I. General Information
The confidentiality of your personal data is one of the main concerns of SC LINA’S CAKE SRL (hereinafter referred to as the “SITE OWNER”), as the data controller. This document aims to inform you about the processing of your personal data, in the context of using the website you are currently visiting.
II. Categories of processed personal data
II.1. If you are a customer of the Website, the SITE OWNER will process your personal data such as name, phone number, email address, billing address, delivery address, data regarding your use of the Website, for example, your behavior/preferences/habits within the SITE OWNER’s services, as well as any other categories of data provided directly when creating a user account, placing an order through the website, or in any other manner resulting from the use of the Website. If you choose to create a user account on the Website using your Facebook or Google account, the SITE OWNER will process the following public profile data displayed by these applications: username, email address. If you choose to create a user account only before completing an order for a product available on the Website, your email address will be requested, based on which an account will be automatically created. If you do not complete the order, the email address and other provided data will not be stored by the SITE OWNER, and the created account will be automatically deleted.
II.2. If you are a visitor of the Website, the SITE OWNER will process your personal data that you provide directly in the context of using the Website, such as the data you provide in the contact/questions/complaints section, to the extent you contact us in this manner.
III. Purposes and legal basis of processing
III.1. If you are a customer of the Website, the SITE OWNER processes your personal data for the following purposes:
- for the performance of the contractual relationship between you and the SITE OWNER, namely for the acceptance, validation, shipping, and billing of orders placed on the Website, informing you about the status of orders, organizing returns for ordered products, etc.
Legal basis: The processing of your data for this purpose is based on the contract concluded between you and the SITE OWNER, as defined in the Terms and Conditions. Providing your personal data is necessary for the execution of this contract. Refusal to provide data may result in the inability to carry out contractual relations between you and the SITE OWNER.
- for compliance with legal obligations incumbent upon the SITE OWNER in the context of services provided through the Website, including tax obligations, as well as archiving obligations.
Legal basis: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusal to provide data may result in the inability of the SITE OWNER to comply with its legal obligations and thus the inability to provide you with services through the Website.
- for marketing activities, namely for sending, through distance communication means (email, SMS), commercial communications regarding products and services offered by the SITE OWNER, through the Website.
Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent for data processing for this purpose by ticking the corresponding box at the time of creating your account, or later, in the My Account section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. In addition, you can unsubscribe by accessing the My Account section.
- for conducting various analyses, reports regarding the functioning of the Website, profiling consumer preferences, primarily to improve the user experience on the Website.
Legal basis: The processing of your data for this purpose is based on the legitimate interest of the SITE OWNER to continually improve the customer experience on the Website. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
III.2. If you are a visitor of the Website, the SITE OWNER processes your personal data as follows:
- for marketing activities, namely for sending, through distance communication means (email, SMS), commercial communications regarding products and services offered by the SITE OWNER, through the Website.
Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent for data processing for this purpose by completing and ticking the corresponding box in the newsletter subscription form available on the Website. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. Providing your data for this purpose is voluntary. Refusal to provide consent for data processing for this purpose will not have negative consequences for you.
- for resolving complaints, claims, and for monitoring traffic and improving your experience on the Website.
Legal basis: The processing of your data for this purpose is based on the legitimate interest of the SITE OWNER to ensure the correct functioning of the Website, as well as to continually improve the visitor experience on the Website, including by addressing various comments, questions, or complaints. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
- Duration of data processing
As a principle, the SITE OWNER will process your personal data for as long as necessary to achieve the processing purposes mentioned above. In the case of being a customer, we will process your data for the entire duration of the contractual relationships and subsequently in accordance with the legal obligations incumbent upon the SITE OWNER (e.g., regarding financial-accounting documents for which the retention period provided by law is 10 years from the end of the financial year in which they were drawn up). If you are a customer and exercise the option to delete your user account, by email to the email address mentioned above, the SITE OWNER will interpret this action as your choice to unsubscribe from receiving commercial communications informing you about the products and services offered through the website. In this regard, if you choose to delete your user account, we will no longer send you emails and/or SMS of this kind. However, we want to inform you that deleting the account will not automatically delete your personal data. If you do not wish your personal data to be processed or if you wish to delete the data, you can exercise your rights detailed in point VII below. If you request the deletion of your account, but there is at least one active order on that account, the request to delete the account will only be recorded after the products are delivered and the last active order is completed. If you withdraw your consent to the processing of data for marketing purposes, the SITE OWNER will cease processing your personal data for this purpose, without affecting the processing carried out by the SITE OWNER based on your consent expressed before its withdrawal.
