Privacy Policy
Why is it important to read this Privacy Policy?
This Privacy Policy (the “policy”) describes how Expres Colet SRL (hereinafter the “Company”, “we”, “us” or “our”) collects, uses, discloses and stores your personal data, and what legal rights you have. We protect your personal data in compliance with the General Data Protection Regulation (2016/679) (“GDPR”) and other applicable laws. We may amend this policy unilaterally from time to time.
Who is responsible for the protection of my information?
Our registration number is: RO32088257
Our address: Expres Colet SRL, Iași, str. Aureliu Vlaicu 78
Our e-mail address: [email protected]
Why and how do you collect my information?
1. To process orders in our online store, receive payments and ship the products you have purchased
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| When you purchase our products | First name, last name, delivery address, phone number, information about the price and the currency in which the product was paid, credit card brand and type, credit card BIN number and issuing country, IP address, language, device type and payment history | Contract (Art. 6 (1) (b) of the GDPR) | From you | It is a requirement necessary to enter into a contract. If you do not provide this information, you will not be able to buy and receive our products. | 10 years |
2. To ensure security and improve our website
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| When you use our website or breach the Terms of Service | IP address, device ID and device data, web browser information, information about your activity on our website, country, information about breaches of the Terms of Service and blacklisting | Legitimate interest (security and improvement of our website) (Art. 6 (1) (f) of the GDPR) | From you | No | One month from the last time you use our website; 10 years for information relating to breaches of the Terms of Service and blacklisting |
3. To provide you with customer support
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| When you send a question or complaint to our customer support service | First name, last name, delivery address, country, phone number, subject of the enquiry, date of the enquiry, content of the enquiry, files attached to the enquiry, reply to the enquiry, customer contact history, order ID | Consent (Art. 6 (1) (a) of the GDPR) | From you Customer support service providers |
No | 10 years from the moment your last enquiry was received |
4. To inform you about our products, send you promotional messages by e-mail or show you ads on the internet
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
|
Full name, e-mail, phone number, IP address, order data, country, postback data, the website that referred you to the Company’s website, your interaction with ads on the internet | Consent (Art. 6 (1) (a) of the GDPR) Customer relationship Legitimate interest (direct marketing and internet advertising) (Art. 6 (1) (f) of the GDPR) |
From you Social media service providers Marketing service providers E-commerce service providers |
No | 5 years, unless you opt out |
5. To interact with you through social networks
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| If you interact with our social media profiles (for example: you send us a message, follow our profiles, share a post or react to a post) | Full name, e-mail address, gender, country, photo, message, date and time the message was received, content of the message, files attached to the message, reply to the message, time of the reply to the message, information about the Company’s rating, comments on a post, shares of a post, information about reactions to a post | Consent (Art. 6 (1) (a) of the GDPR) | From you and from social media service providers | No | 10 years from your last interaction with our social media profiles |
6. To carry out the selection of potential employees
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| When we receive your application for a job, when you give your consent for us to store your CV, or when we contact you based on information you publicly disclose on professional social-networking platforms. | Full name, e-mail, phone number, CV, professional experience, other data you provide to us | Consent (Art. 6 (1) (a) of the GDPR) Contract (Art. 6 (1) (b) of the GDPR) Legitimate interest (contacting you if you make your information public) (Art. 6 (1) (f) of the GDPR) |
From you Professional social-networking service providers Human-resources agencies |
It is necessary in order to enter into a contract only when we intend to conclude an employment contract with you. If you do not provide this information, we cannot conclude an employment contract with you. | 6 months after the end of the relevant recruitment process 5 years after you gave us your consent or made your information public on professional social-networking platforms |
7. To comply with legal accounting requirements
| When does this affect me? | What information do you collect about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| When you purchase our products | Full name, e-mail address, phone number, bank account number, address, signature, invoice, reports, accounting documents, payments, amounts paid, other data we are legally obliged to collect | Legal obligation (Art. 6 (1) (c) of the GDPR) | From you Audit service providers |
It is a legal requirement. If you do not provide this information, you will not be able to purchase our goods or services | 10 years after the transaction |
8. To defend our rights and interests
| When does this affect me? | What information is collected about me? | What is the legal basis for collecting my information? | Where do you collect my information from? | Am I obliged to provide this information? | How long do you keep my information? |
|---|---|---|---|---|---|
| If we are a party to legal proceedings that affect you, or we are required by law to collect information about you | All the data mentioned above, accounting and legal files, legal documents, other data provided by you, other data we are obliged to collect and/or provide by law | Legal obligation (Art. 6 (1) (c) GDPR) Legitimate interest (to protect our rights and interests) (Art. 6 (1) (f) GDPR) |
From the sources mentioned above, police authorities, parties involved in legal proceedings, courts | Yes, when we are required by law to collect personal data | 10 years from the end of your contractual relationship with us or, if longer, the duration of the legal proceedings and the 3 years following the entry into force of a final decision of the authority |
| If applicable: information about criminal offences and convictions | Establishment, exercise or defence of legal claims (Art. 9 (2) (f) GDPR) |
Who do you share my data with?
