Information notice regarding the processing of personal data

1. Contact Information

SC Seraphine Creations SRL 
RO50375643, J26/957/2024
Street: Principală str., no. 621, Sântana de Mureș, Mureș
Romania
Email: musicforpeace@andreiirimia.com

2. Application and Scope of the Information Notice

2.1. This Information Notice applies and takes effect from its publication date: 20.05.2024 2.2. This Information Notice applies to the website andreiirimia.com (the andreiirimia.com domain, its subdomains, and all content on the domain or subdomains) and emails belonging to andreiirimia.com, as a non-profit association.

2.3. This Information Notice applies to all devices used to access the website andreiirimia.com, including smartphones, tablets, laptops, and desktops.

2.2. This Information Notice concerns your personal data processed by ” SC Seraphine Creations SRL ” when you are in one or more of the following situations: – Online activity (accessing and browsing the Site as an unregistered visitor); – A distance contract or one related to the intention to enter into a distance contract (online purchases, participation in online contests, etc.); – Direct provision of personal data, as a member, customer, or visitor of the site or outside of a contract (posting reviews, subscribing to newsletters, making phone calls, etc.).exclamation

3. Types of Personal Data We Process and Their Ownership

3.1. The ” SC Seraphine Creations SRL “

3.2. Categories of data subjects for which the ” SC Seraphine Creations SRL ” collects personal data: – Customers; – Phone callers; – Site visitors; – Registered members; – Newsletter subscribers; – Contest participants.

4. Legal Bases for Processing Your Personal Data

4.1. The legal bases for processing your “non-sensitive” personal data are: – Your consent; – A contract to which you are a party (distance contract); – A request from you before entering into a contract; – The need to comply with a legal obligation to which we are subject; – Our legitimate interest or the legitimate interest of a third party.

4.2. We process your personal data based on legitimate, real, and present interests, while reasonably protecting your rights and freedoms. Our legitimate interests may be overridden by your interests if your fundamental rights and freedoms are threatened.

5. Sources and Means of Collecting Your Personal Data

5.1. Your personal data is collected directly, being provided by you.

5.2. The ” SC Seraphine Creations SRL ” collects your personal data through the following means: – Electronically, using web forms posted on the Site; – Electronically: – By storing information on your devices, or – Accessing information stored on your devices, or – Reading information emitted by your devices; – By phone, through calls initiated by you or by the ” SC Seraphine Creations SRL ” at your request; – By registration in the database at the headquarters.

6. Can You Decide What Types of Personal Data We Process?

6.1. The decision to provide your personal data is: – Optional and voluntary for the following freely provided data: content of messages sent from web forms, content of comments sent from the site, photos, date of birth, gender, income, education level, content of telephone audio messages between you and the ” SC Seraphine Creations SRL “, technical information regarding your device. – Mandatory due to the need to comply with a legal obligation for the provision of: billing data. – Mandatory to allow the performance of the Distance Contract to which you are a party or to respond to a request from you before entering into a contract: name and surname, address, telephone.

6.2. The mandatory provision of personal data is a legal or contractual requirement or necessary for entering into a (distance) contract.

7. How Your Decision to Provide or Not Provide Your Personal Data Affects You

7.1. If you are unable or unwilling to provide us with your personal data and this provision is optional and voluntary, then this cannot affect the performance of the Distance Contract between you and the ” SC Seraphine Creations SRL ” or have any other consequences that may affect you. 7.2. If you are unable or unwilling to provide us with your personal data and this provision is mandatory, then the consequences are likely to affect you: You will not be able to benefit from the products we sell because their sale is linked to the registration and declaration of certain tax details and the conclusion of the distance contract, which requires the existence of a delivery address (if you opt for delivery by courier) and a telephone number for confirmations and telephone communications regarding the products in the order. The only way you can benefit from the ” SC Seraphine Creations SRL ” products, besides providing the data necessary for the distance contract, is by purchasing directly from the headquarters.

8. Purposes and Methods of Processing Your Personal Data

8.1. The ” SC Seraphine Creations SRL ” processes your personal data for real, present, and legitimate purposes. The ” SC Seraphine Creations SRL ” processes your personal data exclusively for the purposes for which your personal data is initially collected, and if secondary purposes are identified that require the processing of your data, this processing will not be done without your prior information and consent or without a legitimate interest in this regard and without a legal basis.

