The confidentiality of your personal data is one of the main concerns of SC SHIVA SPA SRL, based in ȘELIMBĂR, Sibiu county, CUI 39404420, J32/761/2018 as data controller.
This document is intended to inform you about the processing of your personal data in the context of the use of the website https://alinanitu.com.
Alinanitu.com, is committed to protecting any information that identifies or can help identify a natural person (“personal data”), which it collects, processes and/or has access to.
The way in which personal information is collected, processed, transmitted and shared depends on the purposes and legal grounds on which the collection and processing of such data is carried out, as well as on the specific consent given by you to this effect.
Through this Personal Data Protection Policy (hereinafter referred to as the “GDPR Policy”) we want to ensure that you have access to adequate information about the collection and processing of your personal data as required by the applicable regulations on the protection of personal data.
This Personal Data Processing Policy may be supplemented by the terms and conditions that apply on this website or to which you have consented by interacting with us.
What is personal data?
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
What is processing of personal data?
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
We collect your data in accordance with the principles of processing and collection of personal data.
Your personal data is processed lawfully, fairly and transparently towards you. It is collected for specified, explicit and legitimate purposes and is not further processed in a way incompatible with those purposes. Your personal data is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed ensuring at all times that we only process data that is strictly necessary. We strive to ensure that your personal data is accurate and, where necessary, kept up to date. We ensure that we take all necessary steps to ensure that personal data which is inaccurate, having regard to the purposes for which it is processed, is deleted or rectified without delay. Your data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed; personal data may be stored for longer periods insofar as they will be processed solely for the discharge of legal obligations, subject to the implementation of appropriate technical and organisational measures provided for in the Regulation to safeguard the rights and freedoms of the data subject. Your data shall be processed in a way that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or accidental damage, by taking appropriate technical or organisational measures.
Technical and organisational measures
We ensure the necessary technical and organisational measures for the secure collection, processing and storage of data, including against unauthorised access, unauthorised use of data, or destruction, loss or alteration of data. We are committed to keeping your personal data secure and take all reasonable safeguards to do so.
We implement systematic processes to train individuals responsible for IT security and to monitor and audit the security of IT systems and infrastructures in accordance with policies.
In addition, we make all reasonable efforts to ensure (including through contracts with them) that our trusted partners also manage appropriate technical and organisational measures for the processing of the data we share with them.
What data do we process?
For the purpose of communicating materials for marketing purposes, we process the following personal data: email address, first and last name and telephone number. Please do not provide us with any other personal data.
In order to place online orders for voucher, eVoucher or spa card you agree to entrust us with personal data first and last name, age, gender, email address, phone number, city and home address, general geo-location of the device from which you browse/login to your customer account, information about products and services purchased, your usage and activities on the Online platform; interests and preferences related to alinanitu.com products other information depending on the product or service requested. We also do not collect personal data on minors. Bank account, bank and card data (card type, card number, cardholder name, expiry date and security code) are not retained and stored by the alinanitu.com platform but directly by the financial service providers.
In addition to the personal data of clients, SC SHIVA SPA SRL may also collect personal data of partners, job applicants, employees, readers, site users, community members, registered consultants, event participants, etc.
Data of minors.
SC SHIVA SPA SRL does not allow the processing of personal data of customers under the age of 18.
Basis and purposes of processing personal data
Personal data provided with your consent will be collected and processed by us exclusively for the purpose of providing the requested service, your use of customer service or to send you commercial information and materials for marketing purposes (e.g., offers, holiday greetings, other information in connection with the provision of our services, etc.), other communications, security and fraud detection and prevention, legal reasons, communication with you.
Sales and orders: alinanitu.com uses your personal data for the purpose of completing and administering your order.
Customer service: we use the data we request from you in order to offer you our services to the highest standards.
Marketing activities: alinanitu.com uses your personal data for marketing activities. Where we carry out direct marketing activities such as commercial newsletters and communications about our products and services, we will also include an unsubscribe link that you can use when you no longer wish to receive messages from us. We may also invite you via email to write a comment on our website about the product or service you have purchased. If you send a comment, it may be posted on our website.
Other communications: there may also be situations where we contact you by e-mail, text message, or other means of communication depending on the contact details you have provided for various reasons:
Completion/delivery of an on-line service;
Solving your requirements.
