Privacy Policy

I. General Information

The confidentiality of your personal data is one of the primary concerns of DigiSinergy SRL, headquartered in Bucharest, Sector 2, 26 Frunzei Street, HMCC Business Center, 4th floor, as the data controller.
This document aims to inform you about the processing of your personal data in the context of using the website https://digisinergy.ro/ (“the Website”).

II. Categories of Processed Personal Data

II.1. If you are a customer of the Website, DigiSinergy SRL will process your personal data such as your name, phone number, email address, billing address, delivery address, data related to how you use the Website, for example, your behavior/preferences/habits within DigiSinergy SRL, as well as any other categories of data you provide directly when creating a user account, placing an order through the website, or in any other way resulting from the use of the Website.

If you use your Facebook or Google account to create a user account on the Website, DigiSinergy SRL will process the following public profile data displayed by these applications: username, email address.

If you choose to create a user account just before completing an order for a product available on the Website, your email address will be requested to automatically create an account. If you do not complete the order, the email address and other provided data will not be stored by DigiSinergy SRL, and the created account will be automatically deleted.

II.2. If you are a visitor to the Website, DigiSinergy SRL will process your personal data that you provide directly in the context of using the Website, such as the data you provide in the contact/questions/complaints section, to the extent that you contact us in this manner.

III. Purposes and Legal Bases for Processing

III.1. If you are a customer of the Website, DigiSinergy SRL processes your personal data for the following purposes:

  • To perform the contractual relationship between you and DigiSinergy SRL, such as order acceptance, validation, shipping, and invoicing placed on the Website, informing you about the status of your order, organizing the return of ordered products, etc.

Legal basis: The processing of your data for this purpose is based on the contract between you and DigiSinergy SRL, as defined in the Terms and Conditions [hyperlink to T&Cs]. Providing your personal data is necessary for the execution of this contract. Refusing to provide data may result in the inability to carry out the contractual relationship between you and DigiSinergy SRL.

  • To fulfill the legal obligations of DigiSinergy SRL in the context of services provided through the Website, including fiscal obligations and archiving.

Legal basis: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusing to provide data may result in DigiSinergy SRL’s inability to comply with its legal obligations and, therefore, its inability to provide services through the Website.

  • For marketing activities, i.e., for the transmission of commercial communications regarding products and services offered by DigiSinergy SRL through the Website, via remote communication means (email, SMS).

Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for data processing for this purpose by checking the corresponding box at the time of creating your account or after creating your account in the “My Account Information” section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. Additionally, you can unsubscribe by accessing the “My Account Information” section.

Providing your data for this purpose is voluntary. Refusing to provide consent for data processing for this purpose will not have negative consequences for you.

  • For conducting various analyses, reports on the functioning of the Website, creating consumer preference profiles, primarily to improve the experience offered on the Website.

Legal basis: The processing of your data for this purpose is based on DigiSinergy SRL’s legitimate interest in continuously improving the customer experience on the Website. Providing your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

III.2. If you are a visitor to the Website, DigiSinergy SRL processes your personal data for the following purposes:

  • For marketing activities, i.e., for the transmission of commercial communications regarding products and services offered by DigiSinergy SRL through the Website, via remote communication means (email, SMS).

Legal basis: The processing of your data for this purpose is based on your consent if you choose to provide it.

You can express your consent for data processing for this purpose by completing and checking the relevant box in the newsletter subscription form available on the Website. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications.

Providing your data for this purpose is voluntary. Refusing to provide consent for data processing for this purpose will not have negative consequences for you.

  • To handle complaints, feedback, and to monitor traffic and improve your experience on the Website.

Legal basis: The processing of your data for this purpose is based on DigiSinergy SRL’s legitimate interest in ensuring the proper functioning of the Website and continuously improving the visitor experience on the Website, including addressing various comments, questions, or complaints.

Providing your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

IV. Data Processing Duration

As a principle, DigiSinergy SRL will process your personal data for as long as necessary to achieve the processing purposes mentioned above.

In the case where you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently in accordance with the legal obligations incumbent on DigiSinergy SRL (e.g., in the case of financial-accounting documents for which the retention period provided by law is 10 years from the end of the financial year in which they were prepared).

