S.C. PINUM DOORS & WINDOWS SRL, hereinafter referred to as “Pinum,” is registered in the Registry of Records for the Processing of Personal Data.

Protecting the individuals who visit our webpage www.pinum.ro is one of our main priorities. Accordingly, we ensure that any personal data we access is processed in a way that guarantees confidentiality, security, and restricted access solely by those specifically authorized to process it.

In compliance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we will request the consent of the data subject for each processing activity, as necessary.

By visiting www.pinum.ro, the user unequivocally accepts the following terms and conditions.

DATA COLLECTION, USE, AND SECURITY

Raw data regarding visits to our website will be used exclusively for improving the quality and optimizing the performance of our site. Therefore, there is no obligation to register or provide personal data.

When you provide personal data to the company, you automatically grant us the consent to process that data for the purpose of contacting you and scheduling a future appointment at one of Pinum’s offices.

WHAT PERSONAL DATA DO WE PROCESS?

On our website, we process the following personal data:

• First name, last name
• Email address
• IP address

At the company’s headquarters, Pinum processes the following categories of data:

1. General identification data: first name, last name, date of birth, gender
2. Contact details: home address, telephone number, email address
3. Unique national identification numbers: ID card series and number, Personal Numerical Code (CNP)
4. Professional data: occupation and workplace (if applicable)
5. Video images resulting from the operation of requested physical security systems
6. Audio recordings resulting from the operation of requested physical security systems
7. Access data: password

The personal data of minors under the age of 18 will be processed only with the written consent of the holder of parental responsibility over the minor.

PRINCIPLES FOR DATA PROCESSING

Pinum undertakes to respect the principles of personal data protection (“the Principles”) provided by GDPR to ensure that all data is processed in accordance with the Regulation:

1. Lawfulness – identifying a legal basis before processing personal data. These are often referred to as “conditions of processing,” such as consent.
2. Fairness – to ensure fair processing, the data controller provides certain information to data subjects, whenever possible. This applies whether personal data is obtained directly from the data subjects or from other sources.
3. Transparency – The GDPR includes rules (Articles 12, 13, and 14) on providing data subjects with clear, accessible information about privacy. Such notices must be detailed, focusing on an understandable and clear language.

Information that must be provided to the data subjects includes the identity of the data controller and the Data Protection Officer (DPO), how and why we use, process, disclose, protect, and store the data, as well as details on how data subjects can exercise their rights.

CONTACT FORM PROCESSING

Pinum will use the information you provide in the relevant contact section on the website exclusively to process your request.

By providing any personal data via www.pinum.ro, you understand and agree that your data will be processed in accordance with the provisions of GDPR Regulation 679/2016.

Please note that in order to fulfill your requests submitted through the contact section of the site, we may, under certain circumstances, be obliged to disclose your data to Pinum’s partners and/or other third-party service providers of Pinum.

However, Pinum has adopted appropriate technical and organizational measures to ensure secure data transfers and to guarantee that these entities process your data in compliance with GDPR requirements.

Pinum undertakes not to process the personal data you have provided for any purpose other than that for which it was submitted, unless we have your explicit consent to use it for other purposes.

DATA STORAGE PERIOD

We will store your personal data only for the period necessary to achieve the aforementioned processing purposes, while also respecting the current legal requirements in force. Should Pinum determine it has a legitimate interest or a legal obligation to further process your personal data for other purposes, you will be duly informed.

There are cases in which we have a legal obligation to retain data for a longer period (for example, certain investigations must be kept for periods varying between 8 and 30 years, depending on the law). We state that data retention is carried out only for legal reasons, with full respect for confidentiality and security.

RIGHTS OF THE DATA SUBJECT

In accordance with the GDPR, you have a number of rights regarding your personal data processed by Pinum:

1. Right of Access to Processed Data – You have the right to access the personal data we hold. Requests that are clearly unfounded, excessive, or repetitive may not receive a response.

2. Right to Rectify Data – You have the right to request that your data be corrected if it is inaccurate or outdated and/or to have it completed if it is incomplete.

3. Right to Erasure of Data (“Right to be Forgotten”) – In certain cases, you have the right to request the deletion or destruction of your data. This is not an absolute right, as sometimes we are obliged to keep your data for legal, medical, or judicial reasons.

4. Right to Restrict Processing – You have the right to request the restriction of processing your data. This means that we may only store your data, not use or process it further.

   This right applies under specific circumstances mentioned in Regulation 679/2016 on the protection of personal data, namely:

   • The accuracy of the data is contested by the data subject for a period that allows the controller to verify the accuracy of the data;
   • The processing is unlawful and has not been expressly consented to, and the data subject opposes the erasure of the data and requests restricting its use instead;
   • The controller, Pinum, no longer needs the data for processing, but the data subject needs it for establishing, exercising, or defending legal claims;
   • The data subject has objected to processing based on the controller’s legitimate interests, pending verification of whether the controller’s legitimate interests override those of the data subject.

5. Right to Data Portability – You have the right to move, copy, or transfer the data that concerns you from our database to another. This applies only to data you provided, where processing is based on your consent or on a contract, and where the processing is carried out by automated means.

6. Right to Object – You may object at any time to the processing of your data when such processing is based on a legitimate interest.

7. Right to Withdraw Consent at Any Time – You may withdraw your consent for the processing of your data at any time when such processing is based on consent. Withdrawing consent does not affect the lawfulness of processing based on consent prior to withdrawal.

8. Right to Lodge a Complaint with the Competent Supervisory Authority – You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro) in order to challenge Pinum’s data protection practices.

9. Right to Object to the Processing of Your Data for Direct Marketing Purposes –
   Given that you have registered your data on the company’s website, it is assumed that you automatically give your consent to receive benefits, discounts, and for your data to be used for direct marketing purposes.

   If you are no longer interested, you may unsubscribe or opt out of our direct marketing communications at any time. It is easiest to do this by clicking the “unsubscribe” link in any email or communication we send you.

10. Right to Object to Our Processing of Your Data When We Act in the Public Interest or in Our Legitimate Interests or Those of a Third Party – You may object at any time to the processing of your data if such processing is based on a legitimate interest.

Information we receive about you may be accessed and stored for a longer period if it is subject to a medical or legal request, a government investigation, an inquiry into possible violations of our terms or policies, or other situations for the prevention of harm.

SECURITY OF PROCESSING

Pinum has adopted technical and organizational measures for data processing, updated in accordance with GDPR requirements, in order to protect your personal data against any unauthorized access, improper use or disclosure, unauthorized modification, accidental destruction, or loss.

All Pinum employees and collaborators, as well as any third parties acting in the name and on behalf of Pinum, are obliged to maintain the confidentiality of your information and to comply with GDPR requirements.

CONTACT

If you have questions or concerns regarding how we handle and use your personal data, or if you wish to exercise any of your rights, please contact us at our DPO’s email address: dpo@pinum.ro