INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

This website is operated by SC Nevromedsan SRL (hereinafter "We"), with registered office in Sohodol, Str. Muchia Islazului no. 37, Jud. Brasov, registered at the ONRC Brasov under no. J08/2318/2005, with CUI RO17967333, a limited liability company of Romanian nationality.

We collect and process various categories of personal data from you as a user of http://www.naturenest.ro/, hereinafter referred to as the "website", in accordance with EU Regulation 2016/679 on the protection of personal data, we are a personal data controller. The protection of your personal data is very important to us!

This Information Notice describes how we collect and use your personal data. You will find out what data is collected, how and for what purpose, and you will be informed of your rights in relation to your personal data.

Principles of personal data processing

Noi respectăm principiile prelucrării datelor cu caracter personal instituite prin Regulamentul UE 2016/679, și anume:

1. Lawfulness, fairness and transparency - we process personal data lawfully, fairly and transparently in relation to you;
2. Collection for specified purposes - personal data are collected only for specified, legitimate and explicitly communicated purposes and are not further processed in a way incompatible with those purposes; further processing for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered incompatible with the original purposes;
3. Data minimization - personal data collected is adequate, relevant and limited to what is strictly necessary for the purpose for which it is processed;
4. Updating data - we ensure that personal data are accurate and up to date, we take all necessary steps to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are deleted or rectified without delay;
5. Limiting data storage - we comply with the legally required time limits for data retention or we keep data only until the purpose of the collection is fulfilled, having set time limits for this in internal procedures, and then delete it;
6. Integrity and confidentiality - we take appropriate technical and organizational measures for the security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or accidental damage

How we collect your personal data and what kind of data we collect

Within this website, personal data is collected:

• directly from you via:

– datele pe care le introduceți în formularul de contact din pagina noastră de internet;

– datele pe care le introduceți în formularul de rezervare din pagina noastră de internet;

– e-mailurile pe care ni le trimiteți la una din adresele indicate în paginile websitului.

• through cookies when you browse our website.

All personal data is processed by us for the precise and well-defined purposes described in the forms by which you give your prior consent, for the conclusion or performance of a contract, to fulfill a legal obligation, or to defend a legitimate right in court.

In the online process of providing personal data to us, although we make every effort to protect the information you provide to us, the exchange of information over an internet connection is not 100% secure and we cannot guarantee the security of personal data transmitted over the internet. Once we have received the data, we use strict procedures and security methods to prevent unauthorized access to that information.

We do not collect and process special personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, the processing of genetic data, biometric data for the unique identification of an individual, data concerning the health or sex life or sexual orientation of an individual.

Any such personal data that you communicate to us, accidentally or intentionally, will be immediately deleted.

Personal data of minors

Parental consent. This website is intended for use by adults over the age of 18. In certain cases, however, our services may also be accessed by minors. Their personal data will be stored and processed by us only with the prior explicit written consent of their parent or legal guardian. In the absence of such consent, any personal data from a minor will be immediately deleted from our database. As a parent, we encourage you to participate in your children's online exploration and to use the parental control capabilities provided by your computer system, the programs you use, and/or your Internet Service Provider. Limiting minors' online access is of great benefit to their mental and physical integrity.

What happens if you don't give us your data

If you do not provide us with the requested personal data, or only partially provide it, we may be unable to provide the requested product or service. The personal data collection form is set up in such a way that we ask for the minimum amount of information we need to identify you, to contact you and fulfill your requests, to fulfill your contract or to fulfill our legal obligations. In these situations we will inform you, where possible, so that you can make an informed decision.

Access to personal data and safeguards

The personal data in our database is processed by our own staff, who are regularly trained to comply with GDPR compliance procedures, drawn up in accordance with the requirements of EU Regulation 2016/679.

We may disclose some personal data to trusted third parties for the stated purposes. We require them to have appropriate technical and operational security measures in place to protect your personal data in accordance with the law on personal data protection rules. Personal data will be transmitted if we need to comply with a legal obligation, at the request of governmental or executive authorities, to fulfill certain national security or law enforcement requirements or to prevent certain unlawful activities.

