GDPR Policy​

Starting 25 May 2018, the General Data Protection Regulation (GDPR) became applicable across the European Union. This Regulation represents the biggest change in the field of personal data protection in the last 20 years and has objectives that go far beyond the simple protection of private life.

Protecting your personal data is important to us. Therefore, we pay special attention to safeguarding the privacy of visitors who access 47webdesign.ro, as well as individuals whose personal data has been provided to us by a third party or accessed from another source, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”).

Please read this Policy carefully to understand how your information (“personal data”) will be handled.

This Policy explains the practices of 47 WEB DESIGN regarding the application of GDPR provisions, as well as the rights you have in relation to how your information is processed by 47 WEB DESIGN.

The processing of personal data carried out by 47 WEB DESIGN will always be performed in accordance with GDPR and with the personal data protection regulations applicable in each country where 47 WEB DESIGN operates.

Through this Policy, 47 WEB DESIGN aims to inform data subjects about the nature of the personal data we collect and process, the purposes of processing, and the rights available to them.


WHAT ARE PERSONAL DATA?

“Personal data” means any information that can identify you directly (for example, your name) or indirectly (for example, through pseudonymous data such as a unique identification number). This means personal data may include items such as email address, home address, mobile phone number, username, profile photos, personal preferences and shopping habits, user-generated content, financial information, and information about financial status.

It may also include unique numerical identifiers such as your computer’s IP address or your mobile device’s MAC address, as well as cookies.


WHAT DOES “PROCESSING” MEAN?

“Processing” means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.


DATA CONTROLLER

The personal data controller (the “Controller”) is 47 WEB DESIGN.


PRINCIPLES OF DATA PROCESSING

47 WEB DESIGN undertakes to comply with the GDPR principles (“Principles”), ensuring that all personal data are:

  • processed lawfully, fairly, and transparently;

  • collected for specified, explicit, and legitimate purposes;

  • adequate, relevant, and limited to what is necessary for the purposes of processing;

  • accurate and kept up to date;

  • kept in a form that permits identification of data subjects for no longer than necessary for the purposes;

  • processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, ensuring integrity, confidentiality, and availability.


LEGAL BASIS AND PURPOSES OF PROCESSING PERSONAL DATA

For the conclusion and performance of contracts

Under Article 6(1)(b) GDPR, personal data may be processed for the purpose of concluding or performing a contract. In order to provide our services and deliver products, we may need to process personal data belonging to you.

For compliance with legal obligations

Under Article 6(1)(c) GDPR, personal data may be processed to comply with legal obligations. We request certain personal data, and in some cases a personal identification number, in order to fulfill obligations imposed by tax authorities regarding invoicing and reporting.

For marketing purposes

Under Article 6(1)(a) GDPR, personal data may be processed where you have given consent for one or more specific purposes. In certain situations, your personal data may be used to send you marketing communications, offers, news, future campaigns, and invitations to events.

For carrying out our business activity

Under Article 6(1)(a) GDPR, personal data may be processed where you have provided consent for one or more specific purposes. We may contact you or share your personal data for the purpose of carrying out our activity. We may contact you to present our services and to establish potential future communications.


PROCESSING THE CONTACT FORM

47 WEB DESIGN will use the information you provide via the website contact section exclusively to process your request.

By providing any personal data through the 47 WEB DESIGN website, you understand and agree that your data will be processed in accordance with this Policy.

47 WEB DESIGN has adopted appropriate technical and organizational measures to ensure secure data transfer and GDPR-compliant processing by the relevant entities.

47 WEB DESIGN undertakes not to process personal data for purposes other than those for which they were provided, unless you have given express consent for additional purposes.


DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Personal data processed by 47 WEB DESIGN may be disclosed and/or transferred to third parties only with your express consent, except where disclosure is required by law or contractual obligations.

47 WEB DESIGN may transfer your personal data to third parties such as local authorities in the countries where contractual activity is carried out, for the purpose of obtaining approvals related to an event. 47 WEB DESIGN may also transfer personal data to local authorities in Romania or to ecclesiastical authorities in order to fulfill contractual duties.

Please note that in certain circumstances we may be required to disclose your personal data to our partners and/or other third-party service providers working with 47 WEB DESIGN.


AUTOMATED PROCESSING. COOKIES

The 47webdesign.ro website uses cookie identifiers.


DATA RETENTION PERIOD

47 WEB DESIGN may retain processed data for different periods considered reasonable, depending on the purposes outlined above. We retain your data only as long as necessary to achieve the purpose for which we hold it, to meet your needs, or to comply with legal obligations.

To determine retention duration, we apply the following criteria:

  • If you purchase products or services, we retain your personal data for the duration of the contractual relationship.

