PRIVACY POLICY
This document outlines the personal data privacy policies of the website www.topshieldcream.com and aims to describe as accurately as possible the methods of managing the processing of visitors’ personal data.
This privacy notice is not valid for other websites that may be accessed via links on this site, for which the data controller of this website is in no way responsible.
The following provisions refer to the applicable legislation (hereinafter referred to as the “Applicable Legislation”), which includes:
- Legislative Decree No. 196 of June 30, 2003 – “Personal Data Protection Code” and subsequent amendments (“Privacy Code”).
- General provision of the Privacy Authority dated May 8, 2014.
- EU Regulation 679/2016, applicable from May 25, 2018 – “General Data Protection Regulation” (“GDPR”).
This Privacy Policy also complies with Recommendation No. 2/2001 concerning the minimum requirements for online data collection in the European Union, adopted on May 17, 2001, by the Article 29 Working Party.
THE DATA CONTROLLER
The data controller of any personal data processed as a result of browsing the website and any other data used for the provision of the services offered by the site is: Hts Health Through Sport S.R.L. – Str. Burnitjei 24 – Municipiul Bucarest, Sector 3 – Ro – info@topshieldcream.com
PLACE, PURPOSE, AND DURATION OF DATA PROCESSING
The data are processed solely by the data controller, its employees, collaborators, or partners entrusted with the processing, or by any individuals responsible for occasional maintenance operations. The data are processed at the data controller’s operational locations and any other locations where the parties involved in the processing are located. The updated list of data processors can always be requested from the data controller.
No data derived from the web services is communicated or disseminated.
The personal data provided by users who submit service requests are used solely to perform the requested service or provision and are not communicated to third parties, unless communication is required by law or is strictly necessary to fulfill the requests.
Specific information on the processing of personal data is available and clearly visible on the pages of the website where data is requested. These notices are, however, based on the principles outlined in this Privacy Policy.
The data are processed for the time necessary to carry out the service requested by the user, or required by the purposes described in this document, and the user can always request the interruption of the processing or the deletion of the data.
METHODS OF DATA PROCESSING
Personal data are processed in paper format and/or with automated tools, for the time necessary to achieve the purposes for which they were collected. Specific security measures are followed to prevent data loss, unlawful or incorrect use, and unauthorized access.
TYPES OF DATA PROCESSED
Browsing data
The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These are information that are not collected to be associated with identified data subjects, but which, by their very nature, could, through processing and association with data held by third parties, allow the identification of users.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computing environment.
These data are used solely to obtain anonymous statistical information about the use of the site and to monitor its proper functioning, and are deleted immediately after processing.
The data in question could be used to ascertain responsibility in the event of any cybercrimes against our site; except for this possibility, in general, web contact data are not retained for more than seven days.
Email sending
The optional, explicit, and voluntary sending of emails to the addresses provided on this site naturally results in the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.
We encourage our users, in their service requests or inquiries, not to send names or other personal data of third parties that are not strictly necessary.
Contact form/information request
By filling out the contact form with their data, the user consents to their use for responding to requests for information, quotes, availability, or any other nature indicated on the page containing the form. Specific brief notices are provided on the pages of the site designed for this type of request.
The personal data collected in the form are: First Name, Last Name, Email, Address, Phone Number, Fax Number.
We encourage our users, in their service requests or inquiries, not to send names or other personal data of third parties that are not strictly necessary.
Statistical data
To generate usage statistics of our site, we use a third-party analysis tool, namely Google Analytics by Google Inc.
The information collected by Google Analytics (excluding IP addresses because Google Analytics is used on this site in anonymized mode) will be transmitted from the user’s browser to Google Inc.
Google Inc. will use this information to track and examine the user’s site usage, compile reports on site activities for the site owner’s use, and provide other services related to site activities and internet usage.
Google Inc. may use the collected data to contextualize or personalize the ads on its advertising network.
Google Inc. will not store the user’s IP address, as Google Analytics is used on this site in anonymized mode.
For more information, we invite the user to visit the relevant page on Google Inc.’s website.
The user, if desired, can easily disable Google Analytics cookies by installing a browser add-on specifically designed for this purpose, which can be downloaded from the link below.
By using this website, you consent to the processing of your data by Google Inc. in the manner and for the purposes specified in its privacy policy.
The data collected under this point are not physically in possession of the owner of this site, who can consult them but cannot modify or delete them independently. Any requests related to the above data should be directed to the respective data controller (Google).
OPTIONALITY OF DATA PROVISION
Apart from what is specified for browsing data, the user is free to provide personal data to request the sending of informational material or other types of services. Failure to provide such data may result in the inability to obtain the requested service.
RIGHTS OF DATA SUBJECTS
Users can exercise the following rights with regard to the data processed by the Data Controller. In particular, the user has the right to:
- withdraw consent at any time. The user can withdraw consent to the processing of their personal data previously given.
- object to the processing of their data. The user can object to the processing of their data when it occurs on a legal basis other than consent. Further details on the right to object are provided in the section below.
- access their data. The user has the right to obtain information about the data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the data being processed.
- verify and request correction. The user can verify the accuracy of their data and request its update or correction.
- obtain the restriction of processing. When certain conditions are met, the user can request the restriction of the processing of their data. In this case, the Data Controller will not process the data for any other purpose other than their storage.
- obtain the deletion or removal of their personal data. When certain conditions are met, the user can request the deletion of their data by the Data Controller.
- receive their data or have them transferred to another controller. The user has the right to receive their data in a structured, commonly used, and machine-readable format, and, where technically feasible, to have them transferred without hindrance to another controller. This provision applies when the data is processed with automated tools and the processing is based on the user’s consent, a contract to which the user is a party, or contractual measures connected to it.
- file a complaint. The user can file a complaint with the competent data protection authority or take legal action.
Details on the right to object
When personal data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, users have the right to object to the processing for reasons related to their particular situation.
How to exercise rights
To exercise their rights, users can send a request to the contact details of the Data Controller provided in this document. Requests are made free of charge and will be processed by the Data Controller as soon as possible, and in any case, within one month.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time, providing notice to users on this page. Therefore, please consult this page frequently, referring to the last modified date indicated at the bottom. If the user does not accept the changes made to this privacy policy, they must cease using this application and may request the Data Controller to remove their personal data. Unless otherwise specified, the previous privacy policy will continue to apply to personal data collected until that point.
Last modified: 25/10/2018