Personal Data Protection Policy

Regulation 679/2016 on the protection of personal data, GDPR ("General Data Protection Regulation") takes effect on 25 May 2018.
Given its importance, and the protection of your personal data is important to us, we therefore pay particular attention to protecting the privacy of individuals who access the www.krossoil.ro website as well as those whose personal data has been provided to us by a third party, or to which we have had access from another source, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR").
Please read the following Policy section (hereinafter referred to as the "GDPR - DPP") carefully in order to better understand how your information ("personal data") will be handled.
The DPP explains CONEX DISTRIBUTION S.A's practices regarding the application of the GDPR , as well as the rights you have regarding the way your information is processed by CONEX DISTRIBUTION S.A. The processing of personal data by CONEX DISTRIBUTION S.A will be carried out in accordance with the GDPR , as well as with the regulations on the protection of personal data specific to each country in which CONEX DISTRIBUTION S.A operates. Through the DPP , CONEX DISTRIBUTION S.A wishes to inform data subjects about the nature of the personal data we collect and process, as well as the purposes of the processing. In addition, data subjects are also informed through the DPP of the rights they enjoy.

Getting to know each other better

We are CONEX DISTRIBUTION S.A , a company with registered office in Iasi, Str, Calea Chisinaului, nr.32, with order number in the Trade Register J22/2394/2003 and unique registration code 16019310. Our main field of activity is wholesale trade of parts and accessories for motor vehicles, CAEN 4531.

What is personal data?

"Personal data" means any information or information that can identify you directly (e.g. your name) or indirectly (e.g. through pseudonymised data such as a unique identification number). This means that personal data includes things like your email address, home address, mobile phone, username, profile pictures, personal preferences and shopping habits, user-generated content, financial information and financial situation information. It could also include unique numeric identifiers, such as the IP address of your computer or the MAC address of your mobile device, as well as cookies.

What is the processing of personal data?

"Processing" means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

What is your data? personal data we process?

We may process data to enable us to contact you. ("Contact Data") Contact Data may include your name, email address, telephone number, postal address and/or social media account identifiers. The source of the Contact Data is you.

Data processing principles

CONEX DISTRIBUTION S.A undertakes to comply with the personal data protection principles (hereinafter referred to as the "Principles") laid down by the GDPR , to ensure that all data is: Processed fairly, lawfully and transparently;
2. Collected for specified, explicit and legitimate purposes;
3. Adequate, relevant and limited in relation to the purposes for which they are processed;
4. Correct and up-to-date;
5. Kept in a form which does not allow the identification of data subjects for longer than is necessary for the purpose of the processing;
6. Processed in accordance with the data subject's rights, in a manner that ensures adequate security of processing so that the data are kept intact, confidential and available.

Grounds and purposes for processing personal data

1.Operations - We may process your personal data for the purposes of operating the website and responding to messages you send us via contact forms. The legal basis for this processing is our legitimate interests, namely the proper administration of our website, services and business
2.Relationships and communications - We may process contact data and/or communication data for the purposes of managing our relationships, communicating with you (excluding communication for direct marketing purposes) by email, SMS, post, fax and/or telephone, support services and resolving complaints. The lawful basis for this processing are our legitimate interests, namely communicating with our website visitors, service users, individual customers and client staff, maintaining relationships and properly administering our website, services and business
3.Research and analysis - We may process usage data for the purposes of researching and analysing the use of our website and our services, as well as for researching and analysing other interactions with our website. The lawful basis for this processing is our legitimate interests, namely monitoring, supporting, improving and securing our website, services and business in general
4.Record Keeping - We may process your personal data for the purposes of creating and maintaining databases and back-up copies of our databases. The lawful basis for this processing is our legitimate interests, namely ensuring that we have access to all the information we need to conduct our business properly and efficiently in accordance with this policy.
5.Security - We may process your personal data for the purposes of security and the prevention of fraud and other criminal activity. The lawful basis for this processing is our legitimate interests, namely the protection of our website, our services and our business and the protection of others.
6.Legal compliance and vital interests - We may also process your personal data where such processing is necessary to comply with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person.
7.For the purpose of recruitment for available posts - According to Art. 6 para. 1 lit. a) of the GDPR , personal data may be processed if the data subject has consented to the processing of his/her personal data for one or more specific purposes. If you have subscribed to the CAREERS section your personal data will be used for the sole purpose of contacting you when we consider that a job offered by us matches your qualities.

