Privacy Policy

PRIVACY POLICY

This Privacy Policy informs you about how we handle your personal data, your rights regarding data privacy, and how you are protected by law. Please read this Privacy Policy carefully before using the website.

 

1. Name and address of the controller

In accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as ,,GDPR”) and other national laws of the member states relating to data protection, as well as other data protection provisions, the controller is:

MODULARY FACTORY S.R.L (hereinafter referred to as ,,Modulary”)

Address: 95 Dumbravei Street, Dumbrava Roșie, Neamț County, Romania, Postal Code: 617185

Phone no: +40749946844

e-mail: contact@modulary.ro

2. General Information on Personal Data Processing

  2.1. Volume of Personal Data Processing

In principle, we process personal data of our users only to the extent necessary for providing a functional website and useful content and services. Processing of personal data of our users occurs periodically only with the user’s explicit consent. Exceptions to this include situations where obtaining consent is objectively impossible, but data processing is stipulated by legal provisions.

   2.2. Legal Basis for Processing Personal Data

Where we obtain the consent of the data subject for personal data processing, Article 6(1)(a) of the GDPR as the legal basis.

Processing personal data necessary for the performance of a contract in which the data subject is a party is based on Article 6(1)(b) GDPR. This also applies to processing operations necessary for pre-contractual measures.

When personal data processing is necessary to comply with a legal obligation to which our company is subject, the legal basis is Article 6(1)(c) GDPR.

Processing personal data is based on Article 6(1)(d) GDPR when it is necessary to protect the vital interests of the data subject or another natural person.

Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis.

  2.3. Data Erasure and Storage Duration

Personal data of the data subject is erased or blocked as soon as the purpose of storage ceases to exist. Storage may also take place if provided for by European or national legislation in Union regulations, laws, or other provisions to which the controller is subject. Data blocking or deletion occurs also when the storage period prescribed by the respective regulations expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

3. Provision of the Website

  3.1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically records data from the computer system of the accessing device. The following data is collected:

  1. Information about the browser type and version used;
  2. The operating system of the user;
  3. The internet service provider of the user;
  4. The IP address of the user;
  5. Date and time of access;
  6. Websites from which the user’s system accesses our website;
  7. Websites accessed by the user’s system through our website;

These data are also stored in our system. The storage of these data together with other personal data of the user is not carried out.

  3.2. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

  3.3. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.

The storage in our system is done to ensure the functionality of the website. Additionally, these data help us optimize the website and ensure the security of our information systems. No evaluation of the data for marketing purposes is carried out in this context.

This constitutes our legitimate interest in data processing pursuant to Article 6(1)(f)

GDPR.

  3.4. Data Retention Period

Data are deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of data recorded for the provision of the website, this occurs at the end of the respective session.

In the case of data stored in log files, if applicable, these will be deleted after a maximum of 180 days.

  3.5. Possibility of Revocation and Removal

Recording data for the provision of the website and storing data in log files is necessary for the operation of the internet page. Therefore, the user has no option to revoke this.

4. Use of Cookies

  4.1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enable the browser to be clearly identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our web page require that the calling browser can be identified even after changing pages.

Additionally, we use cookies on our website that allow us to analyze the user’s browsing behavior.

The following data may be transmitted:

  1. Search terms entered;
  2. Frequency of page visits;
  3. Use of website functions;

The data collected from users is pseudonymized using technical means, making it no longer possible to associate the data with the calling user. Data is not stored together with other personal data of users.

  4.2. Legal Basis for Data Processing

The legal basis for processing personal data using cookies is Article 6(1)(f) GDPR.

The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR.

The legal basis for processing personal data using cookies necessary for analytical purposes, subject to the user’s consent, is Article 6(1)(a) GDPR.

  4.3. Purpose of Data Processing

The purpose of processing technically necessary cookies is to simplify the use of cookies for users. Some functions on our website cannot be provided without the use of cookies. It is necessary for the browser to be identified even after changing pages.

 

 

5. Contact Form and E-mail Address

  5.1. Description and Scope of Data Processing

Our website features a contact form that can be used for electronic communication. If a user opts to use this contact form, the data entered into the input fields are transmitted to us and stored.

Additionally, at the time of sending the message, the following data are also stored:

  1. The user’s IP address;
  2. Date and time of registration;

For data processing, your consent is obtained during the submission process, and reference is made to this data protection declaration.

Alternatively, it is possible to contact us via the provided email address. In this case, the user’s personal data transmitted via email will be stored.

No data will be transmitted to third parties in this context. The data will be used exclusively for processing the conversation.

  5.2. Legal Basis for Data Processing

The legal basis for processing the data, provided the user’s consent is obtained, is Article 6(1)(a) GDPR.

The legal basis for processing data transmitted while sending an email is Article 6(1)(f) GDPR. If the email contact aims to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

  5.3. Purpose of Data Processing

The processing of personal data from the input fields of the contact form serves solely to process the contact request. In the case of contact via email, this constitutes the necessary legitimate interest in processing the data.

Any other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information systems.

  5.4. Retention Period

Data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form input fields and those sent via email, this occurs when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified.

Any additional personal data collected during the submission process is typically deleted after a period of seven days.

  5.5. Revocation and Removal Options

The user can revoke their consent to the processing of personal data at any time. If the user contacts us via email, they can revoke their consent to the storage of personal data at any time. In such a case, the conversation cannot be continued.

If you wish to exercise your right of revocation, please send us an email at contact@modulary.ro.

In this case, all personal data stored in the course of contacting will be deleted.

6. Rights of the Data Subject

If personal data concerning you is processed, you are considered a data subject under the GDPR, and you have the following rights with respect to the controller:

  1. Right to Information;
  2. Right to Rectification;
  3. Right to Restrict Processing;
  4. Right to Erasure;
  5. Right to Notification;
  6. Right to Data Portability;
  7. Right to Object;
  8. Right to Withdraw Consent in accordance with data protection laws;
  9. Right to Automated Individual Decision-Making, Including Profiling;
  10. Right to Lodge a Complaint with the National Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.).

The contact details for A.N.S.P.D.C.P. are as follows:

Address: Mun. București, Sector 1, B-dul G-ral. Gheorghe Magheru nr. 28-30 Phone: 0.318.059.211 / 0.318.059.212

Fax: 0.318.059.602

Email: anspdcp@dataprotection.ro Website: www.dataprotection.ro

To exercise the rights mentioned above, the data subject should contact Modulary by sending a request to the address: Romania, Neamț County, Dumbrava Nouă, str. Dumbravei 95, or to the electronic correspondence address mentioned above in the first section of this Policy.

7. Final Provisions

If MODULARY deems it necessary to change the privacy rules, the controller will publish the respective changes to inform the data subjects about the information being collected and how it is being used.

The provisions of this Privacy Policy are supplemented by the provisions of the Cookie Policy available on the website www.modulary.ro.

Cookies