Privacy policy

By accessing or using this site and / or any information, tools and documents contained or described in it, you declare that you understand and confirm the privacy policy in the current version at any time. If you do not agree with this, it is not possible to access and use our site.

  1. About us

You can contact us by sending an e-mail to info@optcycling.ro. If you have any questions regarding this privacy policy, please contact us via the email address provided.

  1. The information we collect when you visit our site

We collect and use information from site visitors in accordance with this section, as well as section 9 below.

2.1 Server login information. We use a third party server to host our website www.optcycling.ro. The server automatically records the IP address you use to access our site, as well as other information about your visit, such as accessed pages, requested information, date and time of request, the source of your access to our site ( e.g. the website or URL (link) you came to on our site), and your browser version and operating system. Our server is located in Romania.

2.2 Use of information stored on the server for IT security purposes . We and our third-party hosting providers collect and store logs on the server to ensure the security of networks and information so that the server and site are not compromised. This includes analyzing log files to help identify and prevent unauthorized access to our network, distribute malware, prevent server attacks, and other cyber attacks by detecting unusual or suspicious activity.

(i) Legal basis for processing: compliance with a legal obligation to which we are subject (Article 6 (1) (c) of the General Data Protection Regulation).

Legal obligation: we have a legal obligation to implement the necessary technical and organizational measures to ensure an adequate level of security for the risk of processing information about persons. Registering access to our site using server log files is one such measure.

 

(ii) Legal basis for processing: the legitimate interests of us and of third parties (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: We and our third-party hosting provider have a legitimate interest in using your information. in order to ensure the security of networks and information.

2.3 Use the login information on the site server to analyze the use of the site and to improve the site. We use the information collected by logging on to our site to analyze how users interact with the site and its features. For example, we analyze the number of unique visits and visitors we receive, the time and date of the visit, the location of the visit, the operating system, and the browser used. We use the information collected from the analysis of this information to improve our site. For example, we use the information we collect to change the information, content, and structure of your site and individual pages, depending on how users interact and how long you spend on certain pages on our site.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: improving our site for users and knowing their preferences so that our site can better meet their needs and desires.

2.4 Use of cookies and similar technologies. Cookies are data files that are sent from a website to a browser to record information about users for different purposes. We use cookies and similar technologies on our website, including essential, functional, analytical and targeted cookies and web beacons. For more information about how we use cookies, see our cookie policy.

You may reject some or all of the cookies we use on our site or through our site by changing your browser settings, but this may affect your ability to use our site or some or all of it. its functionalities. For more information about cookies, including changing browser settings, visit www.allaboutcookies.org or see our cookie policy.

  1. The information we collect when you interact with our site

We collect and use information from people who interact with certain features of our site, in accordance with this section, as well as section 9 below.

3.1 Registration on our site. When you register and create an account on our site, we collect the following information: username, email address, IP address, avatar image and any other information you provide to us when you complete the registration form. If you do not provide the required information required by the registration form, then you will not be able to register or create an account on our site.

 

Legal basis for processing: it is necessary to enter into a contract or take action at your request. before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for the need to perform a contract: creating an account on our site is necessary to purchase the products in our offer.

Transfer and store your information The information you provide us through the registration form on our website will also be stored outside the European Economic Area. For more information on the safeguards used when your information are transferred outside the European Economic Area, see section 9 below.

  1. The information we collect when you contact us

We collect and use information from people who contact us in accordance with this section and section 9 below.

4.1 Contact by e-mail. When you send an email to the email address displayed on our site, we collect your address. and any other information you provide in that email (such as your name, phone number, and the information contained in your email signature).

(i) Legal basis for processing : our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: we answer the questions and messages we receive and keep track of e-mail.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for contracting: if your message aims to provide goods or services or take action at your request. before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do so.

Transfer and store your information We use a third-party email provider to store the emails you send. For more information, see the section on this privacy policy entitled Transferring Your Information. outside the European Economic Area.

