Privacy Policy

General information on personal data protection

The privacy of your personal data is one of the main concerns of the susrur.eu website administrator.

The purpose of this document is to inform you about the processing of your personal data in the context of your use of the susrur.eu website ("the Site").

Categories of personal data processed

If you are a visitor to the Site, the susrur.eu administrator will process your personal data that you provide directly in the context of your use of the Site, such as the data you provide in the contact/questions/complaints section, to the extent that you contact us in this way.

Purpose and legal basis of the processing of personal data

For the purpose of carrying out various analyses, reporting on how the Site works, profiling consumer preferences, mainly to improve the experience offered on the Site.

Basis: The processing of your data for this purpose is based on the legitimate interest of the susrur.eu administrator to continuously improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide your data for this purpose will not have negative consequences for you but certain functionalities of the website will not be available.

If you are a visitor to the Site, the website administrator processes your personal data as follows:

For marketing activities, i.e. for the transmission, via remote communication means (e-mail, SMS), of commercial communications concerning products and services offered by the Website Administrator via the Website.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of your data for this purpose by completing and ticking the appropriate box on the newsletter subscription form available on the website. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/sms containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent to the processing of your data for this purpose will not have negative consequences for you.

To resolve complaints, grievances and to monitor traffic and improve your experience on the Site.

Basis: The processing of your data for this purpose is based on the legitimate interest of the website administrator to ensure the proper functioning of the Website, as well as to continuously improve the experience of visitors to the Website, including by addressing various comments, questions or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

Duration for which we process your data

As a matter of principle, the susrur.eu administrator will process your personal data for as long as is necessary to achieve the processing purposes mentioned above.

Disclosure of personal data

For the fulfilment of processing purposes, the susrur.eu administrator may disclose your data to partners, third parties or entities that support susrur.eu in carrying out the activity through the Site (e.g. courier companies, IT service providers), or to central/local public authorities, in the following cases listed by way of example:

• for the administration of the Site;
• where such communication would be necessary for the award of prizes or other benefits to data subjects obtained as a result of their participation in various promotional campaigns organised by the website administrator through the Site;
• to maintain, customise and improve the Website and the services provided through it;
• for conducting data analysis, testing and research, monitoring usage trends and activity, developing security features and user authentication;
• for sending commercial marketing communications, under the conditions and within the limits provided by law;
• where disclosure of personal data is required by law, etc.

Transfer of personal data

Personal data provided to the website administrator may be transferred outside Romania, but only to countries within the European Union.

Your rights

Under the conditions laid down by the legislation on the processing of personal data, as data subjects, you have the following rights:

The right to information, i.e. the right to receive details of the processing activities carried out by the website administrator as described in this document;

The right of access to data, i.e. the right to obtain confirmation from the website administrator about the processing of personal data, as well as details of the processing activities such as how the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc;

The right to rectification, i.e. the right to have inaccurate/unjustified personal data corrected without undue delay by the website administrator and to have incomplete data completed; the rectification/completion will be communicated to each recipient to whom the data was transmitted, unless this proves impossible or involves disproportionate efforts.

The right to erasure of data without undue delay ("right to be forgotten") if one of the following applies:

• they are no longer necessary for the purposes for which they were collected or processed;
• where consent is withdrawn and there is no other legal basis for the processing;
• where the data subject objects to the processing and there are no legitimate grounds for objecting to the processing;
• if the personal data have been unlawfully processed;
• if the personal data must be erased to comply with a legal obligation;
• personal data have been collected in connection with the provision of information society services in accordance with Union or national law governing the controller.
• it is possible that, following the request for deletion of the data, the website administrator may anonymise these data (thus depriving them of their personal nature) and continue processing for statistical purposes under these conditions;

The right to restrict processing to the extent that:

• the person disputes the accuracy of the data, for a period allowing us to verify the accuracy of the data;
• the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use; the controller no longer needs the personal data for the purpose of the processing, but the data subject requests it for the establishment, exercise or defence of legal claims; or
• the data subject has objected to the processing (other than for direct marketing purposes), for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
• the right to data portability, i.e. (i) the right to receive personal data in a structured, commonly used and easily readable format, and (ii) the right to have such data transferred by the website administrator to another data controller, insofar as the conditions laid down by law are met;
• the right to object - in relation to processing activities may be exercised by submitting a request as indicated below;
• at any time, for reasons relating to the data subject's particular situation, to have data relating to him or her processed on the basis of the legitimate interest of the website administrator or on the basis of the public interest, except where the website administrator can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of data subjects, or for the establishment, exercise or defence of legal claims;
• at any time, free of charge and without any justification, that data relating to him or her be processed for direct marketing purposes.
• the right not to be subject to an automated individual decision, i.e. the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects concerning the data subject or otherwise significantly affects him or her;
• the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider it necessary.