PERSONAL DATA PROTECTION
Who we are and how you can contact us
MGDS IMPEX SRL is a legal person of Romanian nationality, having its registered office in Bucharest, str. Ulmetului no. 18, sector 4, order number at the Trade Register J40 / 22024/1994, Unique fiscal registration code RO6709770. For the purposes of data protection legislation, we are an operator when we process your personal data.
As we are open to finding out your views, as well as providing you with any additional information you may need regarding the processing of your data, we encourage you to contact the MGDS IMPEX SRL data protection officer at office @ mgds. ro or by post or courier to the address of the Bucharest office mentioned above with the mention: in the attention of the Data Protection Officer.
Categories of personal data processed
In general, we collect your personal data directly from you, so that you have control over the type of information you provide to us. For example, we receive information from you as follows:
When you create an account on the website, you will be required to provide your personal information such as - Company name, Address, Tax Code, Nr. from the Trade Register, Bank, IBAN, Nr. phone, Username, E-mail address.
We may also collect and process certain information about your behavior when visiting the web page or using the smartphone application to personalize your online experience and provide you with offers tailored to your profile. We invite you to find out more details in this regard by consulting the section on processing purposes below.
On our website and in the smartphone application we can store and collect information in cookies and similar technologies, according to the Cookies Policy.
We do not collect or otherwise process sensitive data, included in the General Regulation on data protection in special categories of personal data. Also, we do not want to collect or we process data of minors who have not reached the age of 16 years.
Purposes and grounds for processing personal data
We will use your personal data for the following purposes:
1. To provide MGDS IMPEX SRL services for your benefit
This general purpose may include, as appropriate, the following:
a) download the technical documentation of the products within the www.mgds.ro
b) Processing of your offers and orders;
c) Providing technical support services, solving technical problems, returns, including providing answers to your questions regarding your orders or our goods and services.
The processing of your data for these purposes is in most cases necessary for the conclusion and execution of a contract between MGDS and you, or goals required by applicable law, including tax and accounting law.
2. To improve our services
We always want to offer you the best experience of managing offers and orders online. To do this, we may collect and use certain information about your buyer behavior, we can invite you to complete satisfaction questionnaires following the completion of an order or we can carry out, directly or with the help of partners, studies and market research.
We base these activities on our legitimate interest in conducting business, always taking care that your fundamental rights and freedoms are not affected.
3. For marketing
We want to keep you updated on the best offers for the products / services you are interested in. In this regard, we can send you any type of message (such as: e-mail / SMS / telephone / mobile push / webpush / etc.) containing general and thematic information, information on products similar or complementary to those on which you have purchased them, information on offers or promotions, new solutions in the MGDS protocol, price lists. To provide you with information of interest to you, we may use certain data about your buyer behavior (eg products viewed / added to wishlist / purchased) to create a profile for you. We always ensure that such processing is carried out in compliance with your rights and freedoms, and that the decisions made thereunder have no legal effect on you and do not affect you in any significant way.
In most cases, we establish marketing communications with your prior consent. You can change your mind and withdraw your consent at any time by:
- Changing the settings in the client account;
- Accessing the unsubscribe link displayed in the messages you receive from us; or through
- Contacting MGDS using the contact details described above.
In certain situations, we can base our marketing activities on our legitimate interest in promoting and developing our commercial activity. In any situation where we use information about you for our legitimate interest, we take care and take all necessary measures so that your fundamental rights and freedoms are not affected. However, you may at any time request us, by the means described above, to stop the processing of your personal data for marketing purposes, and we will comply with your request.
4. To defend our legitimate interests
There may be situations in which we will use or transmit information to protect our rights and commercial activity. These may include:
- Protecting the website and users of the MGDS website from cyber-attacks:
- Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;
- Measures to manage various other risks.
The general basis of these types of processing is our legitimate interest in defending our commercial activity, being understood that we ensure that all the measures we take guarantee a balance between our interests and your fundamental rights and freedoms.
Also, in certain cases we base our processing on legal provisions such as the obligation to ensure the protection of goods and values provided by the applicable legislation in this area.
How long we keep your personal data
As a general rule, we will store your personal data as long as you have an account on the MGDS platform. You may ask us at any time to delete certain information or to close your account and we will respond to these requests, subject to the preservation of certain information including after closing the account, in cases where applicable law or our legitimate interests require it.
To whom we transmit your personal data
Where appropriate, we may transmit or provide access to certain personal data of your own to the following categories of recipients:
- courier service providers;
- marketing service providers;
- market research service providers;
- to other companies with which we can develop joint programs to offer our goods and services on the market.
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to some public authorities.