8.2. ” SC Seraphine Creations SRL ” collects your email for registering an account in the andreiirimia.com store, which is necessary for the performance of the Distance Contract and the provision of Electronic Commerce Services to you: sending messages and notifications regarding the status of the Account, the status of Transactions initiated by you (confirmation, shipping, cancellation, or any other problems that may arise in the ordering process or related to the products in the order), or to send you commercial communications regarding products similar to those previously ordered, as an existing Customer of the ” SC Seraphine Creations SRL “.

8.3. The ” SC Seraphine Creations SRL ” collects your email for the purpose of posting comments or photo reviews on products in the andreiirimia.com store, without making the email address public along with the comment/photo, which is necessary for the purpose of: – Identifying in the database the order and products for which comments or reviews are sent, associated with the respective email; – Granting gift vouchers by email.

8.4. The ” SC Seraphine Creations SRL ” collects your email for marketing purposes and commercial communications (conducting promotional campaigns by sending newsletters, sending electronic gift vouchers, etc.), tracking and monitoring service sales and consumer behavior.

8.5. The ” SC Seraphine Creations SRL ” collects your name and surname for registering an account in the andreiirimia.com store, which is necessary for the performance of the Distance Contract and the provision of Electronic Commerce Services to you: sending parcels through courier services, issuing invoices, etc.

8.6. The ” SC Seraphine Creations SRL ” collects your phone number for registering an account in the andreiirimia.com store, for concluding a Transaction initiated by you, or for providing information upon request, which is necessary for the performance of the Distance Contract and the provision of Electronic Commerce Services to you: providing information by phone call or SMS regarding the products on the site or the status of Transactions initiated by you (confirmation, shipping, cancellation, or any other problems that may arise in the ordering process or related to the products in the order).exclamation The ” SC Seraphine Creations SRL ” does not send commercial SMS messages, except for the transactional communications mentioned above.

8.7. The ” SC Seraphine Creations SRL ” collects your address for registering an account in the ” SC Seraphine Creations SRL ” store or for completing a Transaction initiated by you, which is necessary for the performance of the Distance Contract and the provision of Electronic Commerce Services to you: sending parcels through courier services, issuing invoices, etc.

8.8. The ” SC Seraphine Creations SRL ” collects information about your education level and income, with the information obtained being interpreted for the purpose of demographic and socio-economic segmentation of the target market, in support of optimizing marketing communications to Customers and business strategy

8.9. The ” SC Seraphine Creations SRL ” collects information about your gender and date of birth, with the information obtained being interpreted for the purpose of demographic and socio-economic segmentation of the target market, in support of optimizing marketing communications to Customers (sending gift vouchers on birthdays) and business

8.10. The ” SC Seraphine Creations SRL ” collects information about your date of birth to wish you “Happy Birthday” on your birthday and/or to offer you electronic gift vouchers.

8.11. The ” SC Seraphine Creations SRL ” collects the content of the comments you post about the products on the andreiirimia.com website under a pseudonym, without publishing the email address, because this content is useful to all website visitors who intend to initiate a Transaction, allowing the accumulation of a history of authentic reviews of the products, expressed by real individuals.

The collection and display of these texts of the messages you have written on the andreiirimia.com website is the result of a voluntary action, through which you choose to make this information public, and the processing of this data will be carried out on the basis of our legitimate interest in making available to all potential customers, real testimonials, regarding the quality of the products marketed by andreiirimia.com and to promote the products in an ethical manner, maintaining transparency in communication with our customers, as well as the integrity and quality of product information.

8.12. The ” SC Seraphine Creations SRL ” collects image files posted by you as a review of the products on the andreiirimia.com website under a pseudonym, without publishing the email address and with the anonymization of the identifiable individual, because due to the specificity of the products we sell, the photo content is useful to all website visitors who intend to make a purchase decision, allowing the accumulation of a photo gallery that presents the real products, worn by ordinary individuals.

