This site collects some personal data from its users.
Owner and Data Operator
SC MPX METAL WORK & DISTRIBUTION SRL
Address: Brasov, Str. Carierei no. 158
Owner contact email: office [at]mpxmetal.ro
Types of data collected
Among the types of personal data this site collects, on its own or through third parties, are: name, email address, cookies, usage data, unique device identifiers for advertising (Google advertising ID or IDFA, for example).
Full details of each type of personal data collected are provided in the dedicated sections of this privacy policy or through specific explanatory texts posted prior to Data Collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when you use this Website.
All data processed directly (without consent) by this site is mandatory for its operation. Without this data, the site could not function at an optimal level. In cases where this site specifies that certain data is not mandatory, users are free not to communicate this data without any consequences on the availability or functioning of the service.
Users who are unsure of the types of Personal Data required are welcome to contact the owner.
Any use of cookies – or other tracking tools – by this Website or by owners of third party services used by this Website, serves the purpose of providing the service requested by the user, in addition to the other purposes described in this document and in the Cookie Policy.
Users are responsible for any third party Personal Data obtained, published or shared through this Website and confirm that they have the third party’s consent to provide the Data to the Owner.
How and where personal data are processed
Processing methods
The Data Controller processes User Data by taking appropriate organizational and technical security and confidentiality measures to prevent unauthorized access, disclosure, alteration or unauthorized destruction of Personal Data.
Data processing is done using computers and/or other IT tools, in accordance with organisational procedures and methods strictly related to the purposes indicated. In addition to the Data Controller, in certain cases Data may be accessible to certain types of responsible persons involved in the operation of the site (administration, sales, marketing, legal, system administrator) or external parties – third party technical service providers, email correspondence service providers, hosting service providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Owner. An updated list of these parties can be requested from the Data Controller at any time.
Legal basis of processing
The owner processes personal data through this website relating to users if one of the following applies:
– Users have given their consent for one or more specific purposes. Note: Under some legislation, the owner may be allowed to process personal data until the user objects to such processing (“opt-out”), without having to rely on consent or any of the following legal grounds. However, this does not apply when the processing of personal data is subject to European data protection legislation;
– the provision of data is necessary for the fulfilment of an agreement with the User and/or any pre-contractual obligations of the User;
– the processing is necessary for compliance with a legal obligation to which the Owner is subject;
– the processing relates to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
– the processing is necessary for the legitimate interests pursued by the owner (presentation of the services it offers) or by a third party.
Place of Processing
The data is processed at the Data Controller’s workstations and at any other place where the parties involved in the processing are located.
Depending on the user’s location, data transfers may involve transferring user data to a country other than their own. To find out more about where this transferred data is processed, users can check the section below which contains details about the processing of personal data.
If broader standards of protection are applicable, Users also have the right to know about the legal basis of data transfers to a country outside the European Union or to any international organization governed by public international law or established by two or more countries, such as the UN, and about the security measures taken by the owner to protect its data.
If such a transfer occurs, users can find out more by checking the relevant sections of this document or by contacting the owner using the information provided in the contact section.
Shelf life
Personal data will be processed and stored as long as necessary for the purpose for which it was collected.
Therefore:
Personal data collected through the contact form on the website (name, email and phone) will be processed for the purpose of contacting the User. the storage period for this purpose is a maximum of 30 days from the date of receipt of the automatic message in the form.
You can find the cookie retention period on the Cookies page.
Personal data collected for the purposes of the Owner’s legitimate interests will be kept for as long as necessary to fulfil these purposes. Users can find specific information on the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.
The owner may be allowed to keep personal data for a longer period whenever the user has given consent for such processing, as long as this consent is not withdrawn. In addition, the Owner may be required to retain personal data for a longer period whenever necessary to fulfil a legal obligation or on the order of an authority.
After expiry of the retention period, personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be implemented after the expiry of the retention period.
Purpose for which personal data is collected
The User’s personal data is collected to enable the Owner to present its products and services and for the following purposes: Contacting the User, facilitating the User’s interaction with social networks, for the use of external analytics and promotion platforms: Google Analytics, Google AdWords and Tag Management.The personal data used for each purpose is presented in the specific sections of this document.
Detailed information on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Analytics
The services contained in this section allow the Owner to monitor and analyse web traffic and can be used to track user behaviour.
