Legal notice

INFORMATION NOTE on the processing of personal data within the MADE BY SOCIETY online store

Freefashion S.R.L., hereinafter referred to as "MADE BY SOCIETY" or simply "the Company" or "the Controller", headquartered in Romania, Botoșani County, Răchiți, Strada 29, No. 247B, with unique registration code 32715640, fiscal attribute RO, established and operating in accordance with Romanian law, owner of the online store www.madebysociety.ro, in accordance with Regulation No. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, adopted by the European Parliament, processes personal data as a Controller in a confidential, secure and transparent manner, assuring its customers that they can trust the way in which the personal data provided to the Controller is managed.

PURPOSE OF PROCESSING

The Controller processes the personal data of data subjects, in accordance with the specific and applicable legal provisions, for the following activities:

registering a user account in this online store;

subscribing to the newsletter in this online store;

completing sales formalities through this online store;

informing you about the launch of new products or sending other data or information that the Controller may consider relevant in connection with the online store;

accessing promotions addressed to registered customers;

informing you about the processing status of orders placed online;

informing you about the resolution of returns and of any complaints;

viewing your order history;

creating profiles, indicating product sizes, colours and other relevant elements;

resolving notifications of breaches of the data subject's rights;

fulfilling applicable legal and/or contractual obligations; fulfilling the legitimate interests of the Controller;

If you do not agree to provide the personal data listed in this information note, it may be impossible or, as the case may be, more difficult for our company to fulfil the request you send us.

LEGAL BASIS FOR PROCESSING

The personal data of data subjects is processed for the purpose of pursuing the legitimate interests of the Controller, in accordance with Article 6(1)(a), (b), (c), (e) and (f) of Regulation (EU) 2016/679.

TYPES OF PERSONAL DATA PROCESSED BY THE CONTROLLER

Depending on the case, the personal data we may ask you for is the following:

First and last name;

Body measurements;

Full home address;

Postal address;

E-mail address;

Phone number;

Data required for a transaction, such as the bank account or the name of the account holder, as well as the bank where the account is held;

Signature (only in specific cases, such as completing the product return form or, where applicable, signing the form for exercising data subject rights);

Other personal data (in exceptional cases and only if necessary and legally justified);

The internal policy on the protection and security of personal data refers to the principle of data minimisation, by reducing processing to the strict minimum presented in this Information Note. The Controller reserves the right to exceptionally request other personal data where necessary to fulfil the purposes listed.

POTENTIAL RECIPIENTS OF PERSONAL DATA

The personal data collected may be disclosed, as the case may be, to the following categories of recipients:

Processors selected by our company to carry out various data processing operations on behalf of the Controller;

Third-party recipients, such as our partner courier companies;

Administrators of the social networks where our company has accounts;

Central institutions/authorities, upon their official legal request;

Criminal investigation bodies and/or courts of law, in accordance with the law;

Personal data may be stored on electronic servers owned by the Controller or, as the case may be, by third parties, in both cases the servers being secured and located within the European Union;

In cases relevant to the proper functioning and management of the online store, to our associated Controller Vicol Generation Business – Romania S.R.L., headquartered in Romania, Botoșani County, Răchiți, Strada 29 No. 247B, 1st floor, office No. 1, unique registration code 37295920;

To the extent necessary, to other third parties as required by law or in compliance with our legitimate interest, and only where it prevails;

Data is disclosed to third parties only in accordance with legal and, where applicable, contractual provisions, for the categories of recipients specified above.

PERSONAL DATA STORAGE PERIOD

Personal data is stored for a period proportional to the stated purposes or in accordance with legal and specific requirements, after which it will be deleted or anonymised according to internal procedures, in a secure, efficient and definitive manner.

DATA PROTECTION RIGHTS OF DATA SUBJECTS

In accordance with the applicable legal provisions, you have: the right of access, the right to rectification, the right to erasure (the right to be forgotten), the right to restriction of processing and the right to data portability, regarding the personal data belonging to you or, as the case may be, to the person you legally represent.

Note! You may withdraw your consent to the processing of personal data at any time by informing us in writing at dataprotection@madebysociety.com, this option being applicable to the processing of personal data based on previously given consent and as long as there is no other legal or contractual basis requiring the continued processing of certain personal data. Otherwise, personal data provided for the purpose of concluding and performing a contract will be processed for the term set out in the contract (where applicable, in simplified form), and personal data provided for the purpose of fulfilling a legal obligation will be processed for the term provided by the applicable legislation. It is important to note that after the standard storage period has expired, in some cases an additional storage period of 3 (three) years may apply to certain personal data, representing the general limitation period provided by national law. Thus, in good faith and in order to defend the legitimate rights of our company in the event of a dispute, we reserve the right, in certain situations, to apply the additional storage period, starting from the day the standard storage period ended.

For any questions, requests or complaints regarding data protection, please contact our company's data protection officer at the following details:

DPO: Adrian Magda

E-mail: dataprotection@madebysociety.com

Any request/complaint/petition addressed to our company regarding personal data will be answered within the legal term, namely within a maximum of 30 days from its registration. As an exception, for requests involving complex operations, this term may be extended proportionally, without exceeding a reasonable duration in relation to the subject of the request.

Postal address: Freefashion Srl – Made By Society (Legal Department), Romania, Botoșani County, Strada 29 No. 247B, 2nd floor.

This information note is a brief summary of the information presented in detail in the Privacy Policy for the processing of personal data through our online store. For full information, we recommend that you read the Privacy Policy available in the online store.

Note! As a result of non-EU orders placed from/to third countries (located outside the European Union), the Controller may process personal data, in which case the legislation applicable in Romania produces legal effects, including Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, adopted by the European Parliament. In addition to this Information Note, the provisions of the Privacy Policy for the processing of personal data through the Made By Society online store also apply.

This document is the property of our company and is intended solely to support the commercial relationship with our customers. Copying, distributing or appropriating this document is prohibited.

MADE BY SOCIETY is promptly committed to respecting the legitimate rights of its Customers, with a primary concern for complying with the legal provisions governing our company's activity.

Last updated: 28.07.2024. Effective from the date of publication.