Privacy Policy and GDPR

  1. General information

The confidentiality of your personal data is one of the main concerns of our company, AGROSTY S.R.L., as a data controller. Email: office@agrosty.ro
This document is intended to inform you about the processing of your personal data, in the context of using the website https://agrosty. ro/ (the "Site")

  1. Categories of personal data processed

II.1.If you are a customer of the AGROSTY S.R.L. Website, it will process your personal data, such as: name and surname, telephone, e-mail address, billing address, delivery address, data related to how you use The Site, for example your behavior/preferences/habits, as well as any other categories of data that you provide directly in the context of creating a user account, in the context of placing an order through the Site or in any other way that results from the use of the Site.

If you choose to create your user account only before completing the order of a product available on the Site, your email address will be requested and an account will be created automatically. If you do not complete the order, the email address and other data provided will not be stored by our company and the created account will be deleted automatically.

II.2.If you are a visitor to the Site, https://agrosty.ro / AGROSTY S.R.L. will process your personal data that you provide directly in the context of using the Site, such as the data that you provide in the contact / questions / complaints section, to the extent that you contact us in this way.

III.1.If you are a customer of the Website, https://agrosty.ro / AGROSTY S.R.L. processes your personal data as follows:

III.1.Dacă sunteți client al Site-ului, https://agrosty.ro / AGROSTY S.R.L.  prelucrează datele dumneavoastră cu caracter personal astfel:

  • For the development of the contractual relationship between you and AGROSTY S.R.L., respectively for taking over, validating, sending and invoicing the order placed on the Site, informing you about the status of the order, organizing the return of ordered products, etc.

Basis: The processing of your data for this purpose is based on the contract concluded between you and AGROSTY S.R.L., defined in the Terms and Conditions https:// agrosty.ro /termeni-si-conditii/. The provision of your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of carrying out contractual relations between you and AGROSTY S.R.L.

  • To fulfill the legal obligations incumbent on AGROSTY S.R.L. in the context of the services provided through the Site, including the obligations in fiscal matters, as well as in matters of archiving.

Grounds: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. The refusal to provide data may result in the impossibility of AGROSTY S.R.L. to comply with its legal obligations and therefore unable to offer you services through the Site.

  • For marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms) of commercial communications regarding the products and services offered by AGROSTY S.R.L., through the Site.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by checking the appropriate box at the time of account creation, or after account creation, in the My Account Information section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications. Additionally, you can unsubscribe by going to the My Account Information section.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

  • For the purpose of carrying out various analyses, reports on the way the Website operates, creating profiles of consumer preferences, mainly in order to improve the experience offered on the Website.

Grounds: The processing of your data for this purpose is based on the legitimate interest of AGROSTY S.R.L. to permanently improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

III.2.If you are a visitor to the Website https://agrosty.ro/, AGROSTY S.R.L. processes your personal data as follows:

  • For marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms), of commercial communications regarding the products and services offered by AGROSTY S.R.L., through the Website.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by completing and checking the appropriate box in the form for subscribing to the newsletter available on the Site. To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

  • To resolve complaints, complaints and to monitor traffic and improve your experience on the Site.

Grounds: The processing of your data for this purpose is based on the legitimate interest of AGROSTY S.R.L. to ensure the proper functioning of the Site, as well as to permanently improve the experience of Site visitors, including by resolving various comments, questions or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

  1. Duration for whichwe processyour data

As a principle, AGROSTY S.R.L. will process your personal data as much as is necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently according to the legal obligations falling under the responsibility of AGROSTY S.R.L. e.g., in the case of financial-accounting supporting documents for which the legal retention period is 10 years from the end of the financial year during which they were drawn up).

If you are a customer and exercise the option to delete your user account, by pressing the Delete account button in the My account information section, AGROSTY S.R.L. will interpret this action as your option to unsubscribe from receiving commercial communications by which we keep you informed about the products and services offered through the site. In this regard, if you choose to delete your user account, we will no longer send you such emails and/or SMS. However, we would like to inform you that deleting your account will not automatically delete your personal data. If you want your personal data to stop being processed or if you want the data to be deleted, you can exercise your rights detailed in point VII below. If you request the deletion of the account, but there is at least one active order on that account, the request to delete the account can only be registered after the delivery of the products and the completion of the last active order.

