Processing of personal data
To ensure compliance with website users’ right to the protection of personal data, we have implemented specific protection measures, taking into account Romanian legislation as well as the requirements set out by Regulation (EU) 2017/679 – applicable throughout the European Union as of May 25, 2018 (the “Regulation”).
Personal data means any information by which you can be identified, in particular by an identifier such as a name, an identification number, location data, an online identifier, or one or more elements related to your physical, physiological, genetic, mental, economic, cultural, or social identity.
Our company takes all necessary measures to ensure compliance with your right to the protection of personal data, and these terms constitute the notice set out by Article 13 or 14 of the Regulation, through which we explain why we collect your personal data, how we protect it, and what your rights are in relation to this data collection.
We encourage you to read this document carefully and to request from us any additional information or clarification you consider necessary regarding the content of this notice.
a) General considerations regarding your personal data
In accordance with Regulation (EU) 2017/679, DADA FLOWER will manage, under secure conditions and only for the specified purposes, the personal data provided by Users. Through the Terms and Conditions, Users are informed that the personal data they provide will be processed for the purpose of enabling DADA FLOWER to optimally provide internet services, goods and services supply services, advertising, marketing and publicity services, and statistical services.
DADA FLOWER carries out the following processing operations: collection, recording, organization, storage, adaptation, modification, retrieval, consultation, use and, in some cases, disclosure to third parties, exclusively on the regulated basis of a commercial contract that ensures data security and confidentiality, as well as the observance of the user’s rights, of the personal data of the website Users, in order to administer, maintain, improve and obtain information regarding the services it provides, as well as to prevent errors and information leaks through its own IT network, breaches of the law or contractual terms.
The personal data to be collected may also be used, including through the automatic creation of profiles (for those Users who have given their explicit consent), to personalize as much as possible the services offered to Users through the website, as well as for marketing purposes. Automatic profile creation will not target minors’ data, as their personal data will not be processed for this purpose.
Personal data will be provided by Users, at their own option, when creating a valid account on the website or subscribing to a service available on the website, in order to benefit from the services and products offered through it. When registering on the website, the User is asked for certain personal data, such as first and last name, gender, date of birth, email address, phone number, profession, habits/preferences/behavior, as well as other personal information.
The User is solely responsible for all data provided when creating the user account on the website. To confirm the data and the account, the User will be notified at the email address declared when creating the account. This confirmation email is intended to stop fraudulent actions by users who use other people’s email addresses to create fictitious accounts. If you receive such a message, although you have not personally registered on the website, please send us an email at office@academy.dadaflower.ro so that we can delete that account within a maximum of 3 business days. The email will include, in PDF format, the current version of this Contract as well.
The User profile form contains fields that can be edited if you wish to modify or complete the data provided when creating the account.
The User is not obliged to provide this data; it is necessary for (i) records regarding the use of the website and (ii) the optimal provision of services through it, for informing you about promotional campaigns, for advertising purposes, for personalized marketing and publicity actions, and for the User’s access to additional features. The User’s refusal to provide the requested data results in non-participation in promotional actions organized through the website and the non-use of features and additional services offered exclusively to Users with an account on this website.
The website may also be used if the User decides not to create a profile by providing personal data, with the exceptions set out in the Cookie Policy (an integral part of this Contract).
According to Regulation (EU) 2017/679 and Law no. 677/2001, Users benefit from the right of access, the right to intervene on the data, the right not to be subject to an individual decision, and the right to address the courts. At the same time, Users have the right to object to the processing of personal data concerning them and to request the deletion of the data.
To exercise these rights, Users may submit a written request to this effect, which they will send by email to office@academy.dadaflower.ro with the specification “Personal data request”.
The website undertakes not to send spam messages (commercial messages for which it does not have the User’s explicit prior consent) and to take all accessible technical means to ensure the security and confidentiality of the user’s data.
The website reserves the right to terminate, without prior notice, the accounts and access of members who violate the Terms and Conditions, who engage in proven activities of fraud, slander, or attacks on the security and confidentiality of information within the website or of the company operating the website.
b) The personal data we collect, the legal bases for collection, and the purposes of collection
Within the online communication relationship established between the website and the user, we collect and process your personal data, and the collection and processing of this data is necessary to provide informational and promotional content to the user, following the user’s voluntary completion of personal data on the website, by accessing one or more of the sections: account creation, account update, newsletter subscription, online questionnaire completion, online form completion, to obtain personalized information or commercial benefits, within the campaigns promoted on the website.
The legal bases for collecting personal data on the website may be as follows:
- the data subject has given consent to the processing of personal data for one or more specific purposes
- processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
- processing is necessary for compliance with a legal obligation to which the controller is subject.
- processing is necessary to protect the vital interests of the data subject or of another natural person
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, in particular where the data subject is a child.
In the lists below, we present in detail what personal data is collected, as well as the legal basis, purpose, and duration of its collection. Providing the data indicated below is not mandatory to view the Website, except for those relating to Cookies.
The indicated data is necessary only to provide specific services for the Users who submit it.