- Disclosure of personal data
To achieve the processing purposes, the SITE OWNER may disclose your data to partners, third parties, or entities that support the SITE OWNER in carrying out activities through the Website (e.g., courier companies, IT service providers), or to central/local public authorities, in the following exemplifying cases:
- for administering the Website;
- where such communication is necessary for the awarding of prizes or other facilities to the data subjects, obtained as a result of their participation in various promotional campaigns organized by the SITE OWNER through the Website;
- for maintaining, personalizing, and improving the Website and the services conducted through it;
- for data analysis, testing, research, monitoring usage trends and activities, developing security features, and user authentication;
- for sending commercial marketing communications, within the limits and conditions provided by law;
- when the disclosure of personal data is provided by law, etc.
- Transfer of personal data
Personal data provided to the SITE OWNER will not be transferred outside Romania.
VII. Rights you benefit from
Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:
- the right to information, namely the right to receive details regarding the processing activities carried out by the SITE OWNER, as described in this document;
- the right of access to data, namely the right to obtain confirmation from the SITE OWNER regarding the processing of personal data, as well as details about the processing activities such as how data is processed, the purpose of processing, recipients or categories of recipients of data, etc.;
- the right to rectification, namely the right to obtain without undue delay the rectification by the SITE OWNER of inaccurate/ unjustified personal data, as well as the completion of incomplete data; Rectification/completion will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.
- the right to erasure of data, without undue delay (“the right to be forgotten”), if one of the following reasons applies:
- they are no longer necessary for the purposes for which they were collected or processed;
- if consent is withdrawn and there is no other legal basis for processing;
- if the data subject opposes the processing and there are no legitimate grounds prevailing;
- if personal data has been processed unlawfully;
- if personal data must be erased to comply with a legal obligation;
- personal data has been collected in relation to the provision of information society services under Union law or national law under which the operator is subject.
- Following a request for data erasure, the SITE OWNER may anonymize this data (thus depriving it of personal character) and continue processing it for statistical purposes;
the right to restriction of processing to the extent that:- the data subject disputes the accuracy of data, for a period allowing the verification of their accuracy;
- processing is unlawful and the data subject opposes the erasure of personal data, instead requesting the restriction of their use;
- the operator no longer needs personal data for processing purposes, but the data subject requires them for the establishment, exercise, or defense of legal claims; or
- the data subject has objected to processing (other than direct marketing), for the period during which it is verified whether the legitimate grounds of the operator prevail over those of the data subject.
- the right to data portability, namely (i) the right to receive personal data in a structured, commonly used, and machine-readable format, and (ii) the right to have such data transmitted by the SITE OWNER to another data controller, to the extent that the conditions provided by law are met;
right to object – regarding processing activities can be exercised by submitting a request as indicated below;
at any time, for reasons related to the particular situation in which the data subject finds themselves, that the data concerning them be processed on the basis of the legitimate interest of the SITE OWNER or in the public interest, except where the SITE OWNER can demonstrate that they have compelling legitimate grounds which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims;
at any time, free of charge and without justification, that the data concerning them be processed for direct marketing purposes.
- the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
- the right to address the National Supervisory Authority for Personal Data Processing or competent courts, as applicable.
Google Analytics
This website uses Google Analytics. Google collects data through Google Analytics, so we advise you to carefully read their privacy policy, which you can view by accessing the following link: http://www.google.com/analytics/learn/privacy.html For any further questions regarding the processing of personal data and to exercise the rights mentioned above, please contact the email address mentioned above.
This website uses cookie files. For more information on how these files are used, please access the following link: Cookie Policy