The collection and display of the images you have transmitted through the andreiirimia.com website is the result of a voluntary action, through which you choose to make these photos public, under the specified anonymization conditions, and the processing of this data will be carried out on the basis of your freely expressed and withdrawable consent, to make available to all potential customers, your real testimony, regarding the quality and appearance of the products marketed by andreiirimia.com, in the form of a photograph.

8.13. The ” SC Seraphine Creations SRL ” collects your ID from the strictly necessary cookies placed by andreiirimia.com to allow you to authenticate yourself, to keep your authentication as you navigate through the andreiirimia.com website pages, as well as to allow you to view and edit your shopping cart and complete an initiated transaction.

8.14. The ” SC Seraphine Creations SRL ” collects for statistical purposes, for monitoring commercial activity and for improving the results of the Site, technical information about the visitor’s device – their location, IP address, type of hardware equipment, information about the time zone as well as the date on which the Site was used, other information resulting from the use of Cookies applications; for more information on cookies, please see the Cookies Policy available on the website.

8.15. The ” SC Seraphine Creations SRL ” collects recordings of conversations with you with your voluntary and explicit consent, for the purpose of monitoring products and services in the sales or after-sales process, because this audio content is useful in the process of providing you with assistance as a Member or Client of the ” SC Seraphine Creations SRL “. Depending on the situation, it may be necessary to access some of the communication history between you and us, which may include the requests/modifications/notifications that have taken place between the parties involved in the Distance Contract or in the steps existing in order to conclude a Transaction.

8.16. The ” SC Seraphine Creations SRL ” collects the series and number of the identity document as a unique identifier of the targeted person, strictly for the authentication of the winners of promotional campaigns/competitions and for the purpose of complying with the requirements of the applicable tax legislation.

8.17. The ” SC Seraphine Creations SRL ” collects personal data for probative purposes for the above activities and for archiving, for certain categories of data in accordance with the legal provisions.

9. Use of automatic profiling processes and automated decisions

9.1. The ” SC Seraphine Creations SRL ” uses your “non-sensitive” personal data to perform automatic profiling that includes the automatic evaluation of aspects of your personality in order to show you ads for products that are as relevant as possible.

Automatic profiling and fully automated decision-making includes: a possible analysis of your characteristics, possible evaluations of your behavior, is carried out exclusively by computer means and without human involvement.

9.2. The ” SC Seraphine Creations SRL ” uses your personal data to make automated decisions about you, based on automatic profiling, which may include: “fully automated profiling” of you, is carried out exclusively by computer means and without human involvement.

9.3. The automated decisions made by the ” SC Seraphine Creations SRL ” that directly concern you are made using an algorithm that can be described from the perspective of the objective pursued as follows: If a visitor/client accesses products from a particular category, we will consider their area of interest to be related to that product category and will attempt to personalize future product displays based on that analysis (e.g., by displaying products sorted by identified preferences by default).

9.4. The automated decisions do not impact your rights and freedoms and do not have a significant impact on your choices, nor can they significantly affect your life.

9.5. The legal basis for processing personal data through automated decisions that concern you is the legitimate interest of the ” SC Seraphine Creations SRL “, which is also in your interest.

10. Processing Personal Data of Minors

10.1 The ” SC Seraphine Creations SRL ” does not engage in commercial, marketing, or personal data processing activities concerning minors.

11. Duration of Personal Data Retention

11.1. We limit the duration of storing your personal data to what is necessary for our processing purposes.

11.2. We review the need to continue retaining your personal data annually, analyzing the collected and processed data to filter, sort, and maintain processing only for the data for which the processing purpose is current.

11.3. We delete your data upon your request, except for data whose provision and processing are mandated by a legal provision, which we delete within the legally stipulated term for this. If retaining your personal data is necessary for the purposes specified by law, we may continue to retain your personal data. Additionally, prolonged data storage may occur for purposes such as creating statistics, improving services, managing active customer accounts, or conducting market research/studies.

12. Disclosure of Your Personal Data

12.1. To achieve one or more of the purposes mentioned above, ” SC Seraphine Creations SRL ” may disclose your personal data to other categories of recipients: contractual partners (based on a confidentiality agreement from them) or service providers (processors assisting ” SC Seraphine Creations SRL ” in processing personal data as empowered) only with your consent.