We make sure that access to your data by third parties legally owned by private law is made in accordance with the legal provisions regarding data protection and confidentiality of information, based on contracts concluded with them.
In which countries we transfer your personal data
Currently, we store and process your personal data on the territory of Romania.
How we protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, in accordance with industry standards.
The transmission of your personal data is done using state-of-the-art encryption algorithms and we store them on secure servers, while ensuring data redundancy.
Notwithstanding the measures taken to protect your personal data, we would like to point out that the transmission of information over the Internet, in general, or through other public networks, is not completely secure, with the risk that the data may be viewed and used by third parties. unauthorized parts. We cannot be held responsible for such vulnerabilities of systems that are not under our control.
What rights do you have?
The General Data Protection Regulation recognizes a number of rights in relation to your personal data. You may request access to your data, correct any errors in our files, and / or object to the processing of your personal data. You may also exercise your right to complain to the competent supervisory authority or to bring justice. If applicable, you may also have the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.
More information on each of these rights can be obtained by consulting the table presented below.
In order to exercise your rights, you may contact us using the contact details set out above. Please note the following if you wish to exercise these rights:
Identity. We take the privacy of all records containing personal data seriously.
For this reason, please send us your requests regarding such registrations using the email address of the MGDS account. Otherwise, we reserve the right to verify your identity by requesting additional information that aims to confirm your identity.
Tariffs. We will not charge a fee to exercise any right to your personal data.
Duration of response. We aim to respond to any valid requests within a maximum of 3 working days, unless this is particularly complicated or if you have made several requests, in which case we will respond within a maximum of 7 working days. We'll let you know if we need more time. We may ask you if you can tell us exactly what you want to receive or what you are worried about. This will help us act faster and shorten your response time to your request.
Rights of third parties. We should not comply with a request if it would adversely affect the rights and freedoms of other data subjects.
We consider ensuring the right to the protection of personal data as a commitment of MGDS IMPEX SRL, therefore we will devote all the resources and efforts necessary to process your data in full compliance with Regulation (EU) 2016/679 ("General Regulation on data protection" or “GRDP”), as well as with the applicable law on the Romanian territory.
You can ask us:
• to confirm if we process your personal data;
• to make available a copy of this data;
• to provide you with other information about your personal data, such as the data we have, what we use, whom we disclose and how we protect them, how long we keep them, what rights you have, how you can do it complaint, from where we obtained your data, to the extent that the information was not already provided to you by this information.
We have no right to rectify or supplement your inaccurate or incomplete personal data.
We may try to verify the accuracy of the data before confirming the account on the website www.mgds.ro.
Deletion of data
We do not have the right to delete your personal data if the processing of your personal data is required:
• for compliance with a legal obligation; or
• for finding, exercising or defending a right in court.
Account management is the user's right.
Be aware that before exercising this right you should download from the MGDS account and save all documents related to the offers, orders and / or documents from MGDS IMPEX SRL. If you do not perform this action before you exercise your right of erasure, you will lose all these documents, and MGDS IMPEX SRL will be unable to make them available, as the case may be, because the process of deletion of data, respectively the MGDS account, with all the data and documents related to it, is an irreversible process.
Restricting the processing of data
You can ask us to restrict the processing of personal data, but only if:
• their accuracy is challenged, in order to allow us to check their accuracy; or
• processing is illegal, but you do not want the data to be deleted; or
• they are no longer required for the purposes for which they were collected, but you need them to ascertain, exercise or defend a right in court; or
• You have exercised your right to oppose it, and checking whether our rights prevail is in progress.
We may continue to use your personal data following a restriction request, if:
• we have your consent; or
• to ascertain, exercise or ensure the defense of a right in court; or
• to protect the rights of MGDS IMPEX SRL or of another natural or legal person.
You can ask us to provide you with your personal data in a structured, commonly used format or you can request it to be transmitted to another data operator, but only in each case if:
• processing is based on your consent or the conclusion or performance of a contract with you; and
• processing is done by automatic means.
You may at any time oppose, for reasons related to your particular situation, the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over that interest.
You can also oppose the processing of your data for direct marketing at any time, without invoking any reason, in which case we will end this processing as soon as possible.
Automatic decision making
You can request that you not be the subject of a decision based solely on automatic processing, but only when that decision:
• produces legal effects on you; or
• it affects you in a similar way and to a significant extent.
This right does not apply if the decision reached following the automatic decision making:
• it is necessary for us to conclude or carry out a contract with you;
• it is authorized by law and there are adequate guarantees for your rights and freedoms; or
• is based on your explicit consent.
You have the right to register a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are the following:
National Supervisory Authority for Personal Data Processing
G-ral Boulevard. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212;
Without affecting your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will make every effort to resolve any issues amicably.