We share your data with information recipients both inside and outside the European Economic Area (EEA), where this is necessary for the purposes described above and permitted under the applicable laws.
| Recipient of the information or category of recipient | Purpose of the information transfer | Country of the recipient | European Commission decision on whether a country outside the EEA ensures an adequate level of data protection | Appropriate safeguards protecting my information when transferred to countries outside the EEA |
|---|---|---|---|---|
| Accounting and audit service providers | To comply with legal accounting requirements | EU | N/A | N/A |
| Archiving service providers | To keep our archive | EU | N/A | N/A |
| Electronic communication service providers | To operate our electronic communications | EU | N/A | N/A |
| Lawyers, notaries, bailiffs, auditors, data protection officers, consultants | To ensure our compliance and defend our rights and interests | EU | N/A | N/A |
| E-mail and cloud hosting service providers | To operate IT resources | Anywhere in the world | No | EU Standard Contractual Clauses |
| Banks, payment processors and other financial service providers | To process payments | Anywhere in the world | No | EU Standard Contractual Clauses |
| Marketing and telemarketing service providers | To promote our products | Anywhere in the world | No | EU Standard Contractual Clauses |
| Shipping service providers and fulfilment centres | To ship our products | Anywhere in the world | No | EU Standard Contractual Clauses |
| Customer support service providers | To provide customer support | Anywhere in the world | No | EU Standard Contractual Clauses |
| Social media service providers | To manage our social media profiles | Anywhere in the world | No | EU Standard Contractual Clauses |
What legal rights do I have in relation to my information?
Subject to the conditions and limitations laid down by the applicable laws, you have the right (i) to receive confirmation of whether we collect data relating to you and to request access to that information; (ii) to have inaccurate or incorrect data corrected, or completed where it is incomplete; (iii) to have the data we hold about you erased; (iv) to restrict the use of your data where you question its accuracy, object to its processing or need it for legal purposes; (v) to request your information in a structured, commonly used and machine-readable format; (vi) to object to the processing of your information; (vii) to withdraw any consent you have given us in connection with the processing of your information; (viii) to lodge a complaint with the supervisory authorities; and (ix) not to be treated in a discriminatory manner when exercising your rights. In the sections below you will find more information about your rights and the cases in which they apply.
What does my right to request access to information consist of?
You have the right to request that we disclose certain data about the collection and use of your data. Once we have received and verified your request, we will disclose to you the categories of personal data and the sources of personal information we have collected about you, our commercial or business purposes for collecting that personal information, the categories of third parties with whom we share that personal information, the specific pieces of personal information we have collected about you, and other data we are obliged to provide under the applicable laws. We disclose data to third parties for commercial or business purposes as described in Section 4 of this policy.
What does my right to rectification consist of?
You have the right to obtain the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete data be completed, including by means of providing a supplementary statement.
What does my right to request erasure of information consist of?
You have the right to request the erasure of your data collected and stored by us in cases where (i) the information is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) you have withdrawn the consent on which the processing of the data is based and there is no other legal basis for processing the data; (iii) you object to the processing of your data and there are no compelling legitimate grounds for the processing, or you object to processing for direct marketing purposes; (iv) the data has been processed unlawfully; (v) the information must be erased in order to comply with a legal obligation; (vi) the information was collected in connection with the provision of information society services directly to a child and is subject to consent. Once we receive and verify your request, we will erase (and ask our service providers to erase) your data from our records, unless the applicable laws do not provide for the erasure of data in a specific case (for example, keeping the information is necessary for us or our service provider(s) to complete the transaction for which we collected the personal information, to provide the good or service you requested, to take actions reasonably anticipated within the context of our ongoing business relationship with you or otherwise perform our contract with you, to detect security incidents, to protect against malicious, deceptive, fraudulent or illegal activity or to prosecute those responsible for such activities, to comply with a legal obligation, or to make other internal and lawful uses of that information that are compatible with the context in which you provided it).
What does my right to restrict the processing of information consist of?
You have the right to restrict the processing of your information in cases where (i) you have contested the accuracy of the personal information; (ii) the processing is unlawful and you oppose the erasure of the personal information and request the restriction of its use instead; (iii) we no longer need the personal information for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims; (iv) you have objected to the processing.
What does my right to data portability consist of?
You have the right to data portability when you wish to receive the data you have provided in a structured, commonly used and machine-readable format, or to transfer that data to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
What does my right to object to the processing of information consist of?
