Privacy Policy

Who we are

KLINTENSIV® – is the trade name of KLINTENSIV S.R.L., located (headquarters) in Bragadiru, Alexandriei Road, No 544, Km. 14, Administration Pavilion, Ground floor, Office No 4, Ilfov County, registered at the Trade Register of the Ilfov Court under no. J23/3025/2011, with Fiscal no: RO29359178, phone: 021.448.1498, fax. 021.448.14.87, e-mail: office@klintesiv.com, bank account no. RO09 BTRL RONC RT0P 7335 3001, opened at Banca Transilvania; RO15 INGB 0000 9999 0624 1718, opened at ING BANK. For the purposes of data protection legislation, we are an operator when processing your personal data.

KLINTENSIV® is registered in the register of personal data processing under no. 2477/2017

Pursuant to Regulation No. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with relevance for the EEA) – (General Data Protection Regulation – GDPR), Law No. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, Law no. 102/2005 on the establishment, organization and functioning of the National Supervisory Authority for the Processing of Personal Data, KLINTENSIV® is obliged to manage in secure conditions and only, for the specified purposes, the personal data that the company’s customers or users of the website www.klintensiv.ro provide. Any information that is sent via contact forms, including newsletter, will be used taking into account the right to confidentiality.

As we are always open to hearing your views, as well as providing you with any further information you may need regarding the processing of your data, we encourage you to contact the KLINTENSIV® Data Protection Officer at gdpr@klintensiv.com, or by mail or courier addressed to KLINTENSIV® Data Protection Officer, Bragadiru city, Alexandriei Road, No 544, Km. 14, Administration Pavilion, Ground floor, Office No 4, Ilfov County.

What personal data do we process

In general, we collect your personal data directly from you, so you have control over the type of information you give us.

When you fill a KLINTENSIV® form, you provide us with: e-mail address, first and last name;

We may use your e-mail address to ask you to participate in online surveys. If you decide to answer the questions, we will also process your IP address.

We may also collect and further process certain information about your behavior while visiting our website in order to personalize your online experience and provide you with offers tailored to your profile, if you have given us your consent to cookies and other similar technologies. We invite you to learn more about this by consulting the section on the purposes of processing below.

On our website we may store and collect information in cookies and similar technologies in accordance with our Cookie Policy.

In general, we do not collect or otherwise process sensitive data included by the General Data Protection Regulation in special categories of personal data.

What are the purposes and grounds for processing

We will use your personal data for the following purposes:

1. To provide support services, including providing answers to your questions about orders or KLINTENSIV® products.

The processing of your data for this purpose is based on Article 6, para. 1(b) of the GDPR, namely the conclusion and performance of a contract between KLINTENSIV® and you. In addition, certain processing subsumed under these purposes is required by applicable law, including tax and accounting law, namely that relating to the online marketing of our products. Furthermore, for certain situations to which you have given your prior consent, the basis is Article 6 para. 1, lit. a of the GDPR and Article 9, para. 2(a), namely the consent of the data subject.

2. To improve our services

We always want to provide you with the best online shopping experience. To this end, we may collect and use certain information about your shopping behavior through cookies and other tracking technologies, if you give us your consent in accordance with Art. 6, para. 1 lit. a of the GDPR.

We may invite you to complete satisfaction questionnaires subsequent to the completion of an order or we may conduct, directly or with the help of processors, market research and surveys. If we use processors, we assure you that we will have concluded a contract with them in accordance with Article 28 of the GDPR. The legal basis for this processing is Article 6 para. 1, lit. f of the GDPR, the legitimate interest of KLINTENSIV® being to constantly improve its services based on the feedback received from customers, as well as the website interface. You can always opt out of receiving surveys by e-mail by clicking on the unsubscribe link at the end of the e-mail.

3. For marketing purposes

We want to keep you informed about the best offers on the products/services you are interested in. To this end, if you have given us your consent for each individual channel (such as: e-mail/SMS) we may send you general and thematic information, information on products similar or complementary to those you have purchased, information on offers or promotions.

We always ensure that these processing operations are carried out with respect for your rights and freedoms and that the decisions taken on the basis of them do not have legal effects on you and do not affect you in a similar way to a significant extent.

We base our marketing communications on your consent. You can change your mind and withdraw your consent at any time by:

• Accessing the unsubscribe link displayed within the messages you receive from us;
• Contacting KLINTENSIV® using the contact details described above.

4. To protect of our legitimate interests

There may be situations in which we will use or disclose information to protect our rights and business. These may include:

• Measures to protect the website and users of the KLINTENSIV® platform from cyber-attacks:
• Measures to prevent and detect attempted fraud, including the transmission of information to the competent public authorities;
• Measures to manage various other risks.

The general basis for these types of processing is our legitimate interest in defending our commercial activity, it being understood that we ensure that any measures we take guarantee a balance between our interests and your fundamental rights and freedoms.

How long we keep your personal data

As a general rule, we will store your personal data as long as you have an account on the KLINTENSIV® platform. With regard to the personal data you have provided to us by placing your order online, we want you to know that it is kept in accordance with Order 2634/2015 on accounting legislation, namely 10 years starting from the financial year following the one in which the respective accounting document (namely invoice) was drawn up.

In the case of online surveys, survey data will be deleted immediately after evaluation, but not more than 90 days from the time the survey is completed.

In the event that a user account is inactive for a period of 3 years or more from the date of the last login to the account, the personal data provided for the purpose of creating the account will be deleted, except for the data transcribed into invoices which will be stored for the period mentioned above. You may at any time request us to delete certain information or to close the account and we will comply with such requests, subject to retaining the above information even after the account is closed.

