Processing of personal data
Data privacy and your trust are important to La Fantana, where we comply with the privacy and right to protection of personal data of our visitors, customers, potential customers, employees, potential employees, and collaborators, in line with the applicable legislation in the sector. The confidentiality of your personal data represents one of La Fantana's main focuses.
We take this topic seriously, and through this policy, we wish to inform you about the collection and use of your personal data, to ensure transparency regarding the processing of incident data and the right to decide for yourself how the information you communicate to us are used.
This document is intended to inform you about the processing of your personal data when using the following websites https://lafantana.ro/; kafune.ro
Starting with May 25, 2018, the legal basis is EU Regulation no. 679/2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data ("Regulation") and secondary legislation.
We also mention that we will use all data and documents you submit to us exclusively for the purpose for which they were transmitted to us, as per the information provided in this policy.
For this reason, we inform you about the data we collect, why this data is necessary for us, and how you can object to data collection and processing.
1. Principles for personal data processing
As per the provisions of European Regulation no. 679/2016, La Fantana undertakes that personal data collected through websites part of La Fantana Group such as: https://lafantana.ro/ and kafune.ro and the call center service, to be processed in compliance with the following principles:
- Lawfulness, fairness, and transparency – data are processed lawfully, fairly, and transparently towards the Data Subject;
- Purpose limitations – data are collected for specified, explicit, and legitimate purposes and are not further processed in a way inconsistent with these purposes;
- Data minimisation – data are adequate, relevant, and limited to what is necessary for the purposes for which they are processed;
- Accuracy - the data are accurate and up-to-date, and when inaccurate will be deleted or rectified without delay, considering the purposes for which they are processed;
- Storage limitations - data are kept in a form that allows identification of data subjects for no longer than is necessary to fulfill the purposes for which the data are processed; personal data may be stored for longer periods insofar as they will be processed exclusively for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the implementation of appropriate technical and organisational measures;
- Integrity and confidentiality – data is processed in a way that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, by taking appropriate technical and organizational measures;
- Responsibility – the data will be processed in compliance with the above-mentioned principles, and La Fantana undertakes the responsibility to prove the conformity of the processing.
2. What data do we collect and how do we process them?
By browsing and using our website and/or our call center service, depending on the specifics and purpose of each processing, we come into contact with your data, data that we use as described below, to which we will refer, according to Article 13 of the Regulation, to (a) the purposes for which personal data are processed, (b) the legal basis for the processing; (c) the categories of personal data concerned; (d) the recipients or categories of recipients of the personal data, as applicable; (e) where relevant, the transfer of personal data to a recipient in an EU third country or an international organisation; (f) the period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period; (g) the rights you have as a data subject.
For advertising purposes to inform you about news, actions, events, services, and products similar of La Fantana and its brands and to meet your needs, we collect your e-mail address based on your express consent, expressed by actively ticking the acceptance box, as a legal basis for processing personal data. The data provided by subscribing to the newsletter will be transferred to our contractual partner who provides direct mailing services for the benefit of La Fantana. You can withdraw your consent at any time by accessing the link provided in each commercial communication email, and such withdrawal will have effects for the future. The collected data will be kept until you withdraw your consent to receive commercial communications from La Fantana.
In order to be able to communicate with you and respond to your requests, in the Contact section we collect, based on legitimate interest or the execution of the contract as legal grounds for processing personal data, data such as name, surname, e-mail address, telephone number, which will be processed internally by our colleagues able to provide you with the most appropriate answers to your requests. The collected data will be kept for different periods of time, depending on the content of your request and the actual need and legal or contractual obligations to keep these data.
In order to extend our team according to vacancies within La Fantana and based on legitimate interest as legal basis for processing personal data, we collect your personal data mentioned in the CV, which may refer to name, surname, postal address, e-mail address, telephone number, date of birth, education, professional training, preferences, character traits, hobbies, which will be processed within La Fantana by the Human Resources department.
The collected data will be kept for the duration of the recruitment process and will be deleted when the recruitment process ends without you being declared admitted and thus becoming a colleague of the La Fantana team.
D. Site navigation
In order to improve your browsing experience on our site, but also our products and services, we wish to allow you to make an informed decision regarding the use or blocking of cookies, unless they are strictly necessary to ensure the technical functionality of the website.
Thus, in this section, we inform you about the type and purpose of using cookies on the pages of our website. The use of our site is generally possible without cookies unless they are technically necessary.
For further information, including the storage duration of these types of data, access the Cookies Policy section.
E. My Account
In order to have access to the My Account platform, to place and manage addressed orders, as well as to carry out the contractual relationship with La Fantana, by accessing My Account we collect, based on the execution of the contract as a legal basis for processing personal data, data such as name, surname, e-mail address, telephone number, customer number, data that will be processed internally by colleagues responsible for managing La Fantana's customer relationship.
