Privacy Policy

Who we are and how you can contact us

KLINTENSIV® – is the trade name of the company Societatea KLINTENSIV S.R.L., with its registered office in Bragadiru City, Sos. Alexandriei, No. 544, Km. 14, Administrative Pavilion, Ground Floor, Office No. 4, Ilfov County, registered with the Trade Register Office attached to the Ilfov Tribunal under no. J23/3025/2011, having Tax ID: RO29359178, tel.: 021.448.1498, fax: 021.448.14.87, e-mail: office@klintesiv.ro, bank account no. RO09 BTRL RONC RT0P 7335 3001, opened at Banca Transilvania; RO15 INGB 0000 9999 0624 1718, opened at ING BANK. For the purposes of data protection legislation, we are a controller when we process your personal data.

KLINTENSIV® is registered in the registry of personal data processing under no. 2477/2017

According to Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, Law no. 102/2005 on the establishment, organization and functioning of the National Supervisory Authority for Personal Data Processing, KLINTENSIV® has the obligation to manage safely and only for the specified purposes, the personal data that the company's customers or users of the website www.klintensiv.ro provide. Any information sent via contact forms, including newsletters, will be used with due regard for the right to privacy.

Since we are always open to hearing your opinions, as well as providing you with any additional information you may need regarding the processing of your data, we encourage you to contact the KLINTENSIV® Data Protection Officer at the e-mail address gdpr@klintensiv.com, or by mail or courier to the address: Bragadiru City, Sos. Alexandriei, No. 544, Km. 14, Administrative Pavilion, Ground Floor, Office No. 4, Ilfov County – with the mention: Attn: KLINTENSIV® Data Protection Officer.

What categories of personal data we process

Generally, we collect your personal data directly from you, so you have control over the type of information you provide to us. We receive information from you as follows:

When you create a KLINTENSIV® account, you provide us with: your e-mail address, first and last name;

When you place an order, you provide us with information such as: the desired product, first and last name, delivery address, billing details, payment method, phone number.

We may use your e-mail address to ask you to participate in online surveys. If you decide to answer the questions, we will also process your IP address.

We may also collect and subsequently process certain information about your behavior while visiting our website, in order to personalize your online experience and provide you with offers tailored to your profile, if you have given us your consent for cookies and other similar technologies. We invite you to learn more details about this by consulting the section on processing purposes below.

On our website, we may store and collect information in cookies and similar technologies, in accordance with the Cookie Policy.

In general, we do not collect or otherwise process sensitive data, which are included by the General Data Protection Regulation in special categories of personal data.

What are the purposes and grounds for processing

We will use your personal data for the following purposes:

  1. For the provision of KLINTENSIV® services for your benefit.

This general purpose may include, as the case may be, the following:

  1. a) Creating and managing the account within the KLINTENSIV® platform;
  2. b) Processing orders, including taking, validating, shipping, and invoicing them;
  3. c) Resolving cancellations or issues of any nature relating to an order, the goods or services purchased;
  4. d) Returning products according to legal provisions;
  5. e) Refunding the value of products according to legal provisions;
  6. f) Providing support services, including answering your questions regarding your orders or KLINTENSIV® goods.

The processing of your data for purposes a)-f) is based on Article 6, paragraph 1, letter b of the GDPR, namely the conclusion and execution of a contract between KLINTENSIV® and you. Also, certain processing operations subsumed under these purposes are required by applicable legislation, including tax and accounting legislation, as well as legislation regarding the online sale of our products. At the same time, for certain situations to which you have previously consented, the basis is represented by Article 6, paragraph 1, letter a of the GDPR and Article 9, paragraph 2, letter a), namely the consent of the data subject.

  1. For the improvement of our services

We constantly strive to offer you the best online shopping experience. For this, we may collect and use certain information regarding your Buyer behavior, through cookies and other tracking technologies, if you give us your consent, in accordance with Art. 6, paragraph 1, letter a of the GDPR.

