Processing of personal data

1. Introduction

Thank you for your interest in our company, products and/or services. When you enter into a relationship of any kind with us, you entrust us with your information. This information presented in this document (hereinafter referred to as the "Privacy Policy" ) is important. We recommend that you read them carefully.

The purpose of this Privacy Policy is to explain to you what data we process (collect, use, share), why we process it, how we process it, your rights under the GDPR and how you can exercise these rights. In collecting this information, we act as a controller and are required by law to provide this information to you.

The protection and confidentiality of personal data is very important to us. Being fully aware that your personal information belongs to you, we do our best to store it securely and process it carefully. We do not provide information to third parties without informing you as required by law. We do not make exclusively automated decisions with a significant impact on you.

By visiting the site, purchasing our products and/or services, or interacting with us by any means and/or through any communication channel (email, phone, social media, etc.), you agree to this Privacy Policy privacy and also consent to the use of your data for advertising or marketing purposes, as described below in the Marketing and Advertising sections. If you do not agree with what is described in this Privacy Policy, please do not use our services or products.

2. Other Services

This Privacy Policy does not cover the applications and websites of other third parties that you may reach by accessing links on our website. This is beyond our control. We encourage you to review the Privacy Policy on any site and/or application before providing any personal data.

3. Who are we?

Amel International Group SRL, with Address: Ceptura, Ceptura de Jos, County: Prahova, registered at the Trade Register under no. J29/1939/2013, fiscal code RO32576762, is responsible for processing your personal data that we collect directly from you or from other sources. According to the law, our company is a personal data controller. In order for your data to be processed securely, we have made every effort to implement reasonable and appropriate technical and organizational measures to protect your personal information.

4. Who are you?

According to the legislation, you, the individual beneficiary of our products and/or services, the representative or contact person of a company, the website visitor or the person in any kind of relationship with our company, are a " data subject " , i.e. an identified or identifiable natural person. In order to be completely transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate information, access Sections 7, 10 and 11 of this document.

5. Our Commitment

The protection of your personal information is very important to us. That is why we are committed to complying with European and national legislation on the protection of personal data, in particular Regulation (EU) 679/2016, also known as GDPR, and the following principles:

• Legality, fairness and transparency

We process your data legally and fairly. We are always transparent about the information we use and you are properly informed.

• Control is yours

To the extent permitted by law, we provide you with the opportunity to review, modify, delete the personal data you have shared with us, and exercise your other rights. For more information, see Sections 7, 10 and 11 of this document.

• Data Integrity and Purpose Limitation

We use the data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that personal data is accurate, complete and up-to-date.

• Security

We have implemented reasonable security and encryption measures to best protect your personal information. However, keep in mind that no website, app, or internet connection is completely secure.

6. Changes

We may change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notification, which we will provide by posting on the Site and/or email notification.

7.Questions and requests

If you have any questions or concerns about the processing of your data or wish to exercise your legal rights in relation to the data we hold, or if you have concerns about how we handle any privacy issue, you can write to us at email: contact@amel.ro

8. Your Information

8.1. What kind of information do we collect about you?

When you browse our website, when you send us a request by e-mail or contact us for any other purpose and through any other communication channel, you may provide us with the following personal data, which we collect directly from you or from other sources such as:

• Name and surname
• Age
• email address
• Phone number
• The position you have within the company
• Access password to our website

We collect most information directly from you (for example, by completing a form on the website). Most of the information is as described above, but there may be situations where we collect data from third parties ( ie partners, advertising platforms), such as, for example, information on purchases and interests.

In addition to the information indicated above, we may also collect the following information, depending on the circumstances:

• How you interact with our site(s) or advertisements (for example, information about how and when you access our site or what device you use to access the site);
• Information provided when you complete forms or surveys;
• The content of messages sent via messaging and e-mail systems;
• Interactions between you and us on social media (for example, likes, shares, comments);
• Information we collect about you from other group companies or third parties who have obtained your consent or otherwise have a legal right to share this information with us (including publishing or advertising partners/platforms and data aggregators who have obtained that right).