4.2 Contact through the contact form on the site. When you contact us using the contact form on our website, we collect your name, email address and IP address. We also collect any other information you provide to us when you complete the contact form. If you do not provide the required information required by the contact form, you will not be able to submit the contact form and we will not receive your request. If you do not provide the optional information requested by our contact form, we may not be able to reply to or process your message.

(i) Legal basis for processing : our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: we respond to requests and messages we receive and keep track of correspondence.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for contracting: if your message aims to provide goods or services or take action at your request. before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do so.

Transfer and store your information The messages you send us via our contact form will be stored in the European Economic Area.

4.3 Contact by mail. If you contact us by mail, we will collect all information you provide to us in any written communications you send us.

(i) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: we answer the questions and messages we receive and keep track of correspondence.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for contracting: if your message aims to provide goods or services or take action at your request. before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do so.

  1. Information collected or obtained from third parties

5.1 Information received from third parties . We generally do not receive information about you. from third parties. Third parties from whom we receive information about you will generally include group companies or partners. Third parties with whom we have had no prior contact may also provide us with information about you. The information we obtain from third parties will generally be your name. and contact details, but will include any additional information about you. which it provides us.

(i) Legal basis for processing: it is necessary to enter into a contract or take action at your request. before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for contracting: if a third party has submitted information about you. (such as your name and email address) to provide you with services, we will process your information to take action at your request. to enter into a contract with you and terminate a contract with you. (as the case).

(ii) Legal basis for processing: your consent (Article 6 (1) (a) of the General Data Protection Regulation).

Your consent: If you have asked a third party to share information about you with us and the purpose for which you share this information is unrelated to our performance of a contract or service for you, we will process your information based on your consent. ., which you grant by requesting the third party concerned to provide your information.

(iii) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: if a third party has shared information about you. with us and you have not given your consent to the exchange of information, we will have a legitimate interest in processing such information in certain circumstances. For example, we would have a legitimate interest in processing your information. to fulfill our obligations under the subcontract with the third party, if the third party has the main contract with you. Our legitimate interest is to fulfill our obligations under our subcontract. Similarly, third parties may provide information about us if you have violated or could violate any of our legal rights. In this case, we will have a legitimate interest in processing this information in order to investigate and prosecute any such possible breach.

5.2 Incorrectly received information. If we mistakenly receive information about you from a third party and / or we do not have a legal basis for the processing of this information, we will delete your information.

  1. How we use your information

Making a profile. Please note that we use a visitor profile on our site. We do not believe that this has any legal effect on you or affects you in a similar way. You may object to the use of the automatic profiling information described in this section. You can do this by waiving cookies and similar technologies, according to the method described in the relevant section below. Your IP address is not associated with any of your other information, as it is only used for traffic / connection statistics – therefore we cannot identify you based on your IP. You can learn more about the use of cookies and similar technologies (including the legal basis we use) and how to opt out of our cookie policy.

Creating a profile is any form of automated processing of your information to assess personal aspects of you, especially to analyze or estimate things like your work performance, economic situation, health, personal preferences, interests, reliability. , behavior, location or movements performed.

6.1 Using the profile for web analysis. Our web analytics service, Google Analytics, uses and collects information such as your location. (based on your IP address) and your behavior (based on cookies) when you visit the site (such as the pages you visit and where you click). We will process information only from cookies, if you have agreed to the installation of cookies on your device in accordance with the cookie policy.

Logical approach: by automatically analyzing and classifying information, such as location (based on IP address), and the behavior and devices of visitors to our site (using cookies), we can better understand what site visitors want. (in terms of the content of our site and our products), how to improve the site and how to promote and market our products and services.

Significance and expected consequences : Cookies will be used to track and store information about your behavior and device. on our website (unless you have waived the receipt of such cookies through the pop-up window or by sending your address by e-mail. IP, and your location will be analyzed based on your address. IP.

Legal basis for processing: legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: offering the best experience to our visitors according to region, language and interests.

  1. As long as we keep your information

This section sets how long we will keep your information. If possible, we provide specific retention periods. If this is not possible, we have established the criteria we use to determine the retention period.

