GDPR Policy
Privacy Policy and Personal Data Protection
We consider the confidentiality of information disclosed to ANANDA SMART INVEST SA to be an essential component of commercial activity and business in general. Our data protection policy and practices focus on: the appropriate and lawful collection, processing, exchange, and storage of personal information, as well as ensuring its confidentiality, integrity, and availability. The security of your data is our number one priority. As part of this fundamental obligation, we, ANANDA SMART INVEST SA, are committed to protecting and using the personal information collected through our website in an appropriate manner. Therefore, as of May 25, 2018, we have aligned ourselves with the European standards in force regarding the processing of personal data and the free movement of such data, as stipulated in Regulation 2016/679/EU (GDPR - General Data Protection Regulation).
What is GDPR?
The GDPR (General Data Protection Regulation) is a binding piece of legislation that supports individuals in terms of the processing, protection, and free movement of personal data by creating new rights and taking over and strengthening existing rights under Directive 95/46/EC, repealed on May 25, 2018. Thus, any controller (commercial company, entity) that collects and processes personal data must apply the new requirements and provide transparent information on how the data is processed.
Why do we process your data?
Your personal data (name, surname, email address, telephone number, address) contained in our records are processed exclusively for the purpose for which they were collected, namely to successfully carry out the processes carried out in relation to you, such as: sales processes, delivery processes, providing information, notifications, promoting products and services. Any processing of personal data for purposes other than those mentioned below will only be carried out with your prior consent.
What categories of data do we process and when do we collect them?
Personal data such as: name, surname, telephone number, email address, address are processed by ANANDA SMART INVEST SA only if you enter them in the dedicated fields on the website or send them to us by email.
Newsletter data:
By checking the corresponding box, you agree to receive periodic direct marketing messages from us. Through various direct marketing actions, we send you information about the latest products and services in our offer, special offers, and advertising campaigns. Although we want to stay in touch with you and provide you with the latest information about our activities, you can opt out of this service at any time by clicking the "Unsubscribe" button or by sending an email to the address.
Additional information required for the successful completion of the sale process:
The personal data collected and stored will be processed for the purpose of executing contracts and processing your requests. After completing your request, the sale process, or the contract, as applicable, your data will be stored in accordance with the retention periods required by tax and commercial law and, where applicable, for the period necessary to protect the rights of the operator.
Data collected via the contact form:
The minimum information you must provide us with is: your first and last name, email address, telephone number, and, of course, your message. By completing and submitting the data, you express your consent to the collection and use of your data in the correspondence initiated by you, respectively for the resolution of the request for which you have contacted us.
What is the legal basis on which we process this data?
The legal basis on which we collect, process, and store this data is our legitimate interest in ensuring the overall functionality of the website, executing a contract or request from you, our commercial interest if you purchase products from our company, or the consent you gave when registering your data.
What do you need to know about GDPR?
Definitions:
'Personal data' means any information relating to an identified or identifiable natural person ('data subject'); An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing of personal data = any operation or set of operations performed on personal data or on sets of personal data, with or without the use of automated means, such as: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, alignment or combination, blocking/restriction, erasure or destruction;
An operator is any natural or legal person, public authority, agency, or other body that, alone or with others, decides why and how personal data is processed.
Your rights
The new Regulation grants more rights to individuals whose personal data is processed:
- The right of access means that you have the right to obtain confirmation from us as to whether or not we are processing your data, and if so, to provide you with access to that data and information about how it is being processed;
- The right to portability refers to the fact that you can receive your personal data in a structured, machine-readable format and have it transmitted directly to another controller;
- The right to object refers to the right to object to the processing of personal data when it serves a public interest or a legitimate interest of ours;
- The right to rectification refers to the correction, without undue delay, of inaccurate personal data;
- The right to erasure/right to be forgotten means that you have the right to have your collected data erased without undue delay in any of the following situations: the data is no longer necessary for the purposes for which it was collected, you have withdrawn your consent and there is no other legal basis for processing, you object to the processing, the data has been collected unlawfully, the data must be deleted to comply with a legal obligation;
- The right to restrict processing may be exercised if the accuracy of the data is contested for a period sufficient to verify the data, if the processing is unlawful but you do not want the data to be deleted, only restricted, if ANANDA SMART INVEST SA no longer needs the personal data for processing but you request it for the defense of a right in court, if you have objected to the processing for the period of time while it is being verified whether legitimate rights prevail over your rights.
