Privacy policy

General provisions and contact details

This personal data processing policy (hereinafter referred to as “GDPR Policy”) applies to those personal data, which the company, operating under the laws of Romania, (hereinafter referred to as “Operator”) collects and processes about you, as a user of the website, as a user of the services offered, as a buyer in case of purchase of products from the webshop / brick and mortar shops or as a visitor of our shops (hereinafter referred to as “Data Subject”).

The website faboltray.com belongs to Faboltray SRL, a Romanian company with registered office in Praid, str. Zsogod nr.17., jud. Harghita, registered in the Trade Register under no. J19/8/2021, with fiscal code RO43531324, e-mail office@faboltray.com

We are a company dealing with the making and selling of wooden bowls.

Introduction

The privacy of visitors of our website / shop is very important to us and we are committed to protecting it. This policy explains what we will do with your personal information

Knowledge and acceptance of the policy

Giving consent to the use of cookies in accordance with the terms of this policy when you first visit our website allows us to use cookies each time you visit our website.

By providing and making your personal data available to us, you declare that you are fully aware of and expressly accept the latest version of this GDPR policy (the version that was in force at the time of providing the data).

Collection of personal information

The following types of personal information may be collected, stored and used:

• information about your computer, including your IP address, geographic location, browser type and version, and operating system;
• information about your visits to and use of this website, including referral source, length of visit, page views and navigation paths on the website;
• information such as your e-mail address, which you enter when you register on our website;
• information such as your name and e-mail address, which you enter to set up subscriptions to our e-mails and/or newsletters;
• information you enter while using the services on our website;
• information that is generated while using our website, including when, how often and under what circumstances you use it;
• information relating to any purchases you make, services you use or transactions you make through our website, which may include your name, address, telephone number, email address and bank card details;
• information you post on our website with the intention of publishing it on the internet, which may include your username, profile pictures and the content of your posts;
• information contained in any communications you send to us by email or through our website, including the content of the communications and their metadata;
• any other personal information you send to us.

Before disclosing another person’s personal information to us, you must obtain that person’s consent to both the disclosure and the processing of personal information in accordance with this policy.

Changing and deleting personal data from your personal account

Immediately after registration, the data subject’s personal account is created and the data subject will receive a notification to the e-mail address with which he or she registered. The data processed during registration are necessary to provide the services provided by the webshop, i.e. to identify the buyer, so these data will be processed by the Seller until the personal account is deleted. The data subject may change the data entered during registration at any time by accessing the personal account. The data subject can initiate the deletion of the personal account by sending an e-mail to the customer service. The data subject will be notified of the deletion of the account by e-mail within 10 working days. Following the deletion of the personal account, the data subject’s personal data will become inactive and the Operator will suspend their processing. By requesting the deletion of the personal account, the consent to the processing of personal data is withdrawn and in this case the personal data will be deleted from the system within 30 days. 

Special provisions relating to minors

Persons under the age of 16 may not disclose personal information, request services or any communications on the Operator’s website, or participate in the Company’s contests or campaigns, unless such requests are made on behalf of the minor by the minor’s legal representative or guardian as required by law. In the case of a Data Subject who has not attained the age of 14, his/her legal representative, guardian may provide personal information and make a legal declaration on his/her behalf. In the case of Data Subjects under the age of 18 but who have reached the age of 14, they may provide personal data and make a legal statement only with the consent of their legal representative or guardian. By taking cognizance of the above information, you represent and warrant that you will take the information provided into account. In circumstances where you do not have a legal right to provide personal data, you are obliged to obtain the consent of a third party (e.g. legal representative, guardian). In this context, you have an obligation to decide whether or not the consent of a third party is required for the provision of certain information. It is possible that the Data Controller does not personally contact you, and therefore you are responsible for compliance with this clause, the Data Controller does not assume any liability in this respect. We make all reasonable efforts to delete any information that has been provided to us unlawfully and assure you that such information is not passed on to third parties, nor used for our own purposes (whether for advertising or otherwise). Please inform us immediately if you discover that a minor has disclosed his or her personal data without the authorization of a legal representative or guardian. To contact us, you can use our contact details mentioned at the beginning of this policy. 

