PERSONAL DATA PROCESSING POLICY
Our privacy and personal data processing policy describes the personal information we collect from you or that you provide on www.bolognaservice.ro (“our Website”) and how this information may be used or disclosed by us.
The controller of your personal data:
The controller in relation to your personal data is BOLOGNA SERVICE SRL, headquartered at Garofitelor Street no. 2, bl. P4, ap. 6, Otopeni, Ilfov County, registered at the Trade Registry under no. J23/2130/2002, VAT no. RO14651343, represented by its legal representative Mrs. Roxana Prini – administrator, www.bolognaservice.ro, within which a DPO (Data Protection Officer) has been appointed, Mrs. Roxana Prini, with the following contact details:
Phone: 0744.666.344, Email: roxana.prini@bolognaservice.ro.
Below, we inform you about the methods and purposes for which we collect your data, in what situations we transfer it, as well as the rights and options available to you in this regard. At the same time, we detail how we process personal data in managing our relationship with clients, most often to keep you updated with the latest developments or events in your area of interest.
The personal data we process may include:
- Contact information, such as your name, personal identification number, job title, postal address, business address, phone number, mobile phone number, fax number, and email address, as well as records and copies of correspondence (including emails) when you contact us and access online the product purchasing services offered by our Website, including courier services for delivering ordered products;
- Additional information processed in the context of a contractual relationship with our company or voluntarily communicated by you, such as payments made, information regarding your need for a particular category of products/services;
- Details of your visits to our offices or headquarters, or any other details regarding how you interact with us;
- Information we collect when you browse our Website, including IP addresses, cookies or similar technologies, detailed below.
Legal grounds for processing personal data:
Any processing operation of your personal data will be performed on the basis of one of the following legal grounds:
- Processing is necessary for entering into or performing a contract to which you are a party;
- Processing is necessary for the controller to comply with a legal obligation;
- Processing is carried out on the basis of your consent;
- Processing is necessary to protect your vital interests or those of another individual;
- Processing is necessary for the legitimate interests of Bologna Service SRL or a third party, except where your fundamental rights and freedoms prevail over these interests.
Usage details
Usage details and IP addresses. We may collect statistical information about the equipment, actions, and browsing patterns of users on our Website. This information results from your visit and navigation on the Website. The information may include, for example:
- traffic data, log data, and other communication data;
- information regarding the resources you access;
- information regarding your computer and internet connection (including your IP address, operating system, and browser type), for system administration purposes;
Cookies. We may obtain information regarding your general internet usage by using cookies. A cookie is a small file stored on your computer’s hard drive. Using cookies helps us improve our Website and provide a better and more personalized service, allowing us to:
- estimate audience size and usage patterns;
- store information regarding your preferences, allowing us to customize our Website according to your individual interests;
- recognize you when you return to our Website.
You may refuse to accept cookies by activating the appropriate setting in your browser. If you have not adjusted your browser settings to refuse cookies, your system will continue to accept cookies when directed to our Website.
Purpose of using the information
The information we collect about you or that you provide to us, including personal data, is used for the following purposes:
- to respond to your requests regarding our services and products;
- to analyze and improve our services and communications to you, including (as we have a legitimate interest to continuously improve our services) conducting customer surveys regarding satisfaction with our services;
- to manage and administer the contractual relationship with all our clients;
- to present our Website and its content in an adequate and efficient manner for you and your computer, in order to optimize our collaboration;
- to provide additional information you request;
- to inform you about our new products or changes to them, including direct marketing or promotional events, once we have your consent;
- to ensure the security and improvement of our Website;
- for any purpose related and/or auxiliary to the above, or any other purpose for which your personal data has been provided, in accordance with applicable legislation.
Disclosure and transfer of your information
Our company may disclose personal information obtained from you to third parties only to comply with a final court judgment or similar legal obligation, or as part of an exchange of information for protection against fraud, to defend our rights or property.
In exceptional cases, we may transfer your personal data to countries within the European Economic Area or countries recognized by the European Commission as providing an adequate level of data protection, if such transfer is necessary for processing according to the purposes described above.
Your rights regarding the processing of personal data include:
• The right of access — the right to obtain confirmation from us as to whether we process your personal data and, if so, access to that data and information on how it is processed. The information will be provided in writing or by other means, including electronically when appropriate. It may also be provided verbally. The request may be submitted free of charge once per year. The information will be provided without undue delay but no later than one month after receipt of the request. This period may be extended by two months where necessary, considering the complexity and number of requests. You will be informed of any such extension within one month of receiving your request.
• The right to rectification — the correction of inaccurate personal data without undue delay. Any rectification will be communicated to each recipient to whom the data has been disclosed unless this proves impossible or involves disproportionate effort.
• The right to object — the right to object to the processing of your personal data, subject to our legal obligations.
• The right to restrict processing — this may be exercised when you contest the accuracy of the data (for the period needed to verify accuracy), when processing is unlawful but you oppose deletion, when we no longer need the data but you request it for legal claims, or when you have objected to processing pending verification of whether our legitimate grounds override yours.
• The right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• The right to erasure (“right to be forgotten”) — the right to request that your personal data be erased without undue delay, including when: the contractual relationship no longer exists, the data is no longer needed for its initial purpose, you withdraw consent, you object to processing and no overriding legitimate grounds exist, data has been unlawfully processed, or data must be erased to comply with a legal obligation.
You may withdraw your consent for marketing communications at any time by clicking the “unsubscribe” link at the bottom of each email.
To comply with legal confidentiality and security obligations, we may need to verify your identity when you exercise any of your rights as a data subject.
Complaints regarding violation of your rights
To exercise these rights, you may submit a signed and dated request to the following email address: DPO email address.
If you have any concerns regarding a potential violation of your personal data rights, you may submit a complaint to the email address above. We will review any requests or complaints and provide a response within a reasonable period, in accordance with the law. If you are not satisfied with our response or believe the processing is unlawful, you may lodge a complaint with the Romanian Data Protection Authority: National Supervisory Authority for Personal Data Processing – located at Bd. Gheorghe Magheru nr. 28-30, Bucharest.
Data storage period
We will retain your personal data for the time necessary to fulfill the purposes indicated above or for the duration of our contractual relationship. Processing will cease when the data is no longer needed or when you withdraw consent (if applicable) and no other legal grounds for processing exist.
Updates to our Privacy Policy
We state that our policy is to publish on the Website any changes made to this section, as required by law or as needed based on context. If changes are substantial, a new consent may be required from you, which we will explicitly request before applying the updates.