The payment card data of the Customer / User / Buyer will neither be accessible nor stored by www.lafantana.ro, but only by the institution authorizing the Transaction or another entity authorized to provide card identification data storage services, about whose identity the Customer / User / Buyer will be informed before entering the data.
The collected data will be kept until the termination of the contractual relationship and for an additional period of 10 years after the termination of the contractual relationship, for accounting reasons and exercise of legal rights, if this would be necessary.
At the same time, we mention that the lafantana.ro site is developed and hosted by our contractual partner, Zitec, which is a recipient of the data provided through such page, the data being stored on servers located in Romania.
F. Call center
In order to be in contact with you and respond to your requests in real time, relying on legitimate interest and the performance of the contract as legal grounds for processing personal data, we collect your personal data, which may refer to name, surname, postal address, e-mail address, telephone number, voice, which will be processed within La Fantana by our colleagues able to provide you with the most appropriate answers to your requests, including for the creation of your user account, if you are a La Fantana customer, according to section D above.
The collected data will be kept for the standard storage period of 3 months, and if, given the nature of the request, the legitimate interest, or the exercise of a right, they will be kept for different periods of time, depending on the actual need, and will be deleted when their storage is no longer justified.
For creating your user account, in order to access, place, and manage your orders, and carry out the contractual relationship with La Fantana, we process, based on the performance of the contract, legitimate interest or legal obligation, as legal basis for processing personal data, data such as name, surname, e-mail address, telephone number, which will be used internally by colleagues responsible for managing La Fantana's customer relationship.
The collected data will be kept until the termination of the contractual relationship and for an additional period of 10 years after the termination of the contractual relationship, for accounting reasons and for example exercise of legal rights, if this would be necessary.
H. Application installed on your mobile device
In order to have the accuracy of stock management regarding the merchandise and to reduce the financial losses of the company, based on legitimate interest as a legal basis, we process data regarding the moment of receipt of La Fantana products (quantity of goods, date and time they were received, your handwritten signature using the stylus on the screen of the mobile device, your phone number or that of the contact person and your balance). Through the application, your name and signature or that of the responsible person who approved the delivery/installation / or withdrawal of La Fantana products will be taken in handwritten form. Your email address or postal address will also be retrieved in order to send you documents in physical or electronic format regarding notices, invoices, and documents that will contain your name and signature taken from the moment of receipt of La Fantana products. The data collected regarding the signature with stylus will be kept on the mobile device until the confirmation of the transmission of the above-mentioned documents to you by email or through the Romanian Post Service, subsequently they will be saved on the company's server, to be kept until the termination of the contractual relationship and an additional period after the termination of the contractual relationship, for accounting reasons and the exercise of legal rights, where necessary.
The processing of this data also fulfills the purpose of ensuring that contractual obligations have been respected and fulfilled towards you.
In order to organize La Fantana contests/campaigns and identify the participants designated winners in order to contact them and offer prizes, having the legitimate interest and legal obligation as legal grounds for processing personal data, we collect your data, which may refer to name, surname, postal address, e-mail address, telephone number, images, voice, which will be processed by La Fantana colleagues, advertising agencies and/or contractual partners involved in organizing and conducting contests/campaigns.
The data of the participants who have not been declared winners will be deleted at the end of the contest/campaign, and in the case of the data of the participants declared winners, for different periods of time, according to the accounting and tax legal provisions, and will be deleted when their storage will no longer be justified.
J. External prospecting service providers
In the process of verifying the solvency of current and potential contractual partners, we use the services of specialized companies that provide us with aggregated data obtained from public sources such as the Official Gazette of Romania, Part IV, public databases hosted by: (i) the Romanian courts portal (portal.just.ro), (ii) the National Agency for Fiscal Administration (www.anaf.ro), (iii) National Bank of Romania - Payment Incidents Register (www.bnr.ro/Centrala-Payment Incidents-(CIP)-718) and from the database of the National Trade Register Office (www.onrc.ro);
For situations where personal data are used to carry out prospecting activity, only data referring to the company's telephone number and e-mail address will be processed in a limited manner.
The basis for processing personal data referred to in this Section (External prospecting service providers) is La Fantana's legitimate interest in initiating or maintaining business relationships with solvent entities and which comply with applicable laws.
Potential customers can request, at the time of the first contact with La Fantana representatives, the cessation of any processing of personal data. In this case, La Fantana will no longer process your data and will delete any personal data about you. Termination of processing may also be requested after the first contact insofar as there are no other grounds for such processing.
In the case of existing customers, the basis for processing is both the execution of the contract and the legitimate interest of La Fantana. The collected data will be kept until the termination of the contractual relationship and for an additional period of 10 years after the termination of the contractual relationship, for accounting reasons and the exercise of legal rights, if this is necessary.
