Because we collect your personal data, we would like to inform you for what purposes we use it and what are the rights in accordance with EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data.
1. Identity and contact details of the operator
This site is owned and managed by RAW VEGAN IMAGE SRL, a Romanian company, registered at the Trade Register under no. J40/12891/2015, CUI RO35152117.
2. The purposes and legal bases of the processing
RAW VEGAN IMAGE SRL processes the data provided voluntarily by registering a customer account on our site, by initiating an order on our site and by completing and sending the payment form, or by contacting the company in any way, in order to finalize an order or initiate new orders.
RAW VEGAN IMAGE SRL processes personal data to fulfill legal obligations such as maintaining accounting and tax records.
RAW VEGAN IMAGE SRL processes personal data to protect the legitimate interests of the operator, such as collecting the IP address to protect against cyber attacks.
According to both current legislation and the GDPR (applicable from May 25, 2018), your consent is not required if the processing is required to complete a contract, meet a legal obligation or interest legitimate.
RAW VEGAN IMAGE SRL processes personal data in order to profile clients or potential clients to offer them services and products that are best suited to their needs through direct marketing. In this case, the basis of processing is consent.
We collect your data for the following operations:
3. Categories of processed personal data
RAW VEGAN IMAGE SRL processes the following personal data categories:
3.1 Proactive data provided voluntarily when using the service and completing payment form on the site or offered directly by contacting the company in any way. In case you want to receive an invoice for the payment required to process the email transfer, you will provide RAW VEGAN IMAGE SRL with both identification data and data necessary to complete the billing procedures.
From the moment you become a customer of RAW VEGAN IMAGE SRL, we will process your data and information necessary fullfil your orders. In addition, we will store your own emails and other communications electronically the extent to which it will be necessary to transmit these communications.
3.2 Information gathered automatically
4. Recipients of personal data
We do not transmit, sell or give your data to third parties for marketing purposes. Data transferred to third parties are used exclusively for the delivery of email transfer services as follows:
4.1 Service Providers. We may disclose your information to other companies that provide us with services and act as empowered persons, such as companies that help us with billing, online payment processors, or who send emails on behalf of our courier companies, companies to which we have outsourced accounting services. These entities are selected with special care to ensure that they meet the specific privacy protection requirements. These entities have a capacity limited to using your information for purposes other than providing us with services.
We have taken technical and organizational measures to protect your data against unauthorized loss, manipulation or access. We continuously adapt our security measures in line with technological progress and developments. All details related to payments with the card on the site is taken and processed directly and encrypted in accordance with international security standards by the payment processor posted on the site, and we do not interfere with your data at any time.
4.2 Courts, prosecutors or other public authorities to comply with the law or in response to a mandatory legal procedure (such as a search warrant or court order);
4.4 RAW VEGAN IMAGE SRL will make available to certain employees, information and personal data provided by you for the sole purpose of properly fulfilling your orders. Each of these employees will receive special instructions in relation to the processing of your own personal data, Easyhost assuming responsibility for the way in which its employees record, store, use this data.
4.5 In other circumstances, we will disclose your personal data only to the extent that this disclosure will be necessary to identify a person, communicate with, or complain against, in any harm suffered by RAW VEGAN IMAGE SRL, its clients or other third parties. We will also disclose such information, personal data, any authorized bodies in accordance with the applicable laws and international treaties to which Romania is a party, to the extent that there is an obligation to provide them.
4.6 RAW VEGAN IMAGE SRL will not disclose to any third party the parties or the entire electronic communication pertaining to the service, unless disclosure: (a) it is necessary to protect a public interest concerns national health or safety; (b) is requested by competent bodies and institutions; (c) it is necessary to prevent and combat offenses.
5. The period for keeping personal data
We will keep your data as long as necessary to meet our contractual obligations or as long as the law requires, but at least for a period of 3 years from the date of your last interaction with us. After that, your personal data will be deleted or anonymous.
6. Rights of the data subject:
The main rights offered to the persons covered by the Regulation are as follows:
6.1 Right to information
6.2 Right to access
You have the right to request a confirmation that your personal data is processed and, if so, you have the right to obtain a copy of this data as well as the following information:
6.3 Right to rectification
If personal data is inaccurate, you are entitled to request the correction and completion of incomplete personal data. Correction can be done for you in the case of data available in the contracted service management platforms.
If necessary, we will take additional steps to verify that the information provided is correct before proceeding with the change.
6.4 Right to delete data
You have the right to delete your personal data under the following conditions:
The operator will decide on the request for deletion of personal data. Data deletion will not be done if:
6.5 Right to Restrict Processing
You may exercise the right to restrict processing in the following situations:
6.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and readable form, and you are entitled to transmit this data to another operator without any obstacles our side, where processing is based on consent, on the legal basis of the contract, or when the processing is done by automated means.
6.7 The Right to Opposition
You have the right to oppose data processing that is based on the legitimate interest of the operator or third party or in the public interest.
Once the objection has been made, the organization must justify the reasons on which the processing is based and suspend the processing until the decision has been taken. The organization will no longer process personal data, unless it demonstrates that it has legitimate and compelling reasons that justify processing and that prevail over the interests of the rights and freedoms of the data subject, or that the purpose is to establish, exercise or defend a right in court.
If personal data is used for direct marketing, the organization will cease processing.
6.8 The right not to be subject to an automatic decision with significant effect
You have the right not to be the subject of an automatic decision, including the creation of profiles if the decision has significant or legal effect on you as the data subject. You have the right to express your point of view, to request human intervention and to challenge the decision.
Exceptions to this right:
6.9 Right of Withdrawal of Consent
If the processing is based on consent, you may withdraw it at any time by submitting an email to email@example.com with the subject of “withdrawn consent" or by accessing the “unsubscribe" link present in any communication for the purpose of marketing we do by email;
6.10 The right to lodge a complaint with the Supervisory Authority
If you believe that your rights to use personal data have been violated, you have the right to file a complaint with ANSPDCP and the right to appeal to the courts.
Rights are not absolute and there are exceptions.
The response at the request of the person concerned will be made within one month of receipt of the request, except in cases where the application is complex or there are a large number of applications, when it may be extended for a further two months.
If the application is well founded, the exercise of rights will be facilitated. If the request is unfounded, the reason for the refusal of the person concerned will be communicated and the right to file a complaint with ANSPDCP and the right to appeal to the court will be communicated.
The on-demand response is free of charge. In the event of unreasonable or excessive claims, the operator may charge a reasonable charge or refuse to comply with the request.