Privacy policy

The Company processes a range of personal data of users (whether registered or not) when they use the website https://palatulbrukenthalavrig.ro/ and/or any service offered by our Company.
This Privacy Policy describes what types of personal data are processed, how they are used, what choices you have in relation to this processing and how we respect your rights as a data subject under personal data protection legislation, including Regulation (EU) 2016/679 (“GDPR”).
BEFORE USING THE WEBSITE OR ANY OF OUR SERVICES, WE RECOMMEND THAT YOU READ THIS POLICY CAREFULLY TO UNDERSTAND HOW YOUR PERSONAL DATA WILL BE PROCESSED.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Palatul Brukenthal Avrig, based in Romania, is the controller of personal data processing, in accordance with the legislation on personal data protection, including GDPR, in relation to the personal data of users collected and processed through the website https://palatulbrukenthalavrig.ro/ and/or in connection with the services offered through or in connection with the website.
For the processing of personal data, the company can be contacted using the following contact details:

WHICH DATA DO WE PROCESS?

The company processes the personal data you provide us with when you use the website, register on our site, order a service, subscribe to our campaigns (and/or campaigns organized jointly with our partners), wish to receive commercial communications or participate in our surveys and questionnaires or contact us by any means of communication. If you contact our company Palatul Brukenthal Avrig via the contact form on the website https://palatulbrukenthalavrig. ro/, the data you provide (surname, first name, address, telephone, e-mail and any other personal data provided) will be stored and processed only after you have ticked the explicit consent box at the bottom of the contact form. We also allow others to use cookies. How we use these technologies is described in our cookie policy.

SPREADING PERSONALIZED OFFERS

In certain situations, we may use information we collect from you in combination with data we receive from our sales and/or marketing teams about your interaction with the Company for use in our marketing communications. We aim to make our marketing activities more effective by providing relevant and personalized products/services to our customers [We may also, if you consent, perform advanced analytics about your interests and preferences arising from the information we hold about you from your interaction with us and by combining data we have received from third parties (e.g. through web browsing analytics technologies) to deliver marketing communications tailored to your needs and preferences]. We may perform various reports, analyses and statistical studies on organized marketing campaigns and their success, sales activities and execution.

PROCESSING YOUR CONTRACT WITH US

If you request the provision of certain services, we may process certain personal data necessary for these purposes (e.g. first and last name, delivery/service address, transaction data, etc.).

USER AND SUPPORT ADMINISTRATION

It is in our interest to provide appropriate services to all persons accessing the Website. Therefore, we process a range of personal data to manage the relationship with users of the Website, e.g. when they contact us with various questions or requests regarding the Website’s features, questions about the Company’s services offered through the Website, etc. Legal basis: Art. 6(1)(f) GDPR – legitimate interest consisting of our interest in providing appropriate services.

ANALYSES AND STATISTICS ON THE OPERATION OF THE WEBSITE, COOKIES AND SIMILAR TECHNOLOGIES

We may use the personal data that users provide to us or that we collect in connection with the use of the services to carry out analyses and statistics about our services, including the functioning of the website or the services offered. The analytics and statistics we perform help us to better understand how we can improve our services or the functionality of the website, and we also use cookies and other similar technologies when performing analytics and statistics, as described in the Cookie Policy. Cookies and similar technologies are also used to provide you with interest-based advertising.

CONNECTION THROUGH SOCIAL NETWORKS

We have implemented various mechanisms to connect with social networks such as Facebook, Twitter, YouTube and Instagram to make it easier for you to access the content we publish on the Website and on our accounts on these social networks. If you access or comment on the content posted on these social networks or access the Website via your Facebook account, certain public data from your profile on these social networks will be transmitted to us by the operators of these social networks.

COMPLIANCE WITH LEGAL OBLIGATIONS

Sometimes the processing of data is necessary for us to comply with our legal obligations, such as – reporting to the relevant tax authorities and record keeping; – archiving data in accordance with applicable law.

DECLARATION OF RIGHTS AND INTERESTS IN THE JURISDICTION

For the establishment, exercise or defense of a legal claim in a judicial proceeding, administrative proceeding or other governmental proceeding to which the Company is a party.

TO WHOM WE SHARE DATA

We may disclose your personal data to (i) entities and/or persons (in the EEA or in third countries) engaged by us who are involved in the provision of the Services, including the provision of marketing communications (e.g. data center providers, payment service providers for various payment options, email platform providers such as Gmail), or if we are under a duty to disclose personal data in order to comply with any legal obligation or the decision of a judicial authority, public authority or government agency; or (iii) if we are required or otherwise permitted to do so under applicable law. Your personal data may also be shared with third party providers of cookies and similar technologies as described in the Cookie Policy.

HOW WE KEEP YOUR DATA

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to our internal data retention procedures, including applicable archiving requirements. For example, if you are a customer of ours, your personal data will be retained for the entire duration of the contractual relationship, plus a minimum period of 3 years after its termination (limitation period for legal action). Thereafter, certain personal data may be retained longer for archiving purposes in accordance with the applicable archiving regulations.

WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?

Under the law, you have the following rights as a data subject:
(a) Right of access You can obtain confirmation from us that we are processing your personal data and information about the details of the processing
b) Right to rectification You can ask us to rectify your personal data if it is inaccurate or, if necessary, to complete incomplete data.
c) Right to erasure You may request the erasure of your personal data if: (i) the data is no longer necessary for the purposes for which we collect and process it; (ii) you have withdrawn your consent to the processing of the data and we can no longer process it for other lawful reasons; (iii) the data is processed in breach of the law; or (iv) the data must be erased in accordance with the relevant legislation.
(d) Withdrawal of consent and right to object You may withdraw your consent to the processing of data based on your consent at any time. You may also object at any time to processing for marketing purposes, including profiling carried out for this purpose, as well as to processing based on the Company’s legitimate interest for reasons relating to your situation. Specific.
e) Restriction Under certain conditions, you may request the restriction of the processing of your data. Personal data
f) The right to data portability Insofar as we process data automatically, you can request that we provide your data in a structured, commonly used and machine-readable form within the framework of the statutory provisions. If you ask us to do so, we can transfer your data to another location if this is technically possible.
g) Right to lodge a complaint with the supervisory authority You have the right to lodge a complaint with the supervisory authority for data processing if you believe that your rights have been violated:Autoritatea Nationala pentru Supravegerea Dateelor cu Caracter Personal din Romania B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, postal code 010336 Bucharest, Romania
TO EXERCISE THE RIGHTS MENTIONED ABOVE, YOU CAN CONTACT US AT THE FOLLOWING E-MAIL ADDRESS: