The company “Resource Alliance SRL. with headquarters MD-2051, str. Ion Creanga, 84 ap.(of)3, mun. Chisinau R. Moldova, the operator of the online store www.joujou.md”, declares that all personal data collected through the website www.joujou.md are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Council Directive 95/46/EC (General Data Protection Regulation) GDPR.
Resource Alliance SRL. respectă dreptul privind procesarea datelor cu caracter personal ale clienților, care accesează magazinul online, în conformitate cu legislația în domeniu.
§ 1 Categories of data processed, purpose and legal basis
Resource Alliance SRL. collects personal information when:
a) registering an account in the online store and managing it. Legal basis – Data processing is necessary for the execution of a contract with the data subject and the free provision of services (Article 6 para. (1) letter (b) of the GDPR);
b) placing an order in the online store. Legal basis – The need to execute the sales contract (Article 6 para. (1) letter (b) of the RGPD);
c) subscribing to the newsletter, the subject of which is provided electronically. Legal basis – The data subject’s consent to process his personal data, for the provision of the Newsletter service (Article 6 para. (1) letter (a) of the GDPR).
1. When registering an account in the online store, the customer provides the following personal data:
a) name – first name;
b) delivery address:
с) code. post office and city;
d) country (state);
e) street, house/apartment number;
f) email address;
g) phone number;
When registering an account in the online store, the customer sets an individual password to access his account. The customer can change the password later, under the conditions described in §6.
2.When placing an order in the online store, the customer provides the following data:
a) email address;
b) adresa de livrare:
c) cod. poștal și oraș;
d) țară (stat);
e) stradă, numărul casei/apartamentului;
f) numele – prenumele;
g) numărul de telefon;
3. În cazul antreprenorilor, lista de colectare a datelor cu caracter personal este extinsă prin:
a) compania antreprenorului;
b) numărul personal de identificare (IDNP).
4. În cazul utilizării serviciilor Newsletter, clientul oferă doar adresa sa de e-mail.
5. Sunt colectate și prelucrate anumite informații suplimentare în timp ce clientul accesează site-ul web www.joujou.md, în special: adresa IP atribuită calculatorului folosit de client sau adresa IP externă a furnizorului de Internet, numele de domeniu, tipul de browser, timpul de acces și tipul sistem de operare.
6. De la clienți pot fi colectate datele de navigare, inclusiv linkuri și cookie-uri, care au o legătură cu activitățile întreprinse în magazinul online www.joujou.md. De asemenea. pentru a stabili și a investiga revendicări, pot fi procesate date, cum ar fi: numele, prenumele, date privind utilizarea serviciilor și alte date necesare pentru a dovedi existența revindicării. Temeiul juridic – interesul legitim (articolul 6 alin. (1) lit. (f) din RGPD). Datele sunt colectate pentru a facilita utilizarea serviciilor și de a îmbunătăți funcționarea acestor servicii.
7. Transferul de date cu caracter personal către Resource Alliance SRL. este voluntar, în legătură cu furnizarea serviciilor magazinului online. În timpul înregistrării unui cont, clientul este rugat să îndeplinească toată informația specificată cu caracter personal, pentru a omite anumite erori. În momentul plasării unei comenzi, fără a fi înregistrat un cont, clientul poate întâlni anumite obstacole.
§ 2 Access and processing time of personal data
1. Personal data are transmitted to service providers within Resource Alliance SRL, while the website www.joujou.md is accessed. The information is transmitted in accordance with the provisions of the RGPD, only for the performance of service tasks.
2. Personal data is processed when there is an agreement from the customer and it is valid until the agreement is canceled and for a period of time after cancellation, in accordance with the law.
At the same time, the storage of personal data is possible for the realization of certain statistics, research and service improvements.
3. In the case of purchasing a product in the online store, personal data may be transferred, depending on the customer’s choice, to courier services.
4. Browsing data is used to provide customers with a better quality of service, for statistical data analysis and adaptation of the online store to customer preferences, as well as the administration of the online store.
5. When the customer is subscribed to the newsletter, Resource Alliance SRL. send to the customer’s email address, commercial information about promotions and new products available in the online store.
