Privacy Policy

PERSONAL DATA PROCESSING

In this section, we inform you about the processing of your personal data and about your rights according to Regulation (EU) 679/2016 - General Data Protection Regulation (GDPR), the Law implementing the GDPR provisions and any other decisions that they can be issued by the National Supervisory Authority for the Protection of Personal Data (ANSPDCP) regarding the protection of personal data.

Responsibility for data processing

The responsibility for data processing rests with the legal entity within Diva Pearls, as personal data operators, respectively, SC AAT Pearls & Diamonds Company SRL.

What personal data do we process?

In order to fulfill the processing purposes defined below, we process both the personal data provided directly by the client at the time of sending his request, as well as other personal data, which were provided to us by third parties, as well as data that we generate ourselves based on their processing. In principle, these data can be classified into the following categories:

Identification data : name, surname, gender, CNP, series and number of the identity document, date and place of birth, citizenship, nationality, etc.

Contact data : home/mail address, e-mail address, landline phone number, mobile phone number, etc.

Why do we process your data and what legal grounds do we have?

• For the execution of a contract or for carrying out pre-contractual steps.
• Reservation and sale of products online.
• Advertising, marketing and publicity.
• For financial-accounting management purposes, according to tax legislation.
• For internal audit or financial audit purposes.

If you want to participate in our loyalty programs for active customers, in various contests and raffles, in satisfaction studies regarding contracted services, to receive e-mail newsletters or various promotional materials by mail, we need your express consent to be able to process your data for this purpose. If you have given it to us, you are entitled to withdraw this consent at any time, for one or all of the processing operations presented above, without indicating any reason, through a written request, as follows: (i) by e-mail to the address: office@divapearls.ro or (ii) by post/courier to the following address: Str. Dimitrie Caracostea, nr. 3, Slatina, Olt or (iii) directly by depositing at any of the Diva Pearls locations in the country .

To which recipients or categories of recipients do we send your data?

Service providers

To our service providers, who act as persons authorized by the operator, and strictly based on the documented instructions received from us. The list of our suppliers is updated periodically, whenever there are changes in its component. Third parties who have access to these data can be indicated by phone at 0799.127.127

Transmission to public institutions

In special cases, we must provide information on personal data to the competent institutions, to the extent that this is necessary for the purpose of criminal investigation, the fulfillment of the legal tasks of the information services or for the purpose of obtaining intellectual property rights.

Web Analytics and social plugins analysis service

We use online market analysis services for statistical purposes as well as for making offers based on user behavior and preferences. These web analysis services use so-called "cookies" (see above under Use of cookies). We also use "plugins" from social network operators (eg: www.facebook.com) for the same purposes.

How long do we store your data?

We keep your data only for the duration and to the extent that it is necessary to achieve the purposes mentioned above or if there is a legal obligation in this regard.

For data processing that requires your consent, the data will be processed and kept until the date of withdrawal of consent.

If we have concluded a contract with you, then we will respect the legal obligations to keep the relevant data and documentation, as follows: i) to fulfill the legal obligations of documentation and storage according to the legislation for the prevention and combating of money laundering and the financing of terrorism, we will keep the data for a period of 5 (five) years from the termination of contractual relations with you. ii) the personal data of our clients that can be found in any supporting documents that are the basis of the records in the financial accounting are kept in the archives of SC AAT Pearls & Diamonds Company SRL for 10 years from the closing date of the financial year in which the documents were drawn up supporting documents, according to the provisions of the Accounting Law.

Data security

To protect your data on our web page, we have taken technical and organizational measures to protect them especially against loss, manipulation or unauthorized access. The adopted measures are checked regularly and are constantly adapted to the current state of the art.

Your rights regarding the protection of personal data

According to the requirements of Law no. 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data, amended and supplemented, Diva Pearls has the obligation to manage in safe conditions and only for the specified purposes, the personal data you provide us about your.

