Privacy policy

PRIVACY POLICY AND PROTECTION OF PERSONAL DATA

Thank you for accessing the online platform belonging to Holiv Ecoplant SRL represented by the website www.allu.ro.

We are very pleased with the interest shown in the services and products offered by our company. Data protection is a particularly important priority for the management of Holiv Ecoplant SRL solutions. The use of the Internet pages of the Holiv Ecoplant SRL websites is possible without indicating personal data; however, if a data subject wishes to use special services through our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

INTRODUCTION

The processing of personal data such as the name, address, e-mail address or telephone number of a data subject must always be in accordance with the General Data Protection Regulation (GDPR) and in accordance with the protection of specific data of each country for the regulations applicable to Holiv Ecoplant SRL solutions Through this data protection statement, our company wishes to inform the general public about the nature and purpose of the personal data that we collect, use and process. Furthermore, data subjects are informed, through this data protection statement, of their rights.

As an operator, Holiv Ecoplant SRL has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, data transmissions over the Internet may, in principle, have security gaps, so absolute protection may not be guaranteed. For this reason, each data subject is free to transfer personal data to us by alternative means, for example by telephone.

DEFINITIONS

The statement regarding the data protection of Holiv Ecoplant SRL solutions is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection statement must be readable and easy to understand for the general public as well as for our customers and business partners. To ensure this, we would first like to explain the terminology used.

In this data protection statement, we use, among others, the following terms:

1. a) Personal data - Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more physically specific factors, physiological, genetic, mental, economic, cultural or social of that natural person.
2. b) Data subject - Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
3. c) Processing - Processing is any operation or set of operations that is performed on personal data or on sets of personal data, regardless of whether or not they are by automatic means, such as collection, registration, organization, structuring, storage, adaptation or modification , retrieval, consultation, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
4. d) Restriction of processing - Restriction of processing is the marking of personal data stored in order to limit their processing in the future.
5. e) Profiling - Profiling means any form of automatic processing of personal data that consists in the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects of the natural person's performance at the site work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
6. f) Pseudonymization - Pseudonymization is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures to ensure that personal data are not attributed to an identified or identifiable natural person.
7. g) Controller or controller responsible for processing - The controller or controller responsible for processing is the natural or legal person, public authority, agency or other body that, alone or together with others, determines the purposes and means of personal data processing; if the purposes and means of such processing are established by the legislation of the Union or the Member State, the operator or the specific criteria for its appointment may be provided by the legislation of the Union or the Member State.
8. h) Processor - The processor is a natural or legal person, a public authority, an agency or another body that processes personal data on behalf of the operator.
9. i) Beneficiary - The Beneficiary is a natural or legal person, a public authority, an agency or another body, to whom the personal data is disclosed, regardless of whether or not it is a third party. However, public authorities that may receive personal data in the context of a specific investigation in accordance with Union or Member State law are not considered recipients; the processing of this data by the respective public authorities must be in accordance with the applicable data protection rules in accordance with the purposes of the processing.
10. j) Third party - Third party is a natural or legal person, a public authority, an agency or a body other than the data subject, controller, processor and persons who, under the direct authority of the operator or the operator, are authorized to process personal data .
11. k) Consent - The data subject's consent is any specific, informed and unambiguous indication of the data subject's wishes by which he or she, through a statement or through a clear affirmative action, agrees to the processing of personal data that i look

DATA PROTECTION

We appreciate the interest in our company. The protection of the personal data you entrust to us is a priority for us and we want you to feel safe and secure when you visit our website or use our online offers.

It is important to us that you are fully informed about the personal data we collect when you use our online offers and services and that you are familiar with how we use them.

THE PRINCIPLES AND RIGHTS OF THE PERSONS CONCERNED

• Control : You're in control of your privacy with easy-to-use tools and clear options.
• Transparency : We're transparent about data collection and use, so you can make informed decisions.
• Security : We protect the data you provide us with strong security and encryption features.
• Strong legal protection : We respect local privacy laws and fight for legal protection of your privacy as a fundamental human right.
• No content-based targeting : We don't use your email, chat, files, or other personal content to deliver ads to you.
• Benefits for you : When we collect data, we use it to help you and provide you with better experiences.

These principles are at the foundation of the privacy approach at Holiv Ecoplant SRL and will continue to guide the way we develop our products and services.

According to the legislative provisions imposed by the European Union through the General Regulation for the Protection of Personal Data no. 679/2016, completed with the Romanian legislation in force, Holiv Ecoplant SRL assumes the legislative provisions and undertakes to manage in safe conditions and only for the stated purposes, the personal data provided by you through forms, e-mails or our web applications.

RIGHT OF CONFIRMATION

Each data subject has the right granted by the European legislator to obtain from the operator a confirmation of whether or not the personal data concerning him or her are being processed. If a data subject wishes to make use of this right of confirmation, he or she may, at any time, contact any employee of the operator.

RIGHT OF ACCESS

Upon request, you have the right to obtain information from us about the personal data relating to you and processed by us, to the extent defined in art. 15 GDPR. You can send your request either by post or email to the addresses below.

Each data subject has the right granted by the European legislator to obtain from the operator free information about his personal data stored at any time and a copy of this information. In addition, European directives and regulations grant data subjects access to the following information:

• the purpose of the processing;
• the categories of personal data concerned;
• recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients from third countries or international organizations;
• if possible, the expected period for which the personal data will be stored or, if not possible, the criteria used to establish this period;
• the existence of the right to request the rectification or deletion of personal data from the operator or to restrict the processing of personal data relating to the person concerned or to oppose such processing;
• the existence of the right to file a complaint with a supervisory authority;
• if the personal data is not collected from the data subject, any available information about its source;
• the existence of an automated decision-making process, including profiling, referred to in Article 22 paragraphs (1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the meaning and consequences envisaged such processing for the data subject.

In addition, the data subject has the right to obtain information regarding the transfer of personal data to a third country or to an international organization. In this case, the data subject has the right to be informed about the appropriate guarantees regarding the transfer.

If a data subject wishes to avail himself of this right of access, at any time, contact any employee of the operator.

THE RIGHT TO RECTIFICATION

You have the right to ask us to rectify any inaccurate personal data about you without delay (Article 16 GDPR). For this purpose, please contact us at office@allu.ro .

Each data subject has the right granted by the European legislator to obtain from the operator, without undue delay, the rectification of inaccurate personal data concerning him. Taking into account the purposes of the processing, the data subject has the right to complete incomplete personal data, including by providing an additional statement.

If a data subject wishes to exercise this right to rectification, he may at any time contact any employee of the operator.

THE RIGHT TO ERASURE (THE RIGHT TO BE FORGOTTEN)

If the legal grounds defined in art. 17 GDPR applies, you have the right to the immediate deletion ("right to be forgotten") of personal data concerning you. These legal reasons include: the personal data are no longer necessary for the purposes for which they were processed or you withdraw your consent and there are no other legal reasons for processing; the data subject objects to the processing (and there are no valid reasons for the processing - it does not apply to objections to direct advertising). To assert your right above, please contact the contact address given below.

Each data subject has the right granted by the European legislator to obtain from the operator the deletion of personal data concerning him without undue delay, and the operator has the obligation to delete personal data without delay if one of the following reasons applies apply, as long as processing is not necessary:

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• The data subject withdraws the consent on which the processing is based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR and if there is no other legal reason for the processing.
• The data subject objects to the processing in accordance with Article 21(1) of the GDPR and there are no overriding legal grounds for processing or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
• Personal data has been processed illegally.
• Personal data must be deleted to comply with a legal obligation in the legislation of the Union or the Member State to which the controller is subject.
• The personal data were collected in connection with the offer of information society services referred to in Article 8 paragraph (1) of the GDPR.

RIGHT TO RESTRICTION OF PROCESSING

If the criteria defined in art. 18 GDPR are met, you have the right to the restriction of processing as set out in the above article of the GDPR. In accordance with this article, the restriction of processing can be requested, especially if the processing is illegal, and the data subject opposes the deletion of personal data and instead requests the restriction of their use, or if the data subject has opted for processing in accordance with art. 21 (1) GDPR as long as it is not clear whether our legitimate interest is superior to the interest of the data subject. To assert your right above, please contact the contact address specified above.

Each data subject has the right granted by the European legislator to obtain from the operator the restriction of processing if one of the following applies:

• The accuracy of the personal data is contested by the data subject, for a period that allows the controller to verify the accuracy of the personal data.
• The processing is illegal, and the data subject opposes the deletion of personal data and instead requests the limitation of their use.
• The administrator no longer needs the personal data for the purpose of processing, but they are requested by the data subject for the establishment, exercise or defense of legal claims.
• The data subject has objected to the processing, in accordance with Article 21 paragraph (1) of the GDPR, pending the verification of whether the legitimate reasons of the operator are in contradiction with those of the data subject.

THE RIGHT TO DATA TRANSFERABILITY (PORTABILITY)

You have the right to data portability as defined in art. 20 GDPR. This means that you have the right to receive the personal data about you that you have provided to us in a structured, commonly used and machine-readable format and to have the right to transmit this data to another controller, such as another service provider. The precondition is that the data processing is based on consent or a contract and is carried out by automated means.

Each data subject has the right granted by the European legislator to receive the personal data provided to a controller in a structured, commonly used and machine-readable format. He has the right to transmit this data to another controller without being prevented by the operator to whom the personal data were provided, as long as the processing is based on the consent provided for in Article 6 paragraph (1) letter (a) of the GDPR or of Article 9 paragraph (2) letter (a) of the GDPR or of a contract pursuant to Article 6 paragraph (1) letter (b) of the GDPR, and the processing is done by automatic means, as long as the processing is not necessary for the fulfillment a task performed in the public interest or in the exercise of the public authority conferred on the operator.

In addition, in exercising the right to data portability in accordance with Article 20(1) of the GDPR, the data subject has the right to transmit personal data directly from one operator to another, if this is technically feasible and failing to do so adversely affects the rights and freedoms of others.