Disclosure of personal data to third parties

Personal data processed by CONEX DISTRIBUTION S.A. may be disclosed and/or transferred to third parties only if you have expressly consented to such disclosure and/or transfer, unless CONEX DISTRIBUTION S.A. is under a legal/contractual obligation to do so. Please be aware that we may, in certain circumstances, be under an obligation to disclose your personal data to partners with whom CONEX DISTRIBUTION S.A. co-operates and/or other third party service providers of CONEX DISTRIBUTION S.A..
Personal data held on our website database will be stored on our internal servers and/or the servers of our hosting service providers

DATA PROCESSING BY THIRD PARTIES, OTHER WEBSITES AND SPONSORS

The www.krossoil.ro website may, at some point, contain links to other websites whose data processing policies may differ from those of CONEX DISTRIBUTION S.A . Please be aware of and consult the personal data protection policies of the other sites, CONEX DISTRIBUTION S.A. does not assume any responsibility for the information sent or collected by these third parties.

Automatic data processing. Cookie

The www.krossoil.ro website uses cookie identifiers. In this regard you can consult our Cookie Policy and exercise your right to disable Cookies.

Data storage period

CONEX DISTRIBUTION S.A may keep the processed data for different periods of time, judged to be reasonable, in accordance with the purposes indicated above. We keep your data only for as long as necessary to fulfil the purpose for which we hold the data, to meet your needs or to fulfil our obligations imposed by law.

To know how long your data can be kept, we use the following criteria:
1.When you purchase products and services, we keep your personal data for the duration of our contractual relationship;
2.If you participate in a promotional offer, we keep your personal data for the duration of the promotional offer;
3.In case you contact us with a question, we keep your personal data for as long as necessary to process your enquiry, but not more than 5 years after the last correspondence sent;
4.In case you create an account, we keep your personal data until you request us to delete it or after a period of inactivity (no active interaction with us).In this regard, we note that the data processed for this purpose will be deleted 5 years after the last interaction with the account user (such as login to your account);
5.If you have given your consent for marketing, we keep your personal data until you unsubscribe or request that we delete it or after a period of inactivity (no active interaction with us).In this regard, we note that data stored in our databases for the purpose of direct marketing communications are deleted from the records of these databases 5 years after the last interaction with you; 6.Where cookies are stored on your computer, we retain them for as long as necessary for them to fulfil their purposes (for example, for the duration of a session for shopping basket cookies or session ID cookies) and for a period defined in accordance with local regulations and guidance. In this regard, we note that the data processed through cookies used to provide online behavioural advertising, to personalise our services for you and to enable the distribution of our content on social media sites (distribution buttons intended for display on the website), will be kept for a maximum of 5 years after their collection, based on your consent.

Rights of data subjects

In accordance with the GDPR , you have a number of rights regarding the personal data that CONEX DISTRIBUTION S.A processes:
1.Right of access to processing data - You have the right to access the personal data we hold about you. The first provision of information will be made free of charge. If you need further copies of information already provided, we may charge a reasonable fee taking into account the administrative costs of providing the information. Manifestly unfounded, excessive or repeated requests may go unanswered.
2.Right to rectification of data - You have the right to ask for your Data to be rectified if it is indexed or out of date and/or to have it completed if it is incomplete. If you have an account, it may be easier to correct your own data via the "My Account" function.
3.The right to erasure ("right to be forgotten") - In some cases, you have the right to have your Data erased or destroyed. This is not an absolute right, as sometimes we may be forced to retain your Data for legal or judicial reasons.
4.Right to restriction of processing - You have the right to request restriction of the processing of your Data. This means that the processing of your Data is restricted so that we may retain the Data but not use or process it. This right applies in specific circumstances set out in the General Data Protection Regulation, namely:
- the accuracy of the Data is contested by the data subject (i.e. by you), for a period that allows the controller (i.e. CONEX DISTRIBUTION S.A.) to verify the accuracy of the Data;
- the processing is unlawful and the data subject (i.e. you) objects to the erasure of the Data and requests the restriction of its use;
- the controller (e.g. CONEX DISTRIBUTION S.A.) no longer needs the Data for processing, but they are required by the data subject (i.e. you) for the establishment, exercise or defence of legal claims;
- the data subject (i.e. you) has raised objections to the processing based on legitimate grounds on the part of the controller (in this case CONEX DISTRIBUTION S.A .) on the basis of the verification whether the legitimate grounds of the controller (CONEX DISTRIBUTION S.A .) outweigh those of the data subject (i.e. you).
5.The right to data portability - You have the right to move, copy or transfer the data you are interested in from our database to another one. This only applies to data you have provided, where the processing is based on your consent or based on a contract and is implemented by automated means.
6.Right to object - You may object at any time to the processing of your data when such processing is based on a legitimate interest.
7.The right to withdraw consent at any time - You may withdraw your consent to the processing of your data where such processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to the withdrawal of consent.
8.Right to lodge a complaint with the competent supervisory authority - You have the right to lodge a complaint with the data protection authority in your country of residence or domicile to challenge the data protection practices of CONEX DISTRIBUTION S.A.
9.The right to object to the processing of your data for direct marketing purposes - You can unsubscribe or opt-out of our direct marketing communications at any time. It is easiest to do this by clicking the "unsubscribe" link in any email or communication we send you.
10.The right to object to the processing of your data by us when we carry out actions in the public interest or in our own or a third party's legitimate interests - You can object at any time to the processing of your data when such processing is based on a legitimate interest.
11.Right to disable Cookies - you have the right to disable cookies. Internet browser settings are usually set by default to accept cookies, but you can easily adjust them by changing your browser settings. Many cookies are used to enhance the usability or functionality of websites/applications; therefore, disabling cookies may prevent you from using certain parts of our websites or applications, as detailed in the relevant Cookie table. If you wish to restrict or block all cookies set by our websites/apps (which may prevent you from using certain parts of the website) or any other websites/apps, you can do so through your browser settings. The Help function in your browser will tell you how. For more information, see the following links: http: //www.aboutcookies.org/;
You can exercise any of these rights in relation to the personal data that CONEX DISTRIBUTION S.A processes by making a simple request to the DPO of CONEX DISTRIBUTION S.A In such a situation it is very likely that we will ask for proof of your identity.

