GDPR

I. General Terms and Conditions

Translation AZ, acting as data controller, ensures the protection of natural persons, as data subjects, in respect of their personal data processing, thereby protecting your fundamental right as our client and website visitor.

As Translation AZ team members are themselves clients and visitors of both Translation AZ.ro and other websites, we fully value and respect your privacy and the processed data confidentiality.

This document was prepared for you in view of observing the principle of transparency set forth in the General Data Protection Regulation no. 679/2016 (hereinafter referred to as the “Regulation”). Should you have any questions about the processing of your data, please do not hesitate to write to us at the following e-mail address: info@translationaz.com.

II. Legal Basis

Translation AZ collects and processes your personal data in accordance with the applicable national and European data protection legislation, and such processing shall be deemed lawful in the following cases:

• a consent was obtained from the data subject as to the processing of his/her personal data for one or several specific purposes;
• the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• the processing is necessary for compliance with a legal obligation the controller is subject to;
• the processing is necessary to protect the vital interests of the data subject or of another natural person;
• the processing is necessary for the performance of a task carried out for reasons of public interest;
• the processing is necessary for the purposes of the compelling legitimate interests pursued by the controller or by a third party, when those interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Translation AZ uses personal data which, depending on the purpose, may be processed with or without your consent. Such consent is given by ticking the appropriate consent box or by submitting it in any other form (e.g., e-mail, telephone, etc.) and it shall be deemed granted for the processing and use of data in respect of the purposes for which it was granted.

If your consent is not required, Translation AZ will only process and use your personal data in the aforementioned lawful cases.

III. Data Collection and Processing Method

Translation AZ ensures that your personal data are:

• processed lawfully, fairly and transparently;
• collected for specified, explicit and legitimate purposes and are not subsequently processed in a way that is incompatible with such purposes;
• adequate, relevant and limited to what is necessary by reference to the purposes for which they are processed;
• accurate and up-to-date, strictly by reference to the information communicated by the data subject;
• kept in a form that enables the identification of data subjects for a period not exceeding the period necessary to fulfil the data processing purposes;
• processed so as to provide for adequate personal data security.

Irrespective of how your personal data are processed, whether in a computerised medium or a physical medium, such processing will rely on the enforcement of security measures provided for by the applicable legislation.

IV. Your data storage method and access to such data

The privacy of your information is protected in several ways and access to your data is limited:

• the data are entered into our IT systems in full compliance with the data protection legislation;
• the persons who have access to your account information are staff members who are qualified and authorised in this respect in view of fulfilling their job duties;
• our system uses comprehensive login and password checks.

V. Duration and age limit for the processing of personal data

Your data will be stored for as long as:

• you want to access our website and the services we provide;
• is necessary for the provision of the relevant services;
• you want to keep in touch with us.

Should you wish that your personal data be erased, we might keep such data in a form that does not allow you to be identifiable.

Translation AZ does not knowingly collect personal data on its website from persons who have not reached the age of 16, except where their parents’ or guardian’s consent in this respect was provided to us at the e-mail address: info@translationaz.com. Should the parents or guardian of a person under the age of 16 become aware of such data processing by Translation AZ, they are kindly invited to notify us immediately.

In the latter case or if Translation AZ discovers that personal data of persons under the age of 16 have been processed without the consent of their parents or guardian, such data will be erased immediately.

VI. Types of data which are subject to processing

Translation AZ collects personal data either directly from you, which you provide when accessing our website and using its related services and functions, or in the form of personal data that we receive from other sources. The types of data that are subject to collection and processing may include:

• identification data, such as first name and surname, gender and date of birth (day, month, year);
• contact and delivery data, such as address, telephone number, e-mail address;
• billing data, such as financial information (credit or debit card details, without storing the CVC);
• technical data relating to your device (location, IP address, type of hardware equipment, etc.);
• any other information that you communicate to us in view of fulfilling the purpose of processing.

The data we obtain directly from you may be provided on the occasion of:

• registering on our website;
• subscribing to our newsletter;
• placing an order via the website, e-mail or telephone;
• communicating with Translation AZ by e-mail, telephone or in any other way;
• giving your consent in view of receiving customised online content.

