Privacy Policy
1. OUR COMMITMENT TO YOUR PERSONAL DATA
Our goal is to apply the highest standards of data protection and transparency in the processing of personal data during our daily activities. The protection of your personal data and full transparency in data processing within Royal DRU SRL are fundamental values that define us.
The Personal Data Processing Policy describes the categories of personal data we process, the methods and purposes of their collection, the situations in which we transfer personal data, as well as your rights and options in this regard. At the same time, the Personal Data Processing Policy details how we handle personal data in managing relationships with customers, most often to provide you with up-to-date information about the latest developments or events related to your interests.
Please review the Terms of Use and the Cookie Policy available at www.env-druroyal-hun.kinsta.cloud, which detail how we use cookies and similar technologies on our website.
2. DATA CONTROLLER OF YOUR PERSONAL DATA
The data controller of your personal data is, depending on the case, Royal DRU SRL, with its registered office at: Bereni Village, Main Street 138A, Mureș County.
3. CATEGORIES OF PROCESSED PERSONAL DATA
The personal data we process may include:
• Contact details, such as your name, phone number, mobile phone number, fax number, and email address;
• Data derived from browsing our website, collected through cookies and similar technologies, in accordance with the Cookie Policy.
4. LEGAL BASES FOR PROCESSING PERSONAL DATA
Any processing operation involving your personal data is based on one of the following legal bases:
• The processing is necessary for the conclusion or performance of a contract with you;
• The processing is necessary to comply with the data controller’s legal obligations;
• The processing is based on your consent;
• The processing is necessary for the legitimate interests of Royal DRU SRL or a third party (e.g., when processing is necessary to fulfill a contract with your organization), except in cases where your interests or fundamental rights and freedoms take precedence over these interests;
• For special categories of data, processing occurs only if, in addition to the general legal basis for data processing, one of the following specific processing conditions is met:
• The data subject has given consent;
• We have a legal obligation to process such categories of data.
5. PURPOSES OF PROCESSING YOUR PERSONAL DATA
We may use your personal data for the following purposes (“Permitted Purposes”):
• Managing and administering contractual relationships with our customers;
• Managing the security and access to our premises, managing the use of IT systems used by Royal DRU SRL (e.g., website, data management platforms, communication systems), including the prevention and detection of security threats, fraud, or other unauthorized or malicious activities;
• Complying with court decisions and exercising and/or defending our rights and interests;
• Analyzing and improving our services and communications with you, including conducting customer satisfaction surveys regarding the level of satisfaction with Royal DRU SRL’s services (as we have a legitimate interest in continuously improving our services);
• Any purpose related to or complementary to the above, or any other purpose for which you provided your personal data, in compliance with applicable laws.
Additionally, based on your consent, we may send you various communications through the channels you have approved to keep you informed about the latest news, organized events, promotions, and other information.
6. TRANSFER OF YOUR PERSONAL DATA
Depending on the case, we may transfer or provide access to certain personal data to the following categories of recipients:
• Companies within the same corporate group as Royal DRU SRL;
• Courier service providers;
• Financial/banking service providers;
• Marketing/telemarketing service providers;
• IT service providers;
• Other companies with which we may develop joint market offers for our products and services.
If we have a legal obligation or if it is necessary to protect our legitimate interests, we may also transfer certain personal data to public authorities.
We ensure that access to your data by private legal entities acting as third parties complies with legal provisions on data protection and information confidentiality, based on contracts concluded with them.
7. TRANSFER OF YOUR PERSONAL DATA ABROAD
We may transfer your personal data to states within the European Economic Area or to states recognized by the European Commission as providing an adequate level of data protection, if such transfer is necessary for processing in accordance with the Permitted Purposes described above.
In exceptional cases, if necessary for the Permitted Purposes, we may also transfer your personal data to third countries not recognized by the European Commission as providing an adequate level of data protection.
We ensure that these international transfers are carried out with appropriate safeguards (e.g., based on standard contractual clauses approved by the European Commission) as required by the General Data Protection Regulation (EU) 2016/679 or other applicable legal provisions. You can contact us at any time using the contact details below for further information about these safeguards.
8. UPDATING YOUR PERSONAL DATA
If any personal data you provided to us changes, such as your first name, last name, or email address, if you wish to delete any requests sent to us, or if you become aware that any personal data we hold about you is inaccurate, please contact us to correct it.
