Confidentiality Policy

Through this privacy policy, Take me to Romania wishes to inform you about your personal data that we collect and use (in other words, that we process and use) during your visit to the site. of our web sites. Personal data refers to any information regarding a specific or identifiable natural person, which you communicate to us or that we receive or collect, such as: name and contact details (eg address, telephone number, address e-mail), information about your requests and the professional relationship you have with us, as well as any participation with us, information about the time, purpose and, where applicable, where you use our websites. and other electronic services. We collect and use personal data only to the extent permitted by law or if you have given us prior consent in this regard.

Take me to Romania is registered with ANSPDCP as a personal data operator. We process your personal data exclusively within the legal provisions regarding the protection of personal data in Romania. These are the provisions of Law no. 677/2001 for the protection of persons regarding the processing of personal data and the free movement of these data as well as the provisions of Law no. 506/2004 regarding the processing of personal data and the protection of privacy in the electronic communications sector.

Our employees and representatives have the obligation to comply with the provisions regarding data protection according to the legal norms.

In connection with all requests regarding your data, data protection within the company Take me to Romania or any question / complaint can be addressed to the email address: gdpr@1616.ro

booking and marketing of products online

advertising, marketing and advertising

site operation (account creation)

You have the obligation to provide us with the data to the extent that the data are necessary for the fulfillment of online booking / purchase orders.

Your eventual refusal will make it difficult to collaborate on the online trading side.

In the following we inform you about the way, volume and purposes of the processing and use of personal data.

You may change at any time any information held about you.

The process of modifying or deleting your data will be done online, from your account. We are in the process of implementation, until then, please contact us at the email address: gdpr@1616.ro and the manager of our company will solve the request as soon as possible.

What rights do you have and how can you exercise them?

According to the law 677/2001 you have the right of access, intervention on the data and the right not to be subjected to an individual decision, as well as to the justice.

At the same time, you have the right to object to the processing of personal data concerning you and to request the deletion of personal data collected by us.

(1) If the personal data are obtained directly from the data subject, the operator is obliged to provide the data subject with at least the following information, unless this person already owns the information:

a) the identity of the operator and his representative, if applicable;

b) the purpose for which the data processing is done

c) additional information, such as: the recipients or categories of recipients of the data; if the provision of all the requested data is obligatory and the consequences of refusing to provide them; the existence of the rights provided by this law for the data subject, in particular the right of access, data intervention and opposition, as well as the conditions under which they can be exercised;

d) any other information the provision of which is required by the supervisor’s authority, taking into account the specificity of the processing.

(2) If the data are not obtained directly from the data subject, the operator is obliged, at the time of data collection or, if it is intended to be disclosed to third parties, at the latest until the time of first disclosure, to provide the data subject with the a little the following information, unless the data subject already owns the respective information:

a) the identity of the operator and his representative, if applicable;

b) the purpose for which the data processing is done;

c) additional information, such as: the categories of data concerned, the recipients or categories of recipients of the data, the existence of the rights provided by this law for the data subject, in particular the right of access, intervention on the data and opposition, as well as the conditions under which they can be exercised;

d) any other information the supply of which is required by the supervisory authority, taking into account the specificity of the processing.

(3) The provisions of para. (2) does not apply when the data processing is carried out exclusively for journalistic, literary or artistic purposes, if their application would give indications on the sources of information.

(4) The provisions of para. (2) does not apply if the data processing is done for statistical, historical or scientific research purposes, or in any other situations where the provision of such information proves impossible or would involve an effort disproportionate to the legitimate interest that would it could be harmed, as well as in cases where the recording or disclosure of data is expressly provided by law.

The right of access to data

(1) Every data subject has the right to obtain from the operator, upon request and free of charge for one request per year, confirmation of the fact that the data concerning him are or are not processed by him. The operator is obliged, in case he processes personal data concerning the applicant, to communicate to him, together with the confirmation, at least the following:

a) information regarding the purposes of the processing, the categories of data envisaged and the recipients or categories of recipients to whom the data are disclosed;

b) the communication in an intelligible form of the data that is the object of the processing, as well as of any available information regarding the origin of the data;

c) information on the principles of functioning of the mechanism by which any automatic processing of the data concerning the respective person is performed;

d) information on the existence of the right of intervention on the data and the right of opposition, as well as the conditions under which they can be exercised;

e) information on the possibility to consult the register of records of the processing of personal data, provided in art. 24, to submit a complaint to the authority

of supervision, as well as to the court to appeal the decisions of the operator, in accordance with the provisions of this law.

(2) The data subject may request from the operator the information provided in par. (1), by a request made in written, dated and signed form. In the application the applicant can indicate whether he wants the information to be communicated to a specific address, which may also be by e-mail, or through a correspondence service that will ensure that the delivery will be made to him personally only.

(3) The operator is obliged to communicate the requested information, within 15 days from the date of receipt of the request, in compliance with the possible options of the applicant expressed according to par. (2).

(4) In the case of personal data related to the state of health, the request provided in par. (2) can be introduced by the data subject either directly or through a medical professional who will indicate in the application the person on whose behalf it is introduced. At the request of the operator or the data subject the communication provided in par. (3) can be done through a medical framework designated by the data subject.

(5) If the personal data related to the health status are processed for scientific research purposes, if there is not, at least apparently, the risk of infringing the rights of the data subject and if the data are not used to collect decisions or measures towards a certain person, the communication provided in par. (3) it may also be done within a period greater than that provided for in that paragraph,

insofar as this could affect the good progress or results of the research, and not later than the time when the research is completed. In this case, the data subject must have given his / her express and unequivocal consent for the data to be processed for the purpose of scientific research, as well as for the possible delay of the communication provided in par. (3) for this reason.

(6) The provisions of para. (2) does not apply when the data processing is carried out exclusively for journalistic, literary or artistic purposes, if their application would give indications on the sources of information.

(1) Every data subject has the right to obtain from the operator, upon request and free of charge:

a) as the case may be, the rectification, updating, blocking or deletion of the data whose processing is not in conformity with the present law, especially of the incomplete or inaccurate data;

b) as the case may be, the transformation into anonymous data of the data whose processing is not in accordance with the present law;

c) the notification to the third parties to whom the data of any operation performed according to letter was disclosed a) or b), if this notification does not prove impossible or does not imply one

effort disproportionate to the legitimate interest that could be harmed.

(2) For the exercise of the right provided in par. (1) the data subject shall submit to the operator a request made in written and dated written form. In the application the applicant can indicate whether he wants the information to be communicated to a specific address, which can also be by e-mail, or through a correspondence service that will ensure that the delivery will be made to him personally only.

(3) The operator is obliged to communicate the measures taken pursuant to par. (1), as well as, if applicable, the name of the third party to whom the personal data relating to the data subject were disclosed, within 15 days from the date of receipt of the request, in compliance with the possible option of the applicant expressed according to para. (2).

(1) The data subject has the right to oppose at any time, for well-founded and legitimate reasons related to his particular situation, as data that aim to be processed, unless otherwise provided by law. In case of justified opposition, the processing can no longer address the data in question.

(2) The data subject has the right to oppose at any time, free of charge and without justification, that the data aimed at it are processed for the purpose of direct marketing, on behalf of the operator or of a third party, or be disclosed to some third parties for such purpose.

(3) In order to exercise the rights provided in par. (1) and (2) the data subject will submit to the operator a request made in written, dated and signed form. In the application the applicant can indicate whether he wants the information to be communicated to a specific address, which may also be by e-mail, or through a correspondence service that will ensure that the delivery will be made to him personally only.

(4) The operator is obliged to communicate to the data subject the measures taken pursuant to par. (1) or (2), as well as, if applicable, the name of the third party to whom the personal data relating to the data subject were disclosed, within 15 days from the date of receipt of the request, in compliance with the possible options of the applicant expressed according to par. (3).

(1) The provisions of art. 12, 13, of art. 14 paragraph (3) and of art. 15 does not apply in the case of the activities provided for in art. 2 paragraph (5), if by their application the efficiency of the action or the objective pursued in fulfilling the legal powers of the public authority is prejudiced.

(2) The provisions of para. (1) are strictly applicable for the period necessary to achieve the objective pursued by carrying out the activities mentioned in art. 2 paragraph (5).

(3) After ceasing the situation that justifies the application of par. (1) and (2) the operators who carry out the activities provided for in art. 2 paragraph (5) will take the necessary measures to ensure respect for the rights of the data subjects.

(4) The public authorities keep records of such cases and regularly inform the supervisory authority on how to solve them.

(1) Everyone has the right to request and obtain:

a) the withdrawal or annulment of any decision that produces legal effects in regard to it, adopted exclusively on the basis of a processing of personal data, carried out by automatic means, designed to evaluate some aspects of his personality, such as professional competence, credibility, behavior or other such aspects;

b) the reassessment of any other decision taken with respect to it, which significantly affects it, if the decision was adopted exclusively on the basis of a data processing meeting the conditions set out in letter. a).

(2) Respecting the other guarantees provided by this law, a person may be subject to a decision of the nature referred to in par. (1), only in the following situations:

a) the decision is taken during the conclusion or execution of a contract, provided that the request for conclusion or execution of the contract, introduced by the data subject, has been satisfied or that some appropriate measures, such as the possibility to support his point of view , to guarantee the defense of their legitimate interests;

b) the decision is authorized by a law specifying the measures that guarantee the defense of the legitimate interest of the data subject.

The right to seek justice

(1) Without prejudice to the possibility of addressing a complaint to the supervisory authority, the data subjects have the right to address the justice for the defense of any rights guaranteed by this law, which have been violated.

(2) Any person who has suffered an injury as a result of the processing of personal data, carried out illegally, may address the competent court for its repair.

(3) The competent court is the one in whose territorial area the applicant resides. The court application is exempt from the stamp duty.

Contact

To exercise the above mentioned rights of revocation, information, deletion or correction of your data, please contact us by written request by e-mail at gdpr@1616.ro.

1.1 Storage and processing of non-personal data (anonymous) for internal purposes related to the system and for statistical purposes

When accessing our web page your web browser automatically transmits data (eg date and time of access, URL of the sending web page, file accessed, amount of data transmitted, browser type and version, operating system,) to our server, based on some technical settings. These data are collected and used exclusively for statistical purposes and for analysis purposes, e.g. to improve the offer.

Certain traffic data (such as IP addresses or other identifiers of the devices with which you access our site) may in certain circumstances be personal data and as such we will treat them as such.

1.2 Storage and processing of personal data

1.2.1 The data for the execution of the contract.

Personal data (eg address, first name, first name, title, date of birth, street, no., Postcode, town, rest of address, country, telephone number and e-mail address) are stored and processed. by us only if you enter this data in a section on our website or send it to us by email. The stored personal data will be used for the purpose of carrying out the contracts and processing your requests. After the completion of the contract and the full payment of the purchase price, your data are saved taking into account the retention terms according to the tax and commercial law, following as after the expiration of these deadlines for the respective data to be deleted. This rule is not valid unless you have expressly consented to the further use of your data.

1.2.2 Data for the newsletter service.

When registering for our newsletter service, your data is used by Take me to Romania for promotional and marketing purposes. Use ceases as soon as you cancel the newsletter service. You can cancel the newsletter service at any time.

1.2.3 Customer account data.

When opening a customer account using the “Customer registration” function, your data will be permanently saved in the Take me to Romania customer database. You can request the deletion of your customer data and your customer account at any time. Details in this regard can be found above in point 2.

If at the opening of your client account you have declared the agreement for the receipt of promotional information, the company Take me to Romania will use the data indicated by you for promotional and marketing purposes. This agreement is voluntary and can be revoked at any time, with the revocation having effect for the future.

1.2.4 Geographic location

By means of the geographical location using the IP address it is technically possible to estimate the location of the Internet user. In order to be able to directly view the offers and articles of the Take me to Romania store located at the shortest distance from your home, your IP address is stored and used for the geographical location. After the end of the current session the IP address is not stored at Take me to Romania for the purpose of geographical location.

1.2.5 Use of cookies

Cookies are small text files that are saved by your web browser and serve to make our web page altogether easier to use, more efficient and more secure. Cookies do not harm your computer and do not contain viruses. You can prevent the installation of cookies by properly setting your browser. Our online page contains cookies. Cookies in particular save the settings you choose. Also, cookies are used by us for statistical purposes. We draw your attention to the fact that by preventing the installation of cookies, you may not be able to use all the functions of our website.

We use cookies to personalize content and ads, provide social media functions, and analyze traffic. We also provide social media, advertising and analytics partners with information on how you use our site. They may combine them with other information provided by you or collected through the use of their services.

For information or requests based on the rights of the data subjects according to the GDPR, you can contact the Data Protection Officer (e-mail) at gdpr@1616.ro or you can access the page where you can express your consent regarding each cookie file.

1.2.2.1 The cookies will be divided into categories:

Internal cookies

A visit to this site may place cookies for the purposes of:

Essential cookies. Necessary for the functioning of the site. We can use essential cookies to authenticate users, to prevent fraudulent use of user accounts or to provide site-specific features.

Cookies for measuring traffic. It allows us to recognize and count the number of visitors and to see how visitors go to the site when using it. This helps us to improve the way the site works.

Functionality cookies. It is used to recognize you when you return to the Site. This allows us to customize our content for you, greet you by name, and remind you of your preferences (for example, choosing your language or region).

