Personal data processing

This is an English translation provided for convenience. If there is any difference between the two versions, the Romanian version prevails.

What data we ask for, why we need it, who we share it with, how long we keep it and what you can ask us to do with it.

Who the controller is

PROFI PENTRU SĂNĂTATE S.R.L., tax ID (CUI) RO 35769300, J2016000298103, with its registered office at Str. Ion Băiesu, Bl. C3, Parter, 120037 Buzău, jud. Buzău. For any question about your data, write to office@profipentrusanatate.ro or call 0770 299 279.

Our data protection officer answers at dpo@profipentrusanatate.ro or by post at B-dul Eroilor nr. 126, 077190 Voluntari, jud. Ilfov, marked “For the attention of the data protection officer”.

What data we process and why

Data	Purpose	Legal basis
Name, email, phone number, delivery addresses, account password (stored encrypted)	Your account, taking and delivering orders	Performance of the contract
Company name, tax ID (CUI), registration number, billing address	The invoice and partner prices. We check the tax ID automatically in the public register of ANAF (the Romanian tax authority).	Performance of the contract and legal obligation
Products ordered, amounts, payment method, order history	Delivery, invoicing, returns and warranties	Performance of the contract and legal obligation
The result of the card payment (approved or declined). Card details never reach us.	Payment confirmation	Performance of the contract
Withdrawal statements, return requests and complaints	Handling them, refunds	Legal obligation
Messages sent through the website forms, including quote requests	Replying to you and making you an offer	Steps taken at your request before a contract, or our legitimate interest in replying to you
Your cookie choice: a pseudonymous code, the date and time, the policy version, your options	Proof of consent	Legal obligation
IP address, converted into a code with a secret key, without storing it in clear	Limiting abusive submissions through forms	Our legitimate interest in protecting the website
Browsing data through statistics and marketing cookies	Measuring visits and campaigns	Your consent, which you can withdraw at any time

We do not ask for your personal identification number (CNP). Without delivery and billing details we cannot take your order. We do not make automated decisions that have legal effects on you and we do not send you marketing messages without your consent.

Who we share data with

• The courier company, to deliver your goods.
• The payment processor PlatiOnline and Raiffeisen Bank, if you pay by card.
• The provider of the BOCP management system, in which we issue invoices and which hosts the shop, and the company that develops and maintains the website. They act only on our instructions, with written confidentiality and security obligations.
• ANAF, to check the tax ID and for invoices sent through the national e-invoicing system, our accountants and, on request, other authorities when the law requires it.
• Google, only if you allow the external map or statistics and marketing cookies. Company reviews from Bizoo are displayed by our server; viewing them does not send visitor data to Bizoo.

We do not sell data to anyone. The shop’s data is stored on servers in the European Union. Google services may transfer data to the United States of America on the basis of the European Commission’s decision on the EU-US Data Privacy Framework.

How long we keep it

• Invoices and accounting documents: 5 years, counted from 1 July of the year following the end of the financial year, as the accounting law requires.
• Account data: for as long as the account is active. If you ask us to close it, we keep only what the law requires.
• Withdrawal statements, returns and complaints: 3 years from resolution, the general limitation period.
• Messages sent through forms that did not lead to an order: 2 years at most.
• Your cookie choice and the cookies themselves: the periods in the Cookie policy.

Your rights

Under Regulation (EU) 2016/679, you have the right to find out what data we hold about you and receive a copy, to correct it, to ask for it to be erased or restricted, to receive it in a format you can take to another controller and to object to processing based on our legitimate interest. You can withdraw your consent at any time, without affecting what was done before.

Send your request to office@profipentrusanatate.ro or dpo@profipentrusanatate.ro. It is free of charge. We reply within one month at most; if the request is complex, the period may be extended by two more months, in which case we will let you know. If you are not satisfied, you can complain to the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, 010336 București, anspdcp@dataprotection.ro, dataprotection.ro.

How we protect it

The website uses an encrypted connection (HTTPS). Only people who need the data for orders have access to it, and backups are protected. You enter your card details only with the payment processor.

If we change this policy, we publish the new version here, and for changes regarding cookies we ask for your choice again.