7.1 Shelf life

  • Server history information: we keep information about the logins on our server in accordance with the legal requirements of our country. For logins that do not fall under a special status, we keep the information for a maximum period of three years.
  • Correspondence and requests: If you make a request or correspond with us for any reason, whether by email, mail or telephone, we will keep your information for as long as we need to respond to and resolve your request. and for another 12 months, after which we will delete your information.

7.2 Criteria for determining retention periods. In any other circumstances, we will not keep your information longer than necessary, taking into account the following:

  • the purpose (s) and use of your information both now and in the future (such as whether we need to continue to store this information in order to continue to fulfill our obligations under a contract with you or to contact you in the future);
  • if we have a legal obligation to continue processing your information. (such as any information obligations required by law or relevant regulations);
  • if we have any legal basis to continue processing the information (such as your consent);
  • how important is your information (both now and in the future);
  • any agreed practices in the field regarding the retention of information;
  • the levels of risk, cost and liability involved in continuing to hold the information;
  • how difficult it is to make sure that information is up-to-date and accurate; and
  • any relevant circumstances (such as the nature and status of our relationship with you).
  1. How we provide you with the information

We take appropriate technical and organizational measures to secure your information and to protect it against unauthorized or illegal use and accidental loss or destruction, including:

  • the information is stored encrypted and access to it is limited to internal staff with a specific interest, using login credentials and in accordance with the rules defined by the internal policies on the use of personal data as defined in the company register.
  • the use of secure servers for storing information;
  • verifying the identity of any person requesting access to information before granting access to information;
  • use of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) software to encrypt any information you send us through any forms on our site;

Improper ways of sending information via the Internet (encryption does not exist or is weak) by the user releases us from any responsibility incumbent on him.

  1. Transferring your information

Your information will be transferred and stored outside the European Economic Area (EEA), under the conditions set out below. We will also transfer your information to you outside the EEA or to an international organization in order to comply with the legal obligations to which we are subject (for example, compliance with a court decision). If we are obliged to do so, we will provide adequate safeguards and protections.

9.1 Contact form. The information you send us via our contact form may be transferred outside the EEA and stored on the host servers of third parties and e-mail providers.

9.2 E-mail. The information you send us by e-mail is transferred outside the EEA and stored on the servers of our third-party e-mail service provider.

9.3 Google Analytics . The information collected by Google Analytics (IP address and actions you take on our site) is transferred outside the EEA and stored on Google’s servers. You can access Google’s privacy policy here: https://www.google.com/policies/privacy/

Country where we store data: United States of America. This country is not subject to an adequacy decision by the European Commission.

Safety measures used: Google has automatically certified compliance with EU-US privacy, available here: https://www.privacyshield.gov/welcome . EU-US protection of privacy is a certification mechanism approved under Article 42 of the General Data Protection Regulation, which is permitted under Article 46 (2) (f) of the General Data Protection Regulation. You can access the European Commission’s decision on the adequacy of the EU-US data protection shield here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm

  1. Disclosure of your information

10.1 Disclosure to Service Providers. We use third parties to provide us with services that are necessary to manage our business or to help us conduct our business and that process your information. on our behalf. These include:

  • Hosting provider (s), located in Romania.

Your information will be shared with these service providers, if necessary, to provide you with the services you have requested, whether you access our site or order goods and services from us. We do not publicly disclose the identity of all our service providers in terms of security and competition. If you would like more information about the identity of your service providers, please contact us directly via our contact form or by email and we will provide you with such information if you have a legitimate reason to request it ( if we have shared your information with such service providers, for example).

(i) Legal basis for processing: legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest invoked: if we share your information with you with these third parties in a different context from where it is necessary to perform a contract (or take action at your request to do so), we will share your information with such third parties so that we may perform and to manage the business efficiently.

(ii) Legal basis for processing: necessary to conclude a contract and / or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

The reason why it is necessary to make a contract: We may share information with our service providers to enable us to fulfill our obligations under that contract or to take the steps you requested before entering into a contract with you.

10.2 Disclosure to other third parties . We also disclose your information. third parties in certain circumstances, as shown below.

