NOVALIA S.A. is committed, within its activities and in accordance with the legislation in force in Romania and Europe, to ensuring the protection, confidentiality, and security of personal data of its clients and users of its products and services, as well as respecting their privacy.

This policy informs you about how NOVALIA S.A., its subcontractors, and potential partners process your personal data.

This policy applies to clients and users of products and services, as well as visitors to the website NovaliaRomania.ro.

NOVALIA S.A. AND THE PROCESSING OF YOUR PERSONAL DATA

NOVALIA S.A. processes personal data only for specific, explicit, and legitimate purposes. NOVALIA S.A. does not handle this data in a manner incompatible with these purposes.

NOVALIA S.A. processes your data as part of a request or within the framework of a contract.

For this purpose, the objectives pursued by NOVALIA S.A. are as follows:

• Managing the identity of the client or user and authentication
• Offering services
• Registering and shipping orders
• Billing and payment processing
• Providing pre-sale and sale services
• Providing post-sale services
• Processing canceled orders
• Processing complaints
• Client management
• Managing incoming emails
• Recovering unpaid invoices
• Managing disputes
• Storing client or user data
• Fulfilling contractual orders

Your data will be stored for as long as necessary to fulfill the purposes mentioned above.

NOVALIA S.A. also processes data for purposes other than strictly executing contracts. In this case, NOVALIA S.A. ensures it has a legitimate interest in processing the data.

For this purpose, the objectives pursued by NOVALIA S.A. are as follows:

• Organizing direct marketing operations
• Organizing commercial presentations
• Analyzing product usage for improvements
• Analyzing service usage for simplification
• Improving offers and client relationships
• Combating counterfeit goods

our data will be stored for as long as necessary to fulfill the purposes mentioned above.

NOVALIA S.A. processes your data to fulfill legal or regulatory obligations.

For this purpose, the objectives pursued by NOVALIA S.A. are as follows:

• Storing data necessary to comply with legal obligations
• Managing requests for data communication from authorized authorities

Your data may be stored as long as necessary to allow NOVALIA S.A. to meet its legal obligations.

NOVALIA S.A. may also process your data for statistical purposes.

What data is processed?

Depending on the case, NOVALIA S.A. processes your personal data, collected directly from you or resulting from the use of products and/or services.

NOVALIA S.A. processes data or categories of data only if strictly necessary for the intended purpose. You can find information about these purposes above.

NOVALIA S.A. processes the following categories of data:

• Identification data: name, surname, CNP, CUI, etc.
• Contact data: postal address, email, phone number, etc.
• Delivery address data: address, city, postal code, etc.
• Economic and financial data: payment methods, payment history, etc.
• Data from site login, login logs
• Data regarding site usage: pages visited and product viewed, etc.
• Products bought (CA) or returned

Who are the recipients of your data?

The collected data is intended for the internal services of NOVALIA S.A. and its subcontractors.

The data may also be processed by NOVALIA S.A. partners. This refers to situations where partners are involved in providing services. It may also refer to data processing where your consent is requested.

The processed data may also be transmitted to competent authorities, at their request, in the course of legal procedures, criminal investigations, or information requests from authorities or for compliance with other legal obligations.

What are your rights?

You have the right to access, correct, and delete the data related to you.

You may request the portability of your data. You also have the right to object to or request the limitation of the processing of your data.

You may issue instructions regarding the retention, deletion, or disclosure of your personal data after your death.

How to exercise your rights?

You can exercise your rights at any time by contacting the designated personal data protection officer at the email address comercial@ius.ro.

Any request to exercise your rights must be accompanied by a copy of an identity proof (ID card issued by the Romanian state or European Union identity card, or passport, residence card issued by the Romanian state, or residence permit issued by the Romanian state).

A response will be sent within one month from the receipt of your request. 

Possibility to file a complaint with the ANSPDCP

If your requests to NOVALIA S.A. have not been fulfilled, you have the possibility to file a complaint with the National Authority for the Supervision of Personal Data Processing (Bulevardul General Gheorghe Magheru 28-30, Bucharest 010336, tel: 031 805 9211), the supervisory authority responsible in Romania for ensuring compliance with personal data obligations.

How is your data secured?

NOVALIA S.A. ensures that your data is processed in conditions of full security and confidentiality, even when certain operations are carried out by subcontractors. For this purpose, appropriate technical and organizational measures are implemented to prevent loss, misuse, modification, or deletion of your personal data.

These measures are adapted based on the sensitivity level of the processed data and the level of risk associated with the processing or its implementation.

Changes to the Data Protection Policy

This privacy policy may change.

Date of the last update: 03/05/2022