Data protection policy
The website www.medicalwear.ro is operated by S.C. Demoteks Medikal S.R.L., with headquarters in Str. Erou Serban Ion 35A, sector 2, Bucharest, Romania, registered in the Trade Register with number J40/13374/2016, RO3662312.
The purpose of this policy is to inform you about the personal data processing activities carried out by Demoteks Medikal and it applies to all the processing carried out by us, including the interaction with our web page www.medicalwear.ro.
Collection of personal data
We collect and process only those personal data of yours that are necessary for us to be able to offer you the highest quality shopping experience regarding the products and our services and the use of our web page www.medicalwear.ro.
Collected information includes name, billing address, delivery address, email address, phone number.
In addition, we will automatically receive and record information from your computer and browser, including your IP address, browsing activity and other information about how you interacted with the site.
The purpose for which we process your personal data
We use the data we collect for:
- Establishing contact with clients;
- Order Processing;
- Participation in contests, promotions;
- Transmission of non-commercial or administrative messages (regarding changes to the site, user account, etc.);
- Transmission of offers, promotions, advertising and marketing messages.
Security of personal data
One of the most important components of an online business is the creation of a safe communication environment, where customers feel safe when shopping. For this, we have introduced two important technologies SSL and DNSSEC on our website.
SSL is a standard technology to establish an encrypted connection between server and browser. This connection ensures that all data that has been transmitted remains private. Pages with an encrypted content are marked with a locket in the URL bar and the address starts with https://.
Because the SSL technology only protects the "conversation" by encrypting it, it was necessary to implement the DNSSEC (Domain Name System Security Extensions) technology. This is a set of protocols that add a new level of security to DNS (Domain Name System) search and exchange processes. By verifying the authenticity of the data origin, guaranteeing their integrity as well as authenticating the non-existence of the domain, the DNSSEC protocol ensures protection against "DNS cache poisoning" type attacks.
The servers on which the site is hosted belong to Shopify Inc. They save your data on a secure server protected by a firewall.
Subscribing and unsubscribing to the newsletter
The messages sent comply with the Electronic Commerce law regarding commercial communication as it is stipulated by Romanian and international legislation.
Sharing of personal data
Demoteks Medikal does not disclose or transfer your personal data to third parties to be used for their own marketing or commercial purposes.
This does not include trusted third parties who assist us in operating our site or running our business, as long as the parties agree to keep this information confidential.
The rights of the data subject
The rights of data subjects regarding the protection of individuals with regard to the processing of personal data and the free movement of such data:
- The right to information and access to your personal data that Demoteks Medikal processes:
- The right to intervene on the data;
- The right to rectify the data if they are inaccurate;
- The right to request that marketing messages be stopped from being sent to you;
- The right to data deletion;
- The right to restrict processing;
- The right to data portability;
- The right to file a complaint with the supervisory authority (www.dataprotection.ro).
The user can request the deletion of data from the database by sending an email to firstname.lastname@example.org
Retention period of personal data
We store personal data only for the period necessary to fulfill the purposes, but not more than 3 years after the last interaction with us.
If we have issued you an invoice, your data will be stored for 10 years, according to the law.
If you did not find an answer to your questions in this document or if you have any other concerns regarding your personal data and/or the way we process them, please contact us using any of the methods below
Phone: +40 (766) 087 926