6. In case of sending a request, Resource Alliance SRL. provides personal data to authorized state bodies, in particular the organizational units of the Prosecutor’s Office, the Police, the President of the Office for the Protection of Personal Data, the President of the Office of Competition and Consumer Protection or the President of the Electronic Communications Office.
§ 3 Use of cookies
1. The online store uses small text files called cookies. They are registered by Resource Alliance SRL. on the device used by the person accessing the online store. A cookie file contains the name of the domain from which it originates, its expiration time, and an individual randomly selected number for this file.
The information collected thanks to these files helps the correct functioning of the shopping cart (to complete the order simply and quickly), to properly customize the content of advertisements, as well as the general functioning of the site.
2. Resource Alliance SRL. uses two types of cookies:
a) Session cookies: after ending the browser session or closing the computer, the stored information is automatically removed from the device’s memory. The mechanism of session cookies does not allow the collection of personal data or confidential information from the client’s computer.
b) Persistent cookies: they are stored in the memory of the device used by the client and remain there until they are deleted or expire automatically. The mechanism of persistent cookies does not allow the collection of personal data or confidential information from the client’s computer.
3. Resource Alliance SRL. uses its own cookies for the following purposes:
a) authentication of the customer in the online store and ensuring access (after authentication), thanks to which the customer does not have to enter his login data and password on each separate page of the online store;
b) analysis, research and especially to create anonymous statistics, to understand how customers use the store website.
4. Resource Alliance SRL. uses external cookies: for the collection of general and anonymous statistical data through Google Analytics analytical tools (external cookie administrator: Google Inc. based in the USA);
5. The cookie mechanism is safe for online store customers. The collection of data through cookies does not cause damage (viruses or other unwanted programs) to the client’s computer. However, in their browsers, customers have the option to limit or disable the access of cookies to their computer. Using this option does not stop accessing and using the online store website, except for certain functions.
6.Information about browsers and how to disable and refuse cookies.
a) browserul Internet Explorer; ( https://support.microsoft.com/ro-ro/help/17442/windows-internet-explorer-delete-manage-cookies )
b) browserul Android; (https://support.google.com/accounts/answer/61416?hl=ro&co=GENIE.Platform%3DAndroid&oco=1 )
c) browserul Mozilla Firefox; (https://support.mozilla.org/ro/kb/activarea-si-dezactivarea-cookie-urilor)
d) browserul Chrome; ( https://support.google.com/accounts/answer/61416?hl=ro&co=GENIE.Platform%3DDesktop&oco=1 )
7. Resource Alliance SRL. may collect customers’ IP address. An IP address is a number assigned to each computer connected to the Internet. In most cases, it changes every time there is an Internet connection. The IP address is used by Resource Alliance SRL. for determining the regions where the most views are observed. The information collected is considered useful information for the administration and improvement of the website www.joujou.md
8. The online store contains links to other websites. Important! Our company is not responsible for the privacy rules applicable to them.
§ 4 Customer rights
1. Right to withdraw consent. Legal basis: art. 7 point. 3 of the GDPR.
a) The customer has the right to withdraw any consent given by Resource Alliance SRL.;
b) Withdrawal of consent has no negative consequences for the customer, but may prevent further use of the services or their operation.
2. Right to object. Legal basis: Article 21 GDPR.
a) At any time, the customer has the right to object to the processing of his personal data, including profile data, if Resource Alliance SRL. folosește datele cu caracter personal în marketingul direct;
b) If the customer’s objection proves to be justified and Resource Alliance SRL. will not have a different legal basis for processing the personal data, the customer’s data will be deleted from the database.
3. Right to erasure (“right to be forgotten”) – legal basis: Art. 17 GDPR
a) the customer has the right to request the deletion of all or certain personal data.
b) the customer has the right to request deletion of personal data in the following cases:
a. personal data are no longer necessary for the purposes for which they were collected or processed;
b. withdraw the consent on the basis of which the data processing takes place;
c. objects to the use of their data for marketing purposes;
d. personal data is processed unlawfully;
e. personal data must be deleted in order to comply with a legal obligation under European Union law or the law of a Member State to which Resource Alliance SRL is attributed.
c)Resource Alliance SRL. following certain requests for erasure of personal data or withdrawal of consent, may retain certain personal data only where processing is necessary for the establishment, assertion or defense of claims, as well as for compliance with legal obligations. This applies in particular to personal data including: name, surname, e-mail address. Data is retained for the purpose of resolving complaints and claims related to the use of the www.joujou.md online shop.