How can you contact us?
You may exercise all your rights under the provisions of the GDPR and applicable legislation in force by sending us (ANANDA SMART INVEST SA) a written, dated, signed request via:
- by phone at 0748 131 255, Monday through Friday between 9:00 a.m. and 5:00 p.m.
- email at contact@ananda-smartinvest.ro
In addition, starting May 25, 2018, you can send us any questions or complaints to the email address, and if you believe that we have violated any of your rights in this regard, please contact us as soon as possible by phone from Monday to Friday between 9:00 a.m. and 5:00 p.m. If we do not resolve your request within the legal deadline of 30 days, you can contact the National Supervisory Authority for Personal Data Processing. (www.dataprotection.ro)
How long does it take us to respond to your requests?
In accordance with the provisions of the GDPR, within a maximum of 30 days from the date of receipt of your request, we will provide you with all the necessary information regarding the fulfillment of your request or, where applicable, we will communicate the documented reasons why we were unable to comply with your request.
We assure you that before responding to any request regarding personal data processed by our company, we will take all necessary and reasonable measures to verify the identity of the applicant.
In accordance with the provisions of the GDPR, the 30-day response period mentioned above may be extended by up to two months if the complexity and number of requests justify this, and you will be informed of this if necessary.
Transfer of data to third parties for the purpose of conducting sales activities
To provide the newsletter service, ANANDA SMART INVEST SA uses the specialized platform brevo.com, a company based in France with servers located in France. The company complies with the GDPR regulations imposed by the EU, and their privacy and data processing policy can be verified here:https://www.brevo.com/gdpr/
Transmission of data to the authorities
Transmission of data to public institutions, courts, and authorities competent to investigate criminal offenses: ANANDA SMART INVEST SA transmits personal data for the aforementioned purposes only when required by law.
Social networks
Our websites use plugins from social media operators Facebook and Instagram to link the website to the social media accounts where the company has an account. We do not collect any personal data from you through these plugins.
Google Analytics/Google Adwords
Our website is interconnected with Google Adwords and Google Analytics analysis services provided by Google Inc. for the purpose of obtaining statistical data on the activity of website visitors, respectively for the purpose of improving the visibility of the website in the online environment.
In this context, your anonymized (shortened) IP address will be sent to a Google server, where Google will use this information on behalf of ANANDA SMART INVEST SA to generate statistical reports on how you use our website.
The IP address transmitted by your browser will not be associated with any other personal information held by Google, and you will therefore not be personally identifiable through your IP address. If you do not agree to your browser communicating this information to Google, you can set your browser to refuse the use of cookies, or you have the option to download and install the free Google Analytics Opt-out Browser add-on. Please note that these settings will affect all web pages accessed from your browser, not just our website.
Thank you for taking the time to read our Privacy Policy. By registering your personal data on our website, you agree to it being collected and processed by the operator ANANDA SMART INVEST SA under the conditions mentioned in this document and in accordance with the provisions of the GDPR and applicable legislation in force.
Privacy Policy Updates
ANANDA SMART INVEST SA may modify this privacy policy when required and in accordance with EU General Data Protection Regulation 679/2016. We want to assure you that your information is secure. To prevent unauthorized access or disclosure, we have implemented appropriate physical, electronic, and managerial procedures to protect and secure the information we collect online, in accordance with EU General Data Protection Regulation 679/2016.