As of 25 May 2018, Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free circulation of such data and for the annulment of Directive 95/46/EC (General Data Protection Regulation), known as GDPR, shall be implemented.  This means that any Operator/entity that processes personal data must apply these new requirements and provide information in a transparent manner on how the data is processed.

WHY IS MY DATA PROCESSED?

Given the need to comply with the provisions of GDPR, as well as that we are dedicated to taking care of your personal data (which may include name, surname, e-mail address, depending on the purpose of processing) found in the our database, we inform you that these are used only for the purpose of successfully completing the processes carried out in relation with you (we mention a few processes without limitation to these: BOOKING/SALE/ORDER, TRANSPORTATION and DELIVERIES, WARRANTIES and SERVICE, maintaining customer relations - CUSTOMER SUPPORT SERVICE, conducting recruitment processes).

WHAT OPTIONS DO I HAVE?

To exercise your rights on the processing of personal data and for this purpose, please consult the section “Rights of the data subject” - point 2.

HOW CAN I CONTACT YOU?

If you still have questions or want more additional information related to data protection, please send us an e-mail to dpo@h-metal.ro and we will answer as soon as possible.

Note:  H Metal complies with all legislative measures on the protection of personal data

Please refer to the information in this document as it expresses the policy of H Metal on the processing of personal data.

At H Metal SRL, we process personal data exclusively within the legal provisions on the protection of personal data - see “Legal background” - point 4.

1. PURPOSES AND LEGAL BACKGROUND OF YOUR DATA PROCESSING:

According to Regulation (EU) 2016/679 and related legislation, the purposes for which we process your personal data are strictly related to the relationship between H Metal and the data subject. The information you provide is treated with the utmost confidentiality and exclusively for the purposes for which it was collected.

Please see below the details of the purposes for which we process data and the legal background:

1.1. CONTRACTING AND MANAGING THE RELATION WITH CLIENTS:

a. Data for orders:

Personal data stored will be used to carry out contracts and to process your requests. Following the completion of the contract or upon your request, your data are saved considering the storage terms according to the fiscal and commercial legislation and where applicable for a period necessary to protect the Operator’s rights.

b. Data for the newsletter service:

When you provide your data to benefit from our newsletter service, H Metal uses your data only for the purpose of sending direct marketing messages.

Through direct marketing actions, we may keep you informed about our products, services, and campaigns, in compliance with the legal provisions in force. The use of data stops as soon as you unsubscribe from the newsletter. You may cancel the newsletter service at any time and free of charge by accessing the “Subscriptions” section, checking the “Unsubscribe” option of the newsletter or sending an e-mail to office@h-metal.ro by which you expressly request to unsubscribe.

1.2. BUSINESS MANAGEMENT: COOKIES POLICY

To improve your online browsing experience, we use cookies that facilitate the visitors’ use of the website.

In general, the role of cookies is to ensure quick and easy interaction between users and websites. Cookies are also used so that users may easily resume their activities the next time they access a previously visited website. Basically, cookies tell the server which pages should be displayed for the user, without the user having to remember the pages he has browsed or to navigate the entire website from the beginning.

2. YOUR RIGHTS AS DATA SUBJECT REGARDING THE PROCESSING OF THE PERSONAL DATA PROVIDED:

2.1. THE RIGHTS OF THE DATA SUBJECT AND HOW THEY MAY BE EXERCISED

According to the GDPR Regulation, as data subject, you benefit from an accumulation of rights, respectively:

a. Right to information and access to personal data: the right to obtain a confirmation that personal data are processed or not and, if so, access to those data.

b. Right to rectification: the right to request the Operator and to obtain, without undue delay, the correction of inaccurate personal data and/or to obtain the completion of incomplete personal data, mentioning that in the case of an online account, these changes may be made personally in the account editing section.

c. The right to delete data: the right to obtain the deletion of your personal data, without undue delay, if certain reasons mentioned in the GDPR Regulation apply.

d. The right to restrict processing: the right to obtain the restriction of processing in certain cases.

e. The right to data portability: the right to receive your personal data and to send the data to another operator.

f. The right to oppose: the right to oppose at any time the processing of personal data, under the conditions of the GDPR Regulation.

g. The right not to be subject to a decision based exclusively on automatic processing, including profiles, which produces legal effects that concern or similarly affect you to a significant extent.

h. The right to address a complaint to the National Authority for the Supervision of Personal Data Processing (ANSPDCP) if you consider that your data have not been processed according with the legal provisions.