K. Other recipients of data
For the purposes mentioned above, La Fantana may disclose personal data, as appropriate and justified, to other third parties, such as:
- marketing service providers;
- courier service providers / Romanian Post;
- payment/banking service providers;
- site management/maintenance service providers;
- providers of other services, entities that provide assistance to La Fantana in data processing as proxies, and public authorities, based on and within the limits of legal provisions and as a result of expressly formulated requests.
3. Links to other websites
The site lafantana.ro contain links to other Internet pages, such as youtube.com. This policy applies to La Fantana Group websites, such as: https://lafantana.ro/ ;
We are not responsible for extraneous content made available via links and marked as such. La Fantana is exonerated from liability for illegal content, the presentation of erroneous or incomplete information, as well as for damages resulting from the use or non-use of the information contained in these sites.
4. What rights do you have concerning your Personal Data
i. Right of access
The data subject has the right to obtain from La Fantana a confirmation as to whether or not personal data concerning him or her are being processed and a copy of the personal data undergoing processing. For any other copies requested by the data subject, La Fantana may charge a reasonable fee based on administrative costs.
ii. Right to rectification
The data subject has the right to obtain from La Fantana, without undue delay, the rectification of inaccurate personal data concerning him or her.
Taking into account the purposes for which the data have been processed, the data subject has the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.
iii. Right to erasure
The data subject has the right to obtain the deletion of personal data concerning him/her, without undue delay, when one of the situations provided by the Regulation, which allows the refusal of the request for their deletion, does not occur.
iv. Right to restriction of processing
The data subject has the right to obtain from La Fantana the restriction of processing in the following cases:
The data subject disputes the accuracy of the data, for a period enabling La Fantana to verify the accuracy of the data;
The processing is illegal, but the data subject opposes the erasure of Personal Data, requesting instead the restriction of their use;
La Fantana no longer needs personal data for processing, but the data subject requests them for the establishment, exercise, or defense of a right in a court of law;
The data subject has objected to the processing for the period of time in which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
v. Right to portability
The data subject has the right to receive the personal data concerning him or her that he or she has provided to La Fantana in a structured, commonly used, and machine-readable format and has the right to send these data to another controller without hindrance from the controller to whom the personal data has been provided, if:
processing is based on consent; or
the processing is based on a contract; or
processing is carried out by automated means.
vi. Right to object
At any time, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of his or her data, including profiling based on those provisions, unless otherwise provided by law.
Where the processing of personal data is for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for this purpose, including profiling, insofar as it is related to such direct marketing.
vii. The right not to be subject to an individual decision
The data subject has the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning the Data Subject or similarly significantly affects him/her, having the right to request and obtain:
withdrawal or annulment of any decision producing legal effects concerning him/her, made exclusively based on processing carried out by automatic means, intended to evaluate certain aspects of his/her personality, such as professional competence, credibility, conduct, or other such aspects;
reassessment of any other decision made in respect of him/her which significantly affects him/her, if the decision was made solely based on processing which fulfils the conditions set out in the previous paragraph.
viii. The right to address the courts and/or the National Supervisory Authority for Personal Data Processing at the following address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania or at the email address firstname.lastname@example.org;
5. How you can exercise your rights
You can exercise your rights mentioned above by a written request, sent online to the e-mail address email@example.com. In order to avoid providing information to unauthorized persons, according to the internal procedure for solving such requests, the applicant may be asked for additional information in order to verify his/her identity/interest/right of representation.
The request will be solved no later than one month after receipt. This period may be extended by two months where necessary, taking into account the complexity and number of requests, La Fantana providing information on any such extension within one month as of receipt of the request, together with the reasons for the delay.
If the data subject requests electronic form, the information shall be provided in electronic form where possible, unless the data subject indicates a different format.
If La Fantana does not take action on the data subject's request, it will inform the data subject, without delay and no later than one month after receipt of the request, of the reasons for not taking action and of the possibility of lodging a complaint with a supervisory authority and using any legal remedies.
The information are provided free of charge. If requests from a data subject are manifestly ungrounded or excessive, in particular, due to their repetitive character, La Fantana may:
either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested;
or refuse to comply with the request.
6. Security measures regarding data processing
All information collected through lafantana.ro website are processed in compliance with the principles mentioned above, to which are added technical and organizational measures that allow traceability and transparency regarding the processing of your data. About the processors through whom personal data can be processed, La Fantana takes the necessary measures to ensure that they meet the legal requirements regarding data protection and comply with the relevant standards and that a limited number of persons have access to the data, restricted to those who need to access them in order to perform their contractual obligations.
As a principle, accessing databases and files/platforms requires authentication by ID and password, and the servers on which they are stored are located in Romania and properly managed.
8. Contact details
If you have further questions regarding this policy, you can contact us using the details below:
8C Gării Obor Blvd., sector 2, Bucharest, Romania