Translation AZ works closely with third parties, such as contractors and subcontractors for technical, payment and delivery services, advertising networks, analytics service providers and search engine optimisation (SEO) providers, from whom we may receive information about you, while such information is used for updating records about you and for providing you with the best services. In this case, Translation AZ will ensure that data subjects are notified of all information they are entitled to.

VII. Purposes for which your data is collected and processed

Translation AZ may use the personal data it collected for the following purposes:

• creating and administering the website user account;
• fulfilling the obligations arising from the agreements concluded between you and us, respectively managing and improving the services provided by our website;
• returning products and reimbursing the value thereof according to the legal provisions;
• tailoring the website content to your preferences and needs;
• providing relevant advertising and adds via marketing mechanisms (e.g. newsletters);
• communicating with you subsequent to requests, queries or complaints you submitted;
• preventing, detecting and investigating possible fraud, security breaches or law infringement;
• retrieving statistics or creating automatic profiling in view of identifying information or advertising you wish to have access to.

VIII. Marketing

In most cases, marketing communications are based on your prior consent. As such, you will express your choice on marketing messages by ticking the relevant boxes when:

• accessing the website or subscribing to newsletters or updates; completing the shopping session;
• completing the shopping session;
• registering via the website, phone or email.

The choice to unsubscribe from newsletters or notifications is available via the website and by email.

IX. Your rights

As data subject, you have the following rights:

• The right to withdraw consent – means the right of the data subjects to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
• The right of access – means your access to the processed data as well as to information such as the purposes of processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 of the Regulation). Before providing such personal data, we will need proof of your identity;
• The right to rectification – means the rectification of your personal data by the controller, naturally relying on the necessary information provided by you (Art. 16 of the Regulation);
• The right to erasure of data – means the erasure of your personal data by the controller, in the specific cases provided by Art. 17 of the Regulation, for example, when the consent has been withdrawn, when the data are no longer necessary in relation to the purposes for which they were collected or processed, etc.;
• The right to restriction of processing – means the restriction of your personal data processing in the specific cases provided by Art. 18 of the Regulation, for example, when the accuracy of the personal data is contested by the data subject, the processing is unlawful, etc.;
• The right to data portability –means the right of the data subject to receive the personal data concerning him/her in a structured, machine-readable format and to transmit those data to another controller, if (i) the processing was based on the express consent given or was necessary for the performance of a contract and (ii) the processing was carried out by automated means (Art. 20 of the Regulation);
• The right to object – means the right of the data subject to object to (i)the necessary processing carried out by the controller either for the performance of a task carried out for reasons of public interest or for the purposes of the compelling legitimate interests pursued by the controller or by a third party, when those interests are not overridden by the interests or fundamental rights and freedoms of the data subject and (ii) processing for direct marketing purposes (Art. 21 of the Regulation);
• The right to express their point of view and to contest automated individual decision-making – means the right of data subjects to choose and change their options in relation to automated processing, including profiling;
• The right to lodge a complaint – means the right of data subjects, where any notification to us produced no effects, to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – dataprotection.ro.

In order to be able to exercise any of the aforementioned rights, please contact us at the email address info@translationaz.com and grant us a reasonable timeframe to settle your request.

Should you wish to exercise one or several of the aforementioned rights, please note that the use of the website or the provision of certain services might be restricted on account of erased data or option changes requirements.

X. Recipients of your data

Despite your data being stored in our database, such data will also be transmitted to other recipients, in accordance with this Privacy Policy, such as:

• suppliers, contractors and subcontractors, in view of performing any contract we enter into with you (e.g. payment services, courier services, issuing and collecting invoices, etc.);
• service providers (e.g. IT services, analytics and search services that help us optimise the website);
• regulatory or law enforcement agencies or institutions;
• authorised third parties (e.g. criminal prosecution bodies, courts, etc.).

XI. Changes to the Personal Data Processing Policy

The Personal Data Processing Policy might incur changes over time. In the event major changes are operated, you will be informed thereof via the website or by email, in order for you to be afforded the right to consult the new terms and conditions.