DOMENIILE LA MIGDALI SRL
Data on the personal data controller
The controller who processes personal data through www.lamigdali.ro is the company DOMENIILE LA MIGDALI SRL (hereinafter referred to as "LA MIGDALI"), the legal person organized in accordance with the applicable legislation, having its seat in Sat Valea Scheilor, no. 83, Corp C7, Comuna Calugareni, Prahova County, registered with the Trade Registry Office under no. J29/657/2017, CUI 37313180.
The operator LA MIGDALI SRL can be contacted at the premises with the above mentioned identification data, e-mail: email@example.com, including for aspects related to the protection of personal data related to the site.
The controller shall make every effort to ensure the protection and confidentiality of the data subject's personal data by taking the necessary measures provided for by the legislation in force on the protection of personal data, including the measures provided for by the General Data Protection Regulation 2016/679 ("GDPR") and Law 190/2018 implementing the General Regulation on Data Protection and Good Practices in Data Processing.
Under the Regulation, LA MIGDALI is a personal data controller and the user/client is the data subject.
This section is intended to inform the data person about the categories of personal data that LA MIGDALI, as the controller, collects about the person concerned, when he interacts with the www.lamigdali.ro website.
The information entered in the databases at LA MIGDALI is used only for specific, explicit and legitimate purposes, being organized separately from any other business directions of the company DOMENIILE LA MIGDALI SRL. In the processing of personal data, the controller will act legally, fairly and transparently. The processing of the data is appropriate and limited, only in relation to the need to achieve the purpose for which they were collected. Personal data will be retained for the period necessary to fulfill the purposes for which they are collected, and processing will be carried out in an appropriate manner to ensure the security and integrity of the data. No data transfer will be carried out without appropriate precautions, in accordance with applicable legislation on the protection of personal data;
Personal data processed by the controller
LA MIGDALI collects, on the basis of the voluntary provision of the data subject, personal data and the types of data collected depend on the nature of how the site visitor wishes to interact with the site www.lamigdali.ro.
Thus, for the completion of the Contact Form, the name and/or first name, e-mail address and telephone number are collected as personal data.
When the user becomes a customer, by placing an order, the personal data necessary for payment and delivery of the order, i.e. name and surname, address, telephone and e-mail address, together with bank account data (IBAN and unique password automatically generated to payment by the payment operator).
Data provided voluntarily by the person interested in LA MIGDALI products, as presented in the section "Our wines" (in Romanian: "Vinurile noastre"), for clarifications on the Terms and Conditions or on any other aspects related to the interaction withthe www.lamigdali.ro website are used for contacting by e-mail or, as the case may be, telephone of the data subject, regarding the request inserted in the section "Message" of the Contact Form.
Processing of Data Operator (legal purposes and grounds)
LA MIGDALI processes the personal data provided through www.lamigdali.ro for the following legal purposes and bases:
► Based on the consent of the visitor of the site, to contact him, to provide information on the products LA MIGDALI or the services offered, at his voluntary request (e.g. by filling in the Contact Form);
► Based on the contractual relationship in order to comply with the obligations assumed by the operator:
► In legitimate interest, personal data collected involuntarily, for the operation of the site.
In the processing of personal data, LA MIGDALI SRL will act legally, fairly and transparently, respecting all the principles imposed by the legislation in force. Data processing is carried out for specific, explicit and legitimate purposes. The processing of the data is appropriate and limited, only in relation to the need to achieve the purpose for which they were collected. Personal data will only be retained for the period necessary to fulfill the purposes for which they are processed, and processing will be carried out in an appropriate manner to ensure data security and integrity. No data transfer will be carried out without appropriate precautions.
In order to ensure the legality of the processing of personal data, LA MIGDALI assumes responsibility for implementing appropriate technical and organizational measures to protect against unauthorized access, use, alteration or destruction of personal data in accordance with international and national legal provisions on the protection of personal data.