10.2.1 Providing information to third parties, such as Google Inc. . Google collects information through our use of Google Analytics on our site. Google uses this information, including IP addresses and cookie information, for various purposes, such as improving Google Analytics. The information is shared with Google on an aggregated and anonymous basis. To learn more about what information Google collects, how it uses that information, and how you can control the information that is sent to Google, see the following page: https://www.google.com/policies/privacy/partners/ .

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: compliance with Google’s contractual obligations under the Google Analytics Terms and Conditions ( https://www.google.com/analytics/terms/us.html ). You can opt out of Google Analytics by installing the browser plugin here: https://tools.google.com/dlpage/gaoptout .

Transfer and store your information The information collected by Google Analytics is stored on Google servers in the United States. For more information about the warranties used when your information is transferred outside the European Economic Area, see section 9 above.

10.2.2 Sharing your information with third parties, which are either in connection with or associated with our business operations, if this is necessary for us. The information is stored encrypted and can only be decrypted by using the login credentials assigned to certain users with specific interests, in accordance with our GDPR policies.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: efficient operation and management of the site.

  • Consultants. Occasionally, we get advice from consultants such as accountants, financial advisors, lawyers, public relations professionals, and security specialists. We’ll share your information. with these third parties only when necessary to provide relevant advice.
  • Business partners. Business partners are the companies we work with that provide goods and services that are complementary to our own business or that allow us to provide goods or services that we cannot provide on our own. We share information with our business partners if you have requested services that they provide either independently of us, or in connection with our services, or our own services.
  • Independent contractors. We use independent contractors in some cases. Your information they will be communicated to independent contractors only if they are required to perform certain tasks.
  • We’ll share your information. our insurers if necessary, for example in connection with a complaint or a potential complaint that we receive or make, or in accordance with our general disclosure obligations under our insurance contract with them. .

10.2.3 Sharing information within the institution for internal administrative purposes, including information about customers and employees.

(i) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: the efficient operation and management of the site.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for contracting: we need to share information about you with other companies in order to fulfill our contractual obligations to you. or to take action at your request. before concluding a contract, for example because of the services or information you have requested.

10.3 Disclosure of information for legal reasons.

10.3.1 Reporting offenses or threats to public security. If we suspect that criminal or potentially criminal behavior has taken place, in certain circumstances we need to contact an appropriate authority, such as the police. This could be the case, for example, if we suspect that a fraud or cybercrime has been committed or if we receive malicious threats or communications. In general, we will only process your information for this purpose, only if you have been involved or affected by such an incident in any way.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: prevention of suspected crime or criminal activity (such as fraud).

10.3.2 Execution or possible application of legal rights. We will use your information. in connection with the implementation or possible enforcement of our legal rights. Our legal rights may be contractual (if we have entered into a contract with you) or non-contractual (such as the legal rights we have under copyright or tort law).

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to impose our legal rights and take measures to ensure our legal rights.

10.3.3 In connection with litigation, possible litigation or legal proceedings. We may need to use your information. if we are involved in a dispute with you. or with a third party, for example, either to resolve the dispute or as part of any mediation, arbitration or resolution of the court or similar process.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: dispute resolution and possible disputes.

10.3.4 Compliance with laws, regulations and other legal requirements. We will use and process your information. to comply with the legal obligations to which we are subject. For example, we may need to disclose your information. based on a court order or subpoena, if we receive them.

(i) Legal basis for processing: compliance with a legal obligation (Article 6 (1) (c) of the General Data Protection Regulation).

Legal obligation: legal obligations to disclose information that is part of Romanian law or that is binding on Romanian legal entities, for example on the basis of an international agreement signed by Romania.

(ii) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: if the legal obligations are part of the laws of another country and have not been integrated into the legal framework of Romania, we have a legitimate interest in complying with these obligations.

  1. Your rights in connection with your information

11.1 Subject to certain restrictions on certain rights, you have the rights listed below with respect to your information. You can also exercise these rights by sending an e-mail to info@optcycling.ro.

