statement when sending the form and must declare and confirm their agreement to the Data Protection Statement.
Alternatively, users can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored.
Data is not disclosed to third parties in this context.
- Legal basis for data processing
The legal basis for processing data submitted via the contact form with the user's consent is Article 6(1)(a) of the GDPR.
The legal basis for the processing of data submitted by e-mail is Article 6(1)(f) of the GDPR. If the purpose of the contact by e-mail is to conclude a contract, for example to place a service order, the data processing is also based on Article 6(1)(b) and (c) of the GDPR.
The legal basis for storing course participants' information is Article 6(1)(f) of the GDPR.
- Purpose of data processing
We only process personal data submitted via an online form in order to process user requests. In the case of contact by e-mail, this also includes the legitimate interest required in the processing. If you register for a training course, the personal data submitted by you will be used for the conduct and organisation of training courses. Any other personal data processed during the submission process is for the purpose of preventing misuse of the contact form and protecting the security of computer systems.
- Duration of storage
The data is deleted as soon as the purpose of its collection has been achieved. Personal data entered in the online form is not stored on our servers. Data sent by e-mail are deleted once the respective correspondence with the user has been concluded. The correspondence is considered closed if the circumstances indicate that the request has been finally settled.
If you send us a booking, we will contact you using the double opt-in process for electronic mail. If you reply to the contact email, the data will be deleted within 24 hours. If we do not receive a response from you regarding the contact email, we will keep your order request for a period of two weeks to allow you to place the order you have already sent us.
- The right to object to and challenge a decision
The user can revoke his/her consent to the processing of personal data at any time. Users who contact us by e-mail may withdraw their consent to the storage of their personal data at any time. In case of withdrawal of an agreement, correspondence with the user will be terminated.
In this case, all personal data stored during the contact will be deleted.
- Website analysis services
- Description and scope of data processing
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
We would like to point out that this site uses Google Analytics with the extension "_anonymizeIp()", which means that only truncated IP addresses are processed in order to exclude any direct reference to a person. Your address. Your IP address will be truncated by Google in the Member States of the European Union or in other countries that are signatories to the Agreement on the European Economic Area. The full IP address is only sent to a Google server in the USA and is truncated there in exceptional cases.
- Legal basis for data processing
The legal basis for processing personal data through the use of Google Analytics is Article 6(1)(f) of the GDPR.
- Purpose of data processing
The purpose of data processing is to strive for sustainable improvement of the website and user experience. Google uses this information on behalf of the operator of this website to evaluate your use of this website, to compile reports on website activity and to provide other services to the website operator which are associated with the use of this website and the internet. For this purpose, our company has entered into a data processing agreement with Google in accordance with Article 28 of the GDPR.
- Duration of storage
The data is deleted as soon as the purpose of its collection has been achieved
- The right to object to and challenge a decision
The IP address sent from your browser as part of the Google Analytics service is not combined with other Google data. You can adjust your browser settings to prevent cookies from being stored on your computer. Please note that in this case you will not be able to use all the functions offered on this website. You can prevent the collection of data about your specific use of the website (including your IP address) generated by the cookie files to Google, and the processing of this data by Google, also by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/
- Rights of the data subject
If your personal data is processed, you are a data subject for the purposes of the GDPR. You have the following rights vis-à-vis the data controller:
- Access to information
You have the right to ask the administrator to confirm the processing of your personal data by us.
If so, you have the right to ask the data administrator to provide you with the following information:
(1) Purposes of processing personal data;
(2) Categories of personal data that are processed;
(3) The recipients or categories of recipients to whom your personal data have been or will be disclosed;
(4) The period for which your personal data is to be stored or, if no precise information is available, the criteria for determining the storage period;
(5) The existence of a right to erasure or correction of your personal data, a right to restrict the data processing by the data controller and a right to revoke your declaration of consent to such data processing;
(6) The existence of a right to lodge a complaint with a supervisory authority;
(7) All available information as to the source of any personal data not collected from the data subject;
(8) The existence of automated individual decisions, including profiling processes in accordance with Article 22(1) and (4) of the GDPR and, where applicable, relevant information on the logical reasoning involved and the extent and expected effects of that data processing for the data subject.
You also have the right to request information on whether or not your personal data will be transmitted to a third country or international organisation. In this regard, you may request to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR regarding transmission.
- Right to rectification
You have the right to ask the data administrator to correct or complete your data if your personal data is incorrect or incomplete. The data administrator must correct the data without undue delay.
- Right to restrict data processing
You have the right to impose a restriction on the processing of your personal data under the following conditions:
(1) challenge the accuracy of your personal data and give the data administrator sufficient time to verify the accuracy of the personal data;
(2) the data processing is unlawful and you refuse to have your personal data deleted and prefer to request that the processing of your personal data be restricted;
(3) The data controller no longer requests personal data for the purpose for which they were collected, but you request the data for the purpose of supporting, exercising or defending legal interests, or
(4) you have objected to the processing of your data in accordance with Article 21(1) of the GDPR and a decision has not been taken as to whether or not the legitimate interests of the controller override your own.
