Privacy

Privacy Policy regarding the processing of personal data

We consider ensuring the right to the protection of personal data as a fundamental commitment of Moldaso Line S.R.L., therefore we will dedicate all necessary resources and efforts to process your data in full compliance with ("General Data Protection Regulation" or "GDPR"), as well as with any other applicable legislation. Since one of the essential principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer, and protect your personal data when you interact with us regarding our products and services, including through our website or mobile phone applications.

We reserve the right to periodically update and modify this Privacy Policy to reflect any changes in the way we process your personal data or any legal changes. In case of any such changes, we will display the updated version of the Privacy Policy on our website, which is why we kindly ask you to regularly review the contents of this Privacy Policy.

What categories of personal data we process

In general, we collect personal data directly from you, so you have control over the type of information you provide us. For example, we receive information from you as follows:

When you create an account on noren.ro, you provide us with your email address, first and last name;

When you place an order, you provide us with information such as the desired product, delivery address, billing details, payment method, phone number, etc.

When you apply for one of the available positions or send us your CV, you provide us with information such as the position you are applying for (if applicable), desired city, first and last name, professional experience, mobile phone number, landline phone number, email address, date of birth, age, education level, obtained certifications, possible recommendation letters, etc.

You may also have the option to register on noren.ro using your Facebook or Google account. If you choose one of these options, you will be redirected to a page managed by Facebook Inc / Google LLC, where they will inform you about the transfer of your data to noren. You can review the privacy policies of Facebook and Google using the following links: facebook.com/about/privacy policies.google.com/privacy

We may also collect and process certain information regarding your behavior while visiting our website in order to personalize your online experience and provide you with offers tailored to your profile. We invite you to learn more by reviewing the section below regarding processing purposes.

On our website, we may store and collect information through cookies and similar technologies, according to our Cookie Policy.

We do not collect or otherwise process sensitive data as defined by the General Data Protection Regulation in the special categories of personal data. Also, we do not wish to collect or process data from minors under the age of 16.

What are the purposes and legal grounds for processing

We will use your personal data for the following purposes:

To provide the noren.ro services to your benefit

This general purpose may include, where applicable, the following:

Creating and managing your account on noren.ro;

Processing orders, including receiving, validating, shipping, and invoicing them;

Handling cancellations or any issues related to an order, purchased goods, or services;

Returning products in accordance with legal provisions;

Refunding the value of the products in accordance with legal provisions;

Selection and recruitment for one of the available positions within the company;

The processing of your data for these purposes is, in most cases, necessary for concluding and performing a contract between noren and you. Additionally, certain processing activities related to these purposes are required by applicable legislation, including tax and accounting laws.

For improving our services

We constantly strive to offer you the best online shopping experience. To do this, we may collect and use certain information regarding your behavior as a Buyer, we may invite you to fill out satisfaction surveys after completing an order, or we may conduct market studies and research directly or with the help of partners.

We base these activities on our legitimate interest to carry out commercial activities, while always ensuring that your fundamental rights and freedoms are not affected.

For marketing

We want to keep you informed about the best offers for products you may be interested in. To this end, we may send you, via electronic communication channels (email/SMS/mobile push/web push/etc.), general and thematic newsletters, information about similar or complementary products to those you have purchased or shown interest in, as well as other similar commercial communications, and we may display personalized recommendations on the website. In order to provide you with information of interest, we may use certain data about your shopping behavior to create a profile. We always ensure that such processing is done with respect for your rights and freedoms, and that decisions based on it do not have legal effects on you and do not similarly affect you in a significant way.

In most cases, we base our marketing communications on your prior consent, expressed by ticking the “Subscribe” box. You can withdraw your consent at any time by:

Clicking the unsubscribe link displayed in the messages you receive from us, or by

Contacting noren using the contact details described above.

In certain situations, we may base our marketing activities on our legitimate interest to promote and develop our commercial activity. In any case where we use information about you for our legitimate interest, we take care and all necessary measures to ensure that your fundamental rights and freedoms are not affected. Nevertheless, you can request at any time, through the means described above, that we stop processing your personal data for marketing purposes, and we will comply with your request as soon as possible.

For defending our legitimate interests

There may be situations in which we use or transmit information to protect our rights and commercial activity. These may include:

Measures to protect the noren.ro website and its users from cyber attacks;

Measures to prevent and detect fraud attempts, including the transmission of certain information to competent public authorities;

Measures to manage various other risks.

The general legal basis for these types of processing is our legitimate interest in protecting our commercial activity, provided that we ensure that all measures taken guarantee a balance between our interests and your fundamental rights and freedoms.

Additionally, in certain cases we base our processing on legal provisions, such as the obligation to ensure the security of goods and values, as required by applicable laws.

How long we keep your personal data

As a general rule, we will store your personal data for as long as you have an account on noren.ro. You may request us at any time to delete certain information or to close your account, and we will respond to such requests, subject to retaining certain information even after the account is closed, in cases where applicable legislation or our legitimate interests require it.

In the case of the recruitment and selection process, we keep your data during the course of the process, and after the recruitment is finalized, for a period of two years, along with periodic updates to our database, and until the exercise of your right to object.

