Skip to content
Can't find the product you are looking for? Ask for help
0365 430 003
M-F 8:30-17:00
Contact
Contact

Privacy policy

Home > Privacy policy

Privacy policy

Privacy policy

1. OUR COMMITMENT TO YOUR PERSONAL DATA

We strive to implement the highest standards of confidentiality and transparency regarding the personal data we process in our current operations. Our core values are defined by the protection and complete transparency regarding the processing of your personal data within Royal DRU SRL.

The Personal Data Processing Policy describes the categories of your personal data we process, the methods and purposes for which we collect them, the circumstances under which we transfer personal data, as well as your rights and options in this regard. Additionally, the Personal Data Processing Policy details how we process personal data in managing our client relationships, often to keep you updated with the latest developments or events in your area of interest.

Please consult the Terms and Conditions available at www.dru-global.com and the Cookie Policy, which detail how we use cookies and other similar technologies on our website.

2. DATA CONTROLLER FOR YOUR PERSONAL DATA

The data controller for your personal data is, as applicable, Royal DRU SRL, headquartered in Sat. Bereni, Str. Principala no. 138A, Mures County.

3. CATEGORIES OF PERSONAL DATA PROCESSED

The personal data we process may include:

  • Contact information, such as your name, phone number, mobile phone number, fax number, and email address;
  • Data resulting from your browsing activity on our website, collected through cookies and similar technologies, as outlined in the Cookie Policy.

4. LEGAL BASES FOR PROCESSING PERSONAL DATA

Any processing of your personal data will be carried out based on one of the following legal grounds:

  • The processing is necessary for the conclusion or performance of a contract to which you are a party;
  • The processing is necessary to comply with a legal obligation of the controller;
  • The processing is carried out based on your consent;
  • The processing is necessary for the legitimate interests of Royal DRU SRL or a third party (e.g., when processing is necessary for the performance of a contract involving your organization), except where your interests or fundamental rights and freedoms override these interests;
  • In the case of special categories of data, processing will occur if, in addition to a general legal basis for processing, one of the following specific conditions is met:
    • Consent has been obtained from the data subject;
    • We have a legal obligation to process these categories of data.

5. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

We may use your personal data for the following purposes (“Permitted Purposes”):

  • Managing and administering the contractual relationship with our clients;
  • Ensuring security and access to our premises, managing the use of IT systems used by Royal DRU SRL (e.g., website, data management platforms, communication systems), including preventing and detecting security threats, fraud, or other unauthorized or malicious activities;
  • Complying with court decisions and exercising and/or defending our rights and interests;
  • Analyzing and improving our services and communications with you, including conducting customer satisfaction surveys regarding Royal DRU SRL’s services (as we have a legitimate interest in continuously improving our services);
  • Any purpose related to and/or auxiliary to any of the above, or any other purpose for which your personal data has been provided to us, in compliance with applicable legislation.

Additionally, based on your consent, we may send you various communications via the channels you have approved to keep you informed about the latest news, organized events, promotions, and other information.

6. TRANSFER OF YOUR PERSONAL DATA

As applicable, we may transfer or provide access to certain personal data to the following categories of recipients:

  • Companies within the same group as Royal DRU SRL;
  • Courier service providers;
  • Payment/banking service providers;
  • Marketing/telemarketing service providers;
  • IT service providers;
  • Other companies with which we may develop joint programs for marketing our goods and services.

If we are under a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by private legal entities is carried out in accordance with legal provisions on data protection and confidentiality, based on contracts concluded with them.

7. TRANSFER OF YOUR PERSONAL DATA ABROAD

We may transfer your personal data to countries that are part of the European Economic Area or to countries recognized by the European Commission as ensuring an adequate level of protection for personal data, if this transfer is necessary for processing in accordance with the Permitted Purposes described above.

In exceptional cases, if necessary for the Permitted Purposes, we may transfer your personal data to third countries that have not been recognized by the European Commission as ensuring an adequate level of protection.

We will ensure that these international transfers are carried out with appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) as required by the General Data Protection Regulation (EU) 2016/679 or other applicable legal provisions. You may contact us at any time using the contact details below if you would like additional information about these safeguards.

