Politica de confidențialitate
Respecting your privacy is one of our fundamental commitments and, therefore, we pay the utmost attention to the processing of your personal data, in accordance with applicable legislation.
LIQUID LABS S.R.L., having its headquarters in Arad , jud Arad str Papadiei nr 6, tax identification code 48037063, registered with the Trade Register Office under no. J2023/001/079053 (“LIQUID LABS S.R.L.", "we") processes, as an operator, your personal data ("Personal Data"). The purpose of this information note ("Policy") is to detail how LIQUID LABS S.R.L. processes your Personal Data.
PERSONAL DATA PROCESSED, PURPOSES OF PROCESSING AND BASIS FOR PROCESSING
NAVIGATING THE SITE
- Fields processed: name, surname, email address, IP address, cookies
- Purpose: Processing by third-party companies
- Legal basis: The consent of the data subject (Article 6, paragraph 1, letter a of the GDPR)
CONTACTING THE CUSTOMER ONLINE
- Fields processed: name, surname, email address, phone number
- Purpose: Contacting the customer online in relation to the requested offer or to address the reported issue
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
ORDERING AND DELIVERY OF PRODUCTS
Processing of personal data with respect to the ordering and/or delivery of requested products.
Making a payment
- Fields processed: name, surname, payment amount, bank card details
- Purpose: Making a payment for the purchased products
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
Delivery of the order
- Fields processed: name, surname, ordered products, delivery address, phone number, and any additional information provided by the customer
- Purpose: Delivery of the placed order
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
Placing the order
- Fields processed: name, surname, ordered products, delivery address, phone number, email address, and any additional information provided by the customer
- Purpose: Finalizing and placing the order
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
Adding to the shopping cart
- Fields processed: name, surname, desired product
- Purpose: Adding the product to the shopping cart
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
Issuing the invoice
- Fields processed: name, surname, home address, ordered products, payment amount, email address
- Purpose: Issuing the invoice for the purchased products
- Legal basis: Fulfillment of a legal obligation of the Company (Article 6, paragraph 1, letter c of the GDPR). Details: fulfillment of tax obligations
USER ACCOUNT
Processing of personal data provided by the customer when creating the user account.
Creating the user account
- Fields processed: name, surname, email address
- Purpose: Creating the customer's user account
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
Completing the user profile
- Fields processed: images, phone number, email address
- Purpose: Completing the customer's user profile
- Legal basis: The consent of the data subject (Article 6, paragraph 1, letter a of the GDPR)
Order history
- Fields processed: name, surname, order date, ordered products, payment amount
- Purpose: Displaying the order history
- Legal basis: The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR)
MARKETING (Newsletter, promotions, offers)
Processing of personal data with respect to marketing messages for promotions and/or offers.
Commercial messages
- Fields processed: name, surname, phone number, email address
- Purpose: Sending commercial messages for the purpose of promoting the company's services
- Legal basis: The consent of the data subject (Article 6, paragraph 1, letter a of the GDPR)
Customer feedback
- Fields processed: name, surname, email address, and any additional information provided by the customer
- Purpose: Requesting and analyzing customer opinions for the purpose of improving services
- Legal basis: The consent of the data subject (Article 6, paragraph 1, letter a of the GDPR)
PROBLEM SOLVING
Processing of personal data for the purpose of solving problems that may arise.
Litigious issues
- Fields processed: name, surname, home address, phone number, email address
- Purpose: Defending the rights and legitimate interests and supporting any claims before judicial bodies or any other public authorities
- Legal basis: Legitimate interest of the Company (Article 6, paragraph 1, letter f of the GDPR). Details: the company's legitimate interest in defending its rights or legitimate interests, or in supporting claims arising from or closely related to the conclusion or performance of the contract, or for the purpose of exercising the right of defense in the event of initiating litigation procedures against the company.
PROVIDING PERSONAL DATA
The customer can refuse to provide certain personal data but, in such a case, they may no longer benefit from certain specific services related to the relationship described in this policy.
ABOUT LEGAL BASES
The legal basis for processing varies depending on the specific situation and the personal data processed. In situations where we will process your personal data, we will ask for your free, informed, specific and unambiguous consent for that processing. By expressing your consent, you will agree that we can collect, use, disclose, process and transfer personal data in accordance with this policy.
SOURCE OF PERSONAL DATA
The source of personal data is contractual partners and online customers.
AUTOMATED PROCESSING OF PERSONAL DATA
Your personal data will not be processed for the purpose of generating decisions based solely on automated processing that would have legal effects on you or significantly affect you, in the sense of those provided by Art. 22 para. (1) of the GDPR.