Legal Requests

We access, retain and provide your information to regulators, law enforcement or other entities:
1.In response to a legal request where we believe in good faith that the law requires us to do so. We may also respond to legal requests when we believe in good faith that the response required by the laws of the jurisdiction in question affects users in that jurisdiction and is consistent with internationally recognised standards.
2.Where we believe in good faith that it is necessary to: detect, prevent and respond to acts of fraud, unauthorised use of any of our material, breaches of our terms or policies or other harmful or illegal activities, to protect us (including our rights, property or material), you and others, including in regulatory investigations or inquiries, or to prevent imminent death or personal injury. For example, where relevant, we provide information to and receive information from third party partners about the reliability of your account to prevent fraud, abuse and other harmful activity within and outside of our Materials. The information we receive about you may be accessed and stored for a longer period of time when subject to a legal request or legal obligation, a government investigation, or investigation of possible violations of our terms or policies, or in other cases to prevent harm.

Relations with other operators

Depending on the context, we may find it absolutely necessary to provide information at a higher level, globally, internally or externally, to our partners and those with whom we transfer data in compliance with the GDPR , in order to ensure that we provide the most professional service possible. The information controlled by CONEX DISTRIBUTION S.A may be transferred, transmitted or stored and processed in the EU or in countries other than the country in which you reside, for the purposes described in this policy. These data transfers are necessary in order for us to be able to provide you with the highest level of service, as well as to continue to provide you with our materials to the highest professional standard. We use standard contractual clauses approved by the European Commission and rely on the adequacy decisions issued by the European Commission with respect to particular countries, where applicable, in relation to transfers of data from the EEA to the United States and other countries.

Security of processing

CONEX DISTRIBUTION S.A has adopted technical and organisational data processing measures, updated in accordance with GDPR requirements, in order to protect your personal data against any unauthorised access, improper use or disclosure, unauthorised modification, destruction or accidental loss. All employees and collaborators of CONEX DISTRIBUTION S.A., as well as any third parties acting on behalf of and for the account of CONEX DISTRIBUTION S.A. are obliged to respect the confidentiality of your information and the requirements of the GDPR , in accordance with the provisions of the DPP .

Disclaimer

The www.krossoil.ro website may contain links to other websites and/or other web pages that are not the property of CONEX DISTRIBUTION S.A. CONEX DISTRIBUTION S.A. assumes no responsibility for the content of such websites and therefore cannot be held responsible for the content, advertising, goods, services, software, information or other materials available on or through such websites. CONEX DISTRIBUTION S.A shall not be liable for the loss of personal data, for any negative effects on the personal data of visitors or for any other moral and/or patrimonial damages caused by the access to those websites.

Updating the personal data protection and processing policy

Please note that this Policy may be subject to periodic changes in content by updating www.krossoil.ro.

Contact

If you have any questions or concerns about how we process and use your personal data, or if you wish to exercise any of your rights, please contact us at [email protected].
-by post, to the above postal address;
-using the contact forms on this website;
-by telephone, at the contact numbers published on this website; or
- by e-mail, using the e-mail addresses published on this website