If the processing of your personal data has been restricted, such data - with the exception of their storage - may only be processed with your consent for the purpose of supporting, exercising or protecting legal interests, protecting the rights of another natural or legal person or for reasons of substantial public interest of the European Union or a Member State. If the restriction imposed on data processing under the specified conditions is changed, you will be informed by the data controller before the restriction is lifted.
- Right to erasure
- a) Obligation to delete data
You may request the administrator to promptly delete your personal data and the data administrator is obliged to delete such data without undue delay, provided one of the following reasons applies:
(1) Your personal data are no longer needed for the purposes for which they were collected or processed by other means.
(2) You revoke your consent underlying the processing of your data under Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing.
(3) You object to the processing of your data in accordance with Article 21(1) of the GDPR and there are no compelling legitimate interests in processing the data or you object to the processing of your data in accordance with Article 21(2) of the GDPR. (4) Your personal data has been unlawfully processed.
(5) The deletion of your personal data is necessary to comply with a legal obligation under EU law or the law of the Member States governing the data controller.
(6) Your personal data has been collected in connection with the services offered by the information society in accordance with Article 8(1) of the GDPR.
- b) Subsequent notification of third parties
If the data controller has made your personal data public and is under an obligation to delete that data in accordance with Article 17(1) of the GDPR, then the data controller must, within the limits of available technology and implementation costs, take appropriate measures, including those of a technical nature, to inform data controllers processing personal data that you, as the data subject, have requested the deletion of all links to that personal data and copies or reproductions of that personal data.
- c) Exceptions
You do not have the right to erasure of your data to the extent that processing is necessary
(1) the exercise of the right to freedom of expression and freedom of information;
(2) the performance of a legal obligation requiring the processing of data in accordance with EU law or the law of the Member States under whose government the data controller operates or the performance of a task carried out in the public interest or the exercise of a public authority vested in the data controller;
(3) for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archiving purposes which are in the public interest, for scientific or historical research purposes, or for statistical purposes in accordance with Article 89(1) of the GDPR, to the extent that the right provided for in point (a) is expected to render impossible or significantly impede the achievement of the purposes of that data processing, or
(5) for the purpose of supporting, exercising or defending legal interests.
- Right of subsequent notification
If you have exercised your right to correct or delete your data or to impose a restriction on the processing of your data against the data controller, then the data controller must notify all recipients to whom your personal data have been disclosed of such correction or deletion of your data or the imposition of a restriction on the processing of your data, unless such action is impossible or would involve unreasonable effort or expense. You have the right to be informed by the data controller of these recipients of your data.
- Right to data portability
You have the right to receive your personal data provided to the data administrator in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another data manager without the intervention of the data manager to whom your personal data was originally provided, provided that
(1) the data processing is based on consent under Article 6(1)(a) or Article 9(2)(a) of the GDPR or on the basis of a contract under Article 6(1)(b) of the GDPR; and
(2) processing is carried out using automated processes. When exercising this right, you are also entitled to have your personal data transmitted directly from one data controller to another, subject to technical feasibility. This must not prejudice the rights and freedoms of third parties. The right to data portability does not apply to the processing of data necessary for the performance of a task carried out in the public interest or in the exercise of a public authority vested in the data controller.
- The right to object
You have the right to object at any time to the processing of your personal data under Article 6(1)(e) or (f) of the GDPR on grounds arising from your personal circumstances; this also applies to profiling under the same provisions. The data controller will then stop processing your personal data, unless the data controller proves compelling legitimate interests relating to the processing, which override your interests, rights and freedoms, or where the processing does not serve to uphold, exercise or defend legal interests. Where personal data are processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for direct advertising purposes; this also applies to the creation of profiles associated with that direct advertising activity.
Your personal data will no longer be processed for direct marketing purposes if you object to the processing of your data for such purposes. In the context of the use of information society services and without taking into account Directive 2002/58/EC, you may exercise your right to object by means of automated processes using technical specifications.
- The right to revoke your declaration of consent under data protection law
You have the right to revoke a declaration of consent previously granted under the Data Protection Act. Revocation of consent will not affect the lawfulness of data processing carried out prior to revocation.
- Automated individual decisions, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning your person or which significantly affects you in a similar way. This does not apply if the decision (1) is necessary for the conclusion or performance of a contract between you and a data controller; (2) is authorised by Union or Member State law to which the data controller is subject and which also lays down appropriate measures to protect the rights and freedoms and legitimate interests of the data subject; or (3) is based on your explicit consent. However, decisions do not have to be based on special categories of personal data under Article 9(1) of the GDPR unless Article 9(2)(a) or (g) applies and appropriate measures to protect the rights and freedoms and legitimate interests of the data subject. In the cases referred to in points 1 and 3, the data controller must implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the data controller, to express your point of view and to challenge the decision.
- The right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside, work or where the place of the alleged breach is located if you consider that the processing of personal data relating to you violates the GDPR. The supervisory authority to which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR. If you wish to object to the collection, processing or use of data by PLASTIC SYSTEMS SRL in accordance with this Data Protection Statement, either categorically or for individual measures, you may send us your objection by e-mail or normal mail services to the following contact details:
The Data Protection Officer of PLASTIC SYSTEMS SRL is:
Ionescu Doru
Administrator PLASTIC SYSTEMS SRL
office@plasticsystems.ro