Privacy policy

The website www.foodfromlight.com is managed by SC HARRIS HOLDING SRL with a registered office in Șelimbăr, Street. Painter N. Brana no. 3, Ap. 7, Postal code 557260, Jud. Sibiu, Romania, organisation number J32/308/2013, VAT number RO31465120, e-mail office@foodfromlight.com

Personal data means any information regarding an identified or identifiable natural person ("data subject");

An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as a name, an identification number, location data, an online identifier, or to one or more specific elements, specific to his physical, physiological, genetic, psychological, economic, cultural or social identity.

1. The purpose of processing

The company processes your data for the following purposes:

  • providing information on commercial offers/services;
  • to take the necessary steps to conclude a contract/tax invoice;
  • to purchase products online;
  • to be able to answer questions and requests;
  • to defend against cyber attacks;
  • for marketing activities, but only if we have received prior consent;
  • to offer and improve the services we offer;

 

2. The legal basis of the processing

About the data that are offered to us voluntarily by filling in and sending the forms or by contacting us in any way, the legal basis is "to take steps at the request of the person concerned before concluding a contract or invoice" (art. 6 para. 1 letter b of EU Regulation 679/2016).

According to the GDPR (applicable from May 25, 2018), the person's consent is not required in situations where the processing is necessary to take steps to conclude a contract, fulfill a legal obligation, or fulfill a legitimate interest.

Regarding the data that we collect automatically through the use of cookies or other similar technologies, the basis for processing is consent. By accessing the site, the user validly consents to the processing.

The processing of personal data based on consent represents an additional purpose to the processing of personal data to execute the contract to which you are a party and does not condition the supply/performance of contractual services.

 

3. The categories of recipients to whom the collected personal data can be disclosed

We assure you that we will not disclose the collected information to third parties, to be used for their own marketing or commercial purposes. We must disclose this information to the following entities:

Service providers. We may disclose information to other companies that provide services to us and act as proxies, such as companies that help us with invoicing or that send emails on our behalf. These entities are selected with particular care to ensure that they meet the specific requirements in terms of personal data protection. These entities have a limited capacity to use the information provided by us for purposes other than providing us with services;

Courts, prosecutors, or other central and local public authorities to comply with the law or as a response to a mandatory legal procedure (court decision, etc.);

To other parties with the consent or instructions collected. Apart from the situations described in this Privacy Policy, it is possible to transmit the information to third parties to whom the user consents or requests us to undertake such an action.

 

4. How long we store personal data and sensitive information

Your data will be stored by the company for a period that does not exceed the period necessary to achieve the purposes described above and/or for any other period necessary by the applicable legal obligations.

 

5. Your rights

The regulation grants a series of rights to the persons whose personal data is processed:

  • The right to withdraw consent; In the case where the processing is based on consent, the user withdraws his consent at any time and free of charge by sending an e-mail to the indicated address with the subject "withdrawal of consent".
  • The right to file a complaint with a supervisory authority;
  • The right to address justice;
  • The right of access; The user has the right to obtain from us a confirmation as to whether or not personal data concerning him is being processed and, if so, the user will have the right of access to the respective data.
  • The right to rectification; The user has the right to obtain from us the rectification/correction of inaccurate/erroneous personal data concerning him, and the correction of incomplete personal data.
  • The right to data deletion ("the right to be forgotten"); In situations where the data is no longer necessary for the fulfillment of the purposes, the consent has been withdrawn and there is no other legal basis for the processing, the user opposes the processing and there are no legitimate reasons that prevail about the processing or the personal data have been illegally processed, he has the right to obtain the deletion of the data concerning him, without unjustified delays.
  • The right to restrict processing; You have the right to obtain from us the restriction of processing in the following situations: (a) you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data; (b) the processing is illegal, and you object to the deletion of personal data, requesting in return the restriction of their use; (c) we no longer need the personal data for processing, but you request them to ascertain, exercise or defend a right in court; (d) you objected to the processing by article 21 paragraph (1) of the GDPR, for the time interval in which it is checked whether our legitimate rights prevail over your rights.
  • The right to data portability; You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and you have the right to transmit this data to another operator, without obstacles from our part, if:
    • processing is based on consent under Article 6 paragraph 1 letter. a or of Article 9 Paragraph 2 Letter an of the GDPR or on a contract under Article 6 Paragraph 1 Letter B of the GDPR;
    • The processing is carried out by automatic means.
  • The right of portability/transfer - you can ask the operator to transfer your processed data to a third party. Remember: The deadline for responding to the user's request is 30 days. It can be modified depending on the existence of specific reasons or the complexity of the request received. For more information on the rights you enjoy, you can consult EU Regulation 679/2016, by accessing www.dataprotection.ro.

 

6. To remember

Period: We will try to respond to the request within 30 days. However, the deadline may be extended for specific reasons related to the specific legal right or the complexity of your request.