When you make purchases, certain payment information (card data) will be collected, but will be stored by our processing partners in a way that we cannot read or access that data. We will only be informed if the purchase has been made successfully.

We may collect data through cookies or other similar technologies, such as:

• IP address
• Internet browser
• location
• The web pages you visit on our site

8.2. Why do we collect this information?

We collect personal information for the following purposes:

• In order to enter into or perform a contract between you and us;
• To respond to your questions and requests and provide you with customer support service;
• For marketing purposes, but only where we have your prior consent or where there is a legal exception to obtaining consent;
• To provide and improve the services and products we offer;
• To diagnose or fix technical problems;
• To defend against cyber attacks;
• To create and/or maintain accounts;
• To comply with legislation, such as compliance with tax legislation which requires us to keep accounting records for a period of 10 years;
• To establish or claim a right in court;
• For analytical and research purposes;
• For running promotions and contests;
• To prevent crime, cheating or fraud;

8.3. What is the legal basis for processing?

We may use the following legal bases, depending on the specific case:

• Consent for the processing of personal data;

However, please note that if you are a customer of ours, we may send promotional messages (direct marketing) regarding similar goods and services without the need for consent pursuant to Art. 12 para. (3) from Law no. 506/20014.

However, in all cases, you can object to direct marketing and/or withdraw your consent at any time by following the unsubscribe instructions in each email or by sending a written request to the email address contact@ amel.ro.

• The processing is necessary for the conclusion or performance of a contract between you and us;  
• Processing is necessary for the purposes of our or another party's legitimate interests, unless your interests, rights or freedoms prevail.

In the situation where we use legitimate interest, we perform a legitimate interest analysis (balancing test) through which we can balance our interest and your interests. In the situation where our interests prevail, we will use legitimate interest. In the situation where your interests prevail, we will not use the legitimate interest, and to the extent that we fail to identify another correct legal basis, we will not carry out that processing activity.  

• The processing is necessary in order to fulfill some legal obligations (such as compliance with tax legislation that obliges us to keep accounting documents for a period of 10 years or providing certain information to authorized public bodies and institutions);

• In some situations, processing may be necessary to protect the vital interests of you or another natural person;

Please note that obtaining consent is not mandatory and we will only obtain your consent where we have failed to use another legal basis.

8.4. How long do we store data?

We store your personal data only for the period necessary to fulfill the purposes, but no longer than 5 years after the termination of the contract or the last interaction with us.

After the end of the period, personal data will be destroyed or deleted from computer systems or transformed into anonymous data to be used for scientific, historical or statistical research purposes.

Note that in certain expressly regulated situations, we store data for the period required by law.

8.5. How do we share your information with others?

We may disclose your data, subject to applicable law, to business partners or other third parties. We always make reasonable efforts to ensure that these third parties have adequate protection and security measures in place. We have contractual clauses with these third parties so that your data is protected. In these situations, we will ensure that any transfer is legitimate, based on your consent or other legal basis.

For example, we may provide your data to other companies, such as IT or telecommunications service providers, accounting, legal services and other third parties with whom we have a contractual relationship. These third parties are selected with particular care so that your data is processed only for the purposes we indicate.

We may also share your data with business partners as a result of a joint effort to provide a product or service.

Although unlikely, we may sell the business or part of the business in the future, which will include the transfer of your data.

We may also pass the data on to other parties with your consent or according to your instructions, such as where you exercise a portability request.

We will stinkto also provide your personal information to the prosecutor's office, the police, the courts and other competent state bodies, based on and within the limits of the legal provisions and as a result of expressly formulated requests.

We will ensure, within reasonable limits, that your data does not leave the European Economic Area, but to the extent that we transfer data to countries outside the EEA, we will in all cases ensure that the transfers are legitimate, based on consent your explicit or other legal basis.

