Privacy Policy

Privacy Policy of Mivarom Implex Online Store (https://www.mivarom.de/)

General Information

This document constitutes the privacy policy ("Privacy Policy") of the website available at: https://www.mivarom.de/ ("Website").

All terms used in the content of this Privacy Policy should be understood according to their definitions contained in the "Regulations of the Mivarom Impex online store" ("Regulations").

The Privacy Policy governs information about the principles of processing personal data of Website Users and Buyers of Goods, and contains information about cookies used by the Website.

Each User wishing to create an Account on the Website and wishing to use the functionalities offered within the Website will be asked to provide their personal data.

Providing personal data by the User/Buyer is voluntary but necessary to use the Online Store, which requires having an Account.

Personal Data Administrator

The administrator of Personal Data processed through the Website is "Mivarom Impex" with its registered office in Alexandria (correspondence address: Sat Nou 12, 147281 Calomfiresti, email address: office@mivarom.ro)

The Personal Data Administrator declares that it complies with all required principles of personal data protection of Website Users and Buyers, as provided, among others, in the Act of 10 May 2018 on personal data protection (consolidated text: Journal of Laws 2019, item 1781) and in the GDPR Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC; Official Journal of the EU L 119).

Processing of Personal Data

The Administrator processes personal data:

Users for the purpose of:

related to the functioning of the Website;

providing access to the Account;

marketing purposes;

contacting Users;

consideration of complaints,

such as: first name, last name, company name, address, company address (street, number, postal code, city), tax identification number, PESEL number, email address, telephone, date of Account registration, IP address, bank account number, and other data voluntarily provided by Users through the Website, email, or by phone.

Buyers for the purpose of:

related to the functioning of the Website;

providing access to the Account;

using the Online Store;

payment processing for purchases in the Online Store;

marketing purposes;

issuing VAT invoices;

contacting the Buyer;

consideration of complaints;

such as: first name, last name, company name, address, company address (street, number, postal code, city), tax identification number, PESEL number, email address, telephone, date of Account registration, IP address, bank account number, and other data voluntarily provided by Buyers through the Website, email, or by phone.

Consent to the Processing of Personal Data

Consent to the processing of personal data, in accordance with the principles set out in this Privacy Policy, may be given by checking the checkbox on the Registration form:

"I consent to the processing of personal data" and

"I consent to the processing of personal data for marketing purposes".

Expressing consent to the processing of personal data for marketing purposes means explicit consent to the processing of data along with simple profiling.

The Administrator profiles personal data for the purpose of analyzing the needs and preferences of Users/Buyers and then adjusts marketing information about selected services based on that. Profiling is done solely on the basis of data provided by the individual and does not combine information obtained from different sources.

Users/Buyers may object at any time to further processing of their data for marketing purposes. To withdraw consent, please send a relevant statement to the email address: office@mivarom.ro.

Legal Basis for Processing Personal Data

The legal basis for processing by the Personal Data Administrator is as follows:

art. 6 para. 1 lit. a GDPR, which allows processing personal data based on voluntarily given consent;

art. 6 para. 1 lit. b GDPR and art. 6 para. 1 lit. f GDPR, if personal data is necessary for the performance of a Sales Agreement/service provision agreement by electronic means or for taking actions leading to the conclusion of a Sales Agreement/service provision agreement, and when personal data is necessary for purposes arising from the legally justified interests of the Administrator;

art. 6 para. 1 lit. c GDPR, which allows processing personal data if such processing is necessary to fulfill the legal obligations of the Personal Data Administrator.

Commissioning of Personal Data Processing

Personal data collected by the Administrator may be made available to:

external service providers, including payment service providers or accountants;

the Administrator's business partners;

public or private entities at their request and on the basis of universally applicable legal regulations;

other persons and entities with the prior written consent of the individual to whom the data pertains.

