Personal data processing policy

Introduction

IKARIA CREATIONS is the commercial name of 3G PERSONAL SRL., a legal entity of Romanian nationality, with its registered office in Petrosani, st. O. Iosif no. 20, with registration number at the Trade Registry J20/194/2003, CUI 15233799 (in hereinafter “IKARIA CREATIONS” or “we”). In the sense of the data protection legislation, we are the operator when we process your personal data.

This policy sets out the key principles regarding data protection and how IKARIA CREATIONS strives to comply with these principles. There are additional policies/guidelines/provisions that cover more detailed information on certain important topics and these should be read in conjunction with this policy. In addition, each member of the IKARIA CREATIONS staff (as defined below), who has access to or is involved in the processing of personal data, has attended or will attend mandatory and periodic courses on data protection.

We know the importance of your personal data and are committed to protecting its privacy and security. That is why it is important for us to inform you about the processing of your personal data as a user of our Site through this personal data protection policy.

Method of processing your personal data:

– the process of purchasing products and services, both within the IKARIA CREATIONS chain stores and through the online platform; – when you subscribe to the IKARIA CREATIONS newsletter ; and/or – when you fill out the contact form of the Site; and/or – When you access the social media pages of IKARIA CREATIONS

The online purchase process?

– By initiating the purchase process in one of the IKARIA CREATIONS physical stores , according to the legal provisions, it is required to provide certain personal data, consisting of: – name and surname;
– address; – telephone number. – In the case of purchasing products through the online platform: www. IKARIA CREATIONS.ro may request data such as: – name and surname; – address; – telephone number; – email address; – online identifier. We note that in the case of sending the order through the platform www. IKARIA CREATIONS.ro depending on the customer’s option, the payment can be made online by card (personal card or the purchasing company’s card), in full security conditions through EuPlătesc.ro is a service offered by EuroPayment Services srl, a company specialized in providing of e-commerce solution integrator services and bank card online transaction processor. In this sense, our card partner will process information regarding: card number, card expiration date, CVV code, as well as billing information (address). For more information on the method of processing payments carried out by our partner, please go through the section https://www.euplatesc.ro/politica-de-confidentialitate.php. For more information on the method of purchasing products through the platform online please go through the Terms and Conditions section.

In the case of requesting services related to the sale-purchase process, such as transport and/or assembly services, the following personal data are processed as they are necessary for the provision of these services: – name and surname; – delivery address indicated /address indicated for provision of assembly services; – any other information considered relevant by the Client.

The data provided by you must be real, correct and up-to-date. You are thus responsible for the data you provide within the Site, both to us and to any third party that could be harmed by providing incorrect data.

Newsletter subscription

By subscribing to the Newsletter, you give us the right to process your personal data for the purpose of sending personalized information about our products and services, offers and events. At any time you can exercise your right to oppose/restrict processing by unsubscribing from the Newsletter. Personal data processed in the case of sending the Newsletter are: – email address; – name and surname.

Configure your furniture

The Configure your furniture configurator is an online application that uses a browser plug-in, through which the virtual planner can be used. To save the sketch you have made, you must be authenticated, which means creating an account: The data processed in this section mainly consist of the following: – Name and surname, – E-mail address – Country (optional) – Address 1 (optional) – Address 2 (optional)

The contact form

In the situation where you want to get in touch with us, personal data are processed such as: – name – email address; – any other information / details that you provide by using the communication / contact channel.

Careers

Within the IKARIA CREATIONS website, there is a special section dedicated to applying for one of the jobs available within the company. In the situation where you are interested in one of the jobs and you understand to complete the available form, the following personal data will be processed: – name – telephone number; – email address; – any other data / information / details contained in the attached document – the CV.

The contact form regarding the recruitment and selection process allows the submission of documents (CV), the processing of the data provided by you.

By completing and submitting the contact form regarding the recruitment process you agree to contact and/or request additional information/data from us. After completing the recruitment process, personal data will be stored for a period of 2 (two) years.

All materials, as well as all advertising, marketing and similar actions are based on IKARIA CREATIONS ‘ legitimate interest in understanding the needs and expectations of customers regarding our products and services. The processed data mainly consist of the following: email address, first and last name, phone number.

In case of participation in contests/campaigns/loyalty programs organized by IKARIA CREATIONS, the personal data collected by completing the participation documents (forms) will be processed in accordance with the established procedure. The collection of personal data other than those indicated will be based on the obligation to comply with applicable legal provisions.

Accessing social media pages

In the case of your interaction with us through social platforms, the data collected and processed are mainly generated by you. Use of social platforms (Facebook, Google, Youtube, Instagram, Pinterest, LinkedIn). is carried out to ensure communication, promotion and advertising regarding the products and services made available by IKARIA CREATIONS .