  • If you participate in a promotional offer, we retain your personal data for the duration of that offer.

  • If you contact us with a question, we retain your personal data for the time needed to process the request, but no longer than 5 years from the last correspondence.

  • If you create an account, we retain your personal data until you request deletion or after a period of inactivity. Data for this purpose will be deleted 5 years after the last interaction with the account (e.g., login).

  • If you consent to marketing, we retain your data until you unsubscribe, request deletion, or after a period of inactivity defined under local rules. Data stored for direct marketing communications will be deleted 5 years after your last interaction.

  • If cookies are stored on your device, we retain them as long as needed to fulfill their purpose (e.g., session cookies during a session) and for a period defined by local rules. Data processed via cookies used for social sharing features may be retained for up to 5 years from collection, based on your consent.


DATA SUBJECT RIGHTS

Under GDPR, you have several rights regarding the personal data processed by 47 WEB DESIGN:

  • Right of access – You have the right to access your personal data. The first copy is provided free of charge. Additional copies may involve a reasonable administrative fee. Manifestly unfounded, excessive, or repetitive requests may not receive a response.

  • Right to rectification – You have the right to request correction of inaccurate or outdated data and/or completion of incomplete data. If you have an account, you may update your data via “My Account.”

  • Right to erasure (“right to be forgotten”) – In some cases, you have the right to request deletion of your data. This is not absolute; legal obligations may require retention.

  • Right to restriction of processing – You may request restriction of processing in specific situations, including when accuracy is contested, processing is unlawful and you oppose erasure, the Controller no longer needs the data but you require it for legal claims, or you object to processing pending verification of legitimate grounds.

  • Right to data portability – You may request transfer of certain data you provided to another controller, where processing is based on consent or contract and carried out by automated means.

  • Right to object – You may object at any time to processing based on legitimate interests.

  • Right to withdraw consent – You may withdraw consent at any time when processing is based on consent. Withdrawal does not affect prior lawful processing.

  • Right to lodge a complaint – You have the right to lodge a complaint with the data protection authority in your country of residence.

  • Right to object to direct marketing – You may unsubscribe from direct marketing at any time (this may also be available through your account).

  • Right to disable cookies – You can disable cookies through browser settings. Disabling cookies may limit access to certain website features. Your browser help section will explain how to manage cookies.

To exercise any of these rights, you may submit a request to office@47webdesign.ro. In such cases, we may request proof of identity.


LEGAL REQUESTS

We access, retain, and share information with regulators, law enforcement, or other entities:

  • in response to legal requests where we believe in good faith we are required to do so;

  • where we believe in good faith it is necessary to detect, prevent, and respond to fraud, unauthorized use of our materials, violations of our policies, or other harmful/illegal activity, to protect our rights, users, and others, including within investigations, or to prevent imminent harm.

Information may be stored longer when subject to legal requests, legal obligations, government investigations, or investigations into potential policy violations.


RELATIONSHIPS WITH OTHER CONTROLLERS. INTERNATIONAL TRANSFERS

Depending on context, it may be necessary to share information with partners and service providers, both internally and externally, in order to provide services professionally and in compliance with GDPR.

Data controlled by 47 WEB DESIGN may be transferred, transmitted, stored, and processed within the EU or in countries outside your country of residence, for the purposes described in this Policy. Such transfers are necessary to provide services at the highest standard.

We use Standard Contractual Clauses approved by the European Commission and rely on adequacy decisions where applicable, including for transfers from the EEA to the United States and other countries. Depending on the location where an event is to take place, we may share your personal data with public authorities and providers in countries without an adequacy decision, only with your consent and only to fulfill contractual obligations.


SECURITY OF PROCESSING

47 WEB DESIGN has implemented technical and organizational measures updated in line with GDPR requirements to protect personal data against unauthorized access, misuse or disclosure, unauthorized alteration, destruction, or accidental loss.

All employees, collaborators, and any third parties acting on behalf of 47 WEB DESIGN are required to respect confidentiality and GDPR requirements, in accordance with this Policy.


UPDATES TO THIS POLICY

Please note that this Policy may be updated periodically by updating the 47webdesign.ro website.

How will we notify you of changes?

We will send a notification before implementing any changes and provide the opportunity to review the revised Policy before you choose to continue using our materials.

Please do not continue using 47webdesign.ro if you do not agree with such changes. We also recommend checking this page regularly for updates.

The terms of this Policy are interpreted in accordance with applicable law.


CONTACT

If you have questions or concerns about how we process and use your personal data, or if you want to exercise any of your rights, please contact us at: office@47webdesign.ro