4. Right to restriction of data processing – legal basis: art. 18 GDPR.
a) The customer has the right to request restriction of the processing of his personal data. The submission of a request, pending its examination, shall prevent the use of certain functions or services, the use of which involves the processing of data covered by the request. Resource Alliance LLC. will not send the customer messages, including marketing messages.
b) The customer has the right to request a restriction on the use of personal data in the following cases:
a. disputes the accuracy of the personal data, Resource Alliance SRL. limits the use of the personal data, for a period that allows the controller to verify the accuracy of the data (no more than 7 days);
b. where the processing of the data is unlawful and the data subject objects to the erasure of the data by requesting the restriction of its use;
c. the controller no longer needs the personal data for the purpose of the processing, but the data subject requests them in order to assert or defend a right.
5. Right of access to data – legal basis: art. 15 GDPR.
The customer has the right to obtain a confirmation from the controller whether or not he/she is processing the personal data, if so, the customer has the right:
a. to obtain access to personal data;
b. to have information about the purpose of the processing, the categories of personal data processed, the planned period of storage and the right to lodge a complaint to a supervisory authority;
c. to request a copy of the personal data.
6.Right to rectify data – legal basis: art. 16 GDPR.
The customer has the right to request the administrator to rectify incorrect personal data. In view of the purposes of the processing, the customer has the right to request the completion of incomplete personal data, including by providing an additional statement, by directing the request to the e-mail address in accordance with §7 of the Privacy Policy.
7. Right to data transfer – legal basis: Art. 20 GDPR
The customer has the right to receive his/her personal data that he/she has provided to the controller and then to send it to another personal data controller of his/her choice. The controller will send the customer’s personal data as a csv file.
8. When a situation similar to the aforementioned rights arises, Resource Alliance Ltd. is obliged to comply with the request and to resolve it without delay (no later than one month after its receipt). In justified cases, it is possible to extend the deadline by two months. Resource Alliance SRL. within one month of receipt of the request will inform the client about the extension of the deadline and the reasons for the delay.
9. The customer may send complaints to the controller, requests and queries concerning the processing of personal data and the exercise of his/her rights.
10. The client has the right to request Resource Alliance SRL. to provide copies of the contractual terms by directing the inquiry in the form indicated in §7 of the Privacy Policy.
11. The customer has the right to lodge a complaint to the President of the Office for Personal Data Protection in order to infringe his/her rights or other rights granted by the GDPR.
§ 5 Services tailored to customer interests and preferences (profiling)
1. Profiling – any form of automated processing of personal data. Profiling involves the use of personal data to evaluate certain personal factors of the natural person, in particular to analyze aspects related to the individual’s action, economic situation, health, personal preferences, location and behavior.
2. Personal data of customers may be processed automatically, however, they do not produce legal effects and do not have a negative effect on the situation of customers.
3. The profiling of personal data by Resource Alliance SRL. is based on the processing of customer data in an automated and manual way, using it to evaluate certain customer information, in particular to analyze or forecast customer preferences and personal interests.
4. In order to deliver marketing messages to the customer, Resource Alliance Ltd. uses its own cookie mechanisms to download information about the activity of customers, who visit the online shop website. Details on the use of cookies can be found in §3. Legal basis – legitimate interest (Article 6 para. (1) lit. (f) of the GDPR), is to relate marketing messages to customer preferences and interests.
§ 6 Security management - password
1. Resource Alliance SRL. provides customers with a secure connection when transmitting personal data and logging into the customer account on the website. Resource Alliance SRL. uses SSL encryption (security of data transmitted over the Internet).
2. Access to the customer’s account on www.joujou.md is possible only after entering the personal password. If the customer has lost his/her password, the online shop allows to generate a new password. The password is stored in the database in an encrypted form in such a way that it cannot be read. In order to generate a new password, the customer will be asked to enter his e-mail address in the form available under the “remember your password” link provided in the login form. The new password will be automatically sent to the e-mail address provided during registration or saved in the last modification of the account profile.
§ 7 Privacy policy changes
1. Privacy Policy may be subject to change, customers will be notified 7 days in advance of certain changes.
2. Questions about the privacy policy should be addressed to: [email protected]