By using our social media pages we will have access to the following categories of data: – name and surname; – pseudonym; – email address; – photo published as a profile picture; – online identifier; – description or personal preferences; – the data with which you log in to social media sites; – other information you have shared with us about yourself by contacting us or providing your own content, such as photos or reviews, or in direct contact with us by accessing the chat function (messenger ) available.

You must take into account the fact that the platform operator also collects your personal data, independently, which is why you must also consult the applicable policies in the field of confidentiality and data protection belonging to the respective platforms.

The Site may also collect certain information regarding your navigation and interactions with its various sections. We will store or access information and cookie files in your terminal equipment (computer, phone, tablet, etc.) only under the conditions described in the Cookie Policy section that you can find in a special section.

CONSEQUENCES OF VIOLATING DATA PROTECTION LAWS AND THIS POLICY

Violation of data protection legislation may lead to disciplinary action against IKARIA CREATIONS by the data protection regulatory authority

DEFINITIONS

The following definitions of the terms used here are extracted from Article 4 of the GDPR (General European Regulation on the Protection of Personal Data no. 679/2015):

Personal Data: Means any information relating to an identified or identifiable natural person (“Data Subject”) who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, data location, an online identifier, or to one or more elements specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.

Processing: Means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation , use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction of data.

BASIC PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA

There are eight basic data protection principles that IKARIA CREATIONS respects when handling personal data about others: – It is open and transparent about what it does with the data and why it uses it; – It keeps the data safe; – It ensures that it always has a legal basis to manage the data; – Collects and uses the minimum necessary data, thus respecting the principle of minimization; – Keeps the data updated, correct and complete; – Does not keep the data longer than necessary, ensuring the implementation of periods of data retention, where there is no mandatory period provided by law; – Respect the legal rights of the data subjects, regarding their personal data; – Do not transfer data abroad without taking the measures provided for data transfer, and do not before informing the persons concerned in this regard.

FAIRNESS AND TRANSPARENCY

Personal data are processed legally, fairly and transparently in relation to the data subject. This is the basic principle and means that we use personal data only to the extent that the people who entrust it to IKARIA CREATIONS have been informed in advance about the way of use. In order to comply with this principle of fairness and transparency, IKARIA CREATIONS provides information on data processing to any natural persons whose personal data is or will be processed by IKARIA CREATIONS . These notices are provided at the time of personal data collection and should explain the following main aspects: – What kind of data will be collected; – For what purpose it will be used; – With whom it will be shared (if applicable);
– If they will be transferred to other countries (if applicable); – How long they will be kept; – What rights do natural persons have regarding their personal data, and – Indication of the contact channels through which the persons concerned can exercise these rights.

If, during the course of the activity, a new purpose for the use of personal data will be identified by IKARIA CREATIONS for different reasons than those contained in the previous notifications, the data subjects will be notified before any use for a new purpose, about the change.

LEGALITY

IKARIA CREATIONS understands to carry out all processing activities, both for a well-defined purpose and related to its activity, but also circumscribed by an appropriate legal justification, as follows: – subscription to the IKARIA CREATIONS newsletter , through which we will send releases of new products or services, commercial communications regarding the promotions and campaigns carried out by IKARIA CREATIONS , independently or in collaboration with one or more partners, useful information about the products sold and their maintenance. – managing relations with customers and users of products and services, through the account my account (when this facility will be available on the site) – providing answers when filling out the contact form; – participating in competitions and campaigns organized online by IKARIA CREATIONS
– carrying out analyzes regarding the navigation on the Site and the interactions of users with the Site .

CONSENT OF THE DATA SUBJECT

Obtaining the consent of the person whose data we are going to collect and process is another legal basis provided by the GDPR, and IKARIA CREATIONS attaches great importance to compliance with this principle.

DATA MINIMIZATION

Personal data will only be used when absolutely necessary and relevant to a particular process or project task. This requirement applies to all IKARIA CREATIONS staff members who have access to and/or process personal data. If the use of personal data cannot be avoided, IKARIA CREATIONS will only use the minimum data necessary to fulfill that purpose.

DATA ACCURACY

Data protection legislation requires personal data to be kept accurate, complete and up to date.
However, the requirement to maintain data quality and integrity is not only a data protection requirement, but also a business requirement.

