Data confidentiality and the creation of a sense of security for users / clients are of particular importance to Aplast Wood Industry (hereinafter referred to as “aplast”), where we value privacy and the right to protection of personal data of users, current and future clients, our employees and partners, in accordance with applicable law.

This year brings some changes regarding the way personal data is processed, so we would like to explain to you what they entail and how we will align the practices of APLAST WOOD INDUSTRY SRL to these changes. From 25 May 2018, Regulation 2016/679 / EU on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the “Regulation”) will be applied by all EU Member States. Considering that, in carrying out its specific activity, the company Aplast Wood Industry SRL processes personal data, the Regulation will also be incidental to it.

We consider that the “Regulation” mentioned above has a fundamental character and we pay special attention to this fact, and through the policies developed in this regard, we express our desire to offer you information about the collection through the Site of personal data and their use. Thus we want to make sure that the retrieval is done in a transparent manner, you always have control over the data and you have the right to decide how and for what purpose the information provided is used.

We also emphasize that all information / data / documents that you provide to us through the Site and contact addresses (email / mail) will be used exclusively for the purpose for which they were sent to us, in compliance with the provisions of the Regulation and this policy.

The processing of personal data by Aplast will be carried out in compliance with the principles provided in art. 5 of EU Regulation 679/2016. Thus, the operator undertakes to comply with and demonstrate compliance with the principles relating to the processing of personal data, as follows:

a) The Operator will process personal data legally, fairly and transparently to the person concerned;

b) The Operator will collect personal data for specific, explicit and legitimate purposes, subsequently the processing in a way incompatible with these purposes not being allowed;

c) The Operator shall ensure that personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

d) The operator will keep the data in a form that allows the identification of the persons concerned for a period that does not exceed the period necessary to fulfill the purposes for which they are processed;

e) The operator guarantees that personal data are processed in a way that ensures adequate data security, including protection against unauthorized or illegal processing, against accidental loss, destruction or damage;

f) The operator undertakes to implement appropriate technical and organizational measures to ensure and be able to demonstrate that the processing is carried out in accordance with the Regulation on the protection of personal data, by actively reviewing and updating those measures;

g) The technical and organizational measures must be designed to ensure that only personal data which are necessary for each specific purpose of the processing are processed;

h) The operator undertakes to keep records of the processing activities under his responsibility, to cooperate with the supervisory authority and to make available to it, upon request, these records so that they can be used for the purpose of monitoring the respective processing operations;

i) The operator shall ensure that the persons authorized to process personal data have undertaken to respect confidentiality or have an appropriate statutory obligation of confidentiality;

j) If the processing operations are likely to pose a high risk to the rights and freedoms of individuals, the Operator will be responsible for conducting a data protection impact assessment.

The operator fulfills its obligation to inform by making available to the Beneficiaries the following Information Note:

Information Type 

Content

Identity and contact details of the operator

SC Aplast Wood Industry (via www.aplast.com), headquarters – Șoseaua Giurgiului no. 269, 1 Decembrie commune, 1 Decembrie village,  Ilfov county; Place of business – Ceptura commune, Ceptura de Jos village, Prahova county;

Datele de contact ale Responsabilului cu protecția datelor

Eduard Uruc

email: office@aplast.ro,

Telefon 0742221581;

Contact details of the Data Protection operator

Newsletter – has as main objective to inform users / clients about the products / services / offers / news that occurred during certain periods; this ensures that their needs are met and satisfied with professionalism, providing them with products / services of the highest quality. In this regard, based on the expressly, freely and knowingly expressed consent of users / clients, by ticking the checkbox / notifying the person responsible for personal data protection as the legal basis for processing personal data, we will collect email addresses belonging to them. Users / clients can withdraw their consent at any time by accessing the link provided or by notifying the person responsible for the protection of personal data. The collected data / information will be kept in secure conditions until the users / clients withdraw their consent; after this time, the data will remain stored until the declaration of withdrawal of consent is recorded, on the basis of which the data will be removed from the internal systems.

