PRIVACY POLICY


Privacy policy
Last updated: May 2018

I. General informations
The privacy of your personal data is one of the main concerns of SMILEY DESIGN SRL, with registered office in Cluj-Napoca No. 3 Scarisoara  Street, Cluj County, Romania, as Data Controller.
This document is intended to inform you about the processing of your personal data in the context of using www.victoriasmirror.ro website. (the ‘Website’).

II. Categories of processed personal data
II.1. If you are a customer of the website, SMILEY DESIGN shall process your personal data such as your first and last name, telephone, email address, billing address, delivery address, data on how you use the website, for example your SMILEY DESIGN behavior / preferences / habits, as well as any other categories of data that you directly provide in the context of placing an order via the website or in any other way resulting from the use of the website.
If you use your Facebook or Google account, SMILEY DESIGN shall process the following public profile data displayed by those applications: Username, email address. If you are a visitor of the website, SMILEY DESIGN shall process your personal data that you provide directly in the context of using the website, such as the data you provide in the Contact / Questions / Complaints section, to the extent you contact us in this way.

III. The purposes and ground of the processing
III.1. If you are a customer of the website, SMILEY DESIGN processes your personal data as follows:
for the contractual relationship between you and SMILEY DESIGN, respectively for the takeover, validation, dispatch and billing of the order if it is placed on the website, your order status information, cooperation and delivery conditions, etc.
Grounds: Processing your data for this purpose is based on the established contractual relationship.
The provision of your personal data is required between you and SMILEY DESIGN, for the performance of this commercial relationship. Refusing to provide data may result in the impossibility of carrying out the contractual relationship between you and SMILEY DESIGN
for the fulfillment of the legal obligations of SMILEY DESIGN in the context of the services provided through the website, including tax and archiving obligations.
Grounds: Processing of your data for this purpose is required on the basis of statutory obligations. Providing your data for this purpose is required. Refusing to provide data may result in SMILEY DESIGN being unable to comply with its statutory obligations and, therefore, unable to provide you services through the website for marketing activities and for sending, by means of distance communication (email, sms), commercial information on the products and services provided by SMILEY DESIGN via the website.
Grounds: Processing your data for this purpose is based on your consent, if you choose to grant it.
Providing your data for this purpose is optional. Refusing to provide consent to process your data for this purpose shall not have negative consequences for you.
For the purpose of conducting various surveys, reporting on how the website works, creating consumer preference profiles, mainly to improve the experience on the website.
Grounds: The processing of your data for this purpose is based on the legitimate interest of SMILEY DESIGN to permanently improve the customer experience on the website. Providing your data for this purpose is optional. Refusing to provide data for this purpose shall not have any negative consequences for you.
III.2. If you are a visitor of the website, SMILEY DESIGN processes your personal data as follows:
For marketing activities and for sending, by means of distance communication (email, sms), commercial information on the products and services provided by SMILEY DESIGN via the website.
Grounds: Processing your data for this purpose is based on your consent, if you choose to grant it.
You can express your consent to data processing for this purpose by filling in and ticking the corresponding box in the newsletter subscription form available on the website. For unsubscribing from receiving such commercial communications, you can use the option at the end of each email / sms containing commercial communications.
Providing your data for this purpose is optional. Refusing to provide consent to process your data for this purpose shall not have negative consequences for you.
To resolve complaints and to monitor traffic and improve your experience on the website.
Grounds: The processing of your data for this purpose is based on the legitimate interest of SMILEY DESIGN in guaranteeing the correct functioning of the website, as well as in continually improving the visitor experience of the website, including by solving various comments, questions or complaints.
Providing your data for this purpose is optional. Refusing to provide data for this purpose shall not have any negative consequences for you.

IV. The period of time over which we process your data
As a matter of principle, SMILEY DESIGN shall process your personal data for as long as is necessary to achieve the above-mentioned processing goals. If you are a customer, we shall process your data for the duration of the contractual relationship and subsequently in accordance with the legal obligations incumbent upon SMILEY DESIGN (for example, in the case of financial and accounting documents for which the statutory retention period is 10 years from the end of the financial year in which they were drawn up).
If you do not want your personal data to be processed or you want to delete the data, you can exercise the rights detailed in Section VII below. If you withdraw your consent to data processing for marketing purposes, SMILEY DESIGN shall cease processing your personal data for this purpose without affecting the processing carried out by SMILEY DESIGN on the basis of your consent before withdrawing it.