Targeting cookie. Record your visit to the site, the pages you visited and the links you clicked. We will use this information to make the site even more relevant to your interests. There is also the possibility to share this information with third parties, in order to make the site more relevant to you.

To see a list of cookies used by our site, see the Cookies table.

Third-party cookies

In addition to our own cookies, we may use other third-party cookies to report website usage statistics and to improve marketing efforts.

Tracking cookies / Tracking cookies. I follow the behavior on the site and connect it with other values to allow a better understanding of the usage habits.

Optimization cookies / Optimization cookies. Allow real-time tracking of user conversion from various marketing channels to evaluate their effectiveness.

Cookies for partners. Provide our partners with conversion metrics to optimize their paid marketing efforts. To see a list of third-party cookies used by our site, see the Cookies table.

You have certain rights in connection with your personal information. You can access your personal information and confirm that it remains accurate and up-to-date, or choose whether or not you would like to receive material from us or some of our partners.

If you would like further information about your rights or wish to exercise any of the above rights, you may also contact us at gdpr@1616.ro.

The exercise of your rights mentioned above is free of charge. If you live or are in the EEA, you have the right to request:

to give you access to any information regarding our personal identity;

prevent the processing of your personal information for direct marketing purposes;

update any personally identifiable information that is outdated or incorrect;

delete all personally identifiable information we hold about you;

restrict how we process your personally identifiable information.

Provide your personally identifiable information to a third party service provider. or

to provide you with a copy of any Personal Identification Information we have about you.

We try to respond to each email promptly, where possible, and to provide our response within the time limit set by the legislation in force. However, please note that there will be residual information that will remain in our databases, access logs and other records that may or may not contain personal information. Also, please note that certain personally identifiable information may be exempt from such requests under certain circumstances, which may include whether we must continue processing your personal information in order to comply with a legal obligation.

When you send us an email with a request, we may ask you to provide us with the information necessary to confirm your identity.

1. Transmission for the purpose of order processing

The personal data stored by us are transmitted further for the purpose of processing the order to the transport company responsible for the delivery, insofar as this is necessary for the delivery of the product. In the case of online payment, personal data may be sent to the payment processor, as this is necessary for payment

2. Transmission to public institutions, e.g. in the case of a court order

At the disposal of the competent institutions in special cases we must provide information on personal data), insofar as this is necessary for the purpose of criminal investigation, public security, for the fulfillment of the legal tasks of the intelligence services or the military counter-information service or for the purpose of achieving the intellectual property rights.

3. Social networking plugins

Our website uses “plugins” from social media operators (eg www.facebook.com). All social media plugins on our website are clearly marked. When accessing our web pages that contain a social network plugin your browser will make a direct connection to the social network operator’s server. The content of the plugin will be transmitted by the accessed server of the social network operator directly to your browser and will be integrated by it in the web page. By integrating the plugin, the social network operator receives the information that you have accessed our page. If during the visit of our website a valid connection session is being carried out on a social network, the visit may be assigned to the respective user account. If you interact with the plugin, that information is transmitted to the social network operator and saved there. If you want to prevent the collection of your data by the social network operator through

through our website, you must log out (that is, log out) from the service of the social network operator before visiting our website.

You can also count from our site the transmission of data to each type of plugin, from the page Usage policy

Information on the purpose and volume of data storage as well as on the subsequent processing, use and rights you benefit from, as well as the possibilities of setting can be found in the details of the social network operator regarding data protection, which are not related to this statement on protection. data. For the “facebook” operator, find these directives at the address

http://www.facebook.com/policy.php.

Take me to Romania does not assume responsibility for the data protection directives and procedures of the partner websites.

4. Google Analytics web analytics service

Our website uses the Google Analytics web analytics service of Google Inc. for statistical purposes. This web analytics service uses so-called “cookies” (see above in the use of cookies). Only anonymous information regarding the use of our website is generated through cookies. This information is transmitted to the Google Inc. server. into

an EU member state or outside the EU (eg in the US) and are saved there. Google Inc offers an adequate data protection regime in the US by participating in the Privacy Shield project – see details at

Google Inc. will eventually transmit the information to third parties, to the extent required by law, or to the extent that third parties process this data at the request of Google Inc. Neither we nor Google Inc. we will not link your IP address with other data that is saved by Google Inc. or by us.

Take me to Romania does not assume responsibility for the data protection directives and procedures of the partner websites.