Contact form – its role is to facilitate the exchange of information between users / clients and Aplast; the personal information collected within this division refers to: name and surname, address, telephone number, identification data of the company (Fiscal code, registration number in the Trade Register, bank account). This information will be processed internally by colleagues from the competent departments so that users ‘/ clients’ questions / requests will be promptly resolved and the collaboration will take place in the best conditions. The information collected will be stored for different periods of time, depending on the request of each user / client (data can be collected, for example, during the conclusion and execution of contracts, the smooth running of contractual activities).

Accessing / using the site – the objective is to ensure a pleasant experience for users / clients who browse the site, but also to easily view the products / services for which they show interest in safe conditions, based on their agreement expressed by checking the active check box displayed; In this context, we use the following types of data: analytics information (through third-party analytics tools such as Google Analytics, Tag Manager, Double Click, which helps us assess trends in site traffic and usage), cookies and similar technologies, information from log files, device identifiers, metadata, tracking, network and connection data, online identifiers, device operations, device features.

• My account – this section is created in order to have access to the My Account platform, to place and manage addressed orders, as well as to develop the contractual relationship with Aplast; by accessing “My Account” will be collected, having as legal basis for processing personal data the execution of the contract and the smooth running of contractual relations; the data collected refers to: name, surname, e-mail address, telephone number, client number, which will be processed internally by colleagues responsible for managing the relationship with Aplast clients. The data of the payment card of the Client / User / Buyer will not be accessible and will not be stored by www.aplast.com, but only by the institution authorizing the Transaction. The data collected will be stored until the termination of the contractual relationship and an additional period of 10 years after the termination of the contractual relationship, for accounting reasons and the exercise of legal rights, if this proves necessary.

Call center – this section ensures the maintenance of contact with users / clients and to meet their requirements in real time, based on the legitimate interest and execution of the contract as legal grounds for processing personal data, we collect data from users / clients which may refer to name, surname, postal address, e-mail address, telephone number, voice, which will be processed within the company by colleagues able to provide the most appropriate answers, including for the creation of the user account. The data collected will be kept for the standard storage period of 3 months, and if given the nature of the request, the legitimate interest or the exercise of a right, they will be kept for different periods of time, depending on the specific need, to be deleted at the time when their storage will no longer be justified.

Orders – the section is made so that products can be accessed and orders placed and managed from the user account, and to carry out the contractual relationship with Aplast; in this regard, based on the execution of the contract, the legitimate interest or legal obligation, as legal grounds for processing personal data, data such as name, surname, e-mail address, telephone number will be processed, which will be used internally by colleagues responsible for managing the relationship with clients. The data collected will be kept until the termination of the contractual relationship and an additional period of 10 years after the termination of the contractual relationship, for accounting and exercise of legal rights, if this proves necessary.

Contests / Campaigns – aims to organize contests / campaigns of Aplast and to identify the participants designated winners in order to contact and offer them prizes, having legal grounds for processing personal data legitimate interest and legal obligation; personal data may refer to name, surname, postal address, e-mail address, telephone number, images, voice, which will be processed by colleagues involved in organizing and conducting contests / campaigns. The data of the participants who were not declared winners will be kept for the standard storage period of 3 months, and in the case of the data of the participants declared winners, for different periods of time, according to legal accounting and tax provisions, to be deleted at the time when their storage will no longer be justified.

• Other recipients of the data – for the purposes detailed above, Aplast may disclose personal data, as appropriate and justified to other third parties, such as: payment / banking service providers; carriers, partner companies of Aplast that ensure the assembly.

• Links to other websites – The aplast.com website contains links to other websites, such as partner presentation sites. This policy is valid only for the aplast.com page. We are not responsible for foreign content provided through the links and marked as such. Aplast is exempt from liability for illegal content, the presentation of erroneous or incomplete information, as well as for damages arising from the use or non-use of the information presented on these sites.

The period for which personal data will be stored

Duration of the contract; the storage period may be extended if this is in the interest of the Beneficiary and he agrees to do so; however, the person concerned has the right to withdraw his or her consent at any time , without affecting the lawfulness of the processing carried out before its withdrawal;

The rights of the persons concerned

Right of access to data (The person concerned has the right to obtain from Aplast a confirmation that it processes personal data concerning him / her and a copy of the personal data subject to processing. For any other copies requested by the person concerned, Aplast can charge a reasonable fee, based on administrative costs);

 Right to rectification of data (The person concerned has the right to obtain without undue delay, the rectification of incorrect / incomplete personal data concerning him / her and to obtain the completion of personal data which are incomplete, including by providing an additional statement);.