12.2. The processors authorized by ” SC Seraphine Creations SRL ” to process your personal data for appropriate purposes and in your interest, upon your voluntary agreement, are: Fan Courier, SameDay, Cargus, Netopia, EuPlatesc, MobilPay, and other couriers and processors that will be mentioned in the current notice at the time of collaboration.

12.3. If it becomes necessary to disclose your personal data to another recipient, we will inform you of the moment of disclosure and the recipient’s name.

13. Transfer of Your Personal Data Outside the European Union or the European Economic Area

13.1. ” SC Seraphine Creations SRL ” does not transfer personal data to countries outside the EU or EEA or to international organizations.

14. Security Measures Regarding Your Personal Data

14.1. ” SC Seraphine Creations SRL ” takes all reasonable and continuous security and confidentiality measures to protect personal data: appropriate technical and organizational measures, reasonable security measures, measures to prevent unauthorized and illegal processing, measures to prevent accidental or illegal loss, measures to prevent accidental or illegal destruction, and measures to prevent accidental or illegal damage.

14.2. If we detect a security breach involving the processing of your personal data, we will:

– Investigate the security incident;
– Take all reasonable measures to mitigate the immediate risk of harm;
– Notify the Supervisory Authority about the security incident if the breach is likely to result in a high risk to your rights and freedoms;
– Inform you directly about the security breach, if it is likely to result in a high risk to your rights and freedoms, as soon as possible through appropriate contact channels;
– We are not required to inform you directly if we have taken necessary measures to make your personal data incomprehensible to any unauthorized person, or if the high risk to your rights and freedoms can no longer materialize or would involve disproportionate effort. In such a case, we will inform you via public networks.

15. Your rights regarding the provided personal data

15.1. We respect your rights concerning the protection of your personal data:

– Right of access to your personal data (excluding anonymous data);
– Right to obtain confirmation from the ” SC Seraphine Creations SRL ” whether it processes your personal data;
– Right to data portability. You have the right to receive a copy of the personal data you provided to the ” SC Seraphine Creations SRL “, in a structured, commonly used, and machine-readable format. These can be used for download or to be transmitted to another Operator. If you request additional copies of your personal data, we may charge a reasonable fee based on the administrative costs necessary to fulfill the request.

The right to rectify your personal data. We must communicate the rectification of your personal data to the recipients of your personal data (if any). We do not communicate the rectification of your personal data to the recipients if it is impossible to do so or it involves a disproportionate effort.

The right to erasure of your personal data, in certain situations according to the law. We must communicate the erasure of your personal data to the recipients to whom it has been disclosed (if any). We do not communicate the erasure of your personal data to the recipients if it is impossible to do so or it involves a disproportionate effort.

The right to obtain the restriction of the processing of your personal data, for a period, in certain situations according to the law. We must communicate the restriction of the processing of your personal data to the recipients of your personal data (if any). We do not communicate the restriction of the processing of your personal data to the recipients if it is impossible to do so or it involves a disproportionate effort.

The right to object. You may object to the processing of your personal data when it is processed for direct marketing purposes. For example, you have the right to withdraw your consent for the use of your contact data for the purpose of sending commercial communications at any time, free of charge, either by sending a written request to the email address: musicforpeace@andreiirimia.com, as well as by other methods mentioned by the ” SC Seraphine Creations SRL ” alongside the communications transmitted, or by accessing the dedicated link for exercising the right to withdraw this consent, which will be included in every commercial communication sent by email (e.g., newsletters).

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or significantly affects them in a similar manner.

” SC Seraphine Creations SRL ” does not conduct profiling that leads to automated decisions with legal or significant effects for its visitors, members, or customers.

15.2. We must communicate the correction of your personal data to the recipients of your personal data (if any).

15.3. We do not communicate the correction of your personal data to the recipients of your personal data if communication to the recipient is impossible or involves a disproportionate effort.

15.4. The right to the deletion of your personal data, in certain situations according to the law:

We must communicate the deletion of your personal data to the recipients to whom we disclose it (if any).

We do not communicate the deletion of your personal data to the recipients to whom we disclose it if communication to the recipient is impossible or involves a disproportionate effort.

