Privacy policy

ROCK STAR ROMANIA SRL, the legal owner of the website "PIATRAONLINE.com", is registered in the register of the processing personal data under number 30771.

This number regulates data privacy and security of personal data of ”PIATRAONLINE.com” website visitors.
According to romanian law no. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of this data, PIATRAONLINE.com is required to administer in fully safe conditions and only for the purposes specified, the personal data you provide about yourself when placing an order. This personal data is also regulated by the romanian law. 506/200 on the processing the personal data and privacy.

The buyer will not share to third parties, by any means, any information of a private nature of Seller, under penalty of coercing the buyer to pay penalities. Natural or legal persons having access to these confidential data are the person itself, the partners of the operator, service and goods providers.
Seller reserves the right to use information provided by Buyer in order to realize the contract. The buyer also will not make public any information about contract to any third party without the written consent of the Seller.
Seller reserves the right, based on prior consent of the user, to store and use in its own interest, in order to achieve marketing activities, information, billing or other like these provided by the Buyer via the site "PIATRAONLINE.com". It also will not provide any third party information received from the Buyer, except agreed service providers which we have a contract that protects the data received from the Buyer.

When using the Seller’s website, the user / Buyer will provide the Seller personal information which will be used only in order to complete the order, in preparation for delivery, in case of any questions that may arise and to inform buyers about any special offers or new product ranges.

PERSONAL DATA PROTECTION POLICY

www.piatraonline.com

1.    GENERAL INFORMATION

2.    CONTACT DETAILS OF THE CONTROLLER

3.    COLLECTION OF PERSONAL DATA

4.    WHAT DOES PERSONAL DATA PROCESSING MEAN?

5.    DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

6.    DATA STORAGE PERIOD

7.    INDIVIDUAL RIGHTS

7.1 Right of access by the data subject

7.2 Right of rectification

7.3 Right to erasure

7.4 Right to restriction of processing

7.5 Notification obligation regarding rectification or erasure of personal data or restriction of processing

7.6 Right to data portability

7.7 Right to file a complaint with the competent supervisory authority

7.8 Automated individual decision-making, including profiling

8.     UPDATES TO THE PERSONAL DATA PROTECTION AND PROCESSING POLICY

1.    GENERAL INFORMATION

By reading this Personal Data Protection Policy ("PDP") we inform you about the collection and processing of your personal data when you use certain sections of the website.

The policy is structured by chapters, so if you wish, you can easily select the chapter you want to read.

Next, we will inform you about:

• the need for personal data;
• the purpose for data processing;
• data storage period;
• disclosure of personal data to third parties;
• right to data transfer to other countries outside the European Union;
• automated individual decision-making, including profiling.

2.    CONTACT DETAILS OF THE CONTROLLER

ROCK STAR CONSTRUCT S.R.L. is the Controller of the personal data processed through the website www.piatraonline.com (hereinafter referred to as the "website") unless otherwise stated.

Contact data:

ROCK STAR CONSTRUCT S.R.L. 

Aleea Teisani nr. 137A, District 1, Bucharest, Romania

 e-mail: export@piatraonline.com

3.    COLLECTION OF PERSONAL DATA

Your personal data processed by us was provided by you in situations such as:

•  upon signing up for an account/logging in with Facebook/Google account;
•  online purchasing;
•  request sent via the contact form or chat;
•  leave a comment or question on a product page or blog;
•  exercise specific rights under the Site Terms and Conditions or legal provisions;
•  submitting a complaint via the available contact methods;
•  subscribing to the latest news ("newsletter");
•  representing your company in a business relation with us. 

When logging in with your Facebook/Google account, we process data associated with these accounts to log you into the site. The information collected on this occasion may differ depending on the privacy policies or settings for these accounts.

 If we process your personal data from sources other than those listed above or mentioned in this notice, we will inform you if such action is not disproportionate or harmful.

4.    WHAT DOES PERSONAL DATA PROCESSING MEAN?

We are working with an authorized payment service provider (mobilPay) for payment processing. Thus, your bank card data (card number, CVV, etc.) are processed directly by this provider as data controller. For more details, click here

5.    DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We share your personal information with our services providers, such as data hosting services, digital marketing agencies, market research providers, and other vendors. We make sure all these companies provide at least a similar level of security for your data as ours. If your information is to be sent outside Europe, we make sure it complies with standards of protection and security that comply with Rock Star Construct S.R.L. standards. Either way, with compliance with all the data transfer provisions.

Examples of companies with potential for disclosure of personal data:

• IT services & support providers, data storage providers, data cleansing providers;
• web hosting providers;
• delivery services companies (couriers);
• online advertising and social media companies;
• market research companies;
• audit companies. 

