Privacy Policy and Data Protection
By the requirements of Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, the administrator of www.upventa.ro assumes responsibility for managing personal data securely and exclusively for the purposes specified below.
Filling out any forms available on this website, such as the contact form, newsletter subscription, or similar forms, constitutes your express and unequivocal consent for your provided data to be included in the Upventa SRL database and processed accordingly.
The processing of your data may also be carried out by third parties only when the requested services require collaboration with Upventa SRL. In such cases you will receive written notification regarding the establishment of this collaboration and your explicit written consent will be requested before any data sharing occurs.
1. Your Rights
Under current personal data protection laws, you are entitled to the following rights:
• Right to Information – You have the right to be informed about how your personal data is processed.
• Right of Access – You can request access to the personal data you have provided.
• Right to Rectification – You can update, correct, or supplement your data to ensure its accuracy and prevent potential harm.
• Right to Erasure (“Right to be Forgotten”) – You can request the deletion of your personal data from Upventa’s database if:
You believe it is being used unlawfully.
The purpose for which it was collected has been fulfilled.
You no longer wish to receive communications from us.
• Right to Object – You may object to the storage, processing, or use of your personal data for purposes other than those outlined in this document.
• Right to Restriction of Processing – You have the right to be informed if your data will be shared with a third party and to object to this action if you do not consent.
• Right to Data Portability – If applicable, you can request that your data be transferred to another data controller in a technically compatible format, without incurring any financial obligations.
• Right Not to Be Subject to Automated Decisions – You have the right to be informed and provide consent before your data is used for purposes beyond those specified in this document.
• Right to File a Complaint – You can submit a complaint to the National Authority for the Supervision of Personal Data Processing (ANSPDCP) or other relevant data protection authorities.
2. Data Retention Period
Your personal information will be retained only for as long as necessary to fulfill the purpose for which it was collected. Generally, this means for the duration of any contractual relationship with Upventa and for any additional period required or permitted by applicable law.
3. Requested Data
The personal information that may be requested typically includes your name, surname, and email address.
If you request a specific service, additional personal data may be required, such as:
• Personal Identification Number (CNP)
• Date and place of birth
• Home/residence address
• Company headquarters address (if representing a business)
• Company identification and contact details
• Personal or business bank account information (for invoicing and service payments)
If any of your provided data changes during the collaboration, please inform us as soon as possible, as such modifications may impact the legal documents associated with your collaboration.
Upventa SRL, as the administrator of www.upventa.ro, will never request confidential information such as:
• Bank account details
• Personal passwords
• Other sensitive data
If, as a user/visitor, you personally disclose such information to third parties, you assume full responsibility for your actions. In such cases, Upventa SRL does not assume any liability for any resulting damages.
4 . Security
-
We implement security measures to prevent unauthorized access and avoid misuse, modification, destruction, or accidental loss of your personal data. We adopt appropriate organizational and technical security measures and enforce rules and procedures to ensure that personal data stored in our systems cannot be accessed by unauthorized individuals.
When collaborating with third parties for data processing, we require them to:
• Demonstrate compliance with our security standards
• Adhere to all applicable data protection regulations throughout the collaboration
These third-party entities operate under specific instructions from Upventa, and their obligations regarding data processing and security are outlined in our contracts with them.
5. Mystery Shopper Platform
-
Each page of the online system is accessible only after authentication using user credentials and cannot be accessed via direct links without appropriate permissions.
• Each client’s data is stored separately, ensuring that each client has access only to their own information.
• Additionally, within each project, every user can only access the information for which they have proper authorization.