General information
The privacy of your personal data is one of the main concerns of Elcom H & H SRL, hereinafter referred to by the website name, 7Crai.ro, with registered office in Brașov County, Zărnești, Str. Tămaș no. 8, registered with the Trade Registry under no. J08/1005/1992 and unique registration code 1106493.
This Privacy Policy is intended to inform you about the processing of your personal data by the operator of the website https://7crai.ro. Please read this policy carefully to understand how and why we process data.
What personal data is and what types of data we collect
Personal data means any information relating to an identified or identifiable natural person. Different pieces of information which, when combined, can identify a particular person also constitute personal data. Examples include:
information about your computer, including IP address, geographical location, browser type and version, and operating system;
information about visits to and use of this website, including referral source, length of visit, page views and website navigation paths;
information such as your email address, which you provide when registering on our website;
information such as your name and email address, which you provide to set up subscriptions to our emails and/or newsletters;
information you enter while using the services on our website;
information generated while you use our website, including when, how often and under what circumstances you use it;
information relating to purchases made, services used or transactions carried out through our website, which may include your name, address, telephone number, email address and bank card details;
information contained in any communications you send us by email or through our website, including the content of the communications and their metadata;
any other personal information you send us.
7Crai collects personal data through the 7Crai.ro website when you interact with it, whether by creating a user account, placing an order, or in any other way arising from use of the website.
Purposes and legal grounds for processing personal data
Personal data is collected and processed both for your needs as a customer and for our business needs. This is intended to facilitate communication, purchasing and delivery processes and to continuously improve your website experience based on your feedback.
If you are a customer of the website, 7Crai processes your personal data as follows:
to manage the contractual relationship between you and 7Crai, including receiving, validating, dispatching and invoicing orders placed on the website, informing you about order status, arranging returns of ordered products, etc.;
Legal basis: Processing your personal data for this purpose is based on the contract concluded between you and 7Crai, as defined in the Terms and Conditions. Providing your personal data is necessary for performance of this contract. Refusal to provide the data may make it impossible to carry out the contractual relationship between you and 7Crai.
to comply with the legal obligations applicable to 7Crai in connection with services provided through the website, including tax and archiving obligations;
Legal basis: Processing your data for this purpose is necessary to comply with legal obligations. Providing the data is required. Refusal may prevent 7Crai from complying with its legal obligations and therefore from providing services through the website.
for marketing activities, namely sending commercial communications by remote communication methods (email, SMS) regarding products and services offered by 7Crai through the website;
Legal basis: Processing your data for this purpose is based on your consent, if you choose to provide it.
to carry out analyses and reporting on how the website operates and to create customer preference profiles, mainly to improve the experience offered on the website;
Legal basis: Processing your data for this purpose is based on 7Crai’s legitimate interest in continuously improving the customer experience on the website. Providing your data for this purpose is voluntary. Refusal will not have negative consequences for you as a customer.
to handle complaints and claims, monitor traffic and improve your website experience;
Legal basis: Processing your data for this purpose is based on 7Crai’s legitimate interest in ensuring the proper operation of the website and continuously improving the visitor experience, including by addressing comments, questions or complaints.
You may give your consent to processing for this purpose by selecting the relevant box when creating your account or later in the My Account Information section. To unsubscribe from such commercial communications, you may use the option at the end of each commercial email/SMS. You may also unsubscribe through the My Account Information section.
Duration of processing and data storage
7Crai will process your personal data for as long as necessary to fulfil the purposes described above, but no longer than 10 years. Once the data is no longer required for those purposes, it will be destroyed or transferred to another personal-data controller, provided it is processed within limits and for purposes similar to those originally agreed, or anonymised and retained exclusively for statistical or research purposes.
If you are a customer and choose to delete your user account by using the Delete Account button in the My Account Information section, 7Crai will interpret this action as your decision to unsubscribe from commercial communications about products and services offered through the website. If you delete your account, we will no longer send you this type of email and/or SMS. However, deleting the account does not automatically delete your personal data. If you no longer want your personal data to be processed or wish to have it deleted, you may exercise the rights described below in the Your Rights section. If you request account deletion while at least one active order exists, the deletion request may be registered only after delivery and completion of the last active order.
If you withdraw consent to processing for marketing purposes, 7Crai will stop processing your personal data for that purpose, without affecting processing already carried out on the basis of consent you gave before withdrawal.
Disclosure of personal data
To fulfil the processing purposes, 7Crai may disclose your data to partners, third parties or entities that support 7Crai in operating through the website (for example courier companies or IT service providers), or to central/local public authorities, including in the following cases:
for website administration;
where such disclosure is necessary to award prizes or other benefits to data subjects as a result of participation in promotional campaigns organised by 7Crai through the website;
to maintain, personalise and improve the website and the services provided through it;
to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users;
to send commercial marketing communications under the conditions and within the limits provided by law;
when disclosure of personal data is required by law.