15.5. The right to obtain the restriction of the processing of your personal data for a period, in certain situations according to the law.

15.6. We must communicate the restriction of the processing of your personal data to the recipients of your personal data (if any).

15.7. We do not communicate the restriction of the processing of your personal data to the recipients of your personal data if communication to the recipient is impossible or involves disproportionate effort.

15.8. You have the right to withdraw your consent regarding the use of contact data for the purpose of sending commercial communications, free of charge, both by sending a written request to the email address: musicforpeace@andreiirimia.com, and by other means mentioned by ” SC Seraphine Creations SRL ” together with the communications sent, as well as by accessing the dedicated link for exercising the right to withdraw this consent, which will be included in each commercial communication sent by email.

16. How can you exercise your rights?

16.1. You can exercise your rights regarding the protection of your personal data by:

Directly, through the secure online module “Information about your personal data”, associated with your account (and accessible after logging into the account on andreiirimia.com), which contains mechanisms for verifying your identity in our reference system.

Through written requests, as we cannot immediately handle verbal requests without first analyzing the content of the request and confirming your identity:

Your request must contain a detailed and precise description of the right you wish to exercise.

It may be necessary for you to provide us with a copy of an identification document to confirm your identity. Personal data will be used strictly for the purpose of identity verification, stored for a limited period in accordance with the declared purpose. Any other data contained in the copy of the identification document, such as a photograph or other personal characteristics that exceed the information requested by the ” SC Seraphine Creations SRL “, may be masked by you or will be anonymized during processing.

You will be informed at the time of identification about the documents or personal data required for your verification in our reference system. If you do not agree with the proposed solution and wish to propose alternatives, we will evaluate them on a case-by-case basis.

You can send your request regarding the protection of your personal data to the email address musicforpeace@andreiirimia.com, where it will be handled by a person responsible for processing your requests related to the protection of your personal data.

You will receive our response to your requests regarding the protection of your personal data at the email address provided/authenticated in our system.

The period within which we will handle your request (through which you exercise your rights) regarding the protection of your personal data is 30 days from the date of receipt of the request.

17. The Right to Address a Supervisory Authority

17.1. You may file a complaint on your own behalf or through the mandate of an organization to:

The Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.), located at B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, either in written form at the institution’s headquarters or via email at anspdcp@dataprotection.ro.

17.2.The supervisory authority must inform you within a reasonable timeframe regarding the progress and outcome of the complaint.

17.3. You have the right to pursue a judicial remedy in your own name through the mandate of an organization, within the EU and EEA against an operator, processor, or supervisory authority.

18. Explanations of the Terms and Expressions Used in This Information Notice

18.1. Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as:

– A name;
– An identification number;
– Location data;
– An online identifier;
– The physical identity of a natural person;
– The physiological identity of a natural person;
– The genetic identity of a natural person;
– The mental identity of a natural person;
– The economic identity of a natural person;
– The cultural identity of a natural person;
– The social identity of a natural person.

18.2. Processing means any operation or set of operations which are performed upon personal data or sets of personal data, whether or not by automated means, such as:

– Collection;
– Recording;
– Organization;
– Structuring;
– Storage;
– Adaptation;
– Alteration;
– Retrieval;
– Consultation;
– Use;
– Erasure or destruction, etc.

18.3. Restriction of processing means marking stored personal data to limit their future processing.

18.4. Purpose of processing refers to the reason for which personal data processing is carried out.

18.5. Data controller means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing personal data; when the purposes and means of such processing are determined by Union or Member State law, the controller or the criteria for its nomination may be provided for by Union or Member State law.

18.6. Data processor means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

18.7. Recipient means a natural or legal person, public authority, agency, or another body to whom personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a specific investigation in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

18.8. Third Party means a natural or legal person, public authority, agency, or body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorized to process personal data.

19. Who is responsible for processing your personal data

19.1. ” SC Seraphine Creations SRL ” – holds the status of operator for your personal data and decides for what purpose your personal data is processed, how your personal data is processed, and is responsible for processing your personal data.

19.2. “SC Seraphine Creations SRL ” has appointed a Data Protection Officer for your personal data. Her contact details are: Andrada Berceanu, musicforpeace@andreiirimia.com