Use of your personal information

Personal information submitted through our website will be used for the purposes specified in this policy or on the respective pages of the website. We may use your personal information for:

• managing our website and our business;
• customising our website for you;
• authorising the use of the services available on our website;
• sending commercial communications for information purposes;
• sending you email notifications that you expressly request;
• sending you our newsletter by e-mail, if you have requested it (you can inform us at any time if you no longer want this communication);
• sending marketing communications about our business or the companies of carefully selected third parties that we believe may be of interest to you by mail or, where you have specifically consented, by e-mail or similar technologies (you may inform us at any time if you no longer wish to receive marketing communications);
• providing third parties with statistical information about our users (these third parties will not be able to identify any users using this information);
• dealing with requests and complaints made by or about you relating to our website;
• maintaining the security of our website and preventing fraud;
• checking compliance with the terms and conditions governing the use of our website (including monitoring private messages sent via our private messaging service);

If you submit personal information for publication on our website, we will publish and use that information in accordance with the scope of the agreement you provide to us.

Privacy settings may be used to limit the publication of your information on our website and can be changed using the privacy toggles on the website.

Without your express consent, we will not provide your personal information to third parties for direct marketing by those third parties or any other third parties.

Disclosure of personal information

We may disclose your personal information:

• to the extent we are required to do so by law;
• in connection with any potential or pending legal proceedings;
• to establish, exercise or defend our legal rights (including providing information to third parties for fraud prevention and credit risk reduction purposes);

Except as set out in this policy, we will not provide your personal information to third parties.

International data transfers

Personal information that you post on our website or submit for posting on our website may be available via the Internet worldwide. We cannot prevent the use or misuse of this information by others.

You expressly consent to the transfers of personal information described in this Section.

Retention of Personal Information

This Section sets forth our data retention policies and procedures, which are designed to help ensure compliance with our legal obligations regarding the retention and deletion of personal information.

Personal information that we process for any purpose or purposes will not be retained longer than is necessary for that purpose or purposes.

Notwithstanding the other provisions in this section, we will retain documents (including electronic documents) containing personal data:

To the extent that we are required to do so by law;

if we believe the documents may be relevant to any ongoing or future legal proceedings; and to establish, exercise or defend our legal rights (including providing information to third parties for the purposes of fraud prevention and credit risk reduction);

Security of your personal information

We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

We will store all personal information you provide on our secure (password and firewall protected) servers.

You acknowledge that the transmission of information over the Internet is typically insecure and we cannot guarantee the security of data sent over the Internet.

You are responsible for maintaining the confidentiality of the password you use to access our website; we will never ask you for your password (except when you log on to our website).

Changes

We reserve the right to update this policy from time to time by posting a new version on our website. We recommend that you check this page occasionally to ensure that you understand any changes to this policy and to ensure that you are aware of any changes and how your information may be used.  In the event of a request, we may send you a copy of the current GDPR policy by email.

Your rights

You may ask us to provide you with any personal information we hold about you; the provision of this information will be subject to the following terms:

providing sufficient evidence of your identity. For this purpose, we will usually accept a notarised photocopy of your passport, plus a certified true copy of a utility bill containing your current address.

We may retain the personal information you request to the extent permitted by law.

You can ask us at any time not to process your personal information.

In practice, you usually either expressly agree in advance to our use of your personal information for marketing purposes or we will give you the opportunity to opt-out of our use of your personal information for marketing purposes.

You have the right to:

• receive information on the processing of your personal data;
• obtain access to personal data held about you;
• request the correction of inaccurate, incorrect or incomplete personal data;
• request deletion of personal data when they are no longer needed or if their processing is unlawful;
• object to the processing of your personal data for marketing purposes or for reasons related to your particular situation;
• request restriction of the processing of your personal data in certain cases;
• receive your personal data in a machine-readable format and send it to another controller (“data portability”);
• request that decisions based on automatic processing of your personal data which concern or significantly affect you are made by individuals, not exclusively by computers. In this case, you also have the right to express your point of view and challenge the decision;
• lodge a complaint with the competent personal data protection authority;
• of appeal against the National Supervisory Authority for the processing of personal data;
• of appeal against the Data Controller

Third-party sites

Our website includes hyperlinks to and details of third party websites. We have no control over and are not responsible for the privacy policies and practices of third parties.

Updating information

Please let us know if the personal information we hold about you needs to be corrected or updated.

Categories of personal data and purposes of collection and processing