GDPR – PROCESSING OF PERSONAL DATA
In this section, dear customer, we inform you about the processing of your personal data and your rights under Regulation (EU) 679/2016 – General Data Protection Regulation (GDPR), the Law implementing the provisions of GDPR and any other decisions that the National Supervisory Authority for Personal Data Protection (ANSPDCP) may issue regarding the protection of personal data.
Responsibility for data processing
The responsibility for data processing lies with the legal entity SC Colibri Gold SRL.
What personal data do we process?
In order to fulfill the processing purposes defined below, we process both personal data provided directly by the customer at the time of submitting the order and other personal data provided to us by third parties, as well as data we generate ourselves on the basis of their processing. These data can be classified in principle into the following categories:
Identification data: name, surname, CNP, series, number of identity card, date, place of birth, citizenship, nationality, etc.
Contact details: home/mailing address, e-mail address, mobile phone number, etc.
Why do we process your data and what are our legal grounds?
-To execute a contract online
-Booking and marketing products online.
-Advertising, marketing, and publicity.
-For financial-accounting purposes, according to tax legislation.
-For internal audit or financial audit purposes.
If you want to participate in our loyalty programs for active customers, in various contests and sweepstakes, in satisfaction surveys on contracted services, and to receive newsletters by e-mail, we need your express consent to process your data for this purpose. If you have given your consent, you are entitled to withdraw your consent at any time for any or all of the above processing operations, without giving any reason, by written request, as follows:
- by e-mail to: contact@colibrigold. com or
- by post/ courier to the following address: 7 Floare Galbena Street, Bucharest, EU, Romania
To which recipients or categories of recipients do we send your data?
Service providers
To our service providers, who act as authorized persons of the operator, and strictly on the basis of documented instructions received from us. Third parties who have access to this data: DHL, FedEx, UPS, TNT.
Transmission to public institutions
In special cases, we must provide information on personal data to competent institutions, as this is necessary for criminal investigations, the fulfillment of lawful intelligence tasks, or obtaining intellectual property rights.
Web analytics service and social plugins
We use online market analysis services for statistical purposes as well as for making offers based on user behavior and preferences. These web analytics services use so-called “cookies” (see Cookie Policy document). We also use “plugins” from social network operators (e.g.: www.facebook.com) for the same purposes.
How long do we store your data?
We keep your data only for as long and to the extent necessary to achieve the purposes mentioned above or if there is a legal obligation to do so.
For data processing that requires your consent, the data will be processed and stored until the date of withdrawal of consent.
If we have entered into a contract with you, then we will comply with our legal obligations to retain relevant data and documentation as follows: i) for the purposes of fulfilling our legal obligations to document and retain under the legislation to prevent and combat money laundering and terrorist financing, we will retain the data for a period of 5 (five) years after the termination of our contractual relationship with you. ii) the personal data of our clients contained in any justifying documents that are the basis of the entries in the financial accounting shall be kept in the archives of SC Colibri Gold SRL for 10 years from the closing date of the financial year which the justifying documents were drawn up, in accordance with the provisions of the Accounting Law. iii) within the framework of the defense and exercise of our legal rights and interests, your data necessary for this purpose shall be kept in accordance with the general terms of prescription.
Data security
For the protection of your data on our website, we have taken technical and organizational measures to protect them in particular against loss, manipulation, or unauthorized access. The measures taken are regularly checked and are constantly adapted to state of the art.
Your personal data protection rights
The purpose of data collection is: to inform users/customers (Buyers) about their account status on www.colibrigold.com, inform users/customers about the evolution and status of orders, evaluation of products and services offered, commercial activities, promotion of products and services, marketing, advertising, media, administrative, development, market research, statistics, tracking, and monitoring of sales and consumer behavior.
By filling in your data in the account creation and/or order form you declare that you unconditionally accept that your data will be used for the purpose of marketing and consumer research. You expressly and unequivocally consent to the inclusion of your personal data in the database of Colibri Gold, and you expressly and unequivocally agree that all such personal data may be stored, used, and processed on an unlimited territorial and/or temporary basis by Colibri Gold, their affiliates, and collaborators for the performance and/or execution by Colibri Gold, affiliates and their collaborators in activities such as but not limited to, commercial activities, promotion of products and services, marketing, advertising, media, administrative, development, market research, statistics, tracking and monitoring of sales and consumer behavior.
