We consider ensuring the right to personal data protection as a fundamental commitment of SC NIKPOOR ENTERPRISE SRL. Therefore, we will dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other applicable legislation in Romania, including Law no. 190/2018 on measures to implement the GDPR. As transparency is one of the essential principles of this legal framework, we have prepared this document to inform you about how we collect, use, transfer, and protect your personal data when you interact with us regarding our products and services, including through our website or mobile applications.
Data We Collect
We may collect the following types of personal data:
- Contact Information: Name, address, email address, and phone number.
- Account Information: Username, password, and other authentication details.
- Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
How We Use Your Data
We will use your personal data only for the following purposes:
- To provide and manage our services: This includes processing your orders, managing your account, and providing customer support.
- To communicate with you: Sending you notifications about your transactions, changes to our policies, and other administrative information.
- To improve our services: Conducting research and analysis to understand how our services are used and how we can improve them.
- To ensure security: Protecting our website and systems from unauthorized access and misuse.
- To comply with legal obligations: This includes reporting to authorities, complying with legal processes, and fulfilling regulatory requirements.
Legal Basis for Processing
We will process your personal data based on one or more of the following legal grounds:
- Performance of a contract: Where the processing is necessary for the performance of a contract to which you are a party.
- Consent: Where you have provided your explicit consent for the processing.
- Legal obligation: Where the processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate interests: Where the processing is necessary for the purposes of legitimate interests pursued by us or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Your Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include:
- Access to your personal data: You have the right to request access to the personal data we hold about you.
- Correction of your personal data: You have the right to request correction of the personal data that we hold about you.
- Erasure of your personal data: You have the right to request erasure of your personal data where there is no good reason for us continuing to process it.
- Object to processing of your personal data: You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request restriction of processing your personal data: You have the right to request the restriction of processing of your personal data.
- Request transfer of your personal data: You have the right to request the transfer of your personal data to you or to a third party.
- Right to withdraw consent: You have the right to withdraw consent at any time where we are relying on consent to process your personal data.
Who We Are and How to Contact Us
SC NIKPOOR ENTERPRISE SRL is a Romanian legal entity, with its registered office at Soseaua Linia de Centura Dreapta, Nr.68, Afumati, Ilfov, registered with the Trade Register under no. J23/2918/2017, unique fiscal registration code RO 37750443 (hereinafter referred to as “Nikpoor Enterprise”). Under data protection legislation, we are the data controller when processing your personal data.
As we are always open to hearing your opinions and providing you with any additional information you may need regarding the processing of your data, we encourage you to contact us at the email address Nikpoor.enterprise.srl@gmail.com or by mail or courier at the address Soseaua Linia de Centura Dreapta, Nr.68, Afumati, Ilfov – marked for the attention of the Data Protection Officer.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.
We encourage you to review this Privacy Policy periodically to be informed about how we are protecting your personal data.