6.    DATA STORAGE PERIOD

We process and store your personal data:

• account data, order history, delivery addresses, and other data you entered, are stored for as long as you have an account on the site, plus a maximum period of 3 years since account deletion, to protect our best rights and interests;
• as required by the law (e. g. accounting documents such as issued invoices need to be archived for 10 years, to comply with the legal requirements);
• we reserve the right to delete inactive accounts, after 12 months. Nevertheless, we are not obliged to delete these accounts;
• until you agree to unsubscribe from receiving newsletters (by clicking the "unsubscribe" button at the end of the email).

When we do not specify a specific time for the processing and storage of your personal data, we consider the following principles:

• we only store information for as long as we need it for the activities mentioned;
• our services are designed in such a way that we do not store your data for a longer period;
• we always meet the deadlines required by legal provisions;
• we assess security risks concerning the use and storage of your data.

7.    INDIVIDUAL RIGHTS

Under the legal provisions on data protection, you have the rights listed and described below, which you can exercise by using the contact details in the Section "Contact details of the Operator". We point out that not all rights are absolute and may differ, based on the reason for data processing. 

We will respond to your requests regarding individual rights within one month of receiving your request, but never later than 3 months. If we need more time, we will inform you of this within one month.

If you do not receive a response within this period, please get back to us, perhaps by other means of contact, before taking action with the competent authorities.

7.1 Right of access by the data subject

You have the right to know whether we use or store your personal data. This right can be exercised by requesting a copy of the data, commonly known as making a "data access request".

If we find that access requests are unfounded or repetitive, we will refuse access (with reasons) or charge an administrative fee to exercise this right.

7.2 Right of rectification

You have the right to ask us to rectify or complete your personal data that is inaccurate or incomplete. This right always applies.

 We will ask you for the following information: 

1.     Tell us which data is inaccurate or incomplete;

2.     Explain how we should correct the data;

3.     If possible, provide us with proof of the inaccuracy of the data.

 Sometimes, you have the option to rectify your data via the sections "Account details", and "Delivery addresses".

7.3 Right to erasure

In certain circumstances, you can ask us to delete your personal data. This right is not absolute and is applicable in the following situations: 

1.     The data is no longer needed by us for the purpose for which it was processed;

2.     You have withdrawn your consent (withdrawal of consent does not affect the lawfulness of the processing until the time of withdrawal);

3.     You object to the data processing in a particular way, and following the balancing test, your interests are overridden;

4.     We have a legal obligation to delete the data. 

As for the account through which you log in to the site, you can delete it from the "Close account" section, after which you will receive a confirmation email. This will delete all the data that is associated with it, except for the data that we have to store based on our legal obligation (e. g. supporting documents - contracts, invoices, orders, etc.).

7.4 Right to restriction of processing

By exercising this right, you can request us not to use your data in any way and only store it until you instruct us otherwise. By way of example, this right can also be exercised when:

• you have requested data rectification;
• you have objected to the deletion of data in case of unlawful processing;
• you have asked us to provide you with certain data to defend a right.

7.5 Notification obligation regarding rectification or erasure of personal data or restriction of processing

You have the right to object to the use of personal data in certain circumstances. If after considering your request and carrying out a balancing test, for legitimate reasons, we are unable to comply with your request, we will send you our decision, with reasons.

 This right is an absolute one when exercised against direct marketing - specifically, when you receive emails with offers about similar products and services that you have previously benefited from Rock Star Construct S.R.L.

 If the objection is absolute or above our interests, we will stop processing personal data, precisely for your objection.

7.6 Right to data portability

You have the right to obtain from us, in an accessible and machine-readable format, such as in a ".csv" format, personal data when the data is stored in electronic format and you have provided it to us.

 Such a request, and therefore data portability, may occur when (cumulative conditions):

• the processing is based on your consent/a contract;
• processing is carried out by automatic means.

7.7 Right to file a complaint with the competent supervisory authority

If you have not received a response or are not satisfied with your response, please be advised that you may file a complaint with the National Supervisory Authority for Personal Data Processing. You can also file a lawsuit.

7.8 Automated individual decision-making, including profiling

Rock Star Construct S.R.L. will not assume any decision that involves you as a result of automated processing, nor does it carry out profiling that is likely to produce legal effects for you or to affect you to a significant extent.

8.    UPDATES TO THE PERSONAL DATA PROTECTION AND PROCESSING POLICY

We may update the notice from time to time, so please check this notice periodically. If we make changes that could significantly affect you, we will provide you with a pop-up notification when you log into your account, so that you are informed about changes before those occur.