How can you exercise these rights?

To exercise the rights mentioned above, please send a written request, dated and signed, at the e-mail address: dpo@h-metal.ro.ro, or at the mail address: 9/18 Hunedoara Street, Tg. Mures, Mures County, to the attention of the person in charge with data protection.

How long does it take to respond to your requests?

Within maximum one month after the receipt of your request, you will be provided with information on the actions taken or, where applicable, on the reasons why the requested measures cannot be taken.

Note: Please consider that to process a request to access personal data, we will take all reasonable steps to verify the identity of the data subject.

Also, according to the GDPR Regulation, the response period mentioned above may be extended by maximum two months if necessary, considering the complexity and number of requests, and we will inform you about this issue, if applicable.

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA:

The recipients who process personal data within the European Union have the obligation to comply with the same legal provisions, offering the same level of protection as the Operator.

3.1. DATA TRANSMISSION FOR THE PURPOSE OF ORDER PROCESSING

The personal data stored by H Metal are sent to our collaborators to complete/deliver orders. For example, your data will be sent to courier companies, freight companies if you choose to deliver the order by courier.

3.2. DATA TRANSMISSION FOR THE OPERATION OF THE NEWSLETTER SERVICE

To be sure that this service works at the desired parameters, we use a third party specialized in the field of e-mail delivery, respectively the mailchimp.com platform which belongs to The Rocket Science Group. Its data protection policy may be found here: https://mailchimp.com/legal/privacy/.

You may unsubscribe from the newsletter service at any time - either from your account - the “Subscriptions” section, or by pressing the “Unsubscribe” button in the e-mail received, or by sending an e-mail to office@h-metal.ro in which you expressly request to unsubscribe.

3.3. TRANSMISSION TO PUBLIC INSTITUTIONS, COURTS, AS WELL AS COMPETENT AUTHORITIES TO INVESTIGATE CRIMINAL ACTIONS

In special cases, when required by law, H Metal may provide the competent institutions with information regarding personal data.

3.4. SOCIAL NETWORK PLUGINS

Our website uses “plugins” from social network operators (e.g.: www.facebook.com). All social network plugins on our website are clearly and distinctly marked:

Facebook likebox

We use this plugin to make the connection between the website www.h-metal.ro and the official page of the company opened on Facebook (https://www.facebook.com/HMetalRo/). Through this plugin, H Metal does not collect/store personal data of customers, but through the link created with Facebook, customers may see on our website some of their friends who appreciate H MetalRo page.

3.5. WEB GOOGLE ADWORDS/ANALYTICS SERVICE

Our website uses Google Inc.’ “s Google AdWords/Analytics” service for statistics purposes.

This website uses Google Analytics, a web analytics service made available by Google, Inc.
 (”Google”), which in turn uses cookies. The information generated by the cookie about your use of the website will be sent to and stored by Google on servers in the USA.

If IP anonymization is enabled, your IP will be shortened in the Member States of the European Union or other third-party members of the European Economic Area. Only in exceptional cases will the entire IP address be sent to a Google server in the USA and shortened there. IP anonymization is enabled for this website. Google will use this information on behalf of the website operator to evaluate your use of the website; it will generate website activity reports for the website operators, and it will provide other services related to the activity of the website and internet use.

The IP address provided by your browser will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, in this case, you may not be able to use the full functionality of this website. You may also choose to not use Google Analytics in the future by downloading and installing the Google Analytics Opt-out Browser Addon for your browser: https://tools.google.com/dlpage/gaoptout?hl=en.

Note: Additional information is available on: Google Analytics terms of service si Google Analytics.

4. LEGAL BACKGROUND

For more details, you may read the legislation:

  ● Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (available at http: //dataprotection.ro/?page=Regulamentu_nr_679_2016).

  ● Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.

The management at the highest level is committed to ensure that all employees comply with this privacy policy, by implementing specific internal procedures/rules on the protection of personal data, according to the legislation on the processing thereof.