We may invite you to complete satisfaction surveys after finalizing an order or we may conduct, directly or with the help of processors, market studies and research. If we use processors, we ensure that we have concluded a contract with them in accordance with Art. 28 of the GDPR. The legal basis for this processing is Article 6, paragraph 1, letter f of the GDPR, with the legitimate interest of KLINTENSIV® being to constantly improve its services based on feedback received from customers, as well as the website interface. You can object to receiving surveys via email at any time by accessing the unsubscribe link at the end of the email.

  1. For marketing

We want to keep you up to date with the best offers for the products/services you are interested in. In this sense, if you have given us your consent for each specific channel (such as: e-mail/SMS), we can send you general and thematic information, information about products similar or complementary to those you have purchased, information about offers or promotions, and information regarding products added in the “My Account/Cart” section.

We always ensure that these processing operations are carried out in compliance with your rights and freedoms and that the decisions taken based on them do not have legal effects on you and do not affect you in a similar significant way.

We base our marketing communications on your consent. You can change your mind and withdraw your consent at any time, by:

  • Accessing the unsubscribe link displayed in the messages you receive from us;
  • Contacting KLINTENSIV® using the contact details described above.
  1. For the defense of our legitimate interests

There may be situations in which we use or transmit information to protect our rights and commercial activity. These may include:

  • Measures to protect the website and users of the KLINTENSIV® platform against cyberattacks;
  • Measures to prevent and detect fraud attempts, including the transmission of information to competent public authorities;
  • Measures for managing various other risks.

The general basis for these types of processing is our legitimate interest in defending our commercial activity, it being understood that we ensure that all measures we take guarantee a balance between our interests and your fundamental rights and freedoms.

How long we keep your personal data

As a general rule, we will store your personal data as long as you have an account on the KLINTENSIV® platform. Regarding the personal data you provided to us by placing an online order, we want you to know that they are kept in accordance with Order 2634/2015 on accounting legislation, namely 10 years starting from the financial year following the one in which the respective accounting document (namely, the invoice) was drawn up.

In the case of online surveys, data related to surveys will be deleted immediately after evaluation, but no more than 90 days from the moment of completing the survey.

In the situation where a user account is inactive for a period greater than or equal to 3 years from the date of the last login to the account, the personal data provided for the purpose of creating the account will be deleted, except for data transposed into invoices, which will be stored for the period mentioned above. You can request at any time the deletion of certain information or the closing of the account, and we will comply with these requests, subject to the retention of the above information even after the account is closed.

To whom we transmit your personal data

As appropriate, we may transmit or provide access to certain of your personal data to the following categories of recipients:

  • companies within the same group of companies as KLINTENSIV®;
  • courier service providers;
  • payment/banking service providers;
  • marketing/telemarketing service providers;
  • market research service providers;
  • the provider of the logistics platform within which the logistics operations related to the order (collecting products, issuing the invoice, etc.) are performed;
  • other companies with which we may develop joint programs for offering our goods and services on the market;
  • third-party purchasers, to the extent that KLINTENSIV® activity would be transferred (in whole or in part), and the personal data would be part of the assets subject to such a transaction or to other companies in the group to which KLINTENSIV® belongs, which will comply with KLINTENSIV® instructions regarding the processing of your personal data.

In case we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third-party private legal entities is carried out in accordance with legal provisions regarding data protection and information confidentiality, based on contracts concluded with them, according to Art. 28 of the GDPR in the case of processors, or Art. 26 of the GDPR, in the case of joint controllers, ensuring the same level of protection.

How we protect the security of your personal data

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to industry standards.

The transmission of your personal data is done using state-of-the-art encryption algorithms and we store them on secure servers, while ensuring data redundancy.

What rights you have

The General Data Protection Regulation recognizes a series of rights regarding your personal data. You can request access to your data, correction of any errors in our files, and/or object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or to go to court. As appropriate, you may also benefit from the right to request the deletion of your personal data, the right to restrict the processing of your data, and the right to data portability.