  • The right to request access to your information and information related to the use and processing of your information;
  • The right to request the correction or deletion of your information;
  • The right to request a restriction on the use of your information;
  • The right to receive the information you have provided to us in a structured, commonly used format that can be read on any device (for example, a CSV file) and the right to transfer it to another data controller (including a third party data controller);
  • The right to object to the processing of your information for certain purposes (for more information, see section 12 below); and
  • The right to withdraw your consent to the use of your information at any time, if we rely on your consent. to use or process this information. Please note that withdrawing your consent will not affect the lawfulness of the use and processing of your information. based on your consent before the time you withdraw your consent.

In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with a supervisory authority, in particular in the State where you are normally located, at work or for an alleged infringement. of the General Data Protection Regulation.

11.2 The above rights are provided only in summary form and certain limitations apply to many of these rights. You can find more information about your rights, as well as information about any limitations that apply to these rights by reading the underlying legislation contained in Articles 12-22 and 34 of the General Data Protection Regulation, available here:

https://ec.europa.eu/info/law/law-topic/data-protection/reform_ro/

11.3 If you request access to your information, we are required by law to use all reasonable steps to verify your identity before doing so. These measures are designed to protect your information and to prevent the risk of identity fraud, identity theft or unauthorized general access to your information.

How we verify your identity. If we have relevant information about you, we will try to verify your identity using this information. If we are unable to identify you with such information, or if we do not have sufficient information about you, we may request original documents or certified copies of certain documents in order to verify your identity before we can provide you with access to your information. We will be able to confirm the exact information we need to confirm your identity in your specific circumstances, if and when you make such a request.

  1. The right to challenge the processing of your information for certain purposes.

With respect to the use or processing of your information, you are entitled to the objections listed below. You can also exercise these rights by sending an e-mail to info@optcycling.ro.

  • The right to oppose the use or processing of your information, whether we use or process it to perform a task in the public interest or for our legitimate interests, including “making a profile” (analyzing or estimating your behavior under your information) based on any of these purposes; and

For more information on how you can resist the use of information collected from cookies and similar technologies, see the cookie policy.

  1. sensitive personal information; children’s privacy.

13.1 “Sensitive personal information” means information about an individual who discloses racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic information, biometric information for the purpose of uniquely identifying an individual, health or life information. sexual orientation or sexual orientation of an individual.

We do not knowingly or intentionally collect sensitive personal information from individuals and you must not send us sensitive personal information. However, if you mistakenly or intentionally provide us with sensitive personal information, we will consider that you have given us explicit consent to the processing of sensitive personal information in accordance with Article 9 (2) (a) of the General Data Protection Regulation. We will use and process your information. sensitive personal data for the purpose of deleting them.

13.2 We do not knowingly contact or collect information from persons under the age of 18. Our site is not intended to solicit information of any kind from persons under the age of 18. We may receive information about persons under the age of 18 through fraud or deception by a third party. If we are notified of this, as soon as we verify the information, when required by law, we will immediately obtain the appropriate parental consent to use this information or, if we cannot obtain parental consent, we will delete the information from our servers. If you want to let us know about receiving information about people under the age of 18, please do so by sending an e-mail to info@optcycling.ro.

  1. Changes to our privacy policy

We may update and change our privacy policy from time to time.

14.1 Minor changes. If we make minor changes to our privacy policy, we will update the privacy policy with a new date mentioned at the beginning. Processing your information will be established by the practices set out in the new version of the privacy policy from its effective date.

14.2 Major changes. If we make major changes to our privacy policy or intend to use your information. for a new purpose or for a purpose other than the purposes for which we originally collected it, then we will notify you by email (if possible) or by posting a notice on our site. We will provide you with information about the change in question and its purpose and any other relevant information before using your information. for the new purpose. Whenever necessary, we will obtain your consent. before using your information. for a purpose other than the purposes for which we originally collected it.

  1. More information

Our site may contain links to third party sites. Third party privacy policies or practices are beyond our control. Therefore, please read the privacy policies of these sites before using them.