THE RIGHT TO OBJECT

You have the right to object at any time according to art. 21 GDPR to the processing of personal data concerning you, which is based on Article 6 paragraph (1) letter (e) or (f) GDPR, for reasons related to your particular situation. We will refrain from processing your personal data, unless we can demonstrate legitimate grounds for processing that override your interests, rights and freedoms, or if the processing does not relate to the establishment, exercise or defense of legal claims.

Each data subject has the right granted by the European legislator, at any time, for reasons related to the particular situation, to the processing of personal data concerning him, which is based on letter (e) or (f) ) of article 6 paragraph ( 1) from GDPR. This also applies to profiling based on these provisions.

Personal data will no longer be processed in case of objection, unless we can demonstrate compelling legitimate reasons for the processing that take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

If Holiv Ecoplant SRL solutions process personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him for such marketing. This applies to profiling to the extent that it is linked to such direct marketing. If the data subject objects to Holiv Ecoplant SRL solutions to processing for direct marketing purposes, Holiv Ecoplant SRL will no longer process personal data for these purposes.

In addition, the data subject has the right, for reasons related to the particular situation, to oppose the processing of personal data concerning him by means of Holiv Ecoplant SRL solutions for scientific or historical research purposes or for statistical purposes in accordance with article 89 paragraph (1) of the GDPR, unless the processing is necessary for the performance of a task performed for reasons of public interest.

AUTOMATED INDIVIDUAL DECISION MAKING, INCLUDING PROFILING

Each data subject has the right granted by the European legislator not to be subject to a decision based exclusively on automated processing, including profiling, which produces legal effects that concern him or her in a significant way, as long as the decision (1) does not is necessary for the conclusion or execution of a contract between the data subject and a data controller or (2) is not authorized by the legislation of the Union or the Member State to which the controller is subject and which also provides for the adoption of appropriate measures to protect the rights and the data subject's freedoms and legitimate interests or (3) is not based on the data subject's explicit consent.

If the decision (1) is necessary for the conclusion or execution of a contract between the data subject and a data operator or (2) is based on the explicit consent of the data subject, Holiv Ecoplant SRL solutions implement appropriate measures to protect the rights and freedoms and the legitimate interests of the data subject, at least the right to obtain a human intervention from the operator, to express his point of view and to challenge the decision.

THE RIGHT TO SUBMIT A COMPLAINT TO A SUPERVISORY AUTHORITY

If you believe that the processing of your personal data carried out by us is illegal or inadmissible, you have the right to lodge a complaint with the supervisory authority responsible for us. You can contact this authority at ANSPDCP - National Supervisory Authority for the Processing of Personal Data

PRIVACY STATEMENT

According to the legislative provisions imposed by the European Union through the General Regulation for the Protection of Personal Data no. 679/2016, completed with the Romanian legislation in force, Holiv Ecoplant SRL assumes the legislative provisions and undertakes to manage in safe conditions and only for the stated purposes, the personal data provided by you through forms, e-mails or our web applications.

Holiv Ecoplant SRL has adopted, implemented and developed administrative, physical and technical measures to protect the information stored on this site, but does not accept any responsibility or liability regarding data security.

To protect information and personal data, Holiv Ecoplant SRL uses encryption technologies for certain types of transmissions coordinated through this site. Although we offer these technologies along with other measures to protect confidential information and ensure appropriate security, we do not guarantee that information transmitted over the Internet is secure, or that such transmissions will not be delayed, interrupted, intercepted or error-free, for reasons that I do not belong to Holiv Ecoplant SRL.

THE RIGHTS OF THE PERSONS CONCERNED

According to the legislation in force, you benefit from the right of access, intervention on the data, the right to oppose the processing of the data, the right to withdraw the consent or the data, the right not to be subject to an individual decision. At the same time, you have the right to object to the processing of personal data concerning you and to request the deletion of the data.

We notify you that any person has the right to object, free of charge and without any justification, to the processing of his personal data for direct marketing purposes.

From May 25, 2018, the application of the GDPR strengthens your rights, namely the right to access data (art. 15), the right to rectification (art. 16), the right to be forgotten (art. 17), the right to restrict processing (art. 18), the right to data portability (art. 20), the right to opposition (art. 21), the right not to be subject to an automatic decision (art. 22), the right to compensation (art. 82), the right to submit a complaint (art. 77) in case of violation of the rights of the data subject guaranteed by the GDPR - EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. At the same time, you have the right to object to the processing of your personal data and to request their total or partial deletion.

You are also recognized as having the right to go to court. Your data can only be transferred abroad to the extent that the third parties involved are not from Romania and this is necessary to fulfill the purpose.

All data processed within these activities will be treated with full responsibility regarding the preservation of the rules of confidentiality and safety of personal data.

You will have access to this data at any time and will be able to request the deletion of your records from all study records.

"Personal data" refers to unique individual data, related to name, address, Personal Numeric Code or telephone number. Periodically, we may request personal information through our website in order to be able to send you requested materials, answer your questions or offer you a product/service/etc.