The right to deletion of data (The person concerned has the right to obtain the deletion of personal data concerning him / her, without undue delay, when one of the situations provided for in the Regulation does not occur, which allows the rejection of the request for deletion);

Right to restrict processing  (The person concerned has the right to obtain the processing restriction in the following cases: the person concerned disputes the accuracy of the data, for a period which allows Aplast to verify the accuracy of the data; the processing is illegal but the person concerned opposes the deletion of personal data , instead requesting a restriction on their use, Aplast no longer needs personal data for the purpose of processing, but the person concerned requests them to establish, exercise or defend a right in court; the person concerned has objected to the processing for the period dring which it is verified whether the legitimate rights of the operator prevail over those of the person concerned);

Right to data portability (The person concerned has the right to receive personal data concerning him or her which he or she has provided in a structured, commonly used and automatically readable format and has the right to transmit this data to another operator, without hindrance from the operator to whom the personal data were provided, if: the processing is based on consent; the processing is based on a contract; or the processing is performed by automatic means);

Right to object to data processing (The person concerned has the right to object, for reasons related to his / her particular situation, to the processing of his / her data, including profiling on the basis of those provisions, unless otherwise provided by law. When the processing of personal data is for the purpose of direct marketing, the person concerned has the right to object at any time to the processing of personal data concerning him for this purpose, including the creation of profiles, insofar as it is related to the respective direct marketing); 

Right not to be subject to automated decisions, including profiling (The person concerned has the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning the person concerned or similarly affects hhim/her in a significant measure, having the right to request and obtain: the withdrawal or annulment of any decision having legal effect in respect of him/her, taken solely on the basis of processing carried out by automatic means, intended to assess certain aspects of his personality, such as professional competency, credibility, conduct or other such matters; re-evaluation of any other decision taken in his/hers respect, which significantly affects him/her, if the decision was taken solely on the basis of processing which meets the conditions set out in the previous point);

The right to notify the recipients regarding the rectification, deletion or restriction of personal data; The right to go to court and / or the National Authority for the Supervision of Personal Data Processing.

Ways of exercising rights

Interested persons can exercise their rights mentioned above by a written request, sent online to the e-mail address office@aplast.ro. In order to avoid the provision of information to unauthorized persons, according to the internal procedure for resolving these requests, the applicant may be asked for additional information in order to verify his identity / interest / right of representation.

The request will be resolved within 30 days of receipt. This period may be extended by 60 days where necessary, taking into account the complexity and number of applications, providing information on any such extension and the reasons for the delay.

Where the person concerned submits an application in electronic format, the information shall be provided in electronic format where possible, unless the person concerned requests another format.

If it does not take action on the application of the person concerned, Aplast shall inform the person concerned, without delay and no later than 30 days after receipt of the request, of the reasons for not taking action and the possibility to lodge a complaint before a supervisory authority and to introduce a judicial remedy. 

The information provided is offered free of charge. If the requests from a person concerned are manifestly unfounded or excessive, in particular because of their repetitive nature, Aplast may:

Either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the measures requested, or refuse to comply with the request.

Security measures for the processing of personal data

All information collected through the aplast.com website is processed in compliance with the principles mentioned above, to which are added technical and organizational measures, which allow traceability and transparency regarding the processing of client / user data. In relation to the proxies through which personal data may be processed Aplast shall take the necessary measures to ensure that they comply with legal data protection requirements and comply with relevant standards and that access to data is restricted to a limited number of persons, restricted to those who really need to access them in order to perform their contractual obligations.

In principle, accessing databases and files / platforms requires authentication by ID and password, and the servers on which they are stored are located in Romania and properly managed.

 

In conclusion, Aplast ensures that the processing of personal data of users / clients is carried out in compliance with the following principles:

– Your data is safe

– You always have control over your data

– We use this data for the optimal development of the contractual relations

In this way, we want to show better transparency and clarity about the processing operations we perform.

Thank you for being with us and we assure you that we will continue to invest and innovate to provide you with high quality products and services.