Privacy notice
For Mucca, ensuring the confidentiality and security of your personal data is both an obligation and a responsibility we willingly undertake. Beyond our legal duty to comply with EU Regulation 679/2016 (the General Data Protection Regulation, or GDPR), we believe our partners and clients should know that Mucca considers the confidentiality and security of personal data fundamental. This notice explains how we process your personal data when you visit mucca.ro, communicate with us or place an order.
The Controller's identity and contact details.
MUCCA PRODUCTION & ADVERTISING SRL, the personal data controller (the Controller), with its registered office in Bucharest, 1 Mirea Mioara Luiza Alley, building N22, entrance 2, 1st floor, apartment 21, District 4, registered with the Trade Register under no. J40/7147/2013, VAT number RO 31750754, bank account RO93 BACX 0000 0009 0345 8001 opened with Unicredit Tiriac Bank – N. Titulescu Branch, Bucharest, email hello@mucca.ro and telephone 0758094410, lawfully and responsibly processes personal data collected through mucca.ro by complying with GDPR and domestic law and by implementing and regularly reviewing organisational and technical security measures.
What categories of personal data do we process?
Most of the personal data listed below is collected directly from you when you contact us by telephone, place an order or email us. Through our official contact channels and mucca.ro, we process the following types of personal data:
- • first and last name;
- • email address;
- • telephone number;
- • home or correspondence address;
- • banking information;
- • industry or field of activity;
- • personal identification number (when invoicing individuals);
- • IP address, browser and data about visitor behaviour on mucca.ro.
We do not process special categories of personal data as defined by GDPR. We also do not wish to collect or process data belonging to children under 16.
For what purposes do we process data, and on what legal grounds?
The personal data mentioned above is processed for the following purposes:
- 1. invoicing products purchased by you;
- 2. communicating information between the parties about purchased products;
- 3. resolving issues related to products ordered and shipped to you, including returns and reimbursement for returned items;
- 4. delivering products ordered by you through express courier services. Processing for purposes 1–4 is carried out under Article 6(1)(a), (b) and (c) GDPR and is generally necessary to enter into and perform a distance contract between the parties. Some processing is also required by applicable tax and accounting law.
- 5. improving the services we provide to you. For this purpose, we may process information about your behaviour as a buyer or visitor to mucca.ro. Under Article 6(1)(f) GDPR, this processing is based on our legitimate interest in conducting commercial activities, while ensuring that your fundamental rights and freedoms are not adversely affected.
- 6. protection and security;
Mucca may install security cameras at the company's registered office and other premises in order to protect its legitimate interests. Areas with cameras are always marked with a warning. We may process the resulting data on the basis of our legitimate interest in protecting our systems and clients.
Personal data is processed by automated and manual means.
How long we retain processed data
We process personal data for as long as either party needs it to perform contractual obligations. Data is retained for the purposes described above or for the period required by law. In certain legally required cases, we may retain data where there is an outstanding balance or unresolved dispute. Retention periods differ: accounting documents, including invoices issued by the Controller, are archived as required by law for 10 years from their date of issue.
With whom do we share your data?
Personal data processed by the Controller is or may be shared with the following categories of recipient:
- a) courier service providers;
- b) banking and non-banking service providers;
- c) companies providing information-system services;
- d) hosting providers;
- e) public authorities where we have a legal obligation or need to protect a legitimate interest.
When a natural or legal person processes part of your personal data on our behalf, we ensure that they undertake to follow our instructions and implement measures protecting confidentiality. We do not transfer and do not intend to transfer your personal data to companies, organisations or individuals in third countries.
Personal data security
The Controller applies the technical and organisational measures needed to secure your personal data and protect it against accidental or unlawful destruction, alteration, disclosure or unauthorised access, in accordance with industry standards. Continually improving information-security measures is one of our priorities.
What rights do you have and how can you use them?
Under GDPR, you have the following rights, described in detail in Articles 12–23:
- - information and access (you may request information about how your personal data is processed, and we will respond within 30 days);
- - rectification (the right to correct inaccurate data or complete incomplete data);
- - erasure (the “right to be forgotten”);
- - restriction of processing (you may submit a reasoned request to restrict processing);
- - data portability (you may request your personal data in a structured, commonly used and machine-readable format);
- - objection to processing (including the right to object at any time to processing for direct marketing);
- - the right not to be subject to automated individual decision-making.
You may apply to the courts or the Romanian National Supervisory Authority for Personal Data Processing. You may exercise these rights at any time by emailing hello@mucca.ro or writing to 1 Mirea Mioara Luza Alley, District 4, Bucharest.
This first edition of the document applies from 25 May 2018. We reserve the right to make any necessary additions or amendments.
Contact
If you have questions or requests concerning the matters described here, email hello@mucca.ro or write to 209 Olteniței Road, Popești-Leordeni, Ilfov.