Privacy policy

◉ Thank you for visiting www.aventura-dragus.ro. When you visit the website www.aventura-dragus.ro, when you contact us or when you use our services, you entrust us with your information. The purpose of this Privacy Policy is to explain to you what data we process, why we process it and what we do with it.

◉ We take your privacy seriously and never sell lists or email addresses. Fully aware that your personal information belongs to you, we do our best to store it securely and process the information you share with us carefully. We do not provide information to third parties without informing you. This information is important. We hope you will read them carefully.

◉ By browsing the website www.aventura-dragus.ro or by contacting us through the contact form, you declare that you have been adequately informed about data processing by reading this document, called “Privacy Policy”.

DEFINITIONS

◉ We will start by defining some terms to help you understand this Privacy Policy.

◉ www.aventura-dragus.ro (or the “Site”) is a presentation site, offered through the URL https://www.aventura-dragus.ro/.

◉ According to Law no. 677/2001 and Regulation (EU) 679/2016 (applicable in Romania from May 25, 2018), www.aventura-dragus.ro is a personal data operator.

◉ When we say “GDPR” we mean Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

◉ “Personal Data” means any information relating to an identified or identifiable natural person (“data subject”);

◉ According to the law, you, as a visitor to the website, are a “data subject”, that is, an identified or identifiable natural person. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to its physical, physiological, genetic, psychological, economic, cultural or social identity.

CHANGES

◉ We reserve the right to change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notification, which we will provide by posting on the Site.

QUESTIONS AND REQUESTS

◉ If you have any questions or concerns about the processing of your data or wish to exercise your legal rights in relation to the data we hold, or if you have concerns about how we handle any privacy issue, you can write to us at email: contact@aventura-dragus.ro

WHAT INFORMATION DO WE COLLECT?

◉ a) The information you provide us voluntarily

◉ When you use the contact form on the website, when you contact us by phone or e-mail or communicate with us in any way, you voluntarily give us the information that we process. This information includes your first name, last name, email address and phone number.

◉ By giving us this information, we keep it secure and confidential in our database. We do not disclose or transfer information to third parties.

◉ b) Information we collect automatically

◉ When you browse our site, we may collect information about your visit to the site. This information may include your IP address, operating system, browser, browsing activity and other information about how you interacted with our site. We may collect this information through the use of cookies or other similar technologies (Google Analytics, Awstats).

LEGAL TERMS FOR PROCESSING:

◉ Regarding the data that you voluntarily provide us by completing and sending the related form or by contacting us in any way, the legal basis is “taking measures at the request of the data subject before concluding a contract” (art. 5 para. 2 letter (a ) from Law no. 677/2001) and “to take steps at the request of the data subject before concluding a contract” (art. 6 para. (1) letter b of Regulation (EU) 679/2016).

◉ With regard to the data you voluntarily provide us by posting a comment on a blog article, the basis for processing is our legal obligation to support the exercise of the right to information, but also our legitimate interest in providing transparency and information to blog readers.

◉ Both according to the current legislation and according to the GDPR (applicable from May 25, 2018), your consent is not required in the situation where the processing is necessary to take steps to conclude a contract, fulfill a legal obligation or legitimate interest.

◉ Regarding data that we collect automatically through the use of cookies or other similar technologies, the basis for processing is consent. By accessing the site, you validly give your consent to the processing.

FOR WHAT PURPOSES IS THE DATA COLLECTED?

– to take the necessary steps in order to conclude a contract, a collaboration or the purchase of services/products that we offer;
– to answer your questions and requests;
– to defend ourselves against cyber attacks;
– for marketing purposes, but only if you have given your consent beforehand;
– to provide and improve the services we offer;
– to provide and improve our website.

HOW LONG DO WE STORE DATA?

◉ We store personal data only for the period necessary to fulfill the purposes, but no longer than 5 years after the last visit to the site or the last interaction with us.

HOW DO WE DISCLOSE YOUR INFORMATION?

◉ We will not disclose your information to third parties for their own marketing or commercial purposes without your consent. However, we may disclose your information to the following entities:

– Service providers (see web hosting). We may disclose your information to other companies that provide services to us and act as proxies, such as the company that helps us host our website. These entities are selected with particular care to ensure that they meet the specific requirements for the protection of personal data. These entities have a limited ability to use your information for purposes other than providing services to us;
– Courts, prosecutors or other public authorities to comply with the law or in response to a mandatory legal process (such as a search warrant or court order);
– To other parties with your consent or instructions. In addition to the disclosures described in this Privacy Policy, we may disclose information to third parties to whom you consent or request that we make such disclosure.

DO WE TRANSFER DATA TO THIRD COUNTRIES?

◉ We currently do not transfer your data to countries outside the European Union. If this policy changes, we will inform you accordingly and ask for your consent.

WHAT ARE YOUR RIGHTS?

– The right to withdraw consent;
(In the situation where the processing is based on consent, you can withdraw your consent at any time and free of charge by sending an e-mail to contact@aventura-dragus.ro with the subject “consent withdrawal”.
– The right to lodge a complaint with a supervisory authority;
– The right to go to justice;
– The right of access;
(You have the right to obtain from us a confirmation that personal data concerning you is being processed or not and, if so, you have the right of access to that data.)
– The right to rectification;
( You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data were processed, you have the right to obtain the completion of personal data that are incomplete , including by providing an additional statement.)
– The right to delete data (“the right to be forgotten”);
(In situations where (1) the data is no longer necessary for the fulfillment of the purposes, (2) consent has been withdrawn and there is no other legal basis for processing, (3) you object to the processing and there are no legitimate reasons that prevail in what concerns the processing or (4) the personal data has been processed illegally, you have the right to obtain the deletion of the data concerning you, without undue delay.)
– The right to restrict processing;

◉ You have the right to obtain from us the restriction of processing if one of the following cases applies:
(a) you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data;
(b) the processing is unlawful and you object to the deletion of the personal data, requesting instead the restriction of its use;
(c) we no longer need the personal data for the purpose of processing, but you request it for establishing, exercising or defending a right in court;
(d) you have objected to the processing in accordance with Article 21(1) of the GDPR, for the period of time in which it is checked whether our legitimate rights prevail over your rights.

◉ – The right to data portability

◉ You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another operator, without obstacles from our part, if:
(a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) from GDPR; and
(b) the processing is carried out by automated means.

◉ – The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that concern you or similarly affect you to a significant extent

◉ You do not have this right if the decision:
(a) is necessary for the conclusion or performance of a contract between you and a data controller;
(b) is authorized by Union law or domestic law that applies to the operator and that also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or
(c) is based on your explicit consent.

◉ Please note the following information:

◉ Time frame: We will try to respond to the request within 30 days. However, the deadline may be extended for specific reasons related to the specific legal right or the complexity of your request.

◉ Access restriction: In certain situations, we may not be able to provide you with access to all or some of your personal data due to legal requirements. If we refuse your access request, we will inform you of the reason for the refusal.

◉ The impossibility of identifying yourself

◉ In some cases, we may not be able to search your personal data because of the identifiers you provide in your request. An example of personal data that we cannot see when you provide us with your name and email address is data collected through browser cookies.

◉ In such cases, if we are unable to identify you as a data subject, we are unable to comply with your request unless you provide additional information to enable identification.

HOW YOU EXERCISE YOUR RIGHTS

◉ To exercise your legal rights, please contact us at contact@aventura-dragus.ro