Privacy Policy

This privacy policy defines how we, RETRO FUTURE BABE SRL, based in Cluj-Napoca, P-ţa TIMOTEI CIPARIU, No. 15, commercial space, Block IIIA, Apartment 58, Cluj County, registered with ONRC under no. J12/1902/2020, CUI 42733759, hereinafter referred to as "Retro Future", as a personal data controller, collect, use and store your personal data when you access or interact with the website. retrofuture.ro .

The protection of your personal data is important to us, therefore, we pay special attention to protecting the privacy of visitors who access the website www. retrofuture.ro, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR").

This Privacy Policy describes our practices regarding the personal information we collect through this website. We encourage you to read this Policy before using our website. By using this website, you agree to the terms and conditions of this Policy.

1. PERSONAL DATA WE COLLECT

We collect personal data in the following ways:

- You provide us with information directly.

- We record other information automatically (including with technologies such as cookies).

1.1.Personal data that you personally provide

This information consists of the data you voluntarily provide to us to use various services of the site through the following methods:

- By creating an account on our website - name, surname, email address, phone number, country.

- By completing the "Contact us" form - name, surname, e-mail address and any other personal data that you insert in the "Message" section.

- By filling out the "Returns and Exchanges" form – email address, phone number.

- By contacting us via email - email address and any other personal data you include in the content of the email.

- By contacting us by telephone - telephone number and any other personal data you transmit during the telephone conversation.

- By contacting us via the Chat available on the website - any personal data you transmit during the online conversation.

It is important to note that if you do not provide us with your personal data, we may not be able to maintain our relationship with you or provide you with our products or services.

1.2.Personal data we collect automatically

While browsing the website, we collect technical information about the user's visit to the website. This information may include IP address, operating system, browser, browsing activity and other information about how the user interacted with the website and the traffic generated by the user through our website.

2. PERSONAL DATA THAT WE DO NOT COLLECT

Through the website we do not collect or process Personal Data relating to the following aspects:

- Bank card details (payment is made securely, through a payment processor)

- Racial or ethnic origin;

- Political opinions;

- Religious and philosophical orientations;

- Health or medical condition;

- Criminal record;

- Union membership;

- Genetic or biometric data;

- Life or sexual orientation.

We ask that you not send us or disclose any Sensitive Personal Data through the Site or by any other means.

3. FOR WHAT PURPOSE DO WE COLLECT YOUR DATA?

RETRO FUTURE, through the website https://www. retrofuture.ro collects user data for the following purposes:

- to respond to users' questions and requests;

- to provide assistance regarding our products and services;

- to provide and improve effective communication;

- to defend ourselves in the event of a dispute;

- for providing information at the request of the authorities;

- to keep you informed about our company's activity;

- for internal statistics.

- for online marketing purposes, based on your consent.

Thus, we process your personal data in order to manage commercial relationships, maintain the relationship with you, provide you with our products and/or services, or to comply with our legal obligations.

Your personal data is not used for any other purpose unless we obtain your permission to do so. The only exceptions to this provision are situations required by law.

As a general rule, RETRO FUTURE does not oblige you, in any way, to transmit your personal data to us.

However, in certain situations, if you do not provide us with your personal data, we cannot fulfill the purposes set out above.

4. LEGAL BASIS

We process your personal data (i) in order to be able to provide you with the products and/or services we offer, for the purpose of executing a contract, (ii) based on your consent, (iii) in order to fulfill legal obligations incumbent on us (e.g. the obligation to prepare and keep primary accounting documents, such as the contract concluded with you, invoices issued to you, etc.);

RETRO FUTURE has appointed a data protection officer, who can be contacted at the email address [email protected].

To the extent that it is not desired to contact the data protection officer by e-mail, any other type of correspondence can be used, using the contact details of RETRO FUTURE published on the website.

5. PERSONAL DATA STORAGE DURATION

We intend to keep your data accurate and up-to-date. We will delete the personal data we hold about you when we no longer need it to fulfil the purposes for which it was collected.

We retain the personal data described in this Privacy Policy for a maximum period of 3 years, unless legal requirements require us to retain personal data for a longer or shorter period.

Anonymous data and aggregated information, which cannot lead to the identification of the person (directly or indirectly), may be stored for an indefinite period.

6. TO WHOM WE TRANSMIT YOUR PERSONAL DATA

We will not transmit member/customer data to third parties for their own marketing or commercial purposes without first obtaining your express consent.

The categories of recipients to whom we may transmit the personal data of data subjects are as follows:

- Public authorities in Romania, at their request or on our initiative, in accordance with applicable legislation.

- Accountants, auditors, lawyers and other external professional consultants, from Romania. They will be obliged by law or by the contract concluded with us to maintain the confidentiality of the personal data of the data subjects.

- Natural or legal persons acting as processors for RETRO FUTURE in various fields (e.g. accounting services, transport services, IT services, payment services, etc. and who provide certain services for RETRO FUTURE), with respect to whom we undertake to establish specific measures to comply with data protection requirements.

- Any relevant person, agency or court in Romania or another state – to the extent necessary to establish, exercise or defend a right of RETRO FUTURE in court.

- In the event that our company merges or is acquired by another company, the information collected will represent assets transferred to the new owner.