Security, fraud detection and prevention: we may use a range of personal data you provide to prevent and investigate fraud. We may disclose personal data to third parties (authorities) as required by law and to our external consultants.
Legal reasons: there may be situations where we need to process personal data to resolve legal disputes or complaints or to comply with requests from law enforcement authorities to the extent that there are legal provisions governing such requests.
In accordance with the provisions of Article 6 para. 1 of Regulation 679/2016, the legal grounds for the processing described above are: contract, consent, legal obligation and legitimate interest.
Taking into account the purposes envisaged in points I and II, we rely on the performance of a contract for the supply of products and/or the provision of services. The use of your data is necessary for the fulfilment of the purpose of the contract you have with us (e.g. if you use our services to place an order online, alinanitu.com will use your data to be able to fulfil the obligation assumed by the contract concluded between the parties, namely to complete and administer the order placed by you).
For the purposes envisaged in point III, alinanitu.com will obtain your consent before processing personal data for direct marketing purposes. Your consent will be given in a transparent manner, in an understandable and easily accessible form, with clear and simple language. We ensure that consent can be withdrawn at any time. Your consent will not be linked or conditioned to the delivery of goods or provision of services by alinanitu.com. In this case your lack of consent will in no way affect our relationship with you or the delivery of goods or services.
In view of the purposes in points III, IV and VI, we base our processing of personal data on our legitimate interests. When we use your personal data to serve our commercial interests we guarantee that we will balance your rights and interests in protecting your information against our rights and interests and ensure appropriate technical and organisational measures. Our interest considers aspects such as providing, maintaining and improving our services, developing new services and features.
According to Article 6 para. 1 lit. a of Regulation 679/2016 (GDPR) personal data may be processed if the data subject has consented to the processing of his or her personal data for one or more specific purposes. In this regard, we inform you that if we need to process your personal data for purposes other than those for which we have requested your consent, in order to fulfil our business purpose, we will also request your consent for the processing of this data.
Below is a summary of the Personal Data we process, how it is processed, the purpose, the legal basis for processing and the source of the data.
Data provided directly by the data subject for placing orders for voucher, eVoucher or spa card, delivery of products, payment of products, return/withdrawal payment. Customer care and support. Choose the desired products and place the order. Delivery is made to the indicated address, which is your home address or another indicated address. The following data is collected and processed for each order placed: name and surname; delivery address; e-mail address; telephone number. Providing the necessary support for processing by the entity authorised to mediate payment for the products ordered.
The details of the card used to pay for the products online are not accessible and are not stored by SC SHIVA SPA SRL, but only by the entity authorized to provide services for storing card identification data. It is possible to process only the following data that we transmit to the online payment/transaction authorization partner: name, surname; order ID; transaction initiation date, completion date; transaction ID; payment status (payment made/not made); transaction amount. For order return/cancellation: IBAN and bank where you opened your bank account. The legal basis of the data processing is the performance of the contract. The processing is necessary for the performance of a contract to which the data subject is a party. The processing is necessary to be able to honour orders, to deliver and hand over products. To provide the necessary support for processing by the entity authorised to mediate payment for the products ordered.
Data provided directly by the data subject for the purpose of promotional, loyalty, contest, promotion or sweepstakes campaigns. For the purpose of participation in competitions and the awarding of prizes. For the purpose of implementing marketing policy. Alinanitu.com may grant discounts and benefits related to our loyalty actions (in the form of vouchers, discounts, etc.). For loyalty actions, online contests run on the site we collect the e-mail address and, depending on the campaign, the following personal data necessary to participate in the contest, respectively, to validate the winners: name and surname; e-mail address, or; telephone number, with the legal basis of consent. Consent may be given by any freely given, specific, informed and unambiguous expression of will by the data subject whereby he or she accepts, by means of a statement or an unambiguous action, that personal data concerning him or her may be processed. You have the right to withdraw your consent at any time. Withdrawing consent can be done as simply as giving it.