PROCESSING PERIOD
The processing period for personal data varies depending on the specific processing operation:
- Website navigation: 10 years
- Online customer contact: the necessary duration for the resolution of the request
- Making the payment: until the completion of the payment
- Order delivery: the necessary duration for the delivery of the products
- Order placement: 3 years
- Adding to the shopping cart: until the finalization or until the moment of deleting the products from the cart
- Issuing the invoice: 10 years
- Creating the user account: the duration of the account's existence
- Completing the user profile: the duration of the account's existence
- Order history: the duration of the account's existence
- Commercial messages: until the moment of withdrawing consent
- Customer opinions (feedback): the necessary duration for the analysis of the opinion
- Litigious issues: the necessary duration for the resolution of the problem
In certain circumstances, we may keep personal data for longer periods of time to have an accurate record of your dealings with us in case of any complaints or if we reasonably believe that there is a prospect of litigation.
TRANSFER OF PERSONAL DATA
We may transfer personal data, to the extent necessary, to the following categories of recipients: marketing service providers, IT service providers, payment service providers, courier service providers, accounting service providers, and state authorities. These recipients may be located in the European Union and/or the European Economic Area, as well as outside these, including in countries that are not recognized as providing an adequate level of protection, in which case the transfer of personal data is only made if there are adequate guarantees, in accordance with applicable law (such as standard contractual clauses issued by the European Commission). You can request a list of recipients from third countries, as well as a copy of the agreed provisions that ensure an adequate level of protection of personal data.
PERSONAL DATA SECURITY
The security of your personal data is important to us. Therefore, your personal data will be processed by applying reasonable technical and organizational measures to protect them, such as limiting access to personal data, encrypting or anonymizing personal data, and storing it on secure media. However, despite our efforts, we can not always guarantee the effectiveness of the security measures implemented, and therefore, we can not guarantee at all times the security of personal data.
RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
Right of access - you have the right to obtain confirmation from us that your personal data is being processed by us, as well as information regarding the specifics of the processing such as purpose, categories of personal data processed, recipients, the period for which they are stored, their source, if we transfer them abroad and how we protect them, your rights, the right to lodge a complaint with the supervisory authority.
Right to rectification - you have the opportunity to request the rectification of your personal data, provided the applicable legal requirements are respected. In the event of errors, upon notification, we will immediately correct your personal data.
Right to erasure - in certain cases, you have the possibility to request the deletion of personal data, such as when: (i) they are no longer necessary for the purposes for which we collected and processed them; (ii) you have withdrawn your consent to the processing of personal data and we can no longer process personal data based on other legal grounds; (iii) personal data are processed contrary to the law; (iv) you follow a legal right to object. We are not obliged to comply with your request for deletion in the event that the processing of personal data is necessary for compliance with a legal obligation, or for the establishment, exercise, or defense of a right in court. Also, there are other circumstances in which we are not obliged to comply with this request for the deletion of personal data.
Restriction of processing - you can request that we restrict the processing of your personal data in the following situations: (i) when you contest the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data in question;
(ii) when the processing is illegal, and you oppose the deletion of personal data, requesting instead the restriction of their use;
(iii) when we no longer need the personal data for the purpose of processing, but you request them for a lawsuit;
(iv) when you have objected to the processing, for the interval of time in which it is checked whether our legitimate rights as an operator prevail over those of the data subject.
We can continue to use personal data following a request for restriction, in the event that:
(i) we have your consent;
(ii) to establish, exercise, or ensure the defense of a right in court; or
(iii) to protect the rights of another physical or legal person.
Right to data portability - to the extent that personal data are processed based on your consent or for the performance of the contract and the processing is done by automatic means, you have the right for your personal data to be provided in a structured format, commonly used and which can be read automatically and you have the right to transmit this personal data to another operator. This right does not adversely affect the rights and freedoms of others.
Right to object - in certain situations, such as when we process your personal data based on a legitimate interest, you have the right to object to the processing of your personal data by us. In case of unjustified opposition, LIQUID LABS S.R.L. is entitled to continue processing personal data. Also, you can object to the processing of your personal data for the purpose of sending commercial messages.
Revocation of consent - to the extent that we process your personal data on the basis of your consent, you can revoke consent at any time, without affecting the legality of processing based on consent before its withdrawal.
Automated individual decision-making process - you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right is not applicable if the decision:
(i) is necessary for the conclusion or execution of a contract between you and us;
(ii) is authorized by law which also provides adequate guarantees for your rights and freedoms;
(iii) is based on your explicit consent.
The right to appeal to the supervisory authority - you have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing ("ANSPDCP") regarding any violation of your rights regarding the processing of your personal data. The contact details of the ANSPDCP are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336 Bucharest, Romania; email: anspdcp@dataprotection.ro.
To exercise the rights mentioned above, please contact us at the following email address: contact@liquidlabs.com.