By reading these Terms and Conditions you acknowledge that you are guaranteed the rights provided by law, namely the right to information, the right of access to data, the right to intervene, the right to object, the right not to be subject to an individual decision, the right to apply to the courts in case of violation of their rights guaranteed by Law 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data. You also have the right to object to the processing of your personal data and to request their total or partial deletion.
On the basis of a written request, dated and signed, sent to the address SC Colibri Gold, Floare Galbena str. no.7, Bucharest, EU, Romania you can exercise, free of charge, the following rights: –once a year, to confirm that your personal data are processed or not; – to intervene on the transmitted data; – to object to the processing of data for justified and legitimate reasons related to their particular situation – to request the deletion of data, except for the situations provided by law. Thus, colibrigold.com may notify users/customers about current offers via newsletter and may send greetings, gift vouchers, or other special messages.
Colibrigold. com does not promote SPAM. Any user/customer who has explicitly provided his/her email address on colibrigold.com may opt to have it removed from our database. The information you provide to us will be used for the purpose for which you provided it, to administer, support, and evaluate our services and to prevent breaches of security, the law, and our contractual terms.
Colibri Gold may also provide your personal data to other companies with which it is in partnership, but only on the basis of a confidentiality commitment on their part, guaranteeing that this data is kept secure and that the provision of this personal information is done in accordance with the legislation in force, as follows: providers of marketing services, courier services, payment/banking services, telemarketing or other services, other companies with which we may develop joint programs to offer our products and services on the market, insurers. Your personal information may also be provided to the Public Prosecutor’s Office, the Police, the Courts, and other authorized state bodies, on the basis and within the limits of legal provisions and following expressly formulated requests.
You have the following rights regarding the protection of your data:
Right to information
Your right to receive information about the processing operations carried out by us on your data. Compliance with this right is achieved through this information;
Right of access
Your right to obtain confirmation from us as to whether or not we are processing personal data about you and, if so, access to that data and to specific information about its processing;
Right to rectification
Your right to obtain from us, without undue delay, the rectification of inaccurate data concerning you or the completion of personal data that are incomplete;
The right to erase data
Your right to obtain, without undue delay, the erasure of personal data concerning you, to the extent that the following GDPR conditions are met: (i) the personal data are no longer necessary for the purposes for which they were collected or processed by us; (ii). You withdraw your consent to consent-based data processing; (iii) you object to the processing of personal data by us. You may only object to processing that is lawfully based on the fulfillment of our legitimate interests, for which we have no legitimate interests and reasons prevailing in relation to the processing; (iv) your data has been unlawfully processed by us; (v) your data must be deleted for compliance with a legal obligation incumbent on us;
Right to data portability
Your right to receive from us the personal data concerning you that you have provided to us directly, in a structured, commonly used, and machine-readable format, as well as to transmit this data to another controller, when technical means allow this. You can only exercise this right when the processing is based on your consent or when the processing is carried out by automated means.
The right to opposition
Your right to object, for reasons related to your particular situation, to the processing carried out by us on the legal basis of our legitimate interests. If you object to such processing, we will no longer process your personal data, unless we can demonstrate
compelling legitimate grounds for the processing which override your interests, rights, and freedoms or the purpose of establishing, exercising, or defending a legal claim against us.
The right not to be subject to a decision based solely on automated processing, including profiling (any automated processing that uses personal data to evaluate certain personal aspects of you, such as payment behavior, financial situation, traffic behavior, etc.), which produces legal effects concerning you or which similarly affects you to a significant extent.
In order to comply with the above requests, we may request additional information necessary to confirm your identity. Once we have identified you, we will provide you with a response to your request to exercise the above rights within one month of receiving your request.
To exercise the above rights, you may send a written request (i) by e-mail to: contact@colibrigold. com, or (ii) by post/mail to the following address: str. Floare Galbena nr.7, Bucharest, EU, Romania.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing at Bld. G-ral Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, telephone: +40318059211, e-mail: anspdcp@dataprotection.ro. Last but not least, if you have any questions regarding the information contained in this document, you may contact us at the following e-mail address: contact@colibrigold.com.