5. Google ADSENSE Online Advertising Service

Our website uses Google Inc.’s “Google AdSense” online advertising service. for the purpose of serving online advertisements. This advertising delivery service on our website uses so-called “cookies” (see above in the use of cookies). By cookies only information is generated regarding the use of our website. This information is transmitted to the Google Inc. server. in an EU Member State or outside the EU (eg in the US) and are saved there. Google Inc. offers an adequate data protection regime in the US by participating in the Privacy Shield project – see details at https://www.privacyshield.gov/participant?id=a2zt0000000GnaNAAS

Google Inc. will eventually transmit the information to third parties, to the extent required by law, or to the extent that third parties process this data at the request of Google Inc.

Take me to Romania does not assume responsibility for the data protection directives and procedures of the partner websites. To manage whether or not you want to send cookies to Google AdSense you can access the page where you can express your consent regarding each cookie file.

We mention that blocking cookies on Google may have different implications, which have no connection to our site (for example when you click on a

ad / ad from search engine www.google.ro to get to our site, Google.ro probably won’t allow site loading)

Refusing or deactivating cookies does not mean that you will no longer receive online advertising – only that it will no longer be able to take into account your preferences and interests, highlighted by your browsing behavior.

6. Google Double Click Online Advertising Service

Our website uses Google Inc.’s online advertising service “Google DoubleClick”. for the purpose of serving online advertisements. This advertising delivery service on our website uses so-called “cookies” (see above in the use of cookies). By cookies only information is generated regarding the use of our website. This information is

transmitted to Google Inc.’s server in an EU Member State or outside the EU (eg in the US) and are saved there. Google Inc. offers an adequate data protection regime in the US by participating in the Privacy Shield project – see details at https://www.privacyshield.gov/participant?id=a2zt0000000GnaNAAS

Google Inc. will eventually transmit the information to third parties, to the extent required by law, or to the extent that third parties process this data at the request of Google Inc.

Take me to Romania does not assume responsibility for the data protection directives and procedures of the partner websites.

To manage whether or not you want to send cookies to Google DoubleClick you can access the page where you can express your consent regarding each cookie file.

We mention that blocking cookies on Google may have different implications, which have no connection to our site (for example, when you click on an ad / advertisement in the search engine www.google.ro to reach the site our, probably Google.ro will not allow loading the site)

Refusing or deactivating cookies does not mean that you will no longer receive online advertising – only that it will no longer be able to take into account your preferences and interests, highlighted by your browsing behavior.

7. Gemius AdOcean Online Advertising Service

Our website uses the online advertising service “Gemius” of Gemius company. for the purpose of serving online advertisements. This advertising delivery service on our website uses so-called “cookies” (see above in the use of cookies). By cookies only information is generated regarding the use of our website. This information is transmitted to the server

of Gemius Inc. in an EU member state and are saved there. Gemius will eventually transmit the information to third parties, to the extent that this is provided by law or to the extent that third parties process these data at the request of Gemius company.

Take me to Romania does not assume responsibility for the data protection directives and procedures of the partner websites.

To manage whether or not you want to send cookies to Gemius you can access the page where you can express your consent regarding each cookie file.

Refusing or deactivating cookies does not mean that you will no longer receive online advertising – only that it will no longer be able to take into account your preferences and interests, highlighted by your browsing behavior.

8. Zontera Online Advertising Service

Our website uses the online advertising service “Zontera” of Zontera. for the purpose of serving online advertisements. This advertising delivery service on our website uses so-called “cookies” (see above in the use of cookies). By cookies only information is generated regarding the use of our website. This information is transmitted to the server

Zontera company in an EU member state and are saved there. Zontera will eventually transmit the information to third parties, to the extent that this is provided by law or to the extent that third parties process these data at the request of Zontera.

Take me to Romania does not assume responsibility for the data protection directives and procedures of the partner websites.

To manage whether or not you want to send cookies to Zontera you can access the page) where you can express your consent regarding each cookie file.

Refusing or deactivating cookies does not mean that you will no longer receive online advertising – only that it will no longer be able to take into account your preferences and interests, highlighted by your browsing behavior.

Our website and our other information systems are protected by technical and organizational measures against the access, modification or dissemination of your data by unauthorized persons as well as against the loss or destruction of your data.

It is necessary to permanently treat your access data with confidentiality and to close the browser window when you have finished visiting our website. For the transfer of personal data we use technical encryption procedures. You can identify encrypted data transmission (https) by displaying a closing symbol, e.g. displaying a key or lock symbol in the status bar of your browser.

Questions, Suggestions and Complaints?

Do you have questions about data protection, cookie usage policy or our website? No problem, we help you with pleasure.