In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as well as the legal provisions in force in the field of personal data protection, we hereby inform you about the content and manner of processing your personal data.

 

The Privacy Policy document regarding the Protection of Personal Data is presented and described in the following sections:

  1. Who we are. Contact details
  2. What is personal data
  3. What personal data do we process
  4. Methods of data collection and processing
  5. Legal basis for data processing
  6. The purpose for which we process the data
  7. When and to whom we may disclose the collected data
  8. International data transfer
  9. Time of retention of personal data
  10. Security of collected data
  11. Your rights and how to exercise these rights
  12. Terms and concepts
  13. Useful information

 

  1. WHO WE ARE

TOTAL MEAT SOLUTIONS S.R.L. registered with the Trade Register under no. J2009000553198, tax code RO26273632.

Headquarters address

Romania, Joseni commune, Borzont village, Bucin road no. 39, Harghita county

Working point

Romania, Joseni commune, Borzont village, Bucin road no. 220, Harghita county

Telephone

+40 752 206 817

E-mail

office@marbleangus.com

  1. WHAT IS PERSONAL DATA

Personal data is information on the basis of which a natural person can be identified or is identifiable. The various information collected (such as, for example, shopping preferences or habits, the IP address of the computer used) may lead to your identification and fall within the category of the notion of “personal data”.

We collect personal data directly from you through the interaction and in order to provide you with personalized products, services or offers.

 

  1. WHAT PERSONAL DATA WE PROCESS

The company TOTAL MEAT SOLUTIONS S.R.L. in its capacity as data controller, processes the following data, as follows:

  • personal data obtained, following the sales contract, in most cases, directly from you, as individual customers or as representatives of legal entity customers;
  • personal data provided through contractual partners and/or collaborators;
  • personal data transmitted directly by you, through communication channels (mail, e-mail, telephone, etc.);
  • personal data via CCTV (closed circuit television).

Categories of data processed:

  • Identification data: name, surname, gender, place of birth, etc. These are necessary for the execution of the sales contract.
  • Contact data: telephone number, mailing and/or billing address, e-mail address. We need them to be able to send you communications, commercial offers, services, etc.
  • Contract data: contract period (start date and end date of the contract), contract value, billing details, payment information, bank account data (surname and first name of the bank account holder), bank card data (surname and first name of the bank card holder, its validity date). The person who made the payment on your behalf and for you may be someone other than you, in which case that person's data will also be processed.
  • Professional data: name of employer, place and position held. We collect this data if you are the representative of the legal entity client.
  • Other personal data: video recordings, details regarding purchase history, etc.
  • Location data: computer IP, location of the device (if geolocation is enabled) from which you connect to our platform.

 

  1. DATA COLLECTION AND PROCESSING METHODS

Among the collection methods we note:

  • direct interactions (for example, we specify, registering an account on the website, completing the order form, telephone conversations, postal or electronic correspondence);
  • automated technologies or interactions (such as the technical data of the devices used, in this case personal data is collected through the use of cookies. For more information, please read the Cookie Policy.)
  • through third-party sources and public sources, without limiting ourselves to the following examples:
    • service providers, analytics data (Google Analytics, various monitoring sources)
    • promotion networks and channels
    • online card payment processor (NETOPIA Payments)
    • automatic AWB issuance systems belonging to courier companies

In the vast majority of cases, personal data is collected from contracts concluded with you, from payments recorded for and on your behalf, when you access, browse or register on the www.marbleangus.com page. We, as operators of this data, try to keep your data as accurate and up to date as possible.

 

  1. LEGAL BASIS FOR DATA PROCESSING

We process your personal data, at your request, in order to conclude and execute a distance sales contract, through which TOTAL MEAT SOLUTIONS S.R.L. undertakes to sell products sold through the online store, or wishes to inform you about current offers in progress or notify you about the financial situation.

The processing of your personal data is also carried out based on the legal obligations we have, just as an example, we mention the reporting to state institutions in the financial-accounting sector.

In conclusion, the processing is lawful only if and to the extent that at least one of the following conditions applies:

  • processing is necessary for the performance of a contract;
  • processing is necessary for us to comply with our legal obligations

(for example, without limitation, in tax and accounting matters, protection against fraud, money laundering and terrorism, in the field of health and safety);

  • for the purposes of legitimate interests pursued by us or a third party

(e.g. to avoid online fraud, implement, configure and maintain website security measures);

  • we have your express and unequivocal consent

(offers, communications, information sent for marketing purposes are sent only based on your consent, and the processing of the data provided is carried out within the limits of the consent granted for this purpose).

 

  1. PURPOSE FOR WHICH WE PROCESS THE DATA

The purposes for which we process your personal data:

Performance of sales contracts to which we are committed

The processing is necessary for the execution of the sales-purchase contract concluded with us.

Sending products via express courier services.

Financial management
The objective pursued: issuing invoices, collecting payments, including their registration, recovering debts even through companies specializing in debt recovery, refunding amounts of money, issuing and transmitting financial accounting statements, etc.

Website maintenance and security

Our company implements and further develops technical and organizational measures to create a high degree of security and protection of your personal data.

Transmission of offers and commercial information

Informing you about the campaigns we run, transmitting offers through the information channels received from you (telephone, e-mail, mail).