If you are a customer and choose to delete your user account by pressing the “Delete Account” button in the “My Account Information” section, DigiSinergy SRL will interpret this action as your choice to unsubscribe from receiving commercial communications informing you about products and services offered through the website. In this regard, if you choose to delete your user account, we will no longer send you emails and/or SMS of this nature. However, we want to inform you that deleting the account does not automatically result in the deletion of your personal data. If you wish to no longer have your personal data processed or if you wish to have your data deleted, you can exercise the rights detailed in section VII below. If you request the deletion of your account, but there is at least one active order on that account, the account deletion request can only be recorded after the delivery of the products and the completion of the last active order.

If you withdraw your consent for data processing for marketing purposes, DigiSinergy SRL will cease processing your personal data for this purpose, without affecting the processing carried out by DigiSinergy SRL based on the consent you provided before its withdrawal.

V. Disclosure of Personal Data

To achieve the processing purposes, DigiSinergy SRL may disclose your data to partners, third parties, or entities that support DigiSinergy SRL in conducting its activities through the Website (e.g., courier companies, IT service providers), or to central/local public authorities, in the following illustrative cases:

  • For the administration of the Website.
  • In situations where such communication is necessary for awarding prizes or other benefits to the data subjects, obtained as a result of their participation in various promotional campaigns organized by DigiSinergy SRL through the Website.
  • For the maintenance, personalization, and improvement of the Website and the services conducted through it.
  • For data analysis, testing, research, monitoring usage trends and activity, developing security features, and user authentication.
  • For the transmission of marketing commercial communications, within the conditions and limits provided by law.
  • When the disclosure of personal data is required by law, and so on.

VI. Transfer of Personal Data

Personal data provided to DigiSinergy SRL may be transferred outside Romania, but only to states within the European Union.

VII. Your Rights

In accordance with the legislation regarding the processing of personal data, as data subjects, you have the following rights:

  • The right to be informed, meaning the right to receive details about the processing activities carried out by DigiSinergy SRL, as described in this document.
  • The right to access your data, which means the right to obtain confirmation from DigiSinergy SRL regarding the processing of personal data, as well as details about the processing activities, such as the way the data is processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.
  • The right to rectify, which is the right to obtain the correction, without undue delay, by DigiSinergy SRL of inaccurate/unjustified personal data, as well as the completion of incomplete data. Rectification/completion will be communicated to each recipient to whom the data has been transmitted, unless this proves impossible or involves disproportionate effort.
  • The right to erasure (the “right to be forgotten”) in cases where one of the following reasons applies:
    • The data is no longer necessary for the purposes for which it was collected or processed.
    • Consent has been withdrawn, and there is no other legal basis for processing.
    • The data subject objects to the processing, and there are no overriding legitimate grounds for processing.
    • The personal data has been processed unlawfully.
    • The personal data must be erased to comply with a legal obligation.
    • The personal data has been collected in connection with the provision of information society services under Union or national law to which the data controller is subject.

It is possible that, following the request for data erasure, DigiSinergy SRL may anonymize the data (thus removing their personal nature) and continue to process them for statistical purposes.

  • The right to restrict processing to the extent that:
    • The data subject contests the accuracy of the data, for a period that allows verification of the data’s accuracy.
    • The processing is unlawful, and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use.
    • The data controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise, or defense of legal claims.
    • The data subject has objected to processing (other than direct marketing) for the time needed to verify whether the legitimate interests of the data controller override those of the data subject.
  • The right to data portability, including the right to receive personal data in a structured, commonly used, and machine-readable format and the right to have these data transmitted by DigiSinergy SRL to another data controller, to the extent that the legal conditions are met.
  • The right to object to processing, which can be exercised by submitting a request as follows:
    • At any time, for reasons related to your particular situation, that the data concerning you should be processed based on DigiSinergy SRL’s legitimate interest or public interest, except where DigiSinergy SRL can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or the purpose is to establish, exercise, or defend a legal claim.
    • At any time, free of charge and without justification, that data concerning you should be processed for direct marketing purposes.
  • The right not to be subject to automated individual decision-making, which means not being the subject of a decision based solely on automated processing activities, including profiling, which produces legal effects concerning you or significantly affects you.
  • The right to address the National Supervisory Authority for Personal Data Processing or the competent courts, to the extent you consider it necessary.

For any additional questions about how personal data is processed and to exercise the rights mentioned above, please contact us at the following email address: sales@digisinergy.ro