The Personal Data Administrator ensures appropriate technical and organizational measures to guarantee the security of collected personal data, preventing access to Users'/Buyers' data by third parties or their processing in violation of legal regulations.

Withdrawal of Consent

The User/Buyer may withdraw consent to the processing of their personal data at any time.

Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.

To withdraw consent, please send a relevant statement to the email address: office@mivarom.ro.

Rights of Users and Buyers

The individual whose data is concerned is entitled to request:

access to data and receipt of a copy thereof (Art. 15 GDPR);

correction (amendment) of data (Art. 16 GDPR);

deletion of data (Art. 17 GDPR);

restriction of data processing (Art. 18 GDPR);

data portability (Art. 20 GDPR);

objection to data processing (Art. 21 GDPR).

To exercise the rights specified in para. 1, the individual whose data is concerned should contact the Personal Data Administrator at the email address: office@mivarom.ro.

Duration of Personal Data Storage

The Personal Data Administrator stores personal data for as long as necessary to achieve the purposes for which they were collected and as long as there is a legal basis for it.

Personal data will be stored as follows:

for a period of 3 (three) years - in relation to personal data of a legal entity (within the meaning of Art. 43 para. 1 of the Civil Code of 23 April 1964), related to the conclusion and performance of the Sales Agreement, as well as for the purpose of determining, investigating, or defending claims;

for a period of 6 (six) years - in relation to personal data of a natural person who is not considered an entrepreneur, related to the conclusion and performance of the Sales Agreement, for the purpose of determining, investigating, or defending claims;

for a period of 1 (one) year - in relation to personal data collected when registering the User's account, and at the same time, no Sales Agreement was concluded;

for a period of 5 (five) years - in relation to personal data related to the fulfillment of tax obligations.

Data processed based on marketing consent is deleted immediately after objection to the processing of personal data for marketing purposes is lodged.

Cookies

The Website uses cookies. Cookies are small files stored on the electronic device memory to enable Users/Buyers to use all Website functionalities.

The entity placing cookies on the User's/Buyer's terminal device and accessing them is the Administrator.

The User's/Buyer's web browser defaults to allow the use of cookies on their device, so when visiting the Website for the first time, consent to the use of cookies should be given.

The User/Buyer can manage cookies independently, including deleting and blocking these files at any time.

To reject cookies, select the option to reject them in your browser. Please note that choosing this option may cause some Website functions to not work properly.

The User/Buyer can customize their cookie settings in the browser. Failure to change these settings implies acceptance of the cookies used.

Changes to cookie file settings that limit their use may affect some functionalities available on the Website, such as longer loading times.

Cookies can be permanent or session cookies:

permanent cookies will be stored by the web browser and will remain valid until the expiration date;

session cookies expire at the end of the User's/Buyer's session when the web browser is closed.

Cookies used on the Website may contain personal data in the form of an IP address, which the Administrator does not store.

Cookies are used for the following purposes:

session maintenance,

remembering session information,

providing Website functionality,

customizing Website content to the User's/Buyer's preferences and optimizing Website usage,

Administrator's marketing.

Final Provisions

This Privacy Policy is intended solely for use by Data Subjects in connection with the protection of personal data. The use of the Privacy Policy by other entities is prohibited.

In areas not covered by the Privacy Policy, universally applicable provisions on personal data protection apply.

The Privacy Policy may be supplemented or updated as needed by the Administrator, especially to provide current and reliable information to Website Users or Buyers.

All changes to the Privacy Policy will be posted on the Website.

Each User and Buyer should ensure the security of their own data and the security of their electronic devices used for Internet access. The electronic device should have antivirus software, a secure version of the Internet browser used, and a firewall enabled. The User/Buyer should ensure that the operating system and programs installed on their electronic device are always up to date.

Buyers or Website Users can access this Privacy Policy at any time through the Website and download and print it, but commercial use of the Policy is subject to company protection.

This Privacy Policy comes into force on 31.03.2024.