Your rights
Under personal-data protection legislation, as a data subject you have the following rights:
RIGHT TO BE INFORMED
Once you have consented and become a data subject, you have the right to be informed about what happens to your personal data, how it is used, to access and amend it and to withdraw consent in relation to a particular organisation. You also have the right to access your personal data whenever you wish.
RIGHT OF ACCESS
Under this right, you may request information about all aspects concerning your personal data collected by the controller, including whether it is processed, its source, who processes it, for what purpose, for how long and where it is stored. You may also request a copy of the personal information that has been processed.
RIGHT TO RECTIFICATION
You may request correction or amendment of your personal data processed by the controller after the controller has verified your identity through its internal procedures.
RIGHT TO BE FORGOTTEN (RIGHT TO ERASURE)
Another important right is the right to erasure, or to be forgotten. The general principle is that a person may request deletion of personal data. This right is not absolute, meaning there are circumstances in which data will not be deleted at the data subject’s request. For example, if personal data is used to comply with a legal obligation, protect public health, or for scientific research, a request for erasure may be refused.
RIGHT TO RESTRICT PROCESSING
Under the GDPR, a person has the right to restrict processing of personal data in certain circumstances. For example, a data subject may restrict processing when they believe the data is inaccurate, until its accuracy is verified. Processing may also be restricted when the data subject objects to processing.
DATA PORTABILITY
You also have the right to data portability. In the absence of other contractual conditions, which should be communicated before you consent to processing, you may move your data from one provider to another easily and quickly.
RIGHT TO OBJECT
This right includes the right to object to processing and the right to object to automated decision-making and profiling.
RIGHTS RELATED TO AUTOMATED DECISION-MAKING AND PROFILING
This right is intended to protect individuals from certain potentially negative decisions made without human intervention. The GDPR defines profiling as any automated processing used to evaluate certain personal aspects of an individual, such as work performance, health, personal preferences, economic situation, location and others. If an organisation uses profiling, it must implement safeguards, for example appropriate mathematical or statistical procedures, security of personal data and measures that allow inaccuracies to be corrected with minimal risk of error. Automated decision-making should never be applied to a child.
RIGHT TO WITHDRAW CONSENT
You may withdraw consent at any time through an expression of intent equivalent to the one by which you gave it, and we will respect that withdrawal.
When you exercise any of these rights, provided there are no legal impediments, we will comply with the GDPR, carry out the requested actions and inform the data subject about the steps taken.
Legal basis for processing
Article 6(1)(a) of the GDPR is the legal basis for processing operations for which you give us consent for a specific purpose.
Where processing of personal data is necessary for performance of a contract to which the data subject is a party, for example where processing is required to supply goods or services, processing is based on Article 6(1)(b) of the GDPR. The same applies to processing necessary to take pre-contractual steps, for example when preparing offers.
Where our company is subject to a legal obligation requiring the processing of personal data, such as tax obligations, processing is based on Article 6(1)(c) of the GDPR.
In rare cases, processing personal data may be necessary to protect the vital interests of the data subject or another natural person. This could apply, for example, if a visitor were injured at our premises and their name, age, health-insurance details or other vital information had to be provided to a doctor, hospital or another third party. In such a case, processing would be based on Article 6(1)(d) of the GDPR.
Finally, processing operations may be based on Article 6(1)(f) of the GDPR where none of the grounds above applies and processing is necessary for the legitimate interests pursued by our company or by a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data. Such processing is expressly permitted under European legislation, which recognises that a legitimate interest may exist where the data subject is a customer of the controller (Recital 47 of the GDPR).
Cookies
Our web pages use cookies. Cookies are text files stored on an information system through an internet browser. Many websites and servers use cookies. Many cookies contain a so-called cookie ID, a unique identifier made up of a string of characters that allows web pages and servers to associate the cookie with the browser in which it was stored. This enables visited websites and servers to distinguish an individual browser from other browsers containing different cookies. A specific internet browser can be recognised and identified using the unique cookie ID.
By using cookies, we can provide users of this website with more user-friendly services that would not be possible without cookies.
Cookies can be used to optimise information and offers on our website for the user. As noted above, cookies allow us to recognise website users, making the website easier to use. For example, a user does not need to enter login details each time the site is accessed if those details have already been recorded and the cookie is stored on the user’s system. Another example is a shopping-cart cookie in an online store, which remembers items placed in the virtual cart.
The data subject may prevent cookies from being set by our website at any time through the appropriate browser settings. Cookies already stored can also be deleted at any time in all common internet browsers. If the data subject disables cookies in the browser used, some website functions may not be fully available. For more information, please consult the website’s Cookie Policy.
Third-party websites
Our website includes hyperlinks to and information about third-party websites. We have no control over and are not responsible for the privacy policies and practices of third parties.
Changes
We reserve the right to update this policy from time to time by publishing a new version on our website. You should check this page periodically to ensure that you understand any changes. We may notify you of changes by email or through a private messaging system on our website.
Updating information
Please let us know if the personal information we hold about you needs to be corrected or updated.