PRIVACY POLICY

Last update date: 01.08.2024.

Through this Policy we aim to inform you about how we collect, use, transfer and protect your personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”).

We reserve the right to update this Privacy Policy periodically to reflect any changes in the way we process your personal data. In the event of any such changes, we will post the amended version of the Privacy Policy on the website.

1. WHO WE ARE

This Privacy Policy applies to the website www.runbeauty.ro owned by the company SC RUN beauty SRL, headquartered in Bucharest, 100 Dantelei Street, Sector 5, registered with ONRC under no. J40/6371/2024, CUI 49827095, as owner of the Website

For any additional information regarding the processing of your personal data, please contact us at the email address: contact@runbeauty.ro.

2. YOUR PERSONAL DATA PROCESSED

We collect your personal data when you register on our website, place an order, subscribe to our newsletter, fill out a form available on the website or contact us by email.

In the context of marketing our products, for the purpose of concluding and executing contracts, we mainly process the following types of data: name, surname, delivery and/or billing address, e-mail address, telephone number.

For security reasons, in the case of online payments, we do not have access to your payment methods (card details, bank account details). For online payments, we use the services of the payment processor iPay by BT (Banca Transilvania).

Minors under the age of 16 should not submit any personal information without the consent of their parents or guardians. We recommend that all parents educate their children about the responsible and safe use of personal information on the Internet. If we discover that personal information from minors under the age of 16 has been unknowingly collected, it will be promptly removed from our records to the extent practicable.

We do not use your data to send you commercial or marketing communications unless you opt in to such communication. Even in such cases, we ensure that you have a simple option to unsubscribe by withdrawing your consent at any time.

For site visitors, we may collect data through cookies or other similar technologies, such as: IP address, internet browser, location, web pages accessed on our site, time spent on the site, internet network, device used. For more details on this, see the Cookie Policy . (link)

3. PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR DATA

We will process your personal data for the following purposes:

3.1. Marketing our products:

  • Creation and administration of the account on the site;
  • Order processing, including taking, validating, shipping and invoicing them;
  • Resolving cancellations or problems of any nature relating to an order or purchased goods, including the return of products and reimbursement of the value in accordance with legal provisions;
  • Providing support services regarding your orders;
  • Providing feedback on purchased products

The legal basis for processing your data for these purposes is the conclusion and performance of a contract with you. Also, certain processing subsumed for these purposes is required by applicable law, including tax and accounting law.

3.2. Marketing and commercial communications:

To inform you about the best offers on our products, we want to be able to send you commercial communications by email.

The legal basis for the processing of data for this purpose is your prior consent. You have the possibility to withdraw your consent at any time by accessing the unsubscribe link displayed in each communication received.

In certain situations, we may base our marketing activities on our legitimate interest to promote and develop our business. We assure you that we take all necessary measures to ensure that your fundamental rights and freedoms are not affected.

3.3. Defending our legitimate interests:

  • Measures to protect the site and platform users from cyber attacks,
  • Measures to prevent and detect fraud attempts;
  • Measures to manage various other risks to ensure the security of your data;

The legal basis for these types of processing is our legitimate interest in constantly improving our services and protecting our business. In this regard, we ensure that all measures we take guarantee a balance between our interests and your fundamental rights and freedoms.

4. WHAT IS THE DURATION OF PROCESSING YOUR DATA?

Your personal data will only be stored for as long as necessary to fulfill the purposes for which it was collected, to fulfill our contractual and legal obligations, in each case.

If the data is no longer necessary for the fulfillment of contractual or legal obligations, it will be deleted periodically, unless further temporary processing is necessary for the following purposes:

  • Fulfilling the duty to retain data in accordance with Romanian tax legislation, which provides for the obligation to retain/document personal data for between two and ten years.
  • Retention of data that may serve as evidence in potential disputes or litigation, in accordance with applicable statutes of limitations. These statutes of limitations can last up to 10 years, although the current period is three years.

5. INTERNATIONAL TRANSFER REGIME

When necessary for the fulfillment of the object of the contract concluded with you, and only in specific situations or based on appropriate guarantees, we will transfer personal data abroad, as appropriate, including to countries that do not ensure an adequate level of protection of such data. In these situations, the transfer of data to those countries is based on the provisions of the GDPR regarding: the transfer that is necessary for the execution of a contract or for the application of pre-contractual measures adopted at your request, as appropriate, the transfer that is necessary for the conclusion of a contract or for the execution of a contract concluded in the interest of the data subject.

In the event that it is necessary to transfer personal data to third countries/international organizations and in other circumstances, we will only do so with the legally provided safeguards for these transfers.

6. WHO MAY HAVE ACCESS TO YOUR DATA

In accordance with the legal provisions regarding the protection of personal data and confidentiality commitments, to the extent necessary to fulfill our obligations to you, we may provide access to providers of courier, payment/banking, IT, legal, advice and consultation, as well as sales and marketing services.

If we are subject to a legal obligation or if it is necessary to defend a legitimate interest, we may also transmit certain personal data to public authorities.

7. PROTECTIVE MEASURES AND GUARANTEES

SC RUN beauty SRL implements appropriate technical and organizational measures to ensure a high level of security and protection of personal data. We use security methods and technologies, together with internal policies and work procedures, including control and audit, to protect the personal data collected in accordance with the legal provisions in force.

8. RIGHTS OF THE DATA SUBJECT

Within the limits and conditions provided by the GDPR, each data subject may exercise the right:

  • to withdraw consent for data processing, without affecting the lawfulness of processing carried out prior to the withdrawal of consent;
  • access to data in accordance with Article 15 GDPR;
  • to rectify data in accordance with Article 16 of the GDPR;
  • to delete data in accordance with Article 17 GDPR;
  • to establish restrictions on data processing in accordance with Article 18 GDPR;
  • to data portability in accordance with Article 20 GDPR;
  • to object to processing, in accordance with Article 21 GDPR;
  • not to be subject to a decision based solely on automated processing, in accordance with Article 22 GDPR;

To exercise these rights you can contact us by email at: contact@runbeauty.ro .

Each data subject also has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, which can be contacted at : http://www.dataprotection.ro/ . Without prejudice to your right to lodge a complaint, please contact us in advance and we promise that we will make every effort to resolve any dissatisfaction amicably.