          Except as set out above, we will never disclose, commercialize or lend any of your personal data to any third party without your prior consent. We are committed to protecting personal data against any loss, misuse, misuse, disclosure, alteration, unavailability, unauthorized access and destruction and we take all reasonable steps to ensure the confidentiality of such data. We also continuously assess the risks that may arise in the course of our personal data processing activities and update our working procedures.

How long we keep personal data

We will retain personal data only for as long as necessary to fulfill the purpose for which it is processed. In determining the appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the purposes for which we process it and whether we are able to achieve those purposes by other means. Some personal data are kept for necessary and specific periods of time, expressly provided for by law, in order to fulfill our legal obligations. When we no longer need the personal data, we will securely delete or destroy it, or, if such a measure involves disproportionate expense, anonymize or encrypt it so that it becomes inaccessible. We will also consider anonymizing personal data so that it can no longer be associated with an identifiable person, in which case we may use that information for statistics, studies, evaluations and the like without further notice.

Your rights

The EU Regulation 2016/679 grants you a number of rights which we respect and are committed to responding to your requests as quickly as possible.

1. Right of access: is the right to obtain confirmation from the controller whether or not personal data relating to you are being processed and, if so, access to those data, including information about the categories of data collected, the purpose of the collection, the source of the collection, etc. Upon your request, we will provide you with a copy of your personal data free of charge. Requests for multiple copies of your personal data may incur a reasonable charge based on administrative costs.
2. The right to withdraw your consent at any time, without however affecting the lawfulness of the processing carried out on the basis of consent prior to the withdrawal of consent.
3. Right to rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data have been processed, you have the right to obtain the completion of personal data which are incomplete, including by providing an additional statement.
4. The right to restrict the processing of your personal data, if: - you contest the accuracy of your personal data, for the period we need to verify the accuracy;

• processing is unlawful if you request restriction of processing instead of erasure;
• we no longer need your personal data but you request them for the establishment, exercise or defense of a right in court;
• you object to processing while we check that our good reasons prevail.

5. The right to erasure, or the "right to be forgotten", under which you can request the erasure of personal data that is processed about you. We must comply with this request, without undue delay, unless the data are necessary:

• for exercising the right to freedom of expression and information;
• to comply with a legal obligation we have;
• for archiving purposes in the public interest, for scientific, historical or statistical purposes;
• for the establishment, exercise or defense of a right in court.

6. The right to data portability ensures that you have the right to receive personal data concerning you and to transmit it to another personal data controller. Where technically feasible, you may request that we transmit your personal data (that you have provided to us) to another organization. You have this right if, cumulatively:

• We process your personal data by automated means
• We rely, in processing your personal data, on your consent or the processing of your personal data by us is necessary for the conclusion or performance of a contract to which you are a party;
• Your personal data is provided to us by you and the transmission of your personal data does not have an adverse effect on the rights and freedoms of others.

7. The right to object, on the basis of which you can object at any time to the processing of your personal data, provided that the processing is not based on consent but on the legitimate interests of the controller or a third party. In that case, we will no longer process your personal data, unless we can establish compelling legitimate grounds justifying the processing which override your interests, rights and freedoms or if the purpose of the processing is the establishment, exercise or defense of legal claims. You can always object to the processing of your personal data for direct marketing purposes for any reason whatsoever.

How to communicate

We will notify each recipient to whom personal data has been disclosed of any rectification or erasure of personal data, or restriction of processing, unless this proves impossible or involves disproportionate effort. All your requests will be complied with within the legal deadline of 30 days.

To exercise your rights, please send a written request to SC Nevromedsan SRL, str. Muchia Islazului nr. 37, Sohodol, jud. Brasov. The request can be sent by e-mail to contact@naturenest.ro. Any communication and actions taken as a result of Your exercise of Your rights are provided by Us free of charge. However, in case You make unfounded, excessive or repetitive requests, We have the legal option to refuse to comply with Your request or to charge a fee in accordance with the administrative costs necessary to fulfill Your request. If you are not satisfied with the response you receive, you have the option to contact the National Supervisory Authority for Personal Data Processing.

This privacy notice may be modified by us at any time without prior notice, when it may be improved or when personal data protection practices and/or legislation are updated. For this reason, we invite you to visit this page periodically, as your personal data will be treated in accordance with the notice under which it is collected, unless we have your consent to treat it otherwise.