We are not responsible for any losses arising from inaccurate, inauthentic, insufficient, or incomplete personal data that you have provided to us.
9. HOW LONG DO WE STORE YOUR PERSONAL DATA?
Royal DRU SRL has implemented technical and organizational measures to organize the storage process and specific criteria for your personal data (including our archiving procedures).
We will cease processing your personal data when they are no longer reasonably necessary for the Permitted Purposes, or when you withdraw your consent (if applicable), and there are no longer legitimate reasons justifying further processing by Royal DRU SRL (including Royal DRU SRL’s legal obligation to continue storing the data) that take precedence over your interests, rights, and freedoms.
Rectification
You may request that we rectify or complete inaccurate or incomplete personal data.
We may attempt to verify the accuracy of the data before rectifying it.
Data Deletion
You may request that we delete your personal data, but only if:
• They are no longer necessary for the purposes for which they were collected; or
• You have withdrawn your consent (if the data processing was based on consent); or
• You exercise your lawful right to object; or
• They have been processed unlawfully; or
• We have a legal obligation to do so.
We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary:
• To comply with a legal obligation; or
• To establish, exercise, or defend legal claims.
Restriction of Data Processing
You may request that we restrict the processing of your personal data, but only if:
• Their accuracy is contested (see the rectification section), to allow us to verify their accuracy; or
• The processing is unlawful, but you do not want the data deleted; or
• They are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise, or defend legal claims; or
• You have exercised your right to object, and verification of whether our rights take precedence is ongoing.
We may continue to use your personal data following a restriction request if:
• We have your consent; or
• To establish, exercise, or defend legal claims; or
• To protect the rights of Royal DRU SRL or another natural or legal person.
Data Portability
You may request that we provide your personal data in a structured, commonly used, and machine-readable format, or you may request that they be “ported” directly to another data controller, but in each case only if:
• The processing is based on your consent or on the conclusion or performance of a contract with you, and the processing is carried out by automated means.
Objection
You may object at any time to the processing of your personal data based on our legitimate interests if you believe that your fundamental rights and freedoms take precedence over this interest.
You may also object at any time to the processing of your data for direct marketing purposes (including profiling) without providing a reason, in which case we will cease such processing as soon as possible.
Automated Decision-Making
You may request not to be subject to a decision based solely on automated processing, but only when that decision:
• Produces legal effects concerning you; or
• Otherwise significantly affects you.
This right does not apply if the decision resulting from automated decision-making:
• Is necessary for the conclusion or performance of a contract with you;
• Is authorized by law, and there are adequate safeguards for your rights and freedoms; or
• Is based on your explicit consent.
Complaints
You have the right to lodge a complaint with the data protection supervisory authority regarding the processing of your personal data.
In Romania, the contact details of the data protection supervisory authority are as follows:
National Authority for the Supervision of Personal Data Processing
G-ral. Gheorghe Magheru Boulevard 28-30, District 1, 010336 Bucharest, Romania
Phone: +40 318 059 211 or +40 318 059 212;
Email:anspdcp@dataprotection.ro
Without prejudice to your right to contact the supervisory authority at any time, please contact us first, and we promise to make every effort to resolve the issue amicably.
If you wish to exercise the rights mentioned above, please contact us at the following contact details:
Royal DRU SRL, registered office: Bereni Village, Main Street 138A, Mureș County.
Email: doctorpiese@gmail.com
Regarding marketing communications received from us, you can withdraw your consent at any time by simply clicking the “unsubscribe” link in the footer of the emails we send.
To comply with our legal obligations regarding data security and confidentiality, when you exercise one of your rights as a data subject, we may ask you to prove your identity by providing a copy of an identification document or any other information necessary to verify that the request comes from the relevant data subject.
We will consider all requests or complaints received and respond to you within the deadlines set by law.
11. UPDATES TO THE PERSONAL DATA PROCESSING POLICY
The Personal Data Processing Policy was last updated in November 2019.
We reserve the right to update and amend this Personal Data Processing Policy from time to time to reflect changes in the way we process personal data or changes in legal requirements. In the event of any such changes, we will publish the revised version of the Personal Data Processing Policy on our website and/or make it available to you in another manner.