1. INTRODUCTION
We take the confidentiality of personal data seriously and responsibly, and their security is a priority for us.
Therefore, we commit to complying with the new rules imposed by EU Regulation no. 679/2016, known as the “Regulation” (supplemented by Law 190/2018), regarding the processing of personal data and the free movement of such data.
Through this policy, we explain what personal data we process, how we collect it, how we use it, and, most importantly, how we protect it.
We also inform you of your rights and guide you on how to exercise them.
2. ABOUT US
SC GRAPHEIN TOPO SRL is a Romanian legal entity, headquartered in Bucharest, Intrarea Gădinți, no. 1, VAT number RO33062409, J40/4614/14.04.2014.
The legal representative of the company is Mr. Eugen Ursu and can be contacted at the address Intrarea Gădinți, no. 1, Bucharest, and by email at office@graphein.ro.
In accordance with EU Regulation no. 679/2016, SC GRAPHEIN TOPO SRL is a personal data controller and has designated Eugen Ursu as the responsible person, who can be contacted:
via email at gdpr@graphein.ro;
by post at the address: Intrarea Gădinți, no. 1, Bucharest, attention: DATA PROTECTION OFFICER.
3. WHAT DATA WE COLLECT AND HOW WE COLLECT IT
We only use information that is strictly necessary and relevant to our business and your needs as a consumer, and we collect it through our website, which is hosted and managed in Romania.
We obtain your data mainly because you choose to voluntarily disclose it to us, but also through automatic capture when you access our page, as a result of the use of specific technologies and software.
Although you can visit our site without revealing your identity, you may directly provide us with your personal data when using:
1. The request for quotation form
Available at https://graphein.ro/contact/
We use your personal data to process your request for a quotation and to contact you in the event of unforeseen circumstances.
Collected data:
name;
email;
phone;
If you do not agree to provide this information, we will be unable to fulfill your request.
Information regarding your rights related to the personal data collected and processed through the Site and how to exercise them can be found in the relevant section of this privacy policy.
Automatic data capture is done through:
cookie technology: a cookie is a piece of information sent by a web page, saved by the browser on your hard drive, and which we can access later. It stores statistical information needed by the webpage to personalize your browsing session (e.g., displaying dynamic product images of interest), such as previously visited pages, downloads made, internet provider used, country of origin of the visitor.
The most common cookies are:
Technical: absolutely necessary for ensuring the technical efficiency of the site,
Functional: remember your choices and help improve your shopping experience on our site,
Performance: help measure site performance using visitor navigation data,
Retargeting: help us place ads on other web pages you use,
Social media plug-ins: to connect users to various social media channels.
We collect and process data provided by cookies only if you allow us to do so.
standard web server log files, which provide statistical information on the number of visitors and allow us to evaluate the technical capacity of our page.
Through them, we collect some information regarding the IP address, but this does not directly identify you; it offers statistical data about page traffic.
Google Analytics
Our website uses the web analytics service “Google Adwords/Analytics” from Google Inc., for statistical purposes.
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”), which also uses cookies. The information generated by cookies about your use of the website will be transmitted and stored on Google’s servers in the USA.
If IP anonymization is activated, your IP will be shortened within the EU member states or other EEA member states. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. IP anonymization is enabled for this site. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use, generating reports, and providing other services related to website and internet use.
The IP address transmitted by your browser will not be associated with other data held by Google. You can refuse the use of cookies by selecting the appropriate browser settings, but in this case, you may not be able to use all functionalities of the site. You can also opt out of Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout?hl=en.
To consent or withdraw your consent for automated processing through the above-mentioned programs or technologies, configure this option via the welcome message you receive when accessing the site / adjust your browser settings. For more details, access our cookie policy.
Facebook Pixel
We use the Facebook Pixel as an analysis tool to measure the effectiveness of our advertising activities. We use the data provided by the pixel to ensure our ads are shown to the right people and to benefit from Facebook’s advertising tools.
Hotjar
We use Hotjar to better understand users’ needs and optimize this service and experience. Hotjar is a technology service that helps us better understand user behavior (e.g., time spent on pages, links clicked, likes/dislikes, etc.) so we can improve the service with user feedback.
Hotjar uses cookies and other technologies to collect data about user behavior and devices (especially the IP address – collected and stored anonymously), screen size, device type (unique device identifiers), browser information, country (only), preferred language, etc. Hotjar stores this in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users. For details, refer to Hotjar’s Privacy Policy.
You can opt out of Hotjar tracking by visiting their opt-out page.
Albacross
Notice of consent for the processing of personal data by Albacross.
We obtain your consent for the processing of personal data on behalf of Albacross Nordic AB (“Albacross”).
Information collected from cookies placed on your device that qualifies as personal data will be processed by Albacross, a company that provides lead generation and ad targeting services, with offices in Stockholm and Krakow. For full contact details, see below (English version available via link).
The purpose is to allow Albacross to improve our services and website (e.g., the “Lead Generation” service) by adding company data to their database.
Data collected and used includes IP address from which you visited our site and technical data that enables differentiation of visitors from the same IP address. Albacross stores the access domain to match it to the employer’s IP.
For full details, consult Albacross’s Privacy Policy.
