PRIVACY POLICY
The privacy policy is committed to protecting your personal data.

By using the www.TerraMetal.ro website or our services, you consent to the processing of your personal data as described in this privacy policy.

This Privacy Policy is an integral part of the contract you make online with TerraMetal. Your contract offer declared by accepting the terms and conditions also means that you have become aware of the content of the Privacy Policy.

Definitions

Personal data – any information relating to an identified or identifiable natural person.

Processing – any operation or set of operations that is performed on personal data or on personal data sets.

The data subject / Client – a natural person whose personal data are processed.

Child – natural person under 16 years.

Website – www.TerraMetal.ro website

Policy – the privacy policy.

Ha Store / We / We / We – TERRAMETAL SRL

These statements describe our general principles regarding the processing of personal data belonging to the Website Customers (considered to be buyers of any of the products or services available on the Website) as well as those pertaining to the Website visitors.

We want to make sure you understand how we will use the information you entrust to us or not. In order to understand your own rights, we advise you to read this Policy.

With regard to visitors, TerraMetal has structured the website so that it can be visited without the need to identify or disclose any personal information. The basic information collected is used to analyze the traffic, improve the content of the website and the public perception related to it.

Regarding the Customers or the potential Customers, the data provided by them during the conclusion of the contract or subsequent to it, will be used exclusively for the execution of the contract between TerraMetal and the respective Client, will not be transmitted in any form to third parties other than the authorized ones nor will they be the subject of any disclosure.

Data protection principles

We promise to adhere to the following data protection principles:

The processing is legal, fair, transparent. Our processing activities have legal reasons. We always consider your rights before processing your personal data. We will provide information on processing on request.
Processing is limited to the purpose of processing. Our processing activities correspond to the purpose for which the personal data were collected.
Processing is done with minimal data. We collect and process only the minimum amount of personal data required for any purpose.
Processing is limited for a period of time. We will not store your personal data for more than 3 years.
We will do our best to ensure the correctness of the data.
We will do our best to ensure data integrity and confidentiality.
The regulation grants more rights to the persons to whom personal data are processed such as the right to portability or the erasure of personal data. Here are the rights you have:

The right to receive information on data processing and a copy of the processed data (access right, Article 15 GDPR),
The right to request the correction of inaccurate data or the completion of incomplete data (access right, art. 16 GDPR),
The right to request the deletion of personal data and, if the personal data have been made public, the transmission of information regarding the request for deletion to other operators (the right of deletion, article 17 GDPR),
Right to request restriction of data processing (right to restriction of processing, Article 18 GDPR),
The right to receive personal data regarding the data subject in a structured, commonly used and mechanisoluble format and to request the transmission of this data to another operator (right to data portability, article 20 GDPR),
The right to oppose data processing with the intention of ceasing processing (the right to object, Article 21 GDPR),
The right to withdraw at any time a consent given to stop a processing of the data based on your consent. Withdrawal will not affect the legality of the processing based on the consent granted before withdrawal (the right to withdraw consent, Article 7 GDPR).
The right to file a complaint with a supervisory authority if you consider that data processing is a violation of the GDPR (the right to file a complaint with a supervisory authority, Article 77 GDPR).

Automatically collected information about you

This includes information that is automatically stored by cookies and other session tools. For example, shopping cart information, IP address, shopping history (if any), etc. This information is used to improve your customer experience. When you use our services or search the content of our site, your activities may be recorded.

Information publicly available

We may collect information about you that is publicly available.

How we use your personal data

We use your personal data for:

to offer you our service. This includes, for example, the registration of the account, the conclusion and execution of the contract, the financial-accounting accounting, the issuing of invoices, debt collection; providing you with other products and services you have requested; offering you promotional items at your request and communicating with you about these products and services; communication and interaction with you; and notifies you of any changes to any services.
to improve your customer experience;
to fulfill an obligation in accordance with the law or the contract;
We use your personal data for legitimate reasons and / or with your consent.

Based on the conclusion of a contract or the fulfillment of the contractual obligations, we process your personal data for the following purposes:

to identify you;
to offer you a service or to send / offer you a product;
to communicate with you for either sales or billing;
Based on a legitimate interest, we process your personal data for the following purposes:

to send you personalized offers
to manage and analyze our customer base (purchasing behavior and history) to improve the quality, variety and availability of products / services offered / provided;
As long as you have not informed us otherwise, we consider it to be our legitimate interest to provide products / services that are similar or identical to your purchase / browsing history behavior.

With your agreement we will process your personal data for the following purposes:

to send you newsletters and offers
for other purposes for which we have requested your consent;
We process your personal data to fulfill the obligations arising from the law and / or to use your personal data for the options provided by law. We reserve the right to anonymize personal data collected and to use such data. We will use the data outside the scope of this Policy only when it is anonymous. We store your billing information and other information collected about you for as long as necessary for accounting purposes or other obligations arising from the law, but not more than 10 years.

We may process personal data for other purposes not listed here, but are compatible with the original purpose for which the data were collected. To do this, we will ensure that:

the link between the purposes, the context and the nature of the personal data is appropriate for further processing;
further processing will not affect your interests and
there is an adequate guarantee for processing.
We will inform you of any further processing and purposes.

Who else can access your personal data?

We do not share personal data with strangers. Personal data about you is provided, in some cases, to our trusted partners to provide you with the opportunity to provide your service or to improve the customer experience.

TerraMetal will make available to certain employees (for example the financial-accounting, commercial, support, billing, legal department) information and personal data provided by you for the sole purpose of properly providing the services. Each of these employees will receive special instructions regarding the processing of your own personal data, TerraMetal taking responsibility for the way in which their employees record, store and use this data.

We share your data with:

MobilPay (our online payment processing partner)
FanCourier (one of our partners who deals with the delivery of the ordered products / services)
NemoExpress (one of our partners who deals with the delivery of the ordered products / services)
Accounting firm (for processing invoices)
Newsman (our partner who deals with sending newsletters for the purpose of informing you about any news, promotions or offers)
Google

We only work with processing partners who are able to ensure an adequate level of protection of your personal data. We disclose your personal data to third parties or civil servants when we are legally obligated to do so. We may disclose your personal data to third parties if you have given your consent or if there are any other legal reasons for doing so.

How we ensure data security

We do our best to keep your personal data safe. We use secure protocols for data communication and transfer (such as HTTPS). We use anonymization and pseudonymization where appropriate. We monitor our systems for possible vulnerabilities and attacks.

Even if we try our best, we cannot guarantee the security of information. However, we promise to notify the competent authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do our best to prevent security breaches and assist the authorities in the event of violations.

If you have an account with us, please note that you must keep your username and password secret.

children

We do not intend to collect or knowingly collect information from children. We do not target children with our services.