To whom we transfer your personal data

Where appropriate, we provide access to some of your personal data to the following categories of recipients:

• companies within the same group of companies as KLINTENSIV®;
• providers of marketing/telemarketing services;
• providers of market research services;
• other companies with which we may develop joint programs to offer our goods and services on the market
• third party acquirers, to the extent that KLINTENSIV®’s business would be transferred (in whole or in part) and personal data would be part of the assets subject to such a transaction or to other companies in the group to which KLINTENSIV® belongs, which will comply with KLINTENSIV®’s instructions regarding the processing of your personal data.

If we are under a legal obligation to do so or if necessary to protect a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third parties that are legal entities under private law is carried out in accordance with the legal provisions on data protection and confidentiality of information, on the basis of contracts concluded with them, in accordance with art. 28 of the GDPR in the case of processors, respectively art 26 of the GDPR in the case of associated controllers, ensuring the same level of protection.

How we ensure the security of your personal data

We are committed to ensuring the security of your personal data by implementing appropriate technical and organizational measures according to industry standards.

Your personal data is transmitted using state-of-the-art encryption algorithms and stored on secure servers, while ensuring data redundancy.

Your rights

The General Data Protection Regulation gives you a number of rights in relation to your personal data. You can request access to your data, correct any mistakes in our files and/or object to the processing of your personal data. You may also exercise your right to complain to the competent supervisory authority or to go to court. Where applicable, you may also have the right to request erasure of your personal data, the right to restriction of the processing of your data and the right to data portability.

In order to exercise your rights, you can contact us:

• by e-mail at: gdpr@klintensiv.com or
• by post or courier addressed to KLINTENSIV® Data Protection Officer, Bragadiru city, Alexandriei Road, No 544, Km. 14, Administration Pavilion, Ground floor, Office No 4, Ilfov County.

Please note the following if you wish to exercise these rights:

Identity. We take the confidentiality of all records containing personal data seriously. For this reason, please forward your requests for such records to us using the e-mail address associated with your KLINTENSIV® account. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.

Response time. We will respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made multiple requests, in which case we will inform you within one month of the reasons for the delay and you will receive a response from us within a maximum of two months. We may need to ask you for more information in order to qualify your request. This will help us to act faster and shorten the response time to your request.

Third party rights. We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.

The rights of data subjects	Description
Access	You can ask us: to confirm whether we are processing your personal data;to provide you with a copy of that data;to provide you with further information about your personal data, such as what data we hold, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can complain, where we obtained your data, to the extent that information has not already been provided to you through this information.
Correction	You may ask us to correct or complete your inaccurate or incomplete personal data. We may attempt to verify the accuracy of the data before correction.
Deleting data	You can ask us to delete your personal data, but only if: it is no longer necessary for the purposes for which it was collected; oryou have withdrawn your consent (where the data processing was based on consent) and there is no other legal basis for the processing; or you are exercising a legal right to object under Art. 21 para. 1 or 2 of the GDPR; or they have been processed unlawfully; or we are under a legal obligation to do so. We are under no obligation to comply with your request to delete your personal data if the processing of your personal data is necessary: for compliance with a legal obligation; or for the establishment, exercise or defense of legal claims. There are certain other circumstances in which we are not obliged to comply with your request for erasure, although these are the two most likely circumstances in which we would refuse your request.
Restriction of data processing	You may ask us to restrict the processing of personal data, but only if: their accuracy is contested (see the rectification section), to allow us to verify their accuracy; orthe processing is unlawful, but you do not want the data to be deleted; orthey are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise or defend a legal claim; oryou have exercised your right to object and the verification of whether our legitimate rights prevail is ongoing. Where processing has been restricted pursuant to paragraph 1, such personal data may, with the exception of storage, be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.
Data porting	You may ask us to provide your personal data in a structured, commonly used and machine-readable format, or you may request that it be “ported” directly to another data controller, but in each case only if: the processing is based on your consent or on the conclusion or performance of a contract with you; and the processing is carried out by automated means.
Opposition	You may object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of our legitimate interest, if you consider that your fundamental rights and freedoms override this interest. You may also object at any time to the processing of your data for direct marketing purposes (including profiling), without giving any reason, in which case we will cease such processing as soon as possible.
Automatic decision making	You can ask not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you; or otherwise affects you in a similar way to a significant extent. This right does not apply when: (a) is necessary for the conclusion or performance of a contract between you and KLINTENSIV®; (b) is authorized by Union or national law applicable to KLINTENSIV® and which also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or (c) is based on your explicit consent.
Complaints	You have the right to complain to the supervisory authority about the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are as follows: National Supervisory Authority for the Processing of Personal Data Gheorghe Magheru Blvd. no 28-30, Sector 1, postal code 010336, Bucharest, Romania Phone: +40.318.059.211 sau +40.318.059.212; E-mail: anspdcp@dataprotection.ro Without prejudice to your right to contact the Supervisory Authority at any time, please contact us in advance, and we promise that we will make every effort to resolve any problem amicably.

We remind you that you can contact the KLINTENSIV® Data Protection Officer at any time by sending your request by any of the following means:

by post or courier addressed to KLINTENSIV® Data Protection Officer, Bragadiru city, Alexandriei Road, No 544, Km. 14, Administration Pavilion, Ground floor, Office No 4, Ilfov County.

• by e-mail at: gdpr@klintensiv.com or
• by post or courier addressed to KLINTENSIV® Data Protection Officer, Bragadiru city, Alexandriei Road, No 544, Km. 14, Administration Pavilion, Ground floor, Office No 4, Ilfov County.