Personal Data – GDPR – Hydrosystems

Personal Data Protection Policy – GDPR

We are committed to respecting your rights and take data protection and privacy legislation seriously. Our personal data protection policy includes the principles we follow regarding the personal data of our clients and collaborators, as well as information on how we collect, process, use, and protect your personal data when you purchase our products and services or access our websites www.hydrosystems.ro and www.hydro-shop.ro.

Who We Are
S.C. Hydrosystems S.R.L., a company registered under no. J20/138/2004 and with fiscal code RO16096380, hereinafter referred to as Hydrosystems. Our headquarters is located in Petrosani Municipality, Livezeni DN 66 Street, No. 100, Hunedoara County, Romania.
You can contact us via the phone numbers/email addresses listed on our websites in the Contact section, by using the contact forms on our websites, in writing at our headquarters address, or by email at [email protected].

Personal Data We Process
The information and personal data we collect and how we collect it may vary depending on the products and services you purchase as a customer, the services you provide to us as a business partner, and in general, based on your interaction with us or data received from third parties.
Hydrosystems processes your personal data based on the following legal grounds:

Performance or conclusion of a contract with you – For example, when you order a product from our website or through other contact methods (phone, email, chat, in-person at our headquarters, Facebook or any other social media platform, WhatsApp, etc.), we need your name, address, phone number, and email address to issue an invoice for the ordered product.
Hydrosystems’ legitimate interests – For example, informing you about our services and products or improving these services.
Fulfilling a legal obligation.
Your consent, when Hydrosystems does not rely on another legal basis. We will always ask for your consent when processing personal data for purposes other than those for which your data was collected, and this consent may be withdrawn at any time.

For example, we collect your personal data when:

You contact us through various channels to purchase a product or service or to request information about a specific product or service;
You purchase a product or service sold by us;
You visit or browse our websites;
You create an account on our webshop (www.hydro-shop.ro);
You subscribe to newsletters, participate in a contest or competition organized by us;
You apply for a position within our company.

We use cookies to improve your experience on our websites and to manage website activity. More details about cookies and how to manage them can be found [here].

How We Process Your Personal Data
When you create an account on our website, we ask you to provide personal information, including your full name, gender, phone number, address, email address, and password. We also collect information about your search and purchase history and your activity on our websites, including information about clicks and viewed pages.
Your client account allows you to modify settings regarding the personal data we collect.
When you subscribe to our newsletter, we ask for your email address or full name.
When you write to us using the website forms, we ask for your contact details: full name, email address, and phone number.
When you purchase a product or service from us, we collect your personal data for invoicing (full name, address, age, phone, email, handwritten or digital signature).
When you visit our websites, we also collect and process the following online identifiers: IP address, user names in various applications, or browser cookie data, such as the exact date and time of accessing our services, the hardware, software, or browser you use, and information about your device’s operating system, including language settings and access location.
When you apply for a job position in our company, we collect and process – in the pre-contractual phase – your personal identification data, as well as information about professional skills, education, and marital status.

Categories of Recipients to Whom Personal Data May Be Disclosed:

State authorities (including tax authorities, and criminal law enforcement authorities), due to a legal obligation of the Company;
Providers directly/indirectly involved in the Company’s activity;
Company partners involved in business operations;
State institutions, agencies, government bodies, if required by law;
Company employees, for conducting company activities.

Transfer of Personal Data to an EU/EEA Country or a Third Country Outside the European Economic Area
In principle, Hydrosystems will not transfer your personal data to companies outside the country.

Personal Data Storage
Personal data will be processed at least for the duration of the contract’s validity, and afterwards for the time necessary to fulfill contractual obligations by either party.
Personal data will be stored as long as necessary for the purposes mentioned above or for the time period provided by general legal archiving provisions.

Your Rights Regarding Personal Data
In relation to the processing of personal data under the conditions specified in the European General Data Protection Regulation 679/2016, you may exercise any of the following rights:

Right of access to personal data
Right to rectification
Right to erasure or “right to be forgotten”
Right to withdraw consent
Right to restrict processing
Right to data portability
Right to object
Right not to be subject to a decision based solely on automated data processing, including profiling, which produces legal effects or significantly affects you
Right to file a complaint with us and/or the competent data protection authority (www.dataprotection.ro)
Right to seek judicial remedy

If you have any questions regarding the processing of your personal data or if you wish to send us a request or exercise any of the rights related to data processing, please contact us using the contact details mentioned in the introduction to this Privacy Policy or by email at [email protected].
We will analyze each request and inform you of the actions taken, as soon as possible, within a maximum of 30 days. If we need additional information from you or encounter difficulties resolving your request, we will inform you immediately.

If you believe we have not resolved all your requests or if you are not satisfied with our responses, you can submit a complaint to the National Supervisory Authority for Personal Data Processing. You also have the right to appeal to the courts.

Updating This Personal Data Processing Notification
This Personal Data Protection Policy is subject to periodic reviews. If we decide to change it to better protect your rights and personal data, we will publish the new version here, which will replace the current version.

Thank you for your trust in how we handle your personal data. Please do not hesitate to contact us if you have any questions about your personal data and how we process it.

This Privacy Policy is applicable as of 22.05.2018.