LA MIGDALI will not disclose the personal data collected through the www.lamigdali.ro website, except for authorized employees or authorized persons who are required to process it on behalf of LA MIGDALI (website service provider, hosting provider and domain registration) or where the disclosure obligation is a legal obligation of the LA MIGDALI or its employees.
Personal data are processed within the European Union. They are retained for a period appropriate to the purpose for which they were processed, this cannot exceed 10 years from the time of collection (maximum retention period will be considered for financial-accounting documents for which the operator has a legal obligation to apply this retention period). The usual data processing for which there is no retention period required by law, will refer to the general prescription period, as the maximum duration of storage in databases belonging to the operator.
With regard to consent-based processing, the data will be retained until the consent is withdrawn.
Any visitor to the site has, as the person concerned, the following rights in relation to the personal data controller:
The right of access means the right of the data subject to obtain confirmation from LA MIGDALI that personal data concerning the person concerned is processed or not and, if so, the right to obtain access to that data and information on how the data are processed.
The right to data portability refers to the right to receive personal data in a structured, commonly used and readable format and the right for such data to be transmitted directly to another controller, but only if this is technically feasible.
The right to object shall apply to the right of the user of the website or the client to object to the processing of personal data when processing is necessary for the performance of a task which serves a public interest or when it takes into account a legitimate interest of the controller. Where the processing of personal data is aimed at direct marketing, the person concerned has the right to object to the processing at any time, but not in the context of the processing of personal data carried out by LA MIGDALI.
The right to rectification refers to the correction, without undue delay, of inaccurate personal data. The correction shall be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate efforts by LA MIGDALI.
The right to erasure of data ("right to be forgotten") means the right of the data subject to request that personal data be deleted without undue delay if one of the following reasons applies: they are no longer necessary for the purposes for which they were collected or processed; the person in question decides to withdraw his consent and there is no other legal basis for processing; the person in question opposes processing and there are no legitimate reasons to prevail; personal data have been illegally processed; personal data must be deleted for compliance with a legal obligation; personal data have been collected in connection with the provision of information society services.
The right to restriction of processing may be exercised if the accuracy of the data processed by LA MIGDALI is disputed, for a period which allows verification of the correctness of the data; processing is illegal, and the person in question opposes the deletion of personal data, instead requesting the restriction; if LA MIGDALI no longer needs personal data for the purpose of processing, but the person in question requests them for the finding, exercise or defence of a right in court; if the person has opposed the processing for the period during which it is verified that the legitimate rights of LA MIGDALI prevail over those belonging to the data subject.
Right to file a complaint with the National Supervisory Authority for personal data processing (A.N.S.P.D.C.P).. In the event that the rights provided for in Regulation No. 679/2016 are considered to have been infringed, any person concerned has the possibility to address the A.N.S.P.D.C.P.
The contact details of A.N.S.P.D.C.P. are as follows: Bucharest, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336; Phone: +40.318.059.211/+40.318.059.212; Fax: +40.318.059.602; E-mail: firstname.lastname@example.org; Website: www.dataprotection.ro.
Persons who submit such requests to the operator are asked to mention in the subject of the e-mail/correspondence envelope information such as " data protection", in this way there is a guarantee that the requests will be treated as a priority.
The person concerned will receive a reply within 30 days of the communication of the document to the Operator, an extension of this period can only operate in exceptional situations. In these cases, the person concerned will be duly informed of this period.
In the event that the rights provided for in Regulation No 1 of the European Parliament and of the Council of 17 May 1999 on the common organization of the 679/2016 have been violated, any person concerned has the possibility to apply to the National Authority for the Supervision of Personal Data Processing (A.N.S.P.D.C.P.) by filing a complaint. At the same time, the person concerned has the right to apply to the competent courts.
If a change in these privacy rules is required, LA MIGDALI will publish these changes to ensure accurate and complete information on the data collected and how they are used.
2020 Copyright DOMENIILE LA MIGDALI SRL