Personal data collected automatically for the creation of customer profiles for direct marketing and online behavioural advertising purposes. Depending on visitor or customer interactions and behaviour, personal data is collected and processed for customer profiling. For the creation of this profile we process the following data: name, surname, e-mail and/or correspondence address and mobile phone number; history of interactions with alinanitu.com: products viewed, searched or ordered; orders initiated and completed or cancelled; online identifiers (cookies) obtained from the device used when accessing alinanitu.com. Based on your browsing and online behavior, monitored by cookies, we may provide online advertisements to some of our products may be in line with your specific interests. Based on your Online browsing information you are placed in an interest group with other similar customers as to browsing behavior and we will thus deliver advertisements based on those interests, legally based on consent. Opting out of online behavioral advertising will not stop the display of general advertisements, but they are no longer individualized based on specific interests. For profiling and sending personalised offers. For cookies that monitor online behaviour.
Personal data collected automatically to maintain and secure alinanitu.com. For the maintenance and security of the site we use: IP address; Internet browser and operating system version; HHTP/HTTPS protocol data. Based on legitimate interest, we implement and maintain the functionality and security measures of alinanitu.com . We process this data for: ensuring the functionality and security of the Online platform. Financial statements and reports the defense of rights in court and proceedings of state authorities. We process data for financial statements and for filing tax and accounting returns with the tax authorities. For legal actions to which we are a party or to protect interests against abusive or unjustified claims. To provide personal data to the competent authorities and institutions in the framework of proceedings/investigations or other steps provided for by law. To comply with legal obligations imposed by applicable tax and accounting legislation. To exercise and defend legitimate rights. To comply with specific legal obligations imposed by legal provisions.
Who has access to your data?
Datele cu caracter personal transmise de dvs. sunt prelucrate doar de SC SHIVA SPA SRL și nu vor fi comunicate altor terți fără acordul explicit al dvs. cu excepția cazurilor în care există o obligație legală/contractuală a noastră pentru a divulga aceste date.
SC SHIVA SPA SRL will communicate your personal data to banking and non-banking financial institutions, public authorities, judicial bodies, external consultants to whom we have outsourced the provision of certain services and to other categories of recipients. It is possible that, depending on certain specific circumstances, SC SHIVA SPA SRL may communicate your personal data to partners or third party service providers with whom it collaborates.
Please note that the alinanitu.com website may contain links to other websites that may have a different personal data processing policy than SC SHIVA SPA SRL , the undersigned does not assume any responsibility for the information submitted or collected by these third parties.
Depending on the context there is a possibility that we may find ourselves in the situation of providing information, both globally and internally or externally, to our partners with whom we transfer data in compliance with the provisions of Regulation 679/2016, by virtue of ensuring the most professional services. Information controlled by SC SHIVA SPA SRL may be transferred, transmitted, stored or processed in the EU or in countries other than the country in which you are resident for the purposes described in this policy.
How long is your data stored?
Personal data provided by you will be processed and stored for the maximum period required by applicable laws. Thus:
When you use our services, we keep your personal data for the duration of our contractual relationship and thereafter for the period set by financial accounting legislation, i.e. for a period of 10 years;
If you wish to send us various requests (e-mails requesting offers, questions about events) we keep your personal data for a period not exceeding 1 year from the last correspondence sent.
If you create an account on our website, your data will be kept until you decide to delete your account.
If you participate in a promotional offer, we will keep your personal data for the duration of the promotional offer and then for 90 days.
If you have given us consent to use your personal data for marketing purposes, we keep this data until you ask us to delete it or after the marketing campaign has ended, for 90 days. Please note that data stored in our database for direct marketing communications is deleted after 90 days have passed since your last interaction with us.
If cookies are stored on your computer, we keep them for as long as necessary to achieve the purposes and for a period defined in accordance with legal regulations. We mention that the data processed by cookies (to provide us with online behavioural advertising, to enable the distribution of our content on social media sites, etc.) will be kept for a maximum period of 1 year after their collection based on your consent.
SC SHIVA SPA SRL will review the need for further retention of your personal data: every 90 days we review the data collected and processed, with a view to filtering, sorting and maintaining processing only for data where the purpose of processing is current.
We delete your data at the time you request us to do so, except for data whose provision and processing is required by a legal provision, which we delete within the time limit prescribed by law for this.
What are your rights?
You have a number of rights under the applicable data protection regulations.
You have the right to obtain confirmation as to whether or not your personal data is being processed by us. In addition, you have the right to obtain more detailed information regarding the personal data stored and the processing of your personal data by us and, in certain circumstances, you have the right to obtain a copy of this personal data.
You have the right to request the rectification of inaccurate personal data and, taking into account the purpose for which they are processed, to request the completion of missing personal data.