RETENTION PERIOD AND DATA STORAGE

We will keep your personal data for a period that does not exceed the period necessary to fulfill the purposes for which the data are processed, except in cases where the legal provisions provide or compel us otherwise. Thus: – regarding the IKARIA CREATIONS newsletter , we will keep your email address in the newsletter database, as long as your subscription is active; from the moment we receive your unsubscribe request, we will deactivate the sending of newsletters to your e-mail address; – regarding the account created in the My Account section (when this facility will be active on the Site), we will keep your personal data during the existence of the account and subsequently during the period necessary to prove the operations carried out through the account; – regarding the account created for the purpose of using the living space configuration program, Virtual Planner, made available to the virtual visitors of the Site by IKARIA CREATIONS , we keep your personal data for a period of up to 3 (three) years. – participation in contests and campaigns organized online by IKARIA CREATIONS , we will keep your personal data for the period necessary to run these programs and to prove your participation in these programs, according to the Regulations communicated for each individual event; – regarding the applications received through the form in the “Careers” section (when this section will be configured on the website and become active), if we do not process these applications, your data will remain in the IKARIA CREATIONS database to participate in recruitment programs that will be carried out in the future, but no more than 1 (one) year from the date of their collection; – regarding the analysis of browsing on the Site and user interactions with The Site, we will keep the data regarding your interactions with the Site for a period of up to 3 (three) years.

IKARIA CREATIONS can delete your personal data at any time before the terms indicated above, when it considers that it is no longer necessary for the purposes for which it was collected.

We do not store information or access the information (cookie) stored in your terminal equipment (computer, phone, tablet, etc.) except with your prior consent or when these operations are carried out exclusively for the purpose of transmitting a communication through an electronic communication network or are strictly necessary in order to provide a service made available by IKARIA CREATIONS , expressly requested by you (for example, to store information about the activities carried out by you on the Site, so that you can easily use the Site at a later access).

For the use of cookie files, for which your prior consent is required, IKARIA CREATIONS , through the Site, will ask for your consent through a banner displayed on the Site when accessing the Site. This banner contains a link to this Personal Data Protection Policy and offers you the option to accept cookies, as well as the option to refuse them. If you have given your consent, but later change your mind, you can use the settings of your internet browsing application (browser) to delete stored information or refuse cookies. If you want to know what cookies are, access the Cookie Policy on our Website.

DATA SECURITY Another very important principle regarding data protection is information security and, therefore, it is a requirement applicable to all IKARIA CREATIONS staff members who process or have access to personal data.
IKARIA CREATIONS complies with the technical and organizational security measures required by law and industry standards to protect your personal data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access, as well as against any other form of unlawful processing. We also take steps to ensure that we use your personal data exactly as described in this Policy and to respect the choices you make about the processing of your personal data.

DISCLOSURE TO THIRD PARTIES

Except as described below, we will not disclose any information about your data without your authorization. Based on your express and unequivocal consent, thus provided and only within the limits of the legislation in force or for the purpose of fulfilling a legal obligation and/or protecting a legitimate interest, we may transmit your personal data to:– Service providers in the following fields: transport, courier, marketing, administrative and transaction processing services (e.g. those of a financial, legal nature, etc.); – other service providers, all of whom have signed confidentiality agreements; – Organizations or companies that coordinate specific studies and who agree to keep the information received confidential; – State, government agencies, if the legislation stipulates this; – Other authorities and bodies, in order to fulfill our legal obligations and/or protect our legitimate interests; – Other companies with whom we may develop common programs for offering our products and services on the market; – The companies within the Group of which IKARIA CREATIONS is a part .

The transfer of your personal data to the aforementioned recipients will only be made on the basis of an undertaking of confidentiality and of ensuring an adequate level of security on their part, guaranteeing that the personal data is kept safe.

THE RIGHTS OF NATURAL PERSONS

Individuals are granted various rights under data protection laws. These rights and the key actions we must take when exercising them are set out below: – The right to be informed about how and why personal data is used; – The right to request copies of the personal data that is owned by an entity (including information contained in emails, instant messages, notes, etc.); – The right to request the correction of any inaccuracies in their personal data;– The right to order the deletion of personal data (including permanent deletion from the Company’s systems and from any systems of an outsourcing provider to which the Company has allowed access);– The right to request IKARIA CREATIONS cessation of personal data processing;– The right to object to the use of their personal data for direct marketing purposes;– The right to have any personal data that has been provided to IKARIA CREATIONS transferred to another party “in a structured format, frequently used and machine-readable’; and– The right not to be subjected to a fully automated decision-making process (ie a system-generated decision without human input), where the result has a legal or similar significant effect on the person concerned.

If IKARIA CREATIONS receives a request from you in the exercise of any of the rights mentioned above, we will respond to the request within 30 days, with the possibility of extending this term, only after informing the person concerned and provided there is a valid reason to justify the impossibility of formulating an answer within the 30-day period.

