• No products in the cart.

Privacy policy

This Privacy and Personal Data Protection Policy (“Policy”) describes the ways in which we, ATELIER PASTRY BONBON SRL, process the information brought to our attention, including the personal data that is collected through this website when it is used by you. We collect only the information necessary to provide you with the services you have ordered and keep it secure. This Privacy Policy explains why and how we collect and use our customers’ personal information.

ATELIER PASTRY BONBON SRL is registered in the Trade Register under number J40/9689/2023, Fiscal Code 48218213 with registered office in Bucharest, Sector 2, Bulevardul Ferdinand I, No. 70, Floor 1. ATELIER PASTRY BONBON SRL is an OPERATOR of personal data.

www.almond.shop.ro is the official website of S.C. ATELIER PASTRY BONBON S.R.L., created to better inform website users about the products we manufacture and sell, as well as to ensure effective communication with customers.

 

PERSONAL DATA

The data to be processed and collected by the company are as follows: name and surname, e-mail address, telephone number, delivery address, billing address.

The purpose of processing the above data is to honor the orders placed by the buyer within the platform, but depending on the case also for advertising and marketing.

If the deletion of the information is not against the law, the personal data of the customers will be deleted from the database in no more than 30 calendar days from the date of the request.

 

Information Collection: What Data We Process (Collect, Use, Share)

  • The information sent by you
  • Contact details – we receive and save any information submitted by completing an order. Order forms collect information about you including: name and surname, postal address (domicile / residence / mailing address / delivery address / billing address), telephone number, email address, location data (IP).
  • Information we receive through the use of our services
  • Automatic Information – when you visit our site we collect information, which may constitute personal data. This information includes ip address, referral url, last page visited, type of browser used, operating system. We can record the date and time of access as well as the number of clicks made on our website.

Traffic measurement tools – We use traffic measurement services provided by third parties (Google Analytics) to collect information about the use of the site, such as visits, pages visited. We also track the popularity of published content. Traffic measurement tools use specific tracking techniques (for example: cookies) to recognize your device and analyze information about you. It collects the following information: which pages you visited and how long you spent on these pages, your IP address, which operating system you use, which browser you use and which site you visited before reaching our site.

  1. Information logs – When you visit the site, access the content provided by us, use our services, ask us questions, send us emails or participate in contests or fill out satisfaction forms on our website we automatically collect and store a series of information in log files. This information includes the IP address, the web address, the website visited before, the outgoing web address, the browser used, the operating system, the date and time, but also any errors received from the website or services.
  2. Other information – We also receive and store any information that you transmit on our website, by email, phone or any other communication with our team or in connection with the provision of contracted services or products. Every time you contact us, we have the right to record the telephone conversation to ensure that we have accurate information, so that we can still offer the contracted services but also as support for the actions carried out by our team in the event of a complaint to the response received by at US.

Being fully aware that your personal information belongs to you, we do our best to store it securely and process it carefully. We do not provide information to third parties without informing you as required by law. We do not make exclusively automated decisions with a significant impact on you.

By visiting the site, purchasing our products or interacting with us by any means and/or through any communication channel (email, phone, social media, etc.), you agree to this If you do not agree with what is described in this Privacy Policy, please do not use the services of ATELIER PASTRY BONBON SRL, being a data controller within the meaning of the General Regulation Regarding the Protection of Personal Data (GDPR).

In order for your data to be processed safely, we have made every effort to implement reasonable and appropriate technical and organizational measures to protect your personal data. personal.

The protection of your personal information is very important to us. That is why we are committed to complying with European and national legislation on the protection of personal data, in particular Regulation (EU) 679/2016, also known as GDPR, and the following principles:

✓ Legality, fairness and transparency: we process your data. legal and fair. We are always transparent about the information we use and you are properly informed. you are properly informed.

 

✓ You’re in control: To the extent permitted by law, we give you the ability to review, modify, delete the personal data you’ve shared with us, and exercise your other rights.

 

✓ Data integrity and purpose limitation: We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that personal data is accurate, complete and up-to-date.

 

✓ Security: we have implemented reasonable security measures for the processing of personal data, so as to protect your personal information as best as possible. However, keep in mind that no website, app, or internet connection is completely secure.

 

 

CATEGORIES OF PERSONAL DATA PROCESSED

You can use our website without revealing any personal data. However, in order to be able to contact us in order to send your messages/requests/reports, you will be asked to provide this type of data.

Therefore, we collect personal data through the online order form and by using the contact form on the website that you can find on the “CONTACT“.

.

The data requested when using this means of communication are: name, e-mail address, delivery or billing address and telephone number.

It is also possible to collect technical information about website users by automatic means – cookie modules or other similar technologies (web beacons, web server logs, etc.), information such as: IP address, operating system, internet browser, ads which you clicked, the location, the web pages you access on our website, in order to administer the system. This is statistical data about the actions and browsing patterns of our users and does not directly identify a specific individual. Cookies and other similar technologies help us improve the website and provide better and personalized content. For more information about the use of cookies on the website, please see the Cookie Policy available on our website.

 

 

PURPOSES OF PERSONAL DATA PROCESSING

  • Informing users and the relationship with customers, respectively the support offered to our customers regarding the various messages and requests made through the dedicated section (Contact) within the website.
  • Formulating responses to requests, notifications, complaints received online.
  • Information and promotion of the company’s products and activities: for the transmission, through means of remote communication (post, e-mail), of information regarding the company’s products and activity.
  • Collecting information from users regarding the degree of satisfaction regarding the specific products offered by our company.
  • The administration and maintenance of the website, the improvement of the experience offered on the website, the various analyzes or reports on the functioning of the website or the consumption preferences of the website users.
  • To diagnose or fix technical problems of website operation.
  • To protect against fraud and other illegal activities, to resolve any petitions/complaints/requests of data subjects, as well as to establish or claim a right in court, resolve disputes or investigations in which our company is a party.

 

 

BASICS OF PROCESSING

The legal basis for the processing of personal data according to the purposes indicated above is:

  • the execution of a contract to which you, as the data subject, are a party, or to take steps at your request before the conclusion of a contract,according to art. 6, lin. 1, lit. b) from EU Regulation 679/2016 (with regard to sending a message/request in relation to the products promoted through the website, requesting a price offer, concluding and executing contracts in which our company is a party: supply, sale- purchase of products offered by the company).
  • fulfillment of a legal obligation that rests with the operator, according to the provisions of art. 6, paragraph 1, lit. c) from EU Regulation 679/2016 (performing financial and accounting records, auditing, archiving, compliance with contractual obligations and internal policies, business management and activity development).
  • your consent for the processing of personal data, according to the provisions of art. 6 1, lit. a) from EU Regulation no. 679/2016, provided for advertising purposes, if you have provided it. You have the possibility to withdraw your consent at any time by following the unsubscribe instructions in each email or by submitting the unsubscribe option through the contact form.
  • the legitimate interest of permanently improving your experience on the website, ensuring security (to keep this website secure against fraud and other illegal activities) and protecting the rights and interests of S.C. ATELIER PASTRY BONBON S.R.L. and of its third collaborators,according to the provisions of art. 6, 1, lit. f) from EU Regulation no. 679/2016.

Providing data for this purpose is not mandatory, refusing to provide data will not have negative consequences for you.

 

 

PERSONAL DATA PROCESSING DURATION. STORAGE PERIOD

SC ATELIER PASTRY BONBON S.R.L. processes personal data only for the duration necessary to fulfill the processing purposes mentioned above, and thereafter exclusively to comply with the legal requirements in force and to protect the legal rights and interests of our company.

Immediately after the end of the applicable storage period, personal data will be destroyed or deleted from computer systems or transformed into anonymous data to be used for scientific, historical or statistical research purposes.

The information collected by cookies is stored for 6 months in order to carry out analyzes and reports related to the performance of the website. They will be deleted after this period.

In the case of data processing based on the consent regarding the transmission of information, the data will be processed until the moment of your unsubscribing or withdrawal of your consent.

We store your personal data only for the period necessary to fulfill the purposes, but no longer than 5 years after the termination of the contract or the last interaction with us.

 

Note that in certain expressly regulated situations, we store data for the period required by law.

 

 

TRANSMISSION/DISCLOSURE OF PERSONAL DATA. DATA TRANSFERS

To fulfill the processing purposes, S.C. ATELIER PASTRY BONBON S.R.L. may disclose your personal data to partners, to third parties or entities that support the activity of our company through the website, such as providers of IT services (maintenance, software development), providers of marketing services, accounting services, archiving, legal services, other companies/suppliers of products or materials necessary for the production process, or at the request of fiscal bodies or other competent state control authorities, based on and within the limits of legal provisions and as a result of express requests. We always make reasonable efforts to ensure that these third parties have adequate protection and security measures in place. We have contractual clauses with these third parties so that your data is protected. In these situations, we will ensure that any transfer is legitimate under the law.

We may disclose your data, subject to applicable law, to business partners or other third parties.

We may also pass the data on to other parties with your consent or according to your instructions, such as where you exercise a portability request.

We will also be able to provide your personal information to the prosecutor’s office, the police, the courts and other competent bodies of the state, based on and within the limits of the legal provisions and as a result of expressly formulated requests.

The transfer of personal data to a third country can only take place if the country to which the transfer is intended ensures an adequate level of protection.

The transfer of data to a state whose legislation does not provide a level of protection at least equal to that provided by the General Data Protection Regulation is possible only if there are sufficient guarantees regarding the protection of the fundamental rights of the data subjects. These guarantees will be established by us through contracts concluded with the suppliers/service providers to which your personal data will be transferred.

Whenever we transfer your personal data outside the EEA, we will ensure that there is a similar level of protection through one of the following safeguards:

  • we will transfer your personal data to countries that have been shown by the European Commission to provide an adequate level of security for personal data.
  • when we use certain service providers, we may use certain model contracts provided and approved by the European Commission that give personal data the same protection as it has in Europe.

 

 

DIRECT MARKETING

To the extent that we have obtained your prior consent or you are already a customer of the Company, we may use direct marketing technologies using the information collected about you. We currently send commercial messages by e-mail (e-mail marketing) to people who have given consent to this in advance.

 

 

YOUR RIGHTS

In accordance with the provisions of EU Regulation 679/2016 on the processing of personal data of natural persons and on the free movement of such data, you have the following rights:

  • The right to request access to your personal data:the right to obtain, from S.C. ATELIER PASTRY BONBON S.R.L., upon request and free of charge, confirmation that your personal data is or is not processed by S.C. ATELIER PASTRY BONBON S.R.L. and the right to be informed about said processing; The right to rectify your personal data:
  • the right to obtain from S.C. ATELIER PASTRY BONBON S.R.L., rectification of your incorrect/incomplete personal data; The right to delete your personal data:
  • the right to obtain from S.C. ATELIER PASTRY BONBON S.R.L., the deletion of your personal data, but in this case you will no longer benefit from the possibility of receiving information through the electronic mail address.the right to obtain from S.C. ATELIER PASTRY BONBON S.R.L., the deletion of your personal data, but in this case you will no longer benefit from the possibility of receiving information through the electronic mail address. This right will not be able to be exercised to the extent that S.C. ATELIER PASTRY BONBON S.R.L. has the obligation according to the law to keep and process certain personal data, for example, in the case of requests to access the services provided by the Company. Data can be deleted in the following situations:
    • they are no longer necessary to fulfill the purposes for which they were collected or processed;
    • if consent is withdrawn and there is no other legal basis for processing;
    • if you object to the processing and there are no overriding legitimate grounds;
    • if the personal data were processed illegally;
    • if personal data must be deleted to comply with a legal obligation;
    • the personal data were collected in connection with the provision of information society services according to the Union law or the internal law under which the operator is.
  • The right to restrict processing:the right to obtain from S.C. ATELIER PASTRY BONBON S.R.L. processing restriction, in the following cases:
  1. (i) the accuracy of the personal data is contested by you;
  2. (ii) the processing is unlawful and therefore you object to the deletion of the personal data, requesting the restriction of the processing instead;
  3. (iii) S.C. ATELIER PASTRY BONBON S.R.L. no longer needs your personal data, but you request these data for the establishment, exercise and defense of legal claims.

You have the right to object at any time, free of charge and without any justification, to your personal data being processed for advertising, marketing and publicity purposes or to being disclosed to third parties for such purposes.

  • The right to data portability, namely the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as the right to have this data transmitted by S.C. ATELIER PASTRY BONBON S.R.L. to another data operator, to the extent that the conditions provided for by law are met;
  • The right to oppositionrepresents the right to object at any time, for reasons related to your particular situation, to data processing based on legitimate interest, unless S.C. ATELIER PASTRY BONBON S.R.L. has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the data subjects or when the purpose of the processing is to ascertain, exercise or defend a right in court;
  • The right not to be subject to an automated individual decision is the right not to be the subject of a decision made solely on the basis of automated processing activities, including profiling, which produce legal effects or similarly affect you to a significant extent ;
  • The right to withdraw the consent given at any time in order to stop the processing of data that is based on your consent. The withdrawal will not affect the legality of the processing carried out on the basis of the consent given before the withdrawal.
  • The right to file a complaint with the supervisory authority or the competent courts, when you consider that personal data is being processed illegally by S.C. ATELIER PASTRY BONBON S.R.L.
    • Name: National Authority for the Supervision of Personal Data Processing
    • Address: B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
    • Telephone: +40.318.059.211 or +40.318.059.212
    • Email: anspdcp@dataprotection.ro

The above-mentioned rights are expressly provided for in Regulation 679/2016 for the protection of natural persons regarding the processing of personal data and the free movement of such data.

You can withdraw your consent to direct marketing at any time by following the unsubscribe instructions in each email.

 

The rights listed above are not absolute. There are exceptions, therefore each request received will be analyzed in order to decide whether it is justified or not. To the extent that the request is justified, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to file a complaint with the Supervisory Authority and to go to court.

 

We will try to respond to your request within one month. However, the deadline may be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility of identifying yourself in a deadline

 

If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable us to identify you, we are under no obligation to comply with the request.

 

 

HOW WE PROTECT PERSONAL DATA. DATA SECURITY

SC ATELIER PASTRY BONBON S.R.L. implements administrative, technical, organizational and physical safeguards to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, communication or other use.

we take the necessary measures to protect our customers and other people whose data we process from unauthorized access to personal data, as well as from the unauthorized modification, disclosure or destruction of data that we process in the current activity.

We have implemented the following technical and organizational security measures for personal data:

1) Dedicated policies. We adopt and constantly review internal personal data processing practices and policies (including physical and electronic security measures) to protect our systems from possible unauthorized access or other possible threats to their security. These policies are subject to constant review to ensure that we comply with legal requirements and that the systems are working properly.

2) Data minimization. We ensure that your personal data that we process is limited to only that which is necessary, appropriate and relevant for the purposes stated in this Policy.

3) Restricting access to data. We try to restrict as much as possible access to the personal data we process to the minimum necessary: employees, collaborators and other people who need to access this data in order to process it and carry out a service. Our partners and collaborators are subject to strict confidentiality obligations (either by contract or by law).

4) Specific technical measures. We use technologies to ensure the security of our customers, always trying to implement the most optimal solutions for data protection. We also make periodic data back-ups to be able to recover them in the event of an incident, and we have implemented periodic audit procedures regarding the security of the equipment used. However, no website, app, or internet connection is completely secure and untouchable.

5) Ensuring the accuracy of your data. Sometimes we may ask you to confirm the accuracy or timeliness of your data to be sure that it reflects reality.

6) Staff training. We constantly train and test our employees and collaborators on legislation and best practices in the field of personal data processing.

7) Anonymization of data. Where we can, we try as much as possible to anonymize/pseudo-anonymize the personal data we process, so that we can no longer identify the persons to whom it relates.

However, although we make constant efforts to ensure the security of the data you entrust to us, we may also experience less fortunate events and security incidents/breaches. In these cases, we will strictly follow the security incident reporting and notification procedure and will take all necessary measures to restore the situation to normal as soon as possible.

 

 

OUR POLICY UPDATE

The content of this Policy may be updated periodically by reposting the revised version on the page you are currently viewing. In case of significant changes, we will inform you about them through easily visible notices posted on our website, indicating at the beginning of the document when the most recent update was made. The revised version enters into force on the date of publication on the website. It is entirely your responsibility to check the contents of this page to be up to date with the latest version of this document.

 

 

HOW YOU CAN CONTACT US

If you have any questions or comments about this Privacy Policy regarding the processing of personal data, if you want to exercise your rights or to update the personal data we hold about you, please write to us at the registered office of S.C. ATELIER PASTRY BONBON S.R.L. from Bucharest, Sector 2, Bulevardul Ferdinant I, No. 70, Floor 1, or by e-mail at: contact@almondshop.ro. Last update: 13.07.2022

 

Last update: 13.07.2022