I, a user of the online store and website vatsak.ro (hereinafter referred to as the Data Subject), in accordance with the information provided by me on the website vatsak.ro, guided by law no. 363 of December 28, 2018 on the protection of individuals with regard to data processing, I give permission to the processing of my personal data (information and aggregated information about me) in the user database of the Vatsak website under the following conditions:
The data subject consents to the entry and use of his personal data in the User Database of the Vatsak website and to the processing of his personal data by the owner (in particular, to the collection, recording, accumulation, storage, adaptation, modification, updating, use and distribution, depersonalization, destruction of personal data, including using (automated) information systems and other actions that the owner can perform with his personal data: last name, first name, patronymic, contact number, electronic identification (IP address, phone number, email), information about place of residence, as well as other personal data and information provided in accordance with the requirements of the current legislation and/or voluntarily by the Data Subject to the Owner of personal data, solely for the purpose of registering the Data Subject in the Vatsak user database, with the subsequent sending of postal and SMS messages to the Data Subject, including advertising and information, to ensure the conduct of civil and economic relations, conducting
The Owner ensures, in accordance with the requirements of the Romanian legislation on the protection of personal data, adequate protection of personal data from unlawful processing and unauthorized access to personal data, including by taking the necessary measures to prevent the disclosure of personal data by employees and/or other authorized persons of the Owner to whom such personal data the data was entrusted or became known to them in connection with the execution of the Agreement.
In accordance with law no. 363 of December 28, 2018 on the protection of individuals with regard to data processing, the data subject has the right:
1) get acquainted with the sources of collection, location of personal data, purpose of processing, location or place of residence (stay) of the owner or controller of personal data or give appropriate instructions to persons authorized by him to receive such information, except as provided by law;
2) receive information about the conditions for providing access to personal data, including information about third parties to whom his personal data is transferred;
3) access to your personal data;
4) to receive a response on whether his personal data is being processed within a period of no more than thirty calendar days from the date of receipt of the request, except in cases provided for by law, and to receive the contents of such personal data;
5) send a reasoned request to the personal data operator regarding disagreement with the processing of your personal data;
6) send a reasoned request to change or destroy your personal data to any owner and administrator of personal data if such data is processed illegally or is unreliable;
7) protect your personal data from illegal processing, as well as from accidental loss, destruction, damage as a result of deliberate concealment, omission or untimely provision, as well as protect yourself from the provision of false information that discredits the honor, dignity or business reputation of any person;
8) file complaints about the processing of your personal data to the Commissioner or to the court;
9) apply legal remedies in case of violation of the legislation on the protection of personal data;
10) make reservations about limiting the right to process your personal data when giving consent;
11) withdraw your consent to the processing of personal data;
12) know the mechanism for automated processing of personal data;
13) to be protected from an automated decision that has legal consequences for him.
This consent is valid for an indefinite period.
The personal data subject may withdraw this consent by sending written notice to the owner at least ninety (90) days before the expected date of withdrawal of this consent. The personal data subject agrees that during this period the Owner is not obliged to stop processing personal data and destroy the personal data of the personal data subject. The revocation does not have retroactive effect in relation to personal data processed before the entry into force of this revocation.
The Owner is not responsible for the processing, inaccessibility and protection of the Personal Data of the Data Subject by third parties, including employees of the Owner, if the provision of access to such Personal Data (or other action that created the possibility of their unauthorized further processing by third parties) was carried out by the Owner or another person with the permission of the Data Subject outside the framework of the fulfillment of obligations under the Agreement, for personal purposes or for other purposes not related to the fulfillment of obligations under the Agreement, using technical means or other materials/equipment of the Owner.