Right to erasure of data. In certain cases, you have the right to have your personal data deleted without undue delay. These circumstances include:
When personal data is no longer necessary in relation to the purposes for which it was collected or processed;
when you withdraw your consent to consent-based processing;
when the processing is for direct marketing purposes;
when personal data have been processed without compliance with applicable law.
There are certain general exemptions from the right to erasure of data. These general exemptions include cases where processing is necessary:
- for the exercise of the right to freedom of expression and information;
- to fulfil legal obligations;
- for the establishment, exercise and defence of legal claims.
Right to restrict processing.In certain situations, you have the right to restrict the processing of your personal data. Where processing has been restricted, we may continue to store your personal data. Otherwise, we will process it only when:
we have your consent;
it is necessary for the establishment, exercise or defence of legal claims;
it is necessary to protect the rights of another natural or legal person;
for reasons of public interest.
You have the right to move, copy, transfer the data you are interested in from our database to another database. This only applies to data you have provided, where the processing is based on your consent or on the basis of a contract and is implemented by automated means. However, this right does not apply where exercising it would adversely affect the rights and freedoms of others.
Right to object. You may object at any time to the processing of your data when such processing is based on a legitimate interest.
Right to withdraw consent.To the extent that the lawful basis for processing data arises from your consent, you have the right to withdraw your consent at any time. Withdrawal of consent granted by you does not affect the lawfulness of processing based on consent prior to withdrawal of consent.
Right to disable cookies – you have the right to disable cookies in your internet browser settings which are usually programmed by default to accept cookies. Many cookies are used to enhance the usability or functionality of websites, so disabling cookies may prevent you from using certain parts or applications of the websites. If you wish to restrict or block all cookies set by our website/applications, you can do so by changing your browser settings. Link to the cookie policy of alinanitu.com .
Right to complain to the data protection supervisory authority.You have the right to register a complaint with your local data protection supervisory authority at any time. The data protection supervisory authority in Romania is:
National Supervisory Authority for Personal Data Processing
Address: Bld. General Gheorghe Magheru 28-30, 010336, Bucharest, Romania
Phone: +40318059211
Website: http://www.dataprotection.ro/
SC SHIVA SPA SRL does its best to protect your personal data and to comply with data protection regulations in force. If you have any complaints about the processing and protection of your personal data or about the information we have provided to you, we encourage you to notify us so that we can improve our services. Please also contact us without hesitation when you want to exercise your rights.
Please contact us using the contact details given at the beginning of this document. Please also provide us with information relevant to the processing of your request, including your full name and e-mail address, so that we can identify you. We will process your request without undue delay.
To help facilitate communication with you, we have designated a contact person who can be reached by e-mail at hello@alinanitu.com.
The processing of personal data shall be carried out by automatic and manual means, in compliance with legal requirements and under conditions ensuring security, confidentiality and respect for the rights of data subjects.
All documents containing personal data are recorded and follow the rules of storage, processing, duplication, transport, transmission, destruction and archiving established by the legal regulations in force and by internal procedures.
Prelucrarea datelor cu caracter personal se realizează prin mijloace automate și manuale, în conformitate cu cerințele legale și în condiții care să asigure securitatea, confidențialitatea și respectarea drepturilor persoanelor vizate.
Toate documentele care conțin date cu caracter personal sunt înregistrate și respectă regulile de stocare, prelucrare, duplicare, transport, transmitere, distrugere și arhivare stabilite prin reglementările legale în vigoare și prin procedurile interne.
How do you access your data?
You can change the data provided or request information about the processing of your personal data, including requests to exercise your rights by sending an email to the following address: hello@alinanitu.com, or if you have an account directly from your account settings.
You can unsubscribe from the newsletter by selecting the unsubscribe option in the footer of any newsletter sent.
SC SHIVA SPA SRL will provide the information in electronic format whenever possible, unless you request another format.
The information provided, as well as any communication to be sent in electronic format and the steps taken in the exercise by you of the above rights are provided by SC SHIVA SPA SRL and alinanitu.com free of charge. However, if your requests are unfounded or excessive, in particular due to their repetitive nature, SC SHIVA SPA SRL SRL may:
- charge a fee taking into account the administrative costs of providing the information or communication or taking the action requested;
- refuse to comply with the request.