If you withdraw your consent for data processing for marketing purposes, AGROSTY S.R.L. will stop processing your personal data for this purpose, without affecting the processing carried out by AGROSTY S.R.L. based on the consent expressed by you before its withdrawal. ea My account information, AGROSTY S.R.L. will interpret this action as your option to unsubscribe from receiving commercial communications by which we keep you informed about the products and services offered through the site. In this regard, if you choose to delete your user account, we will no longer send you such emails and/or SMS. However, we would like to inform you that deleting your account will not automatically delete your personal data. If you want your personal data to stop being processed or if you want the data to be deleted, you can exercise your rights detailed in point VII below. If you request the deletion of the account, but there is at least one active order on that account, the request to delete the account can only be registered after the delivery of the products and the completion of the last active order.

  1. Disclosure of personal data

To fulfill the processing purposes, AGROSTY S.R.L. may disclose your data to partners, third parties or entities that support AGROSTY S.R.L. in carrying out the activity through the Site (for example, courier companies, IT service providers, accounting and payroll services), or to central/local public authorities, in the following examples listed:

- for the administration of the Site;

- in situations where this communication would be necessary for awarding prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by AGROSTY S.R.L. through the Website;

- for the maintenance, personalization and improvement of the Site and the services provided through it; facilities for the persons concerned, obtained as a result of their participation in various promotional campaigns organized by AGROSTY S.R.L. through the Website;

– to perform data analysis, testing and research, monitoring usage and activity trends, developing security features and user authentication;

– for the transmission of commercial marketing communications, under the conditions and limits provided by law;

– when the disclosure of personal data is provided by law, etc.

  1. Transfer of personal data

Personal data provided to AGROSTY S.R.L. they cannot be transferred outside of Romania.

VII. The rights it benefits fromți

Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:

  • the right to information, respectively the right to receive details regarding the processing activities carried out by AGROSTY S.R.L., as described in this document;
  • the right to access the data, respectively the right to obtain confirmation from AGROSTY S.R.L. regarding the processing of personal data, as well as details regarding the processing activities such as the manner in which the data are processed, the purpose for which the processing is done, the recipients or categories of recipients of the data, etc.;
  • the right to rectification, respectively the right to obtain the correction, without justified delay, by AGROSTY S.R.L. of inaccurate/unjustified personal data, as well as completing incomplete data; The correction/completion will be communicated to each recipient to whom the data were sent, unless this proves impossible or involves disproportionate efforts.
  • the right to deleteyour personal data, when they are no longer necessary to fulfill the purposes for which they were collected or processed, if consent is withdrawn and there is no other the legal basis for processing, if the data subject objects to the processing and there are no overriding legitimate reasons, if the personal data have been processed illegally, if the personal data must be deleted to comply with an obligation legal.
  • the right to restrict the processing of your personal data in the following cases: when the person disputes the accuracy of the data, for a period that allows us to verify the correctness of the data, when the processing is illegal, and the data subject opposes the deletion of personal data, requesting instead the restriction of their use, when the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or the data subject has objected to the processing (other than those for direct marketing), for the time interval in which it is verified whether the legitimate rights of the operator prevail over those of the data subject.
  • the right to portabilityof your personal data in the following cases: the right to receive your personal data in a structured, commonly used and readable format , as well as the right for this data to be transmitted by the website owner to another data operator, to the extent that the conditions provided for by law are met;
  • the right to object to the processing of yourpersonal data. You can exercise the previously mentioned rights the right not to be subject to an automated individual decision, respectively the right not to be the subject of a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects that concern the data subject or similarly affect him to a significant extent;
  • the right to address the National Supervisory Authority for the Processing of Personal Dataor the competent courts, to the extent you consider necessary.

For any additional questions about how personal data is processed and to exercise your rights mentioned above, you can ask in writing by a written request sent to the address of the headquarters or to the email address, with a detailed description and specific of the right you wish to exercise.

Definitions:

  • Personal Data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier.
  • Processing means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means
  • Restriction of processingmeans the marking of stored personal data in order to limit their processing in the future.
  • Recipient means the natural or legal person, public authority, agency or other body to whom (to whom) personal data is disclosed, whether or not it is a third party. However, public authorities to whom personal data may be communicated in the context of a specific investigation in accordance with Union or national law are not considered recipients; the processing of this data by the respective public authorities complies with the applicable data protection rules, in accordance with the purposes of the processing.
  • Consent of the data subject means any manifestation of the data subject's free, specific, informed and unambiguous will by which he accepts, by a statement or by an unequivocal action, that the personal data which regard it to be processed.