INTENDED USE OF DATA PROCESSING

Our goals are reliability, safety, security and quality, environmental protection and profitability. Whenever Holiv Ecoplant s SRL processes personal data, such processing is carried out for the purposes defined in this data privacy statement.

PERSONAL DATA PROCESSING

By accessing www.allu.ro we record and save the IP address to display the content of the website on your device (e.g. texts, images, videos and files for download, etc.), we process this data to identify and track any abusive use based on the legal basis Art. 6 (1) letter f GDPR. In this context, our legitimate interest in data processing is to ensure the proper functioning of our website and the business transacted through the website.

To the extent that we process your data as described above for the purpose of providing the functions of our website, you are contractually obliged to make this data available to us.

However, of course, your information is part of a larger aggregate. This set of information, on the contrary, can be used to understand our general user base. In addition, we may share this information about our website visitors in the aggregate, not individually, with third parties for various purposes at our discretion.

While we are firm about privacy, there are times when even we may be forced to abandon these ideals. Just as the major search engines face ongoing coercion to provide data against their will, the same can happen to our site. Illegal activity or other serious acts or allegations could create legal liability for our site. In these cases, we reserve the right to share your information, or simply if we are required by law to do so.

On the other hand, there may be times when we need to share your personal information to protect our own interests. For example, in cases of suspected or alleged copyright infringement or other violations of intellectual property rights, it may be necessary to share personal information.

COLLECTION OF DATA AND GENERAL INFORMATION

The website of Holiv Ecoplant SRL collects a series of data and general information when a subject or automated system requests the website. This data and general information is stored in log files on the server and/or in a database used for statistics.

Thus, the information collected may be

1. browser types and versions used,
2. the operating system used by the access system,
3. the website from which an access system reaches our website (so-called referrers)
4. date and time of access to the website,
5. Internet Protocol address (IP address),
6. the Internet service provider of the access system and
7. any other similar data and information that may be used in the event of attacks on our information technology systems.

When using this data and general information, Holiv Ecoplant SRL uses this necessary information to:

1. correctly display the content of our website on your device;
2. optimize the content of our website as well as the advertising that runs on it;
3. ensure the long-term viability of our information technology systems;
4. provide law enforcement authorities with information necessary for criminal prosecution in the event of a cyber attack or attempted fraud or destruction;

Therefore, Holiv Ecoplant SRL statistically analyzes collected data and information anonymously, with the aim of increasing the security and protection of our company's data and ensuring an optimal level of protection of the personal data we process.

COLLECTION OF SENSITIVE PERSONAL DATA

We do not collect sensitive data about you Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data . We do not collect any information about criminal convictions and offences.

CONFIDENTIALITY OF DATA OF CHILDREN/MINORS

The protection of the privacy of the very young is particularly important.

In accordance with our Terms and Conditions and Terms of Use, children under the age of 18 are not permitted to use our site and access our services. We do not intend to offer products or services to minors.

Holiv Ecoplant SRL does not sell products and/or services to be bought by minors. Holiv Ecoplant SRL can sell or collect the value of some products/services intended for minors, but purchased by an adult.

If you are a minor and access the www.allu.ro website, you can only do so if you are under the supervision of a parent or legal guardian.

Therefore, the website www.allu.ro, belonging to Holiv Ecoplant SRL, DOES NOT COLLECT personal data from people under the age of 18.

LEGITIMATE INTERESTS FOR PROCESSING

If the processing of personal data is based on Article 6 paragraph (1) letter (f) GDPR our legitimate interest is to conduct our business in favor of the well-being of all employees, shareholders and customers of Holiv Ecoplant SRLl.

PURPOSE OF COLLECTION AND PROCESSING OF PERSONAL DATA

If we are required to collect personal data by law or under the terms of the contract and you do not provide us with this data when requested, we may not be able to perform the contract (eg to deliver products or services to you). If you do not provide us with the requested data, we may need to cancel an order for a product or service, but if we do, we will notify you at the time.

We specify that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information regarding contractual parties). Sometimes it may be necessary to conclude a contract according to which the data subject provides us with personal data, which must be subsequently processed by us. The data subject is, for example, obliged to provide us with personal data when our company concludes a contract with him. Failure to provide personal data would result in the fact that the contract with the data subject and the services or products ordered could not be concluded they will not be able to be delivered. Before the provision of personal data by the data subject, the data subject may contact a specially designated employee with these duties to clarify to him whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract, if there is a obligation to provide personal data and the consequences of not authorizing the personal data given.