RETRO FUTURE has taken all necessary measures to ensure that data processing by third parties is carried out in good faith, for legitimate purposes and in compliance with appropriate technical and organizational requirements to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access, as well as against any other form of unlawful processing.

In this regard, additional documents are concluded between RETRO FUTURE and its commercial partners containing clauses regarding compliance with personal data protection standards and information confidentiality.

7. HOW WE PROTECT YOUR PERSONAL DATA

The security of your data is very important to us. In this regard, we have introduced safeguards to preserve the integrity and security of the information we collect.

We have adopted and implemented security policies and procedures to protect personal data against unauthorized access, loss, misuse, alteration or unauthorized destruction. Access to your personal data is limited to those who need to know it. Individuals who have access to personal data are required to maintain the confidentiality of this information.

The measures adopted are regularly checked and are constantly adapted in accordance with the applicable current technical standards.

Among the security measures applied are:

- Implementation and periodic review of Policies, Procedures and Work Instructions intended to ensure the security of personal data;

- Periodic training of employees who process personal data;

- Limiting access to personal data in accordance with the need-to-know, need-to-see and need-to-have principles;

- Securing access to applications and files containing personal data;

- Monitoring of personal data transfer processes carried out through the email service;

- The collection of personal data is limited to what is necessary in relation to the purposes for which they are processed, in accordance with the principle of data minimization;

- Where possible, encrypting communications containing personal data, etc.

We assure you that if any information under our control is compromised as a result of a security breach, we will take reasonable steps to investigate the situation and, if appropriate, notify the individuals whose information may have been compromised and take any other measures required by applicable law.

8. CONNECTIONS TO OTHER INTERNET SOURCES

Our website may contain "LINK" type links to other resources/internet pages, visitors thus acknowledging that RETRO FUTURE company cannot under any circumstances be considered responsible for the proper functioning of these external resources.

Articles on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly the same as if visitors viewed another website.

Our website may also contain links or references to other sites. We cannot control third-party sites, and this policy does not apply to them. We encourage you to read the privacy and cookie policy of each site you visit.

9. COOKIES

Cookies are files sent by a web server to a person's computer for archiving purposes. Cookies are standard and are used by most websites, helping to simplify ongoing access to and use of a specific website. Cookies do not cause any damage to your computer's operating system or files, and only the website that sent a specific cookie can read, modify, or delete the cookie. If you do not want this information to be stored via cookies, most browsers have simple ways to allow you to delete stored cookies, automatically reject cookies, or choose between accepting and rejecting them.

Please note that rejecting cookies may make it more difficult or even impossible for you to use parts of a website. Further details on cookies and the technologies used can be obtained by consulting the Cookies Policy.

10. WHAT ARE YOUR RIGHTS?

- The right of access (according to art. 15 of the GDPR) means that you have the right to obtain confirmation from us as to whether or not we are processing personal data concerning you and, if so, access to that data and information on how the data is processed.

- The right to data portability (according to art. 20 of the GDPR) refers to the right to receive personal data in a structured, commonly used and machine-readable format and to the right to have these data transmitted directly to another controller, if this is technically feasible.

- The right to object (according to art. 21 of the GDPR) concerns the right to object to the processing of personal data when the processing is necessary for the performance of a task which serves a public interest or when it takes into account a legitimate interest. When the processing of personal data is for the purpose of direct marketing, you have the right to object to the processing at any time.

- The right to rectification (according to art. 16 of the GDPR) refers to the correction, without undue delay, of inaccurate personal data. The rectification will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.

- The right to erasure of data (“right to be forgotten”) (according to art. 17 of the GDPR) means that you have the right to request that we erase your personal data, without undue delay, if one of the following reasons applies: they are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for the processing; you object to the processing and there are no overriding legitimate reasons; the personal data have been processed unlawfully; the personal data must be erased for compliance with a legal obligation.

- The right to restriction of processing (according to art. 18 of the GDPR) can be exercised if the person contests the accuracy of the data, for a period that allows us to verify the accuracy of the data; the processing is unlawful, and the person opposes the deletion of personal data, requesting restriction instead; if we no longer need the personal data for the purpose of processing, but the person requests them for the establishment, exercise or defense of a right in court; if the person has opposed the processing for the period of time in which it is verified whether the legitimate rights of the operator prevail over those of the person concerned.

- The right not to be subject to a decision based solely on automated processing, including profiling

- The right to lodge a complaint with a supervisory authority

National Supervisory Authority for Personal Data Processing

Address: General Gheorghe Magheru Boulevard 28-30, Sector 1

Postal Code 010336, Bucharest, Romania

Email: [email protected],

Phone: +40.318.059.211

Web page: http://www.dataprotection.ro/index.jsp?page=contact&lang=en

- The right to address a court of law

All these rights can be exercised through a written, signed and dated request, sent to our headquarters or to the email address [email protected] .

11. ACCEPTANCE OF THE PRIVACY POLICY

By using the site, the services offered through it or when contacting us, you declare that you have been adequately informed about the processing of personal data through the Information specified in this "Privacy Policy".

12. MODIFICATION OF THIS POLICY

RETRO FUTURE may modify, without prior notice, this Policy when necessary to reflect applicable legal requirements and the processes carried out within ORETRO FUTURE and involving the processing of personal data.

Consequently, our recommendation is to periodically consult the "Privacy Policy" section.