You can withdraw your consent at any time either by contacting us or contacting Albacross directly:
Albacross Nordic AB
Company Reg. No. 556942-7338
Kungsgatan 26, 111 35 Stockholm, Sweden
www.albacross.com – contact@albacross.com
If you choose to browse without these technologies or programs, some functionalities or features of the site may not work.
If you fill in all forms on the site and accept the full use of automatic data capture technologies, we will collect the following data:
Identity data: first and last name, company name you represent;
Contact data: email address, phone number, possibly billing and contracting address;
Technical data: login data, including IP, operating system and platform, browser identification, location, technologies used on the devices accessing the site;
Usage data: how you use the website, our products, and services;
Marketing data: your preferences for receiving information from us or third parties.
4. PURPOSE OF COLLECTION AND LEGAL BASIS
We collect personal or technical data mainly for:
Fulfilling our contractual obligations to you (processing orders, support services).
Legal basis: Necessary for the contract between you and our company.
Improving our services and your shopping experience.
Legal basis: Our legitimate interest in running a business, while respecting your rights and freedoms. You can easily opt-out of our tracking technologies.
Security of our hardware and software infrastructure.
Legal basis: Legal obligation and our legitimate interest in protecting the business.
If we use your information for purposes other than those declared, we will expressly request your consent and explain your rights.
5. INABILITY/REFUSAL TO PROVIDE CERTAIN PERSONAL DATA
If you do not provide the requested information, you may not be able to use our site properly, and we may not be able to process your request or provide the desired products/services.
6. USERS
Your data is used by SC GRAPHEIN TOPO SRL (https://graphein.ro/) and will never be shared with third parties for purposes other than those described in this Policy.
We may share your personal data with trusted partners who guarantee data security and confidentiality and process the data only under our instructions.
Our partners include service providers in areas such as: IT and maintenance, internal/EU database hosting, behavioral analytics (Google Analytics, Facebook), accounting and taxation, legal consultancy, marketing, financing, advertising, payment processing, delivery, and public authorities.
7. STORAGE LOCATION
Our website and the physical and electronic databases containing personal data are hosted/stored on secure servers in Romania.
If we transfer personal data to entities in the EU or outside the EU (including countries not deemed adequate by the European Commission), we will take steps to protect your rights and interests.
Such transfers will be protected by contractual clauses or certifications such as the Privacy Shield for data transferred to the United States.
8. SECURITY MEASURES
Although your data is collected online, some of it is stored on paper (e.g., invoices).
SC GRAPHEIN TOPO SRL (https://graphein.ro/) is committed to implementing effective security measures to protect your personal data and prevent breaches, whether stored online or physically.
Regardless of storage method, your data is kept in secure environments protected against unauthorized access, use, disclosure, modification, or destruction.
We have implemented special measures for network and data transfer security, infrastructure auditing and testing, trained personnel, and data transfers only to entities offering similar protection.
9. RETENTION PERIOD
If we process your data for pre-contractual/contractual obligations, we store it as long as needed to fulfill the contract and for a supplementary period.
If processed due to legal obligations or public interest, we store it as long as required to comply with legal duties or as long as the interest is considered of public utility.
If processed under our legitimate business interests, we store the data until you request us to stop, unless we demonstrate overriding reasons.
If processed under your explicit consent, we keep it until you ask us to stop.
We store personal data collected via the contact form for ___ months.
10. AUTOMATED DECISION-MAKING
SC GRAPHEIN TOPO SRL (https://graphein.ro/) does not use automated processes that generate legal effects concerning you or significantly affect you.
You may request not to be subject to a decision based solely on automated processing if it produces legal effects or significantly affects you.
You cannot exercise this right of choice if the decision made as a result of the automated processing of data is necessary for concluding or executing a contract or if it is permitted by law and there are appropriate safeguards in place for your rights and freedoms.
If you have given us your consent for automated processing and later change your mind, you may withdraw this consent at any time by submitting a written request using the contact details provided in the Contact section of the website.
In all cases, you have the right to express your point of view, to obtain human intervention, and to challenge the decision.
11. YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
According to Regulation (EU) No. 679/2016, you benefit from a series of rights. These include:
The right to information and access to personal data: You have the right to obtain confirmation from us regarding whether or not we are processing your personal data and, if so, to have access to those data and related information.
The right to rectification: You can request the rectification of inaccurate personal data concerning you, as well as the completion of incomplete data.
The right to erasure (“right to be forgotten”): You can request the deletion of your personal data when the data are no longer necessary for the purposes for which they were collected or otherwise processed; when you withdraw your consent and there is no other legal ground for processing; or when your data were processed unlawfully, etc.
The right to restriction of processing: You may request the restriction of data processing in certain circumstances (e.g., you contest the accuracy of the data, the processing is unlawful, but you oppose the erasure of the data, etc.).
The right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance from us.
The right to object: You may object at any time, for reasons related to your particular situation, to the processing of your data under our legitimate interest, including profiling.
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
You may exercise these rights easily, free of charge, by sending a written, dated, and signed request to:
Intrarea Gădinți, No. 1, Bucharest – attn: DATA PROTECTION OFFICER,
or by email to: gdpr@graphein.ro
If you are dissatisfied with the way we have handled your request or believe that your rights related to the processing of your personal data have been violated, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, headquartered at B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania.