The purpose of collecting personal data by Holiv Ecoplant SRL through the website http://www.allu.ro/ is the one stated in the section where your data is requested and according to the options selected, and by purpose it can be identify one or more of the following situations, depending on the consent you have given:

• to improve the quality of Holiv Ecoplant SRL products and services so as to meet the needs of users and to provide news about the products and services offered;
• to complete the user's request for the processing of a product/service order which may involve delivery, invoicing, issuance of the warranty certificate, online payment processing through online card payment processors;
• to complete the user's request for the processing of a product return , which may involve delivery, invoicing, transfer of the value of the payment made, preparation of the cancellation invoice, provision of collection-payment;
• for sending an informative journal - newsletter and/or possible occasional offers and/or invitations to events organized or in which the company participates;
• for opening a user / member / client account in the web platform;
• concluding the purchase contract for the services / products you have selected for purchase, including validating, processing, shipping and invoicing the orders placed, resolving cancellations, returns, guarantees or problems of any nature related to a placed order or contract;
• conclusion of the loyalty contract for inclusion in the programs intended for customers: loyalty cards for loyalty, gift vouchers or personalized order services, etc.;
• information and notification regarding a request / order placed, favorite products or included in the list of preferences or alerting;
• organizing general marketing or advertising activities , as well as user loyalty activities, as well as conducting surveys;
• conducting market research by tracking and monitoring sales and consumer behavior;
• taking over and solving the requests , questions and complaints addressed;
• making reports and analyzes regarding the economic activity of the company, with the aim of helping in operational management, as well as with the aim of analyzing the degree of performance of the economic activity of the company;
• provision of direct marketing, telemarketing, sms, advertising and publicity services .
• personalizing your experience and delivering the type of content you want from our site
• personalization and presentation of product/service offers in which you are interested;
• improving the site to increase the quality of information, services and products;
• the relationship with the customer for the service in improved conditions and the prompt and to-the-point response to your requests;
• administration of contests , raffles, promotions, surveys or other features of the site;
• fast processing of transactions , orders and requests placed;
• carrying out periodic evaluations and reviews for our services and/or products
• communicating with you through online support systems (chat), e-mail, sms, phone, social platforms, mobile applications;
• archiving documents that are made regarding the relationship between you and the company;
• the resolution of disputes, investigations or any other complaints/petitions to which the company is a party, we specify that the company sometimes uses personal data for a series of secondary purposes (e.g. internal, external audit, archiving, etc.), these being always compatible with the main purposes for which the respective data was initially collected by the company.

We may process your personal data for several legal reasons, depending on the specific purpose for which we use your data. Please send us an e-mail at office@allu.ro if you need details regarding the specific legal basis on which is relied upon to process your personal data where more than one purpose has been detailed in this document.

In this case, to be more specific, we give you an example of some of the types of data collected and the respective legal basis:

1. To register that on a new client

Type of data: identity and contact.

Legal basis: fulfillment of a contract with you

2. To process orders, including

. Delivery of orders

1. Online/offline payment management
2. To collect and recover amounts owed to us.

Type of data: identity, contact, financial, transaction, marketing and communications.

Legal basis:

1. Making a contract with you.
2. To manage our relationship with you, which includes:

. The announcement about the changes made to the terms and conditions of website use, the privacy policy, the cookie policy, etc.

1. For participating in a study / survey
2. To request a review
3. To evaluate your ordering and/or staff experience.

Type of data: identity, profile, contact, marketing and communications.

Legal basis:

1. entering into and performing a contract with you,
2. the need to comply with the legal obligation
3. Legitimate interest in keeping our records and analyzing how customers use our products / services.
4. To enable you to enter a competition, raffle or complete a survey

Type of data: identity, contact, profile, usage, marketing and communications

Legal basis:

1. entering into and performing a contract with you,
2. Legitimate interest in keeping records and analyzing how customers use our products / services, to enable us to develop them and our products and services.
3. To allow you to enroll in the loyalty program

Type of data: identity, contact, profile, usage, marketing and communications

Legal basis:

1. entering into and performing a contract with you,
2. Legitimate interest in keeping records and analyzing how customers use our products / services to enable us to develop them and our products and services
3. To enable you to enable the use and purchase of vouchers

Type of data: identity, contact, profile, usage, marketing and communications

Legal basis:

1. entering into and performing a contract with you,
2. Legitimate interest in keeping records and analyzing how customers use our products / services to enable us to develop them and our products and services
3. To allow you to allow personal measurements to be taken

Type of data: identity, contact, profile, usage, marketing and communications

Legal basis:

1. entering into and performing a contract with you,
2. Legitimate interest in keeping records and analyzing how customers use our products / services to enable us to develop them and our products and services
3. To operate and protect our business and our website (including troubleshooting-development, data analysis, system maintenance, support, testing, reporting and data hosting).

Type of data: identity, contact, technical data

Legal basis:

1. Legitimate business interest, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganization or group restructuring exercise.
2. Necessary to comply with a legal obligation.
3. To provide you with relevant content and advertising and to measure and understand the effectiveness of our advertising

Type of data: identity, contact, profile, usage, marketing and communications, technical

Legal basis:

1. Necessary for our legitimate interests to study how customers use our products / services, to develop them, to develop our business and to develop our marketing strategy.
2. To use data analytics to improve our sites, products/services, marketing and advertising, experience and customer relations

Data type: Usage, technical

Legal basis:

1. Legitimate business interest to define the types of customers for our products and services, to keep the website updated and relevant, to develop our business and marketing strategy.
2. To make suggestions and recommendations about goods or services that may be of interest to you

Type of data: identity, contact, profile, use, technical.

