Privacy Policy
We consider ensuring the right to personal data protection as a fundamental commitment of https://chiaroscuro.ro/, therefore we will devote all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other applicable legislation on the territory of Romania and Germany. As one of the essential principles of this legal framework is transparency, we have prepared this document by which we want to inform you about how we collect, use, transfer and protect your personal data when you interact with us in connection with our products and services through our website https://chiaroscuro.ro/.
We reserve the right to periodically update this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will post on our website the amended version of the Privacy Policy, so please check the content of this page periodically.
Email: https://chiaroscuro.ro/
Below you will find the necessary information on how we collect, store and process personal data taken from the https://chiaroscuro.ro/ website.
In accordance with the requirements of Law No. 679/2017 for the protection of individuals with regard to the processing of personal data and the free movement of such data, as amended and supplemented, https://chiaroscuro.ro/ is obliged to manage, in secure conditions and only for the specified purposes, any personal data you provide us with. These data are collected when you fill out a form on the https://chiaroscuro.ro/ website, in order to contact us or download various materials, when you subscribe to the newsletter or when you complete the data necessary to complete the purchase of a product sold by us. The purpose of collecting this data is mainly to communicate and provide you with useful information that you have requested. SPAM is not practiced and this will not be received from this site. You always have the option to opt-out of having your email address or phone number removed from the database. Non-private information, which does not identify a specific person, is however subject to a different policy, that of cookies (see Cookies Policy). If you wish to have your personal information removed from the database, you can contact us at contact@chiaroscuro.ro.
Also, the website https://chiaroscuro.ro/ complies with the rules imposed by the new General Regulation on the Protection of Personal Data of European Union citizens – GDPR or RGPD, which came into force on 25 May 2018.
The following types of data are collected through the website and direct communication by email:
The following types of data may be collected through this website:
Anonymous data that cannot be linked to or lead to the identification of a person
Personal data: name, surname, email address, telephone number, etc.
This data can be collected in several ways:
Through the contact forms you fill in on the site
Through newsletter subscription forms
Through comment forms
Through order forms
Via account creation forms
Through the comment forms on the product page
Via product question forms
Via the offer request form on the product page
Via other channels using cookies
Who uses and has access to this information
In order to carry out our activities, we use various services from external or internal suppliers, named in this document as our assignees. The services of external providers involve storing information in their databases, which is protected and secured. They can be:
- Internal: https://chiaroscuro.ro/ representatives from the following departments: sales, marketing, administrative, web administration or customer support.
- External: The online platforms used and the service providers we collaborate with to carry out our activity:
- Email marketing platform
- Collaborating courier company
- Online payment processor
- Management software
- Collaborating company on marketing, sales and recruitment activities
- Online advertising platforms used for remarketing actions (Google AdWords, Facebook)
How long the collected data will be stored
Website forms:
The data filled in through the forms on the website, the data stored in the website admin and in the management program, are stored until the applicant requests their deletion.
Cookies:
Depending on the type of cookie, the data captured by cookies have different retention times, which vary as follows:
Data storage only during the user’s visit;
Data storage for a period of a few days (for example, to display certain elements of the site, pop-ups, alerts, only once every few days, not every time the site is accessed).
Keeping data for a longer period of time (such as anonymous data captured by Google Analytics, automatic login, keeping products in the shopping cart)
If you want to find out more information about Cookies and what they are used for, we recommend the following links:
As a concerned person, you have the following rights:
- Right of access to data – the right to obtain from https://chiaroscuro.ro/ a confirmation that personal data concerning you are processed or not, as well as access to those data; you can also obtain a copy of the personal data provided to our company that are subject to processing.
- Right to rectification – you have the right to have inaccurate personal data amended by https://chiaroscuro.ro/ and the right to have incomplete personal data completed.
- Right to data deletion – you have the right to obtain from https://chiaroscuro.ro/ the deletion of personal data concerning you without undue delay, and https://chiaroscuro.ro/ is obliged to delete such data when:
- personal data are no longer necessary for the purposes for which they were collected or processed;
- the data subject withdraws his/her consent on the basis of which the processing is carried out and there is no other legal basis for the processing;
- the data subject objects to the processing and there are no legitimate grounds for objecting to the processing;
- the personal data have been unlawfully processed;
- the personal data must be deleted in order to comply with a legal obligation incumbent on https://chiaroscuro.ro/ under Union or German law. https://chiaroscuro.ro/ will notify each recipient to whom personal data has been disclosed of any deletion of personal data, unless this proves impossible or involves disproportionate efforts, and will inform such recipients if requested;
- Right to restriction of processing – You have the right to request restriction of the processing of your data. This means that the processing of your data is restricted so that we can keep the data but not use or process it. This right applies in the specific circumstances set out in the General Data Protection Regulation, namely:
- the accuracy of the data is contested by the data subject (i.e. by you), for a period that allows the controller (i.e. https://chiaroscuro.ro/) to verify the accuracy of the data;
the processing is unlawful and the data subject (i.e. you) objects to the erasure of the data and requests restriction of their use; - the controller (https://chiaroscuro.ro/) no longer needs the data for processing, but they are requested by the data subject for the establishment, exercise or defense of legal claims;
- the data subject (i.e. you) has raised objections to the processing based on legitimate grounds on the part of the controller on the basis of a check whether the legitimate grounds of the controller (https://chiaroscuro.ro/) outweigh those of the data subject (if the legitimate rights of https://chiaroscuro.ro/ prevail over your rights).
- the accuracy of the data is contested by the data subject (i.e. by you), for a period that allows the controller (i.e. https://chiaroscuro.ro/) to verify the accuracy of the data;
- Right to data portability – you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit this data to another controller under certain conditions; in exercising this right, you have the right to have your personal data transmitted directly from https://chiaroscuro.ro/ to another controller when technically feasible;
- Right to object – you have the right to object, for reasons related to your particular situation, at any time, to the processing of your personal data, including the creation of profiles based on these provisions;
- The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing;
- The right to withdraw your consent at any time, without affecting the lawfulness of the processing of personal data carried out by https://chiaroscuro.ro/ on the basis of your consent prior to its withdrawal.
For any questions or requests regarding the personal data you have submitted to us, including in order to exercise your rights mentioned in the previous section, you can always contact us at:
Email: contact@chiaroscuro.ro