Personal data we collect:
First name, last name, email address, phone number, geographic location data, correspondence address, social media profile links
Legal bases for collecting this data: 1), 6)
Purposes of collecting personal data:
To provide access to content and responses to questions and requests submitted by the user online, to send communications, offers and benefits consisting of access to services and products
Method and period of data collection:
Within the secure database, until the user expressly requests deletion or up to 10 years from the user’s last activity on the website. After 10 years, the data will be electronically anonymized.
Personal data we collect:
Cookies, timestamps (date and time of access), browsing history on the website
Legal bases for collecting this data: 1), 6)
Purposes of collecting personal data:
To monitor website traffic and its access history, to create a content hierarchy and identify the most relevant content for the user.
Method and period of data collection:
Within the secure database, until the user expressly requests deletion or up to 10 years from the user’s last activity on the website. After 10 years, the data will be electronically anonymized.
c) How your personal data is stored, location, retention period
We will store your personal data for a period that does not exceed the period necessary to fulfill the purposes for which the data is processed, and, where we have a legal obligation to retain your personal data for a certain period of time, the retention period will be that provided by law. Depending on the specific situation, this period will vary and may range between 1 day and 10 years.
For a better understanding of the storage method, the location where your personal data will be stored, and the exact period for which this data will be kept in our records or systems, please consult the table above.
In order to guarantee the user’s right to be protected with regard to the processing of personal data, we implement, for certain categories of data of a sensitive nature or that may significantly affect rights, special technical and organizational measures to protect these categories of personal data.
d) Users’ rights regarding personal data and how to exercise them
In order to protect data to the highest possible standard, the user has a series of rights regulated by law, which we briefly present below. For any additional details, please do not hesitate to contact the person responsible for personal data protection within our Company, using the following contact details: office@academy.dadaflower.ro, Sat Simila Com. Zorleni, Str. Republicii, Nr.2, Simila, County: Vaslui, phone 0745048008.
Right of access
The user has the right to obtain access to their personal data that we process, as well as the right to obtain copies thereof. At the user’s request, the first such copy will be provided by us free of charge, and any additional copies you request may be subject to a fee corresponding to the effort required for extraction and formatting for transmission. A copy of the personal data may be provided either in electronic format or in physical format, depending on your request and the nature of the requested data. To request information about the personal data existing on the website, as well as to request partial or total deletion of this data, the request must be submitted using the email address office@academy.dadaflower.ro or sent by letter via post or courier to the registered office of DADA FLOWER.
The user also has the right to obtain any additional relevant information (such as the reason for processing personal data, the categories of personal data we collect, information regarding the processing and disclosure of this data, and any other such information).
Right to rectification of data
The user has the right to obtain the rectification of any inaccuracies regarding their personal data processed by us. They also have the right to obtain the completion of any personal data that is incomplete. Any user is encouraged to contact the website at office@academy.dadaflower.ro whenever they notice that there is an inaccuracy regarding their personal data or that their personal data processed by DADA FLOWER is incomplete.
Right to erasure of data
The user has the right to the erasure of personal data. This right is not an absolute right, which means that the law establishes certain limitations regarding the exercise of this right (“the right to be forgotten”).
Right to restriction of data processing
The user has the right to obtain restriction of the processing of their personal data that we collect and process, especially where they contest the accuracy of the data, where the processing is unlawful, or where the processing is no longer necessary, according to the law.
Right to object
The user has the right to object to the processing of personal data by us, especially where processing is carried out for marketing purposes or for reasons related to their particular situation, in which case their data must be anonymized as soon as possible from the website database upon receipt of the objection, and the anonymization must be confirmed to the user.
Right to withdraw consent
For personal data processed on the basis of consent, the user has the right to withdraw their consent at any time, as easily as they initially gave it. Withdrawal of consent will not, however, affect the lawfulness of processing carried out before the withdrawal. The right to withdraw consent is not absolute, which means there are cases where the data will not be deleted as a result of withdrawing consent (for example, where personal data is used for the website to comply with a legal obligation). The withdrawal takes effect from the moment it is registered, and the withdrawal will be processed within a maximum of 3 business days from registration.
Right to lodge a complaint with the competent authority
The user has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing regarding aspects related to the processing of personal data by our Company.
Automated decision-making, including profiling, and the right to request that decisions based on automated processing of data or that significantly affect you be made by natural persons, not exclusively by computers
Personal data is collected and processed through an automated decision-making process in order to personalize the information and commercial communications addressed to you. The automated decision-making process involving health data is based on your explicit consent.
Within these processes, your data is protected through special security measures such as data encryption and advanced server-level security for the database.
You have the right to request changes to the way your personal data is processed automatically, by requesting verification of the automated process through human intervention. For this purpose, please contact us at office@academy.dadaflower.ro.
e) Exercising your rights
In order for the user to be able to exercise the rights specified above, to ask us any questions regarding these rights, or to request clarifications regarding any of the provisions of this notice, please contact us at any time using the contact information.
How requests or complaints can be submitted – contact person
To find out more information about personal data, about how data is collected, processed and protected, or to request any clarification regarding what is mentioned in these Terms and Conditions, any user may contact at any time the person responsible for personal data protection within the company, by email at office@academy.dadaflower.ro or by postal correspondence at Sat Simila Com. Zorleni, Str. Republicii, Nr.2, Simila, County: Vaslui.