V. Disclosure of personal data
For processing purposes, SMILEY DESIGN may disclose your data to partners, third persons or entities supporting activities through the website (for example, courier companies, IT service providers), or the central public/local authorities, in the following cases: for website administration; In cases where such notification would be required for the awarding of prizes or other facilities to the data subjects, obtained as a result of their participation in various promotional campaigns organized by Amplusnet Srl via the website; To maintain, improve and personalise the website and services thereof;
For data analysis, testing and research, monitoring usage and activity trends, development of safety characteristics and user authentication; For sending marketing commercial communications under the conditions and limits provided by law; When the disclosure of personal data is provided by law etc.

VI. Transfer of personal data
Personal data provided to SMILEY DESIGN SRL can be transferred outside Romania, but only to countries in the European Union.

VII. Your Rights
Under the legislation governing the processing of personal data, as data subject, you have the following rights:
– The right to information, i.e. the right to receive details of the processing activities performed by SMILEY DESIGN, as described herein;
– The right of access to data, i.e. the right to obtain confirmation from SMILEY DESIGN with regard to the processing of personal data, as well as details of the processing activities and the manner in which the data are processed, the purposes of the processing, the recipients or categories of recipients of the data, etc.;
– The right to rectification, i.e. the right to obtain the correction, without undue delay, by SMILEY DESIGN of inaccurate and incomplete personal data; Correction/completion shall be communicated to each recipient to whom the data have been submitted, unless this proves impossible or involves a disproportionate effort.
– The right to delete your data, without undue delay, (the ‘right to be forgotten’), if the any of the following reasons applies:
* The data are no longer necessary for the purposes for which they were collected or processed;
* Where the consent is withdrawn and there are no other legal grounds for the processing;
* Where the data subject opposes to the processing for legitimate reasons, and there is no reason to prevail;
* Where personal data has been processed unlawfully;
* In the event that personal data must be deleted to comply with a statutory obligation;
* Personal data have been collected in connection with the provision of services of the information company according to the Union law or the internal law under which the data controller operates.
It is possible that, following the request for data deletion, SMILEY DESIGN may anonymize this data (thus depriving it of its personal nature) and continue processing for statistical purposes under these conditions;
– The right to restrict processing to the extent that:
** The person challenges the accuracy of the data, for a period that allows us to verify the correctness of the data;
** The processing is illegal and the data subject opposes the deletion of personal data, but instead calls for restriction of their use;
** The data controller no longer requires personal data for processing, but the data subject requests them in order to ascertain, exercise or defend a right in court; Or the data subject opposed to processing (other than direct marketing) for the period of time during which it is checked whether the legitimate rights of the data controller prevail over the data subject’s rights.
– The right to data portability, respectively (i) the right to receive personal data in a structured way, commonly used in an easy-to-read format, and (ii) the right to transmit such data by SMILEY DESIGN to another data controller, provided that the conditions of law are met;
– The right to object – in respect of processing activities may be exercised by submitting a request as stated below;
** At any time, for reasons related to the particular circumstances of the data subject, that the data concerning it be processed under the SMILEY DESIGN’s legitimate interest or the public interest, unless SMILEY DESIGN can demonstrate that has legitimate and compelling reasons which justify the processing and which prevails over the interests, rights and freedoms of the data subject, or that the purpose is to establish, exercise or defend a right in court;
** At any time, free of charge and without any justification, that the data concerning it be processed for direct marketing purposes.
– The right not to be subject to an automatic individual decision, namely the right not to be the subject of a decision taken solely on the basis of automatic processing activities, including the creation of profiles, which produces legal effects affecting the data subject or affecting it similarly to a significant extent;
– The right to address to the National Supervisory Authority for Personal Data Processing or the competent courts, to the extent that you consider it necessary.
For any additional questions about how your personal data is processed and to exercise your rights stated above, please send an email to: office@victoriasmirror.ro.