Protection of personal data
The categories of personal data of the employees processed within the system
We processe the following categories of personal data:
- Last name, first name;
- gender
- Date and place of birth;
- IDNP;
- Traffic data;
- Banking data;
- Signature;
- Phone;
- The home address;
- E-mail;
- The user’s IP;
- Operating program version;
- Date and time of site access;
- User ID;
- Products that have been purchased or intended to be purchased by the user.
We collect personal data only from the subject of personal data once the electronic forms have been completed or the contracts for the provision of services in electronic format or paper support have been completed, and can verify their authenticity by requesting the presentation of an official identity document.
We may also process other categories of personal data provided that the data subject has consent, or that the legitimate interest is realized in the context of civil law in a specific case.
Purpose of processing of personal data
- We processe the personal data of the customers who intend to procure certain services and of the employees who offer these services on behalf of the operator, solely for the purpose of conducting electronic commerce.
- We may process your personal data for the purpose of providing direct marketing services (personalized offers, promotions, etc.) only with the agreement of the data subject. Cases in which personal data may be disclosed to third parties
Cases in which personal data may be disclosed to third parties
- We may disclose personal data aimed at the subjects of personal data / its clients only to the bodies expressly authorized by law, provided that the request is motivated and relevant to the examined case. of the competence of our website, which is to evaluate the requested information, is relevant and not excessive to the purpose for which it is collected, and otherwise to refuse to provide this information.
- We protect all categories of personal data collected, which have been known from the subjects of personal data, and will inform the subjects of personal data without delay about any type of request from any unauthorized third parties.
- We does not sell, offer or market personal data to customers / prospective customers.
Rights of personal data subjects
We inform that all the clients / prospective clients / visitors of the site whose personal data have been processed by this operator of the personal data, have the following rights: the right to be informed, the right of access to personal data, the right to intervene on personal data, the right of opposition of the subject of personal data, the right not to be subject to an individual decision, the right of access to justice (articles 12-18 of the Law on protection of personal data).
In case the personal data are collected directly from the subject of these data, in accordance with the provisions of art. 12 of the Law on the protection of personal data, the person needs to be provided with the following information, unless he already has the respective information:
- regarding the identity of the operator or, as the case may be, of the person empowered by the operator (name, legal address, IDNO, registration number in the Register of records of personal data operators);
- regarding the concrete purpose of the processing of the collected personal data;
- regarding the recipients or categories of recipients of the personal data;
- existence of rights to information and access to the data collected; data intervention (in particular to rectify, update, block or delete personal data whose processing is contrary to the law due to their incomplete or inaccurate nature) and opposition, as well as the conditions under which these rights can be exercised; if the answers to the questions by which the data is collected are obligatory or voluntary, including the possible consequences of refusing to answer the questions by which the information is collected.
The subjects of personal data are guaranteed the right of access and the possibility to become acquainted with the documents drawn up in order to verify the correctness of their preparation, to challenge against the incorrect inclusion or inclusion of some data, as well as against other errors committed when entering the data about themselves. In this respect, the persons responsible for the processing of personal data, will ensure the access of the person only to the personal data that aims at it directly, being excluded the possibility of consulting the personal data targeting other subjects, contained in the personal files (other materials) , except in cases where the applicants carry out a legitimate interest that does not prejudice the fundamental interests or rights and freedoms of the subject of personal data.
The right of information is provided by the operator of the personal data (or the entities that maintain the system maintenance and / or provide outsourced services of the operator) to all persons subject to processing.
In the case of the realization of the right of intervention by the subject of personal data, the inaccurate data will be updated by rectification or deletion, as the basis serving only legal sources (identity documents, civil status, main state information resources, etc.), the modification to be carried out in all managed information and records systems.
Mechanisms and how to monitor the consumer’s online activities (cookies) for marketing purposes, the procedure for obtaining consent for such practices
- You can purchase goods following the choice of payment method with the help of the “Shopping Cart”.
- The order is sent with the help of the Shopping Cart when:
a) accept the terms and conditions of the regulations uploaded in the specialized section on the site;
b) finalizing the order by accepting the “Order Form” on the online shopping site.
- You can fill in the “Order Form” directly on the website www.healthproductfromindia.com, by logging into your account.
- In order to make an account, which allows you to submit orders, you must register with a valid email address and set the password. You are deemed to have automatically accepted the Terms and Conditions by creating this account.
- By completing the “Order Form”, you declare that:
a) the personal data completed are complete and accurate;
b) you have read and accepted the terms of use.
- After completing the “Order Form” on the address of the seller, the order will be issued and all the information needed to deliver the order.
- By placing an order: you agree to the processing of personal data contained in the “Order Form”. The personal data of the users filled in the order form are used by the Seller for the sole purpose of sending the product orders.
- By placing an order: you agree to the processing of personal data contained in the “Order Form” for marketing purposes. which you must pay upon receipt of the order.
- If after the order is issued the Seller observes that certain ordered products are not in stock, he will inform the User by e-mail or telephone about the order status.
The right to refuse the collection of personal data by the service provider
According to art. 5 paragraph (5) of Law no. 133 of 08.07.2011 regarding the protection of personal data:
(1) The processing of personal data shall be carried out with the consent of the subject of personal data.
(2) The consent regarding the processing of personal data may be withdrawn at any time by the subject of personal data. Withdrawal of consent cannot have retroactive effect.
(3) In the case of the incapacity of exercise or of the limited exercise capacity of the subject of personal data, the consent regarding the processing of personal data is granted, in written form, by his legal representative.
(4) In the case of the death of the subject of personal data, the consent regarding the processing of his data is granted, in written form, by his successors, if such consent was not given by the subject of personal data during his life.
(5) The consent of the subject of the personal data is not required in the cases in which the processing is necessary for: a) the execution of a contract to which the subject of the personal data is a party or for taking measures before the conclusion of the contract, at his request; b) the fulfillment of an obligation incumbent upon the operator according to the law;
c) protecting the life, physical integrity or health of the subject of personal data;
d) performing the tasks of public interest or resulting from the exercise of the prerogatives of public authority with which the operator or third party to whom the personal data are disclosed is invested;
e) the realization of a legitimate interest of the operator or of the third party to whom the personal data are disclosed, provided that this interest does not prejudice the interests or fundamental rights and freedoms of the subject of the personal data;
f) statistical, historical or scientific research purposes, provided that the personal data remain anonymous throughout the processing.
Modality of withdrawal of consent
If the service provider will provide additional services, which are not subject to the processing of the data required to conclude the contract, the consumer’s consent will be required regarding the processing of personal data for purposes such as direct marketing.