Google Analytics Advertising Reporting Features (Google Ireland Limited)
Google Analytics on this website has advertising reporting features enabled, which collects additional information from the DoubleClick cookie (web activity) and device advertising IDs (app activity). Allows the owner to analyze data regarding specific behavior and interests (traffic data and interactions with user ads) and, if enabled, demographic data (age and gender information).
Users can opt out of Google’s use of cookies by going to Google’s Ad Settings.
Personal data collected: cookies; unique device identifiers for advertising (Google advertising ID or IDFA, for example); various types of data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy – Opt-out. Privacy Shield participant.
Demographic and Interest Reports – Google Analytics (Google Ireland Limited)
Google Analytics Demographics and Interests Reporting is a Google Advertising Reporting feature that provides Google Analytics demographics and interests data for this website (demographics means age and gender data).
Users can opt out of Google’s use of cookies by going to Google’s Ad Settings.
Personal data collected: cookies; unique device identifiers for advertising (Google advertising ID or IDFA, for example).
Place of processing: Ireland – Privacy Policy – Opt-out. Privacy Shield participant
Google Analytics with anonymised IP (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the collected Data to track and examine the use of this website, to prepare reports about its activities and to share them with other Google services.
Google may use the Data collected to contextualise and personalise the ads of its own advertising network.
This Google Analytics integration anonymises your address. IP. It works by shortening the IP addresses of users from EU Member States or other contracting states to the European Economic Area Agreement. Only in exceptional cases will the full IP address be sent to a Google server and shortened in the US.
Personal data collected: Cookies; Usage data.
Place of processing: Ireland – Privacy Policy – Opt-out. Privacy Shield participant
Interaction with external social networks and platforms
– This type of service allows interaction with social networks or other external platforms directly from the pages of this website.
– Interaction and information obtained through this website is always subject to the user’s privacy settings for each social network.
– This type of service may still collect traffic data for the pages where the service is installed, even when Users are not using it.
Facebook Like Button and Social Widgets (Facebook, Inc.)
– The Facebook Like button and social widgets are services that enable interaction with the Facebook social network offered by Facebook, Inc.
– Personal data collected: cookies and usage data.
– Place of processing: USA – Privacy policy
LinkedIn Button and Social Widgets (LinkedIn Corporation)
– The LinkedIn button and social widgets are services that enable interaction with the LinkedIn social network provided by LinkedIn Corporation.
– Personal data collected: cookies and usage data.
– Place of processing: USA – Privacy policy
Tag Management
- This type of service helps the owner to manage the tags or scripts needed on this site in a centralized manner.
- This leads to the transmission of user data through these services, which may result in the storage of this data.
Google Tag Manager Google (Google Ireland Limited)
– Google Tag Manager is a tag management service provided by Google Ireland Limited).
– Personal data collected: cookies and usage data.
– Place of processing: Ireland – Privacy Policy
Contacting the User
Contact form (this site)
By filling out the contact form with his/her details, the user authorises the Owner to use these details to respond to requests for information or any other type of request indicated in the header of the form.
Personal data collected: e-mail address and name.
Display of content on external platforms
- This type of service allows you to view content hosted on external platforms directly from the pages of this site and interact with them.
– This type of service could still collect web traffic data for pages where the service is installed, even if users do not use it.
Google Maps Widget (Google Ireland limited.)
– Google Maps is a map viewer service provided by Google Ireland Limited that allows this website to include map content on its pages.
– Personal data collected: cookies and usage data.
– Processing location: Ireland – Privacy Policy
User rights
Users may exercise certain rights in relation to the data processed by the owner.
In particular, Users have the right to do the following:
– Withdraw consent. Users have the right to withdraw their consent if they have previously given their consent to the processing of their personal data.
– Object to the processing of their data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent. More details are provided in the dedicated section below.
– Access their data. Users have the right to be informed if their data is processed by the owner, to obtain communication of certain aspects of the processing and to obtain a copy of the processed data.
– To be able to correct their data. Users have the right to verify the accuracy of their data and to request that it be updated or corrected.
– Restrict the processing of their data. Users have the right, in certain circumstances, to restrict the processing of their data. In this case, the Owner will not process the data for other purposes but only for storage.
– Their personal data to be deleted or otherwise disposed of. Users have the right, in certain circumstances, to have their data deleted by the owner.