BREACH OF DATA SECURITY

If personal data is lost, damaged, stolen or otherwise compromised, or if someone makes a complaint about how IKARIA CREATIONS has managed personal data, they will report the violation to the National Authority for the Supervision of Personal Data Processing in within 72 hours of discovery of the breach and notify relevant persons without delay if they are likely to be affected by the incident. In addition, the Company will do everything to limit the damages caused by the data security breach.

ORGANIZATION AND RESPONSIBILITIES

Responsibility for ensuring adequate processing of personal data rests with any person who works for or with IKARIA CREATIONS and who has access to processed personal data.

Contact information

If you have a question regarding the exercise of any of your rights mentioned above or any addressing request, you should contact us at the following email address: contact@shop.ikariaonline.gr

(hereinafter “IKARIA CREATIONS” or “we”). In the sense of the data protection legislation, we are the operator when we process your personal data.

Method of processing your personal data:

The online purchase process?

– By initiating the purchase process in one of the IKARIA CREATIONS physical stores , according to the legal provisions, it is required to provide certain personal data, consisting of: – name and surname; – address; – telephone number. – In the case of purchasing products through online platform: www. IKARIA CREATIONS.ro may request data such as: – name and surname; – address; – telephone number; – email address; – online identifier. We note that in the case of sending the order through the platform www. IKARIA CREATIONS.ro depending on the customer’s option, the payment can be made online by card (personal card or the purchasing company’s card), in full security conditions through EuPlătesc.ro is a service offered by EuroPayment Services srl, a company specialized in providing of e-commerce solution integrator services and bank card online transaction processor. In this sense, our card partner will process information regarding: card number, card expiration date, CVV code, as well as billing information (address). For more information on the method of processing payments carried out by our partner, please go through the section https://www.euplatesc.ro/politica-de-confidentialitate.php. For more information on the method of purchasing products through the platform online please go through the Terms and Conditions section.

Newsletter subscription

Configure your furniture

The contact form

In the situation where you want to get in touch with us, personal data are processed such as: – name
– email address; – any other information/details that you provide by using the communication/contact channel.

Careers

The contact form regarding the recruitment and selection process allows the submission of documents (CV), the processing of the data provided by you.

Accessing social media pages

By using our social media pages, we will have access to the following categories of data: – name and surname; – pseudonym;
– email address; – photo published as a profile picture; – online identifier; – personal description or preferences; – the data you use to log in to social networking sites; – other information you have shared with us about yourself, by contacting us or providing your own content, such as photos or reviews, or in direct contact with us by accessing the chat function (messenger) available.

CONSEQUENCES OF VIOLATING DATA PROTECTION LAWS AND THIS POLICY

Violation of data protection legislation may lead to disciplinary action against IKARIA CREATIONS by the data protection regulatory authority

DEFINITIONS

The following definitions of the terms used here are extracted from Article 4 of the GDPR (General European Regulation on the Protection of Personal Data no. 679/2015):

BASIC PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA

FAIRNESS AND TRANSPARENCY

Personal data are processed legally, fairly and transparently in relation to the data subject. This is the basic principle and means that we use personal data only to the extent that the people who entrust it to IKARIA CREATIONS have been informed in advance about the way of use. In order to comply with this principle of fairness and transparency, IKARIA CREATIONS provides information on data processing to any natural persons whose personal data is or will be processed by IKARIA CREATIONS . These notices are provided at the time of personal data collection and should explain the following main aspects: – What kind of data will be collected; – For what purpose it will be used; – With whom it will be shared (if applicable); – If be transferred to other countries (if applicable); – How long they will be kept; – What rights natural persons have regarding their personal data, and – Indication of the contact channels through which the persons concerned can exercise these rights.

LEGALITY

CONSENT OF THE DATA SUBJECT

DATA MINIMIZATION

DATA ACCURACY

Data protection legislation requires personal data to be kept accurate, complete and up to date. However, the requirement to maintain data quality and integrity is not only a data protection requirement, but also a business requirement.

RETENTION PERIOD AND DATA STORAGE

IKARIA CREATIONS can delete your personal data at any time before the terms indicated above, when it considers that it is no longer necessary for the purposes for which it was collected.

DISCLOSURE TO THIRD PARTIES

THE RIGHTS OF NATURAL PERSONS

BREACH OF DATA SECURITY

ORGANIZATION AND RESPONSIBILITIES

Responsibility for ensuring adequate processing of personal data rests with any person who works for or with IKARIA CREATIONS and who has access to processed personal data.