The purpose of data collection is: informing users/customers (Buyers) regarding the status of their account on divapearls.ro, informing users/customers regarding the evolution and status of orders, evaluating the products and services offered, commercial activities, promotion of products and services, marketing , advertising, media, administrative, development, market research, statistics, tracking and monitoring of sales and consumer behavior. By completing your data in the account creation and/or order form, you declare that you unconditionally accept that your personal data will be included in the Diva Pearls database and you give your express and unequivocal consent for all this personal data to be stored ,

Also, you give your express and unequivocal consent that these personal data can be transferred (assigned) by Diva Pearls both to its affiliates and to another/other entities in the country or abroad. By reading these Terms and Conditions, you are aware that you are guaranteed the rights provided by law, namely the right to information, the right to access data, the right to intervene, the right to oppose, the right not to be subject to an individual decision, the right to go to court in case of violation of his rights guaranteed by Law 677/2001 for the protection of individuals regarding the processing of personal data and the free movement of such data. At the same time, you have the right to object to the processing of your personal data and to request their total or partial deletion.

On the basis of a written, dated and signed request, sent to SC AAT Pearls & Diamonds Company SRL, Dimitrie Caracosteam street no. 3, Slatina, Olt, you can exercise, free of charge, the following rights: - once a year, to it is confirmed to you that the personal data are processed or not; - to intervene on the transmitted data; - to oppose the processing of the data for well-founded and legitimate reasons related to their particular situation - to request the deletion of the data, with the exception of the situations provided by law. Thus, divapearls.ro can notify users/customers about current offers through the newsletter and can send greeting cards, gift coupons or other special messages. Any user/client who has explicitly provided their email address on the divapearls.ro website can opt for its deletion from our database.

Also, Diva Pearls can provide your personal data to other companies with which it is in partnership, but only on the basis of a confidentiality commitment from them, by which they guarantee that this data is kept safe and that the provision of this information personal data is made according to the legislation in force, as follows: service providers of marketing services, Courier, payment / banking services, telemarketing or other services, other companies with which we can develop joint programs for offering our products and services on the market , insurers. Your personal information can also be provided to the Prosecutor's Office, Police, Courts and other competent state bodies,

You have the following rights regarding the protection of your data:

The right to information

Your right to receive information regarding the processing operations carried out by us on your data. The respect of this right is achieved through this information;

Right of access

Your right to obtain from us a confirmation whether or not we are processing personal data concerning you and, if so, access to the respective data and to the provision of specific information regarding their processing;

The right to rectification

Your right to obtain from us, without undue delay, the rectification of inaccurate data concerning you or the completion of incomplete personal data;

The right to data erasure

Your right to obtain, without undue delay, the deletion of personal data concerning you, to the extent that the following conditions stipulated by the GDPR are met: (i) the personal data are no longer necessary to fulfill the purposes for which they were collected or processed by us; (ii) withdraw the consent granted for data processing based on consent; (iii) object to the processing of personal data carried out by us. You can only object to the processing that has as a legal basis the achievement of our legitimate interests, for which we have no interests and legitimate reasons that prevail with regard to the processing; (iv) your data has been illegally processed by us;

The right to data portability

Your right to receive from us the personal data concerning you and which you have provided us directly, in a structured, commonly used and automatically readable format, as well as to transmit this data to another operator, when the technical means allow this. You can exercise this right only when the processing is based on your consent or when the processing is carried out by automatic means.

The right to opposition

Your right to object, for reasons related to your particular situation, to the processing carried out by us, having as a legal basis the achievement of our legitimate interests. If you object to such processing, we will no longer process your personal data, unless we can demonstrate that we have legitimate and compelling reasons that justify the processing and that prevail over your interests, rights and freedoms or that the purpose is establishing, exercising or defending a right of ours in court.

The right not to be subject to a decision based exclusively on automatic processing, including the creation of profiles (any automatic processing that uses personal data to evaluate certain personal aspects of you, such as payment behavior, financial situation, traffic behavior, etc. ), which produces legal effects that concern you or that similarly affect you to a significant extent.

In order to comply with the above requests, we may ask for additional information necessary to confirm your identity. After your identification, we will provide you with an answer to the request sent in order to exercise the above rights, within a maximum of one month from the date of receipt of the request.

To exercise the above rights, you can send a written request (i) by e-mail to the address: office@divapearls.ro, or (ii) by post/courier to the following address: strada Dimitrie Caracostea, no. 3, Slatina, Olt or (iii) directly by deposit in any of the Diva Pearls locations.

You also have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing, at Bld. G-ral Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, telephone: +40318059211 , e-mail: anspdcp@dataprotection.ro. Last but not least, for any questions regarding the information contained in this Information, you can contact the Data Protection Officer appointed by us, at the e-mail address: office@divapearls.ro.