Privacy policy

WOODCRAFT S.R.L. takes responsibility for protecting your personal data and complies with applicable law. This policy explains how we process and protect personal data and why we collect it.

As a data processor under the Regulation, we process only the data you specify, for the period and purposes you set as the controller. Your data remains your property. We store it securely online on servers in Romania and physically in safes or rooms accessible only to designated WOODCRAFT SRL employees who are bound by confidentiality agreements. These safes and rooms are accessible during business hours and locked when the company is closed. Our data systems are located and secured within Europe. Only our technical and administrative staff have access to those systems and the documents containing personal data.

1. WOODCRAFT SRL is the controller of your personal data. You can contact us at office@woodcraft.ro.
2. Starting 25 May 2018, you can contact your personal data protection officer at the following e-mail address: office@woodcraft.ro.
3. We process your personal data to supply the products and services ordered by WOODCRAFT SRL customers. We will process personal data in a manner consistent with EU Regulation 2016/679. The legal basis is the conclusion and performance of the contract in the case of order processing (according to Article 6 (1) (b) of the GDPR).
4. Personal data processed include the customer’s surname, first name, address, telephone number, e-mail address, personal identification number, date of birth, and details of the orders sent to the company.
5. Other entities appointed by WOODCRAFT SRL may process your personal data on its behalf. WOODCRAFT SRL remains the controller of your personal data. Data may be shared with public authorities, external consultants and service providers in Romania or abroad, including outside the European Union or the European Economic Area. We ensure appropriate safeguards for data protection, such as contractual confidentiality and data protection clauses.
6. Your personal data will be retained and processed for a period of time to achieve the purpose of the processing.
7. For order processing, the length of the processing will vary according to the contractual period agreed by the parties. To meet certain legal obligations (such as bookkeeping and tax reporting, archiving, etc.), the processing time also varies according to the applicable legal obligation. Starting 25 May 2018, information on the duration of your data processing can be obtained at the following e-mail address: office@woodcraft.ro.
8. Subject to the conditions set out in the GDPR, you may request access to your personal data, rectification, erasure or restriction of processing. You also have rights to object and to data portability where applicable.
9. Unless the data is required to comply with legal obligations, the transfer of personal data is voluntary, but refusal to provide it (such as your surname, first name and address) will prevent you from placing an order on our website or at our premises.
10. You have the right to data portability. Under certain conditions, you can receive the personal data you have provided to us in a machine-readable format or ask for it to be transmitted to another controller.
11. You also have the right to withdraw at any time your consent to the processing of your personal data. This will not affect the legality of your personal data processing before you withdraw your consent.
12. You have the right to file a complaint with the competent supervisory authority if you believe that your rights have been violated.

Your rights under the GDPR

Therefore, as a customer of WOODCRAFT (WOODCRAFT SRL), you have the following rights:

1. Right to information – You may request information about the processing of your personal data.
2. Right to rectification – You can correct inaccurate personal data or complete it.
3. The right to delete the data (the “right to be forgotten”) – you can obtain the deletion of the data, if the processing was not legal or in other cases provided by law.
4. Right to Restrict Processing – You may request restriction of processing if you dispute the accuracy of the data, as well as in other cases provided by law.
5. Right to object – You can oppose in particular data processing that is based on our legitimate interest.
6. Right to data portability – You may receive, under certain conditions, the personal data you have provided us in a format that can be read automatically, or you may request that the data be transmitted to another controller.
7. Right to file a complaint – You can complain about the way your personal data are processed to the National Supervisory Authority for Personal Data Processing.
8. Right to withdraw your consent – In cases where processing is based on your consent, it may be withdrawn at any time. Withdrawal of consent will only have effect for the future, but processing prior to withdrawal remains valid.
9. 
   Automated decisions – Under the conditions of the GDPR, you have the right not to be subject to solely automated decisions, including profiling, that have legal or similarly significant effects. Applicable safeguards may include human intervention, expressing your views and contesting the decision.

You can exercise these rights, either individually or collectively, by simply sending a request to our e-mail address office@woodcraft.ro.