To be able to exercise your rights, you can contact us:

  • by e-mail at: gdpr@klintensiv.com or
  • by mail or courier to the address: Bragadiru City, Sos. Alexandriei, No. 544, Km. 14, Administrative Pavilion, Ground Floor, Office No. 4, Ilfov County – with the mention: Attn: KLINTENSIV® Data Protection Officer.

Please note the following aspects if you wish to exercise these rights:

Identity. We take the confidentiality of all records containing personal data seriously. For this reason, please send us your requests regarding such records using the e-mail address associated with the KLINTENSIV® account. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.

Response duration. We will respond to any valid requests within a maximum of one month, unless this is particularly complicated or you have made multiple requests, in which case we will inform you within one month of the reasons for the delay, and you will receive a response from us within a maximum of two months. We may need to ask you for more information to qualify your request. This will help us act faster and shorten the response time to your request.

Third-party rights. We do not have to comply with a request if it would negatively affect the rights and freedoms of other data subjects.

Rights of data subjects

Description

Access

You can ask us:

· to confirm whether we are processing your personal data;

· to provide you with a copy of these data;

· to provide you with other information about your personal data, such as what data we have, what we use it for, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can make a complaint, where we obtained your data, to the extent that the information has not already been provided to you through this notice.

Rectification

You can ask us to rectify or complete your inaccurate or incomplete personal data.

We may attempt to verify the accuracy of the data before rectifying it.

Data deletion

You can ask us to delete your personal data, but only if:

they are no longer necessary for the purposes for which they were collected; or

you have withdrawn your consent (in case the data processing was based on consent) and there is no other legal basis for processing; or you are exercising a legal right to object under Art. 21 para. 1 or 2 of the GDPR; or they have been processed illegally; or we have a legal obligation in this regard.

We are not obligated to comply with your request to delete your personal data if the processing of your personal data is necessary:

for compliance with a legal obligation; or for the establishment, exercise, or defense of a legal claim.

There are certain other circumstances in which we are not required to comply with your request for data deletion, although these are the two most likely circumstances in which we might refuse this request.

Restriction of data processing

You can ask us to restrict the processing of personal data, but only if:

· their accuracy is contested (see the rectification section), to allow us to verify their accuracy; or

· the processing is illegal, but you do not want the data to be deleted; or

· they are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise, or defend a legal claim; or

· you have exercised your right to object, and the verification of whether our legitimate interests prevail is ongoing.

·     Where processing has been restricted under paragraph (1), such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Data portability

·     You may ask us to provide your personal data in a structured, commonly used and machine-readable format, or you may request that it be "ported" directly to another data controller, but in each case only if:

·     the processing is based on your consent or on the conclusion or performance of a contract with you; and the processing is carried out by automated means.

Right to object

·     You may object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms override this interest.

·     You may also object at any time to the processing of your data for direct marketing purposes (including profiling), without invoking any reason, in which case we will cease this processing as soon as possible.

Automated decision-making

·     You may request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

·     This right does not apply when:

·     (a) it is necessary for entering into, or performing, a contract between you and KLINTENSIV®; (b) it is authorized by Union or Member State law to which KLINTENSIV® is subject and which also lays down suitable measures to safeguard the data subject's rights, freedoms and legitimate interests; or (c) it is based on your explicit consent.

Complaints

·     You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are as follows:

National Supervisory Authority for Personal Data Processing

B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania

Phone: +40.318.059.211 or +40.318.059.212;

E-mail: anspdcp@dataprotection.ro

Without prejudice to your right to contact the supervisory authority at any time, please contact us beforehand, and we promise that we will make every effort to resolve any issue amicably.

We remind you that you can contact the KLINTENSIV® Data Protection Officer at any time by sending your request in any of the following ways:

  • by e-mail at:  gdpr@klintensiv.com or
  • by mail or courier at the address: Bragadiru City, Sos. Alexandriei, No. 544, Km. 14, Administrative Pavilion, Ground Floor, Office No. 4, Ilfov County – mentioning: to the attention of the KLINTENSIV® Data Protection Officer