9. Marketing

To the extent that we have obtained your prior consent or you are already a customer of the Company, we may use direct marketing and targeted advertising technologies using information collected about you regarding interests, preferences, purchases, age, location, etc. For example, we may send emails, display advertisements within our site or on social media, or place advertisements on third-party websites, applications, or other Internet-connected devices.

9.1. What kind of data do we collect for marketing?

In order to conduct direct marketing or targeted advertising activities, we may use the following information:

• Information collected through cookies and other similar technologies (location, device, browser, age, etc.);
• Your purchases, how you interacted with our goods and services and the feedback we receive from you;
• Age, country, region, gender;
• Other information obtained from our third-party marketing partners, information they obtained with your consent.

9.2. Marketing partners

Our marketing partners, such as Facebook, Google and/or other agencies, help us deliver marketing to you based on information they collect directly from you and with your consent. In some cases, we even share new information we've collected from you We ensure, in all cases, that these transfers are legal as explained in point 8.5.

Our partners may place advertisements about our services and products based on data previously collected from you (interests, preferences) on other sites and/or services. Our marketing partners may also use information collected about you to improve the Services and/or algorithms (including algorithms based on artificial intelligence).

This privacy policy does not contain information about how our partners process your data, but we encourage you to read the privacy policy of marketing partners for more information. You can request this list of our marketing partners by email, along with links to the Privacy Policy.

9.3. How can you opt out of direct marketing?

You can object to direct marketing and/or withdraw your consent at any time by following the unsubscribe instructions in each email (" unsubscribe " or "unsubscribe" ) or by sending a request to this effect to the email address contact@ amel.ro

To disable interest-based advertising, please refer to our Cookie Policy.

10. What are your rights?

Your rights under the GDPR Regulation are as follows:

• Right to withdraw consent

You can withdraw your consent to the processing of your data at any time by sending a request to this effect to the e-mail address contact@amel.ro. However, please note that to the extent that we have identified another legal basis for processing your data, we will continue to process your data based on that legal basis. We are legally able to use one or more grounds for processing your data.

• The right to be informed about the processing of your data
• Right of access to data

You have the right to obtain from us a confirmation that personal data concerning you is being processed or not and, if so, access to the respective data and to the information provided by art. 15 para. (1) of the GDPR.

• The right to rectify inaccurate or incomplete data

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you.

• The right to erasure (" the right to be forgotten ")

In the situations provided for in art. 17 of the GDPR, you have the right to request and obtain the deletion of personal data.

• The right to restriction of processing

In the cases provided for in art. 18 of the GDPR , you have the right to request and obtain the restriction of processing.

• The right to transfer the data we hold about you to another operator ("the right to portability")

In the cases provided for in art. 20 of the GDPR , you have the right to request and obtain data portability.

• The right to object to data processing

In the cases provided for in art. 21 of the GDPR , you have the right to object to data processing.

• The right not to be subject to a decision based solely on automated processing, including the creation of profiles with legal or similar significant effects on you.
• The right to go to court to defend your rights and interests.
• The right to a complaint before a Supervisory Authority

Please note that:

• You may withdraw your consent to direct marketing at any time by following the unsubscribe instructions in each email/text or other electronic message.
• If you want to exercise your rights, you can do so by sending a written, signed and dated request to the e-mail address: contact@amel.ro.
• The rights listed above are not absolute. There are exceptions, therefore each request received will be analyzed in order to decide whether it is justified or not. To the extent that the request is justified, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to file a complaint with the Supervisory Authority and to go to court.
• We will try to respond to your request within one month. However, the deadline can be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility of identifying you within a useful period.
• If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable us to identify you, we are under no obligation to comply with the request.

11. Questions, requests and exercise of rights

If you have any questions or concerns about the processing of your information or wish to exercise your legal rights or have any other concern about confidentiality, you can write to us at the e-mail address contact@amel.ro.

(If applicable) Also, the contact details of our Data Protection Officer are: