Privacy Policy regarding the processing of personal data

Novaintermed SRL recognizes the importance of protecting your personal data and is committed to ensuring its confidentiality and security. For this purpose, through this Privacy Policy we provide clear information on how your personal data is collected, used and protected when you use the website www.novaintermed.ro, interact with our services or enter into commercial relations with the company.

This policy applies to all individuals whose data is processed by Novaintermed SRL, including:

• users of the website www.novaintermed.ro
• clients and potential clients
• representatives of contractual partners
• persons who contact the company through the forms available on the website.

The policy applies to all devices used to access the website, including smartphones, tablets or computers.

If you do not agree with the provisions of this policy or with the terms and conditions of use of the website, please do not use the site www.novaintermed.ro.

The processing of personal data is carried out in accordance with:

• Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR)
• Law no. 190/2018 regarding measures for the implementation of GDPR
• the applicable legislation in the commercial, fiscal and archival fields.

1. Data Controller

The controller of personal data is:

Novaintermed SRL
Address: Bd. Pipera, no. 2-XI, 3rd floor – Voluntari, Ilfov County
Email: secretariat@novaintermed.ro
Website: www.novaintermed.ro

2. Purposes of personal data processing

Novaintermed SRL processes your personal data for the following purposes:

1. Administration and operation of the website

• administration and security of the online platform
• improving website functionalities
• statistical analysis regarding the use of the website

1. Commercial activities

• management of orders and contractual relations
• delivery of products
• invoicing and accounting
• management of customer accounts

1. Marketing and commercial communications

• sending newsletters or commercial information
• organizing promotional campaigns
• analyzing customer preferences to improve services

These activities are carried out only based on the consent of the data subject, where legislation requires it.

1. After-sales services and customer relations

• management of requests and complaints
• evaluation of customer satisfaction
• warranty or service support

1. Compliance with legal obligations

• compliance with fiscal and accounting obligations
• archiving documents according to legal requirements
• defending the company’s rights in court or before authorities.

3. Legal basis for processing

The processing of data is carried out based on one or more legal grounds provided by Article 6 of GDPR, namely:

• performance of a contract or pre-contractual steps
• the consent of the data subject
• compliance with legal obligations
• the legitimate interest of the controller (for example IT system security or fraud prevention).

4. Categories of personal data processed

Depending on the purpose of processing, the following categories of data may be collected:

Identification data

• first and last name

Contact data

• delivery or correspondence address
• email address
• phone number

Technical data

• IP address
• type of device used
• information regarding website usage
• data collected through cookies

Financial data: information necessary for making payments or issuing invoices.

Novaintermed SRL does not usually request or process sensitive or excessive data, such as the personal identification number, except where strictly necessary to comply with legal obligations.

5. Recipients of personal data

Your data may be disclosed, where applicable, to the following categories of recipients:

• IT service providers and software maintenance providers
• courier and logistics service providers
• banking institutions or payment processors
• marketing or analytics service providers
• public authorities or state institutions, when there is a legal obligation.

All contractual partners who process data on behalf of Novaintermed SRL act as data processors and are required to comply with GDPR requirements.

Personal data is not sold to third parties.

6. Data retention period

Personal data is retained only for the period necessary to fulfill the purposes for which it was collected.

Retention periods may vary depending on:

• the duration of the contractual relationship
• legal archiving obligations (for example fiscal and accounting legislation)
• the need to protect the controller’s rights in court.

After these periods expire, the data is deleted or anonymized.

7. Rights of data subjects

According to Regulation (EU) 2016/679, you have the following rights:

• the right to be informed
• the right of access to data
• the right to rectification of data
• the right to erasure (“the right to be forgotten”)
• the right to restriction of processing
• the right to data portability
• the right to object
• the right not to be subject to a decision based solely on automated processing.

To exercise these rights, you may contact us at:

Email: secretariat@novaintermed.ro
Address: Bd. Pipera, no. 2-XI, 3rd floor, Voluntari, Ilfov County

You also have the right to file a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. Processing of minors’ data

The website and services of Novaintermed SRL are not intended for minors.

The company does not intentionally collect personal data from persons under the age of 18. If such data is accidentally provided, it will be deleted as soon as possible.

9. Data security

Novaintermed SRL implements appropriate technical and organizational measures to protect personal data against:

• unauthorized access
• accidental loss
• destruction or unauthorized modification.

10. Changes to the privacy policy

Novaintermed SRL reserves the right to periodically update this policy in order to reflect legislative changes or changes in the company’s activities.