Legal basis:

1. Legitimate business interest, to grow and develop our business.

Holiv Ecoplant SRL processes your personal data, by automated and manual means, intended for the execution of services to customers, the issuance of tax invoices, the collection of any receivables related to them as well as the resolution of your request in relation to the activity carried out by Holiv Ecoplant SRL

Your data are necessary for the execution of services, the issuance of service invoices, the collection of claims related to them as well as the resolution of your requests in connection with the activity carried out by Holiv Ecoplant SRL

According to the legislation in force, you have the right to object and you can unconditionally refuse data processing, but we also point out that your refusal may determine the impossibility of providing the services / products or selected / ordered options.

The registered information is intended for use by Holiv Ecoplant SRL and is communicated only to the following recipients:

• the employees responsible for the website on which you submitted your data by filling in forms, creating a customer account, placing an order or requesting a return;
• employees responsible for processing orders and requests placed;
• to third parties and/or employees responsible for performing direct marketing, advertising or customer relations services;
• to third parties responsible for processing credit cards for payment of card orders;
• internal order processing departments, evaluation of customer behavior, website monitoring, for creating profiles, statistics and analyses;
• carriers for correspondence, communications and delivery of requested orders;
• to third parties involved in the fulfillment of the intended purpose for the persons concerned.

According to the legislation in force, you benefit from the right of access, intervention on the data, the right to oppose data processing, the right to withdraw consent or data (to be forgotten), the right not to be subject to an individual decision. At the same time, you have the right to object to the processing of personal data concerning you and to request the deletion of the data.

OTHER PURPOSES FOR DATA PROCESSING

We also process personal data that you voluntarily provide, e.g. when you make an online inquiry or appointment or when you order informational materials or newsletters. The legal basis in this case is Art. 6 (1) letter b) GDPR. The data processed by us in this context includes customer, employee and supplier data to the extent necessary for the purposes specified in this data privacy statement.

To the extent that we process your data as described above, for the purpose of accepting and processing your inquiry, appointment or (newsletter) order, you are contractually obliged to make this data available to us. We cannot process your request without data.

If you have given your consent to the processing of personal data (see Article 6 (1) letter GDPR), you can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of your consent-based processing until the time of consent withdrawal.

CHANGE OF THE PURPOSE OF DATA PROCESSING

We will only use your personal data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another purpose and that that purpose is compatible with the original purpose.

If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and explain the legal basis for the processing.

We may retrieve your personal data without your knowledge or consent only when this is strictly necessary or permitted by law.

ACCESS TO COLLECTED INFORMATION, DATA DISCLOSURE

As an exception to the cases presented, Holiv Ecoplant SRL does not disclose any personally identifiable information about its users to third parties without first receiving the users' express consent in this regard.

At the same time, however, Holiv Ecoplant SRL can disclose personal information when the law expressly provides for this or when this is necessary to protect the rights and interests of Holiv Ecoplant SRL

In conclusion, when you access the Holiv Ecoplant SRL site and are asked to disclose information about yourself, you will disclose this information only to the Holiv Ecoplant SRL site, unless the service or information in question is offered in partnership with another site or service.

However, each time such a service is provided in partnership with another site, you will be informed of this. In order to provide you with the highest standards of service, it is necessary to share your personal information with the partner site or service. If you do not want this data of yours to be shared, you can act accordingly by disallowing the transfer of data by not using that specific service.

However, if you choose to accept data sharing, you should understand that the partner service providers may have separate privacy and data collection practices. Holiv Ecoplant SRL has no control and cannot guarantee all the legal aspects involved in the use of these independent privacy practices.

Holiv Ecoplant SRL can disclose personal data to its own employees in accordance with the specific duties of their position and with the internal regulations and only for the purpose for which they were communicated, to authorized representatives of Holiv Ecoplant SRL, commercial partners of Holiv Ecoplant SRL (providers of marketing services, telemarketing or other services, other companies with which we can develop joint programs for offering our products and services on the market, couriers, website hosting providers, online payment processors), but only after ensuring that they respect their confidentiality and the legislation in force. An exception to the previously mentioned rule is in the situation where the transfer/access/viewing of the data is requested by the competent bodies in the cases provided by the regulations in force on the date of the occurrence of the event

WITHDRAWAL OF CONSENT

Each data subject has the right granted by the European legislator to withdraw his consent to the processing of his personal data at any time.

If the data subject wishes to exercise the right to withdraw consent, he or she may, at any time, contact any employee of Holiv Ecoplant SRL

DATA TRANSFER TO THIRD PARTIES

In general, we transfer your data only within our company, Holiv Ecoplant SRL, and to partners / third parties involved in the processing / delivery of orders placed / returns, to resolve requests for offers, requests for certain requested services, or to companies that deal with direct marketing and customer relations (online assistance, sms, email, phone) - if you have opted for these services.

TRANSFER OF DATA TO THE PROCESSOR IN ACCORDANCE WITH ART. 28 (1) GDPR.

