This Privacy Policy is intended to explain what personal data we process, why we process it and for what purpose. It also represents our firm commitment to protect the personal information of the users of this website, to store it safely and to process it carefully. This Policy may be changed at any time, with updates and changes in effect immediately upon posting on the Website. 

The notions of personal data and data processing 

In this Policy, personal data will mean any information regarding an identified or identifiable natural person, and the concept of processing personal data refers to any operation of collection, registration, organization, storage, modification, consultation, use, transmission, combination, blocking, restriction, deletion, destruction, archiving of personal data, etc. 

What data we process and from whom 

In order to provide services related to the platform https://case-de-lemn.com/ sometimes we collect identification data, contact details, address (city, county) and e-mail of users. At the same time, personal information is collected including from users of the platform or from people who use our contact details to request services or information, as well as by placing cookies. 

The purposes for which personal data are processed 

We process personal information for the following purposes:

• execution of the contracts concluded, as well as for the development of any legal relations established with SC Ecokit Prod SRL 
• for direct marketing purposes, advertising by intermediation/promoting the most appropriate products and services by creating a profile regarding the users of this website 
• for simple marketing purposes, conducting surveys on the activity of SC Ecokit Prod SRL and third-party contractual partners 
• keeping and archiving the contractual documentation and/or other  documents containing personal data, 
• internal/external audit, 
• finding, exercising or defending the rights of SC Ecokit Prod SRL in court, as well as the constitution of evidence in this regard.

The legal grounds that justify the processing of personal data 

The processing of personal data is necessary to fulfil the purposes mentioned above and is carried out on the basis of the consent expressed by users and sometimes justified by the existence of a legitimate interest in promoting our business through the https://case-de-lemn.com/ platform. 

Obligation to communicate data 

The communication of data is not mandatory if the processing of personal information is carried out only on the basis of the consent of the users of the platform. However, processing is necessary when it is based on our legitimate interest in promoting our business or protecting our rights.

Situations in which we communicate data to third parties 

In order to carry out our activity or to fulfil our obligations, we may transmit personal data to public authorities, judicial bodies, external consultants who advise us or assist us in exercising and defending our rights in court, respectively to allow access to data to authorized persons, as it happens with IT service providers, whose services we have contracted, but always ensuring that we put in place adequate safeguards to protect personal data.

At the same time, users who are interested in the financing conditions and fill in their personal data on the contact form https://case-de-lemn.com/contact/ will be directed to our partner KIWI Finance SRL. 

Data storage period 

Personal data will be processed through the platform https://case-de-lemn.com/ and subsequently kept for a determined period, in accordance with legal provisions. 

Security measures

In order to securely manage personal information, we have taken technical and organizational measures to ensure a level of security appropriate to the risks involved in data processing, in particular against misuse, accidental destruction, unlawful or unauthorized access, loss, alteration, disclosure, intentional or accidental manipulation, deletion and alteration. For this, we have implemented technical and organizational data security measures that we are constantly reviewing to keep up with new technological solutions.

Rights of the persons whose data we process: 

• the right to withdraw consent; 
• the right to information on data processing; 
• the right of access to the data; 
• the right to rectify inaccurate or incomplete data; 
• the right to erasure ("the right to be forgotten");
• the right to restriction of processing; 
• the right to request the transmission of data to another controller; 
• the right to object; 
• the right not to be the subject of a decision based solely on automated processing, including the creation of profiles; 
• the right to file a complaint with the Supervisory Authority for Data Processing.

All these rights can be exercised either individually or cumulatively, through a request submitted directly or sent by post to the headquarters on Arcadie Septilici Street nr. 32A, Baraţi Village, Mărgineni Commune, Bacău County or sent to the e-mail address comercial@case-de-lemn.com. The rights listed above are not absolute and are applicable depending on the actual processing situation.

The personal data operator 

The responsibility for data processing and in connection with this Privacy Policy lies with Ecokit Prod S.R.L., a legal entity organized and operating under Romanian laws, with headquarters in Arcadie Septilici Street nr. 32A, Baraţi Village, Mărgineni Commune, Bacău County, registered with the Trade Register under no. J04/891/2019 and having unique identification code RO41052155. According to the legislation on the protection of personal data, our company is a personal data operator. Sometimes, on our website there are links to access other websites whose data processing policies are different. These policies must be individually verified, since Ecokit S.R.L. is not responsible for the information provided or collected by other websites.