– To be able to transfer their data to another controller. Users have the right to receive their data in a structured, commonly used format and, if feasible, to have it forwarded to another controller. This provision is applicable provided that the data is processed by automated means and that the processing is done on the basis of the User’s consent, on the basis of a contract to which the User is a party, on the basis of the User’s pre-contractual obligations or on the basis thereof.
– File a complaint. Users have the right to lodge a complaint with their data protection authority.
Details of the right to object to processing
Where personal data are processed for a public interest, in the exercise of a public authority vested in the Owner or for the purposes of legitimate interests pursued by the Owner, users may object to such processing by providing a reason related to their particular situation justifying their objection.
Users should be aware, however, that if their personal data is to be processed for direct marketing purposes, they may object to such processing at any time without providing any justification. To find out whether the owner processes personal data for direct marketing purposes, users can refer to the relevant sections of this document.
How to exercise these rights
Any request to exercise user rights can be directed to the owner via the contact details (by post or email) provided in this document. These requests may be exercised free of charge as long as they are reasonable and non-repetitive and will be resolved by the owner as soon as possible and always within one month.
Cookie policy
This site uses cookies. To find out more and for a detailed cookie notification, you can see our Cookie Policy.
Further information about the collection and processing of Data
Legal action
The user’s personal data may be used for legal purposes by the Data Controller, in court or in steps leading to possible legal action resulting from improper use of this site or related services.
The User declares that he/she is aware that, at the request of public authorities, the Data Controller may be obliged to disclose personal data.
Additional information about User Personal Data
In addition to the information contained in this privacy policy, this site may provide additional and contextual information on specific services or the collection and processing of personal data at the user’s request.
System login and maintenance
For operating and maintenance purposes, this site and any third party services may collect files that record your interaction with this site (system logs) or may use other personal data (such as your IP address) for this purpose.
Information not covered by this policy
Further details on the collection or processing of personal data can be requested from the Data Controller at any time. See contact information at the beginning of this document.
How “Do Not Accept Cookies” requests are handled and how the cookie bar works
In the absence of the User’s explicit consent given by clicking on the “Accept Cookies” button in the cookie bar, the site will not process any third party cookies. The only cookies that will be processed are those necessary for the functioning of the site and the User will be able to view the content of the site freely and unconditionally.
The consent collected by clicking on the “Accept Cookies” button will be valid for 30 days from the moment you click to accept. Within this period, the cookie bar will no longer be visible to the User who has given consent. The bar will be reactivated for a new consent after the 30 days have passed.
Changes to this privacy policy
The Owner (Data Controller) reserves the right to make changes to this privacy policy at any time by notifying its users on this page and possibly on this website and/or – to the extent technically and legally possible – sending a notice to users via any contact information available to the Owner. It is strongly recommended that you check this page frequently, referring to the date of the last change listed at the bottom.
If the changes affect processing activities performed based on the User’s consent, the Owner will collect a new consent from the User, if necessary.
Information about this privacy policy
The Data Controller is responsible for this privacy policy.
Definitions and legal references
Personal Data (or Data)
Means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
Usage data
Information collected automatically from this site (or by third party services engaged on this site), which may include: IP addresses or domain names of computers used by users using this site, Uniform Resource Identifier (URI) addresses, time of request, method used to send the request to the server, size of file received in response, numeric code indicating the status of the server’s response (successful, error, etc.). ), country of origin, browser and operating system characteristics used by the User, details of the different periods of visits (e.g. time spent on each page within the application) and details of the path followed within the application, with particular reference to the sequence of pages visited and other parameters about the device’s operating system and/or the User’s IT environment.
User
The natural person (data subject) using this website, who must match or be authorised by the data subject to whom the personal data is addressed.
The person concerned
The natural person to whom the personal data relates.
Data Controller (or Data Processor)
The natural person, legal entity, public administration or any other body, association or organisation authorised by the Data Controller to process personal data in accordance with this Privacy Policy.
Data Controller (or Owner)
The natural person, legal entity, public administration or any other body, association or organisation that is also entitled, together with another Data Controller, to make decisions about the purposes and methods of processing personal data and the means used, including security measures relating to the operation and use of this website. The Data Controller, unless otherwise specified, is the owner of this website.
This website
The hardware or software tool through which the user’s personal data is collected.
Cookies
Small pieces of data stored on the user’s device.
Legal information
This privacy statement has been drawn up on the basis of the provisions of several pieces of legislation, including Article 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
This privacy policy relates exclusively to this website.
Last update: September 2019