To whom we transmit your personal data

As applicable, we may transmit or provide access to certain of your personal data to the following categories of recipients:

courier service providers;

payment/banking service providers;

product repair service providers;

marketing/telemarketing service providers;

call center service providers;

market research service providers;

insurance companies;

IT service providers;

other companies with which we may develop joint programs for marketing our goods and services.

If we have a legal obligation, or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third-party private legal entities is carried out in accordance with legal provisions regarding data protection and confidentiality, based on contracts concluded with them.

In which countries we transfer your personal data

Currently, we store and process your personal data within the territory of Romania.

However, from time to time, we may transfer certain personal data to entities located outside Romania. These entities may be located in the European Union or outside the Union, including in countries that have not been recognized by the European Commission as having an adequate level of personal data protection.

We will always take measures to ensure that any international transfer of personal data is carefully managed to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, by additional safeguards such as standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for data protection transferred from within the EU to the United States.

You can contact us at any time, using the contact details provided above, to find out more about the countries where we transfer your data, as well as the safeguards we have put in place regarding these transfers.

How We Protect the Security of Your Personal Data

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, in line with industry standards.

We store your personal data on secure servers, using state-of-the-art encryption algorithms and ensuring data storage redundancy.

All payment-related information is encrypted using SSL technology.

Despite the measures taken to protect your personal data, please note that transmitting information over the Internet or other public networks is not completely secure, and there is a risk that data may be viewed and used by unauthorized third parties. We cannot be held responsible for such vulnerabilities in systems that are not under our control.

Your Rights

The General Data Protection Regulation recognizes a number of rights you have in relation to your personal data. You may request access to your data, correction of any errors in our files, and/or object to the processing of your personal data. You may also exercise your right to lodge a complaint with the relevant supervisory authority or take legal action. Where applicable, you also have the right to request the erasure of your personal data, the right to restrict processing, and the right to data portability.

More information on each of these rights can be found in the table below.

To exercise your rights, you may contact us using the contact details provided above. Please take note of the following aspects when seeking to exercise these rights:

Identity

We take the confidentiality of all personal data records seriously. For this reason, please submit your requests related to such records using the email address associated with your noren.ro account. Otherwise, we reserve the right to verify your identity by requesting additional information to confirm your identity.

Fees

We will not charge a fee for you to exercise any of your rights in relation to your personal data, unless your request for access to information is unfounded, repetitive, or excessive, in which case we will charge a reasonable fee under such circumstances. We will inform you of any applicable fees before fulfilling your request.

Response Time

We aim to respond to all valid requests within one month, unless the request is particularly complex or if you have submitted multiple requests, in which case we will respond within a maximum of two months. We will let you know if we need more than one month. We may ask you to clarify what exactly you wish to receive or what concerns you specifically. This will help us act more quickly and shorten the response time to your request.

Third-Party Rights

We are not required to comply with a request if it would negatively affect the rights and freedoms of other data subjects.

Targeted Rights

Description

Access

You may request:

confirmation of whether we process your personal data;

a copy of your personal data;

further information about your personal data, such as what data we hold, what we use it for, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we retain it, what rights you have, how to file a complaint, and the source of your data—if this information has not already been provided through this notice.

Rectification

You may ask us to correct or complete your inaccurate or incomplete personal data.

We may attempt to verify the accuracy of the data before correcting it.

Data Erasure

You may request that we erase your personal data, but only if:

it is no longer necessary for the purposes for which it was collected or

you have withdrawn your consent (if data processing was based on consent) or

you exercise a legal right to object or

it has been unlawfully processed or

we are under a legal obligation to do so.

We are not obliged to comply with your data erasure request if the processing of your personal data is necessary:

for compliance with a legal obligation or

for the establishment, exercise, or defense of a legal claim.

There are other circumstances where we may not be required to comply with your request for data erasure, although the two mentioned above are the most likely cases in which we may deny such a request.

Please Note

before exercising this right, you should download and save from your noren.ro account all documents related to your orders placed on noren, regardless of whether invoicing was done to you personally or to another individual or legal entity. If you do not do this before exercising your right to erasure, you will lose access to these documents, and noren will be unable to provide them again, as the data and account deletion process is irreversible.

Restriction of Data Processing

You may ask us to restrict the processing of your personal data, but only if:

its accuracy is contested (see the rectification section), to allow us to verify the data's accuracy; or

the processing is unlawful, but you do not want the data to be erased or

it is no longer needed for the purposes for which it was collected, but you need it to establish, exercise, or defend a legal claim or

you have exercised your right to object, and verification of whether our rights prevail is ongoing.

We may continue to use your personal data following a request for restriction if:

we have your consent or

to establish, exercise, or defend a legal claim or

to protect the rights of another natural or legal person.

Data Portability

You may request that we provide your personal data in a structured, commonly used, and machine-readable format, or you may request that it be "ported" directly to another data controller, but only if:

the processing is based on your consent or on the conclusion or performance of a contract with you and

the processing is carried out by automated means.

Objection

You may object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of our legitimate interest, if you believe your fundamental rights and freedoms outweigh this interest.

You may also object at any time to the processing of your data for direct marketing purposes (including profiling), without having to provide a reason, in which case we will stop such processing as soon as possible.