Holiv Ecoplant SRL respects the confidential information you provide and ensures that it does not sell, assign, rent or barter your e-mailing lists or personal data.

In addition to the above, we inform you that if necessary, we will transfer your personal data to law enforcement authorities and, if applicable, to injured third parties, without your explicit consent, when this is necessary to clarify illegal use of our services or for criminal prosecution. However, such a transfer will only take place if there is concrete evidence of

illegal behavior or misuse. The transfer of your data may also take place if this contributes to compliance with the terms of use or other agreements. We are also legally required to provide information to certain public bodies upon request. These include the criminal investigation authorities, the authorities that prosecute fined offenses and the financial authorities.

The transfer of this data is based on our legitimate interest in combating misuse, prosecuting criminal acts and securing, asserting and enforcing claims, unless our interests are overridden by your rights and interests in the protection of your personal data. 6 (1) lit. f GDPR.

INTENDED DATA TRANSFER TO THIRD COUNTRIES

Data transfer to third countries is currently not planned. Otherwise, we will establish the necessary legal conditions. In particular, you will be informed about the recipients or categories of recipients of the personal data, in accordance with legal requirements.

SECURITY OF COLLECTED DATA

The confidentiality and protection of the information collected from you is of vital importance to us. Holiv Ecoplant SRL does not provide the collected information to third parties without your express and prior consent. Any traffic statistics of our users that we provide to third-party advertising networks or partner sites are provided as aggregate data only and do not include any personally identifiable information about any individual user.

Holiv Ecoplant SRL takes the appropriate technical and organizational measures to protect the personal data you provide to Holiv Ecoplant SRL from accidental or intentional manipulation, loss, destruction or access by unauthorized parties, against unauthorized access, distribution or accidental loss of data. This also applies to any external services purchased. We check the effectiveness of our data protection measures and continuously improve them in line with technological development. Any personal data entered is encrypted during transfer using a secure encryption process.

Your access to certain services and information within the site is protected by a password. We recommend that you do not disclose this password to anyone. Holiv Ecoplant SRL never asks you for your account password in unsolicited messages or phone calls. We therefore advise you not to reveal this password to forums that ask for it. Moreover, if possible, you must remember to sign "disconnection" / "log off" / "sign out" from your account in the online platform offered by Holiv Ecoplant SRL, at the end of each session of their use.

Your personal information is contained behind secure networks and is only accessible by a limited number of people who have special access rights to such systems and must keep the information confidential. In addition, all sensitive / financial information provided is encrypted using Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user places an order that enters, transmits or accesses their information to keep your personal information safe.

These tips are intended to prevent unauthorized persons from accessing your personal information or correspondence when you are working on a computer network in a public place or even at work, if someone else can access your computer.

PERIOD OF DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, reporting or archiving requirements.

In determining the appropriate retention period for personal data, we consider the value, nature and sensitivity of the personal data, the potential risk of harm caused by the unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and we may achieve these purposes through other means and applicable legal requirements.

We are required by law to keep basic information about our customers (including contact, identity, financial and transaction data) for 5 years after they cease to be a customer for tax purposes.

In certain circumstances, you can ask us to delete data: see further information in this document below.

For personal data whose retention period is not expressly specified, the data retention period will be 5 years.

After this period, the personal data will be deleted, and the rest of the related information will be anonymized and used for statistical purposes and internal analysis.

We reserve the right to anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information for an unlimited period without prior notice.

The data operator Holiv Ecoplant SRL processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage or, to the extent that this is granted by the European legislator or other legislators in the laws or regulations to which they apply the operator.

DELETION OF PERSONAL DATA

Legislation has defined numerous data retention periods and obligations. At the end of these periods, the relevant data will normally be deleted. Data not affected by the above storage periods and obligations are deleted or anonymized as soon as the purposes defined in this data privacy statement are no longer applicable. Unless this data privacy statement includes other provisions that do not comply with the data storage provisions, we will store all the data we collect for as long as it is necessary for the above purposes for which it was collected.

If the storage purpose is not applicable or if a storage period established by the European legislator or another competent legislator expires, personal data is usually blocked or deleted in accordance with legal requirements.

After the expiration of the data retention period, the personal data will be deleted and the rest of the related information will be anonymized and used for statistical purposes and internal analysis.

USE OF OTHER DATA AND DELETION OF DATA

Any further processing or use of your personal data will generally only be carried out to the extent permitted under a legal regulation or if you have given your consent for data processing or data use. In case of further processing for purposes other than those for which the data were originally collected, we will inform you about these other services and provide you with all other important information before further processing.

SITE SUBPAGES AND SUBDOMAINS

The responsibility for the online tools on the subpages of the www.allu.ro website is the responsibility of:

Holiv Ecoplant SRL

CIF. RO 36582066

Reg. Com. J30/859/23.09.2016

Address: Eriu Sâncrai locality, Craidorolț commune, no. 392, Satu Mare county

Phone: +40 749 840 841,

Email: office@allu.ro

IDENTIFYING AND PROSECUTING ABUSE

We will store any information for the identification and prosecution of abuse, in particular your IP address, for a maximum period of 7 days. The legal basis in this case is Art. 6 (1) letter f GDPR. Our legitimate interest in keeping your data for 7 days is to ensure the operation of our website and the business transacted through this website and to be able to fight against cyber-attacks and similar malicious actions. Where appropriate, we may use anonymous information to adapt the design of our website to the needs of users.