Profiling for direct marketing purposes

When sending personalized offers through direct marketing channels (e-mail, push-up notifications) we may use certain “types of profiling”, respectively, a way of automatically processing your data consisting in particular of the analysis and interpretation of your personal data necessary to evaluate or predict certain aspects related to your preferences, interests.

We offer you the possibility to modify your direct marketing preferences, at any time after your registration, by requesting this option by e-mail. You also have the possibility to oppose profiling for direct marketing purposes, on any of the communication channels to which you previously consented, by withdrawing your consent.

Improving services

As a tool for verifying how we carry out our activity and in order to improve our services offered and to diversify our activity, we carry out internal and/or external audit sessions.

Video surveillance of the workplace

 

  1. WHEN AND TO WHOM WE MAY DISCLOSE THE COLLECTED DATA

As a general rule, we will not disclose or transfer your personal data to third parties, except for:

  • Public authorities and institutions – and only when there is a legal obligation to do so or for the purpose of defending a legitimate interest.
  • Companies from the group of companies to which we belong – you can consult the list of companies here:
  • Tibzoland Holding Kft. – National Tax Code - 27970748-2-43;
  • T Business Solution SRL – Unique Registration Code – 50582924.
  • Our contractual partners or collaborators – for example, website development, online marketing.
  • Auditors, lawyers, individual consultants from Romania or abroad, natural or legal persons acting in the name and for TOTAL MEAT SOLUTIONS S.R.L.
  • Other third parties – only if you have expressed your express consent.

 

  1. INTERNATIONAL DATA TRANSFER

When transferring data abroad, we will take into account the following aspects:

  1. if the transfer takes place in the European Union countries;
  2. if the transfer takes place in the European Economic Area countries;
  3. if the transfer takes place in countries that the European Commission has recognized by decision as having an adequate level of protection.

In the case of data transfers to countries outside the European Economic Area, we assure you that these transfers will take place in compliance with the General Data Protection Regulation, based on appropriate safeguards and provided that there are enforceable rights and effective remedies for you.

 

  1. PERSONAL DATA RETENTION PERIOD

Personal data will be kept in a form that allows you to be identified for no longer than is necessary for the purposes for which they were processed and in accordance with the statute of limitations and archiving periods under the provisions of the National Archives law.

Images captured by surveillance cameras are stored for a period of up to 30 days.

 

  1. SECURITY OF COLLECTED DATA

The technical and organizational measures implemented and periodically reviewed in this segment aim to prevent and eliminate unauthorized access, modification, use, disclosure, copying, deletion or destruction of the personal data we process.

The technical and organizational measures are complemented by internal policies and procedures, internal and external audits and control measures.

 

  1. YOUR RIGHTS AND HOW TO EXERCISE THESE RIGHTS

In accordance with the General Data Protection Regulation, you as a data subject have the following rights, except where otherwise provided by law:

  • Right to information – data subjects whose data are processed within the framework of our specific activities (e.g. customers, potential customers, collaborators, etc.) have the right to receive information about the processing operations carried out on their personal data.
  • Right to access – data subjects have the right to obtain from us confirmation that we are processing their personal data, as well as access to them and provision of information about the processing method.
  • Right to rectification – data subjects have the right to obtain from us, the rectification/correction, without undue delay, of inaccurate personal data and/or the completion of incomplete data.
  • Right to erasure – data subjects have the right to request the erasure of personal data. This deletion will be carried out without undue delay if the data is no longer necessary for the purposes for which it was collected.
  • Right to restriction of processing – in cases where it is not clear whether and when personal data should be deleted, you may exercise your right to restriction of processing. This right may be exercised when: (i) the accuracy of the data in question is contested; (ii) you do not want the data to be deleted; (iii) the data is no longer necessary for the original purpose but cannot yet be deleted for legal reasons; (iv) a decision on your objection is pending.

Restriction” means that – with the exception of storage – your personal data may only be processed with your consent for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of public interest of the EU or an EU Member State.

  • Right to data portability – the right of data subjects to receive the personal data that you have provided to us for the purposes described above in a structured, commonly used and machine-readable format, and the right to transmit these data to another controller.
  • Right to object – data subjects have the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them, including profiling. We, as controllers, will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
  • The right not to be subject to a decision based solely on automated processing, including profiling – unless such processing is necessary for the conclusion or performance of a contract or is permitted by law.
  • The right to lodge a complaint with a supervisory authority, namely the National Supervisory Authority for Personal Data Protection.

Contact details of our Data Protection Officer (DPO):

To exercise these rights, except for filing a complaint with the ANSPDCP, you can send a written request, as described above, as follows:

  • by post, to the address: S.C. TOTAL MEAT SOLUTIONS R.L., Romania, Joseni, Borzont village, Bucin road, no. 220, Harghita county, for the attention of the DATA PROTECTION OFFICER

or

 

  1. TERMS AND NOTIONS

In Romania, the National Authority for the Supervision of Personal Data Processing (ANSPDCP) is an autonomous central public authority, which according to the law, has responsibilities in the field of compliance with the legislation on the protection of personal data.

personal data = any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific elements specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

processing = any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

profiling = any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

controller = the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

consent of the data subject = any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to personal data concerning him or her being processed.

data subject = a natural person. In our relationship with you, you are the data subject.