Access restriction: in certain situations, we may not be able to provide you with access to all or some of your data due to legal provisions. If we refuse your access request, we will inform you of the reason for the refusal.

The impossibility of identifying yourself.

In some cases, we may not be able to search your data because of the identifiers you provide in your request. An example of personal data that we cannot consult when you provide us with your name and e-mail address is the data collected through cookies by the browser.

In such cases, if we cannot identify you as the data subject, we are unable to comply with your request, unless you provide additional information that allows identification.

ANPRC link

www.anpc.ro/

 

7. What information we collect

We collect the following personal information:

  • name
  • contact information including email address
  • demographic information, such as postal code, preferences, and interest categories
  • other relevant information for special offers, campaigns, and customer surveys

To see the complete list of cookies through which we collect information, see the Complete list of cookies.

 

8. What we do with the information we collect

We need this information to understand your needs and provide you with a better service, in particular for the following reasons:

Internal record keeping

We may use the information to improve our products and services.
We may periodically send promotional emails about new products, special offers, or other information that we think you may find interesting using the email address you have provided.

From time to time, we may use your information to contact you for market research purposes. We may contact you by email, phone, fax, or post. We may use the information to customize the site based on your interests.

Security

We are committed to ensuring that your information is secure. To prevent unauthorized access or disclosure, we have put in place appropriate physical, electronic, and managerial procedures to protect and secure the information we collect online.

 

9. How we use cookies

A cookie is a small file that requests permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or notifies you when you visit a particular site. Cookies allow web applications to respond to you individually. The web application can tailor its operations to your needs, likes, and dislikes by collecting and retaining information about your preferences.

We use traffic cookies to identify which pages are used. This helps us analyze web page traffic data and improve our website to suit our customers' needs. We only use this information for statistical analysis purposes, and then the data is removed from the system.

In general, cookies help us provide you with a better website by allowing us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually change your browser settings to refuse cookies if you wish. This may prevent you from taking full advantage of the website.

 

10. Links to Other Websites

Our website may contain links to other sites of interest. However, once you have used these links to leave our website, you should note that we have no control over that other website. Therefore, we cannot be responsible for the protection and privacy of the information you provide while visiting such sites, and such sites are not governed by this privacy statement. We recommend that you consult the privacy terms applicable to the website in question.

 

11. The list of collected cookies

The table below contains a list of cookies that we use to collect information.

COOKIE NAME COOKIE DESCRIPTION
FORM_KEY Stores randomly generated key used to prevent forged requests.
PHPSESSID Your session ID on the server.
GUEST-VIEW Allows guests to view and edit their orders.
PERSISTENT_SHOPPING_CART A link to information about your cart and viewing history, if you have asked for this.
STF Information on products you have emailed to friends.
STORE The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE Indicates whether a customer allowed to use cookies.
SECTION-DATA-IDS Facilitates caching of content on the browser to make pages load faster.
PRIVATE_CONTENT_VERSION Facilitates caching of content on the browser to make pages load faster.

 

Facebook

We use cookies to display recent Facebook posts and for content sharing buttons on the website. Details

Name Retention Function
Marketing/Tracking
_fbp 3 months Track visits across websites
actppresence 1 year Manage ad display frequency
fbm_ 1 year Store account details
_fbc 2 years Stores last visit
fbm_* 1 year Store account details
xs 3 months Store a unique session ID
fr 3 months Ad delivery
datr 2 years Prevent fraud
sb 2 years Store browser details
*_fbm_ 1 year Store account details
Functional
wd 1 week Determine screen resolution
act 90 days Keep users logged in
c_user 90 days Store a unique user ID
csm 90 days Prevent fraud
presence session Track if the browser tab is active

For more details please read Facebook Privacy Policy.

 

Google Tag Manager

We use Google Tag Manager to generate statistics about user activity on the site. Details

Name Retention Function
Marketing/Tracking
_gcl_au persistent Track conversions

For more details please read Google Tag Manager Privacy Policy.

 

Tawk

We use Tawk to chat with our customers. Details

Name Retention Function
Purpose pending investigation
__tawkuuid
TawkConnectionTime
TawkWindowName

Pentru mai multe detalii citeste Tawk Privacy Policy.

 

Google Ads

We use Google Ads for online marketing campaigns.

Name Retention Function
Marketing/Tracking
_gac_UA-* 90 days Track audience reach

For more details please read Google Ads Privacy Policy.

 

12. Contact details

For more details about the personal data processing policy, please contact us.

HARRIS HOLDING SRL

Strret Pictor N. Brana no.3, Ap.7
557260 Șelimbăr, Sibiu County, România

Website: https://www.foodfromlight.com
Email: office@foodfromlight.com
Phone: +40.722.552.447