Privacy Policy

By using the ecosoft-romania.ro website, the services offered through it, or when contacting us via the contact form, email or phone, visitors entrust us with personal information.

The policy of ecosoft-romania.ro is not to sell or rent the personal data of its visitors.

Through this document, entitled "Privacy Policy", we wish to explain what data we store, transmit or process and for what purposes.

The Privacy Policy, together with the Cookie Policy, which form an integral part of the website's Terms and Conditions, applies to all visitors in their relationship with ecosoft-romania.ro

We wish to specify that we take privacy seriously, which is why we make every effort to store and process securely and carefully the information transmitted to us.

1. TERMS

The terms used in the Privacy Policy are those presented in the website's Terms and Conditions, to which we add:

GDPR (General Data Protection Regulation) means Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Data Subject is any person whose data is collected, retained or processed.

EEA means the European Economic Area.

Personal data means any information relating to an identified or identifiable natural person (data subject).

Under the GDPR, any User of the website is a Data Subject, meaning an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

2. WHO WE ARE

The website ecosoft-romania.ro and its subdomains (hereinafter referred to as "ECOSOFT") is operated by S.C. PureTECH Solutions S.R.L.. (abbreviated as "PureTECH") through the ECOSOFT team with the following identification details: Unique Registration Code RO 35379722, registered at the Trade Register under no. J23/29/2016, with registered office at Strada Rezervelor, nr. 64, bl. 1, ap. 101, Chiajna, Ilfov, România. E-mail: contact@ecosoft-romania.ro.

Under Law no. 677/2001 and the GDPR, PureTECH is a personal data controller.

3. WHAT INFORMATION WE COLLECT

Information that the User voluntarily provides to us in order to use various services on the website:
– Within the forms associated with the member account: first name, last name, form of address, e-mail address, billing address, delivery address, phone number;
– When creating/connecting a member account with Facebook, we also collect: Facebook ID.
– Within billing details: first name, last name, residential address (used only for billing purposes), phone number;
– Within the contact form or when contacting us by e-mail: first name, last name, e-mail address and other information you send us.

Information we collect automatically:
During navigation on the website, we collect technical information about the user's visit. This information may include IP address, operating system, browser, browsing activity and other information about how the User interacted with the website and the traffic generated by the User through our website.

We may collect this information through the use of cookies or other similar technologies (e.g.: web beacons, pixels, ad tags, JavaScript pixels/tags) to recognise the User. We also grant access to third parties (e.g.: service providers) to use cookies and similar technologies on our website. Details about cookies and the technologies used can be found on the cookies page.

4. LEGAL BASIS FOR PROCESSING

Regarding the data you voluntarily provide to us (by completing it in the website's forms or by sending it via e-mail), the legal basis is "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract" (Art. 6(1)(b) of Regulation (EU) 679/2016).
Under the GDPR, your consent is not required where processing is necessary for taking steps to enter into a contract, fulfilling a legal obligation or legitimate interest.

Regarding the data we collect automatically through the use of cookies or other similar technologies, the legal basis for processing is consent. By accessing the website, you validly give your consent to the processing.

5. PURPOSES OF DATA COLLECTION AND PROCESSING

We collect and process user data for the following purposes:
– to provide online services (information and online sales);
– to provide information on the status of orders, services and products offered;
– to respond to users' questions and requests;
– to offer and improve the services we provide;
– to defend against cyber attacks and abuses;
– to ensure the security and integrity of systems;
– to defend ourselves in the event of a dispute;
– to provide information at the request of authorities;
– for advertising and publicity;
– for marketing and promotion of PureTECH products and services and those of its partners (only where you have given your prior consent);
– for tracking and monitoring sales and consumer behaviour;
– for electronic communications services;
– for market research;
– for statistical purposes.

6. HOW LONG WE STORE DATA

We store personal data only for the period necessary to fulfil the purposes, but no longer than 5 years from the last visit to the website or last interaction with us.

7. TO WHOM WE TRANSFER USER DATA

We will not disclose member/customer data to third parties for use in their own marketing or commercial purposes without the prior consent of members.