DATA PROTECTION FOR REQUESTS AND APPLICATION PROCEDURES

The data operator collects and processes the personal data of the applicants for the purpose of processing the application submission procedure. Processing can also be done electronically. This is the case, in particular, if an applicant submits an appropriate application file to the operator by e-mail or via a web form on the website. If the data operator concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in accordance with legal requirements. If an employment contract is not concluded with the applicant by the operator, the application documents will be automatically deleted two months after the notification of the refusal decision, provided that no other legitimate interest of the operator opposes the deletion.

advertisement

When you provide us with personal data, we use it to inform you about our products and services and, where appropriate, to include you in surveys about them, provided that you give us your express consent to use your personal data for advertising purposes. If you have given your consent for such use, but you no longer wish to receive advertising from Holiv Ecoplant SRL, you can revoke your consent at any time. Your data is then deleted or, provided it is necessary for billing and accounting purposes, blocked accordingly.

USE OF EXTERNAL LINKS

The www.allu.ro site contains external links to third-party sites operated by suppliers that are not associated with Holiv Ecoplant SRL and urls that do not come under the scope of this personal data processing policy.

Visitors to the www.allu.ro site may be directed to other third-party sites to provide the user with more information about products, services, news, events, government authorities, non-profit organizations, other companies and/or social networks.

After you link to the third-party website, our company no longer has any influence on the collection, storage or processing of any personal data transmitted by accessing that website (such as the IP address or URL of the page containing the link). , because the conduct of the third party is beyond our control.

Therefore, Holiv Ecoplant SRL is not responsible for the processing of personal data by third parties that are linked in one way or another to our website. In these circumstances Holiv Ecoplant SRL cannot give you any guarantee regarding the way in which the respective third parties store the information or the way in which they use it.

We recommend that you inform yourself about the terms of use, privacy policy and personal data processing policy of each third party whose website you will access through a link from our website, so that you can determine how personal information is used and processed.

MODIFICATION OF THIS DATA PRIVACY POLICY

As with any of our administrative and legal pages, the content of this page can and does change over time. Therefore, this page may be read differently on your next visit.

These changes are necessary and are made by Holiv Ecoplant SRL, to protect you and our website www.allu.ro.

OPERATOR'S NAME AND CONTACT DETAILS

The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other provisions relating to data protection are:

Holiv Ecoplant SRL

CIF. RO 36582066

Reg. Com. J30/859/23.09.2016

Address: Eriu Sâncrai locality, Craidorolț commune, no. 392, Satu Mare county

Phone: +40 749 840 841,

Email: office@allu.ro

CONTACT DETAILS OF SUPERVISORY AUTHORITIES

National Association for Consumer Protection

Infoline +40.21.9551

Address: Boulevard Aviatorilor no. 72, sector 1, postal code 011865, Bucharest

Complaints: http://reclamatii.anpc.ro/

Contact information: http://www.anpc.gov.ro/articol/575/date-contact

The National Supervisory Authority for the Processing of Personal Data

G-ral Blvd. Gheorghe Magheru 28-30, Sector 1, Bucharest

Phone: +40.318.059.211

Fax: +40.318.059.602

Email: anspdcp@dataprotection.ro

Web: http://www.dataprotection.ro/?page=contact&lang=ro

Last update: 08.06.2022

ENFORCEMENT OF THIS PRIVACY POLICY

If you have questions related to the Privacy Policy or would like to be informed about the personal data processed by Holiv Ecoplant SRL and which concern you directly, please contact us using the above data.

EXPRESS AND UNEQUIVE CONSENT

By accepting this consent form, you confirm that you have been informed about the personal data relating to you, which will be collected, stored, processed and used, you agree that these personal data will be processed and used within the limits as follows specified, for the duration of Holiv Ecoplant SRL's activity

PERSONAL DATA PROCESSING CONSENT

By using the site, placing orders or submitting information through the forms on the site, you agree to accept and undertake the following statements:

(1) I have read and fully understood the provisions of this document and

(a) I consent to the processing and use of my Personal Data for the purposes specified in this document

(b) by accepting the use of the site I express my agreement regarding the processing of personal data, thus Holiv Ecoplant SRL can use the information to communicate with me in relation to the requests sent, the processing of orders, forms, etc., and

(c) allow Holiv Ecoplant SRL to contact me for (i) sending the answer, offering technical-financial solutions that may also involve own services and/or products or those of collaborators, (ii) processing and delivery of orders placed, (iii) offering the information requested by the consent granted.

We remind you that whenever you want, you have the right, unconditionally, to request the withdrawal of your consent, by contacting us by email at office@allu.ro .