8. UPDATING YOUR PERSONAL DATA

If any of the personal data you have provided to us changes, such as your first name, last name, email address, or if you wish to cancel any requests you have made to us or become aware that we hold incorrect personal data about you, please contact us to correct it.
We will not be liable for any loss arising from incorrect, unauthentic, insufficient, or incomplete personal data you provide.

9. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

Royal DRU SRL has implemented technical and organizational measures to organize the process and specific criteria for retaining your personal data (including our archiving procedures).

We will cease processing personal data when it is no longer reasonably required for the Permitted Purposes, or when you withdraw your consent (if applicable) and there are no legitimate reasons that justify continued processing by Royal DRU SRL (including Royal DRU SRL’s legal obligation to retain such data) that override your interests, rights, and freedoms.

Your Rights

Rectification

You can request us to rectify or complete your inaccurate or incomplete personal data.
We may attempt to verify the accuracy of the data before rectifying it.

Data Erasure

You can request us to delete your personal data, but only if:

  • It is no longer necessary for the purposes for which it was collected; or
  • You have withdrawn your consent (where processing was based on consent); or
  • You exercise a legal right to object; or
  • It has been processed unlawfully; or
  • We have a legal obligation to delete it.

We are not obligated to comply with your request to delete your personal data if processing is necessary:

  • To comply with a legal obligation; or
  • To establish, exercise, or defend a legal claim.

Restriction of Processing

You can request us to restrict the processing of your personal data, but only if:

  • Its accuracy is contested (see the Rectification section), allowing us to verify its accuracy; or
  • Processing is unlawful, but you do not want the data to be deleted; or
  • It is no longer necessary for the purposes for which it was collected, but you need it to establish, exercise, or defend a legal claim; or
  • You have exercised your right to object, and verification of whether our rights prevail is ongoing.

We may continue to use your personal data following a restriction request if:

  • We have your consent; or
  • It is necessary to establish, exercise, or defend a legal claim; or
  • It is necessary to protect the rights of Hontfar or another natural or legal person.

Data Portability

You can request us to provide your personal data in a structured, commonly used, and machine-readable format, or request that it be “ported” directly to another data controller, but only if:

  • The processing is based on your consent or the conclusion or execution of a contract with you, and processing is carried out by automated means.

Objection

You can object at any time, based on your specific situation, to the processing of your personal data on the grounds of our legitimate interest, if you believe your fundamental rights and freedoms override this interest.
You may also object at any time to the processing of your data for direct marketing purposes (including profiling), without providing a reason, in which case we will cease such processing as soon as possible.

Automated Decision-Making

You can request not to be subject to a decision based solely on automated processing, but only if the decision:

  • Produces legal effects concerning you; or
  • Affects you in a similarly significant manner.

This right does not apply if the decision resulting from automated processing:

  • Is necessary to conclude or perform a contract with you;
  • Is authorized by law with appropriate safeguards for your rights and freedoms; or
  • Is based on your explicit consent.

Complaints

You have the right to file a complaint with the supervisory authority regarding the processing of your personal data.

In Romania, the contact details of the data protection supervisory authority are as follows:

National Supervisory Authority for Personal Data Processing
B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, Postal Code 010336, Bucharest, Romania
Phone: +40 318 059 211 or +40 318 059 212
Email: anspdcp@dataprotection.ro

Without affecting your right to contact the supervisory authority at any time, we kindly ask you to contact us first, and we promise to make every effort to resolve any issue amicably.

If you wish to exercise the rights mentioned above, please contact us using the following details:
Royal DRU SRL, headquartered in Sat. Bereni, Str. Principala no. 138A, Mures County.
Email: doctorpiese@gmail.com

For marketing communications you receive from us, you can also withdraw your consent at any time by simply clicking the “unsubscribe” link at the bottom of each email message received from us.

To comply with our legal obligations regarding the security and confidentiality of data, when you exercise one of your rights as a data subject, we may ask you to prove your identity by providing a copy of an identification document or other necessary information to verify that the request comes from the relevant data subject.

We will consider any requests or complaints received and will respond to you within the legal deadlines.

11. UPDATES TO THIS PERSONAL DATA PROCESSING POLICY

The most recent update to this Personal Data Processing Policy was made in November 2019.

We reserve the right to periodically update and amend this Personal Data Processing Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of such changes, we will post the revised version of the Personal Data Processing Policy on our website and/or make it available to you in another way.