Information about Users is transmitted to the following entities:
Service providers. The most frequently used being:
– Online payment processor MobilPay – on a case-by-case basis, when necessary for completing a payment;
– Facebook Pixel – for statistics related to campaigns run through Facebook (we do not send personal data through it; it will only be used when we run campaigns through Facebook plus a period after their completion);
– Facebook Login – for authentication into the member account;
– Google Youtube – for displaying video content (e.g.: video tutorials);
– Google Analytics – for statistics (if you do not wish to be processed for statistics, you can use this tool). Within Google Analytics: data is collected for remarketing and advertising; data associated with cookies, user identifiers or advertising identifiers is retained for 50 months from the last access to the website (the shortest possible period); the User's IP is anonymised (details); no data is transmitted or associated with IDs within the website (the User-ID feature being disabled);
– Tawk.to – live chat through which we communicate online with visitors and customers of the website. It tracks pages visited by a visitor and helps us more easily interpret questions asked through the chat.
– Hotjar – an optimisation and statistics system. It anonymously tracks visitor behaviour on the website and provides us with a report on the most accessed areas.
– Mailchimp – an email sending service. Subscription is carried out only for direct ECOSOFT customers or through double-opt-in, on a voluntary basis.
– TRUSTED.ro – This online store sends certain personal data of its customers (order ID, first name, e-mail address, county) to the Processor Feedback.TRUSTED.ro, in order to obtain (independently from the store) and publish customer opinions regarding its services. Personal data is retained by the Processor for a maximum period of 67 days (TRUSTED.ro reserves the right to modify the maximum period to meet the needs of its customers). All published opinions are anonymous.

All providers are selected with care to ensure they provide enhanced confidentiality for personal data. Providers have a limited capacity, or none at all, to use user information for purposes other than providing the contracted services to us.

Storage and/or processing of data by service providers is carried out in accordance with their own Privacy Policies, which users may consult on the providers' websites.

Courts, prosecutor's offices or other public authorities when there is an explicit request from them and the law requires it;

To other third parties only on a case-by-case basis with the consent or at the request/instructions of the user.

PureTECH may provide third parties with general information relating to sales, website traffic and other information; however, such information will be transmitted for statistical purposes and will not contain personal data.

PureTECH does not currently transfer user data to countries outside the EEA.

8. USER RIGHTS

– Right to withdraw consent – Pursuant to Art. 7 of the GDPR
– Right of access – Pursuant to Art. 15 of the GDPR;
– Right to rectification – Pursuant to Art. 16 of the GDPR
– Right to erasure ("right to be forgotten") – Pursuant to Art. 17 of the GDPR
– Right to restriction of processing – Pursuant to Art. 18 of the GDPR
– Right to data portability – Pursuant to Art. 20 of the GDPR
– Right to object – Pursuant to Art. 21 of the GDPR
– Right to lodge a complaint with a supervisory authority – List of authorities
– Right not to be subject to a decision based solely on automated processing, including profiling
– Right to seek judicial remedy

9. EXERCISING YOUR RIGHTS

Users may update their cookie preferences at any time by using the tools available on the About Cookies page.

Customers may update their preferences regarding emails they wish to receive from PureTECH or PureTECH partners at any time within the Account Settings page.

PureTECH reserves the right to maintain a log of all user preferences for the entire duration of their data storage period.

For any questions regarding the processing of personal data or to exercise legal rights in connection with the data we hold, you may contact us through the contact form or by sending an e-mail to contact@ecosoft-romania.ro.

Notes:
We will endeavour to respond to requests within 30 days or less. However, the deadline may be extended for specific reasons related to the complexity of the request;
In certain situations, we may not be able to provide access to some or all personal data due to legal provisions. In this case, we will specify the reason for the refusal;
In some cases, we may not be able to identify certain personal data solely on the basis of the identifiers provided in the request. In such cases, we will not be able to process the request unless additional information is provided to enable identification.

10. AGE RESTRICTIONS

The services offered and the website itself are intended for users who are at least 16 years old.
If any person knows or has reason to believe that a person under the age of 16 has sent us personal data, we ask them to contact us.

11. DATA SECURITY

To ensure data security, PureTECH uses advanced security procedures alongside employee policies and working procedures to protect personal data collected in accordance with applicable legal provisions.

Some of these include:
– Interaction between the website and users, data collection and transmission is carried out over an encrypted SSL connection (A+ certified);
– We use data encryption, pseudonymisation and anonymisation methods where necessary;
– Servers are co-located in datacentres where they are protected by limited and monitored physical and remote access;
– The software used is continuously updated and improved;
– We use monitoring, detection and protection systems against vulnerabilities, attacks, exploits, etc.;
– Access to data is restricted to authorised personnel only and only for necessary actions.

The PureTECH technical team makes every commercially justified effort to protect and process in optimal security conditions the personal data received from Users.
Nevertheless, in the unlikely event of a security breach, we will notify affected users (where applicable) and will take all necessary steps to minimise the impact on users.

12. CHANGES

The Privacy Policy may be updated at any time. In the event of changes that have a major impact, we will display a notification on the website, in the Member's account or via an e-mail notification (if the Member has opted for this).

All changes become effective and enter into force immediately upon update.

13. ACCEPTANCE OF THE PRIVACY POLICY

By using the website, the services offered through it, or when contacting us, you declare that you have been adequately informed about the processing of personal data through the information specified in this "Privacy Policy".

This document was last updated on 25 May 2018.