You have the right to object to the processing of your information where its collection and use has taken place on the basis of the public interest, the exercise of official authority vested in us or legitimate interest, including profiling, as explained in section 3 of this policy, or where you object to the collection of your personal information for direct marketing purposes.
What does my right to withdraw consent consist of?
You have the right to withdraw any consent given in connection with the processing of your information, where the processing is based on consent, as explained in Section 3 of this policy, and you wish to withdraw it at any time.
What does my right to lodge a complaint with the supervisory authorities consist of?
You have the right to lodge a complaint with the supervisory authorities when you wish to initiate a complaint with the supervisory authority, in particular in the Member State of your habitual residence or place of work, or in the event of an alleged infringement of the GDPR.
What does my right not to receive discriminatory treatment when exercising my rights consist of?
When exercising your rights enshrined in the applicable laws, you have the right not to be discriminated against. For example, because you have exercised your rights under the applicable legislation, you will not be denied any good or service, charged a different price, or offered goods or services of a different quality, etc.
How do I submit a request?
If you wish to exercise the rights mentioned above, please send us a request by e-mail at [email protected].
Can I use an authorized agent?
Yes, of course. You may use an authorized agent to submit an opt-out request on your behalf if you provide us with written permission to do so. In that case, please provide us with a copy of the permission, as indicated in section 18 of this policy. We may reject a request from an authorized agent who does not provide proof that they have been authorized by you to act on your behalf. You may also submit a request on behalf of your minor child.
Do you engage in automated individual decision-making, including profiling?
No, we do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you.
Are any cookies saved on my device by your website?
Yes, our website saves the following cookies on your device.
| Cookie name | Cookie description | Cookie expiry |
|---|---|---|
| Strictly necessary and statistical cookies | ||
| _fbp | Used to distinguish and track each user | 3 months |
| _ga | This cookie is used to distinguish between users by assigning them a randomly generated number as a client identifier. It is included in every page request on a website and is used to calculate visitor, session and campaign data for website analytics reports. | 2 years |
| _gat | This cookie is used by Google Analytics to throttle the request rate. | 1 day |
| _gid | This cookie stores and updates a unique value for each page visited and is used to count and track visits to the website. | 1 day |
| __cfruid | Cookie associated with websites such as Cloudflare, used to identify trusted web traffic. | Session only |
| _fw_crm_v | Used to track the identity of visitors/users and the chat sessions carried out by the user | 1 year |
| _hjid | Hotjar cookie that is set when the customer first lands on a page containing the Hotjar script. It is used to preserve the Hotjar user ID, unique to that site in the browser. This ensures that behaviour on subsequent visits to the same site is attributed to the same user ID. | 1 year |
| _uetvid | This is a cookie used by Microsoft Bing Ads. It allows us to connect with a user who has previously visited our website. | 1 year |
| XSRF-TOKEN | This cookie is intended to help with website security by preventing cross-site request forgery attacks. | 1 day |
| enence_session | Used to store information about your current visit to the site. This cookie is essential for the functionality of the website. | Only during your visit to the website |
| c | This cookie is used to detect spam and improve the security of the website. It does not store specific visitor data. | 2 years |
| soundestID | This cookie is used to determine whether the visitor has visited the website before or is a new visitor. | Only during your visit to the website |
| soundtest-views | Assigns a specific ID to the visitor. This allows the website to determine the number of visits by specific users for analytics and statistics. | Only during your visit to the website |
| Marketing cookies | ||
| ads/ga-audiences | This cookie is used by Google AdWords to re-engage visitors who are likely to become customers, based on their online behaviour across websites. | Only during your visit to the website |
| REST/webTracking/v1/event | This cookie measures the effectiveness of the website’s marketing. It is used to measure the conversion rate between website marketing and telephone response. | Only during your visit to the website |
| Preference cookies | ||
| _gat_gtag_UA_136786017_1 | This cookie is part of Google Analytics and is used to throttle the request rate. | 1 minute |
How are cookies managed?
You can configure your browser to reject some or all cookies, or to ask for permission before accepting them. Please note that deleting or disabling future cookies may prevent access to some parts or features of our website. You can control the use of technical, preference or advertising cookies by adjusting the settings of your computer. To find out how to manage cookies in your browser, consult the help pages of your browser:
- Mozilla Firefox: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Google Chrome: support.google.com/chrome/answer/95647
- Opera: www.opera.com/help/tutorials/security/privacy
- Microsoft Edge: privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
- Safari: support.apple.com/guide/safari/manage-cookies-and-website-information-sfri11471/mac
How can I contact the data protection officers?
If you have questions, comments or complaints related to the way we collect, use and store your personal information, our data protection officers can help you. If you need assistance, you can contact them at any time by e-mail at [email protected].