This Information Notice (“Information Notice”) is provided to all visitors of YANA MEAT FEED SRL.

YANA MEAT FEED SRL, located in Bucharest, Sector 2, Str. Str. Ceaikovski 9 , registered with the Trade Register under registration number J40/17521/2018 , having the Unique Registration Code RO 40271530,  hereinafter referred to as the “Company,” is legally represented by BASSEL KOJA her role as an administrator. The Company processes the personal data of visitors as “Data Subjects” in accordance with the regulations of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (hereinafter referred to as “GDPR”).

The purpose of this Information Notice is to communicate the conditions related to the processing of personal data to Data Subjects and the purpose of using this data, in accordance with Article 13 of the GDPR. This Information Notice provides details on how, when, and why we process personal data, the conditions under which we can disclose them to others, and how we ensure their safety.

As a general rule, the Company may obtain personal data (meaning any information concerning an identified or identifiable natural or legal person) directly from the Data Subject.

There are also situations where the Company obtains personal data automatically. For instance, in cases where a product is purchased from the Company’s website, details such as geolocation and internet traffic information (e.g., IP address), personal information, and transaction details will be processed. Additionally, the Company interacts with Data Subjects online, such as when they access various personalized advertisements.

Definitions: As defined in Article 4 of the GDPR, “personal data” means any information relating to an identified or identifiable natural person or legal entity. An identifiable natural or legal person is one who can be identified directly or indirectly, particularly by reference to an identifier such as a name, personal identification number, company registration number, email address, phone number, location data, online identifier, or one or more specific elements specific to their physical, physiological, genetic, psychological, economic, cultural, or social identity, as well as banking information for billing.

“Processing” includes any operation or set of operations carried out on personal data or sets of personal data, whether by automated means or not. This encompasses actions such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, transmission, dissemination, or making available by other means, alignment, combination, restriction, erasure, or destruction.

The other terms used herein have the meanings defined in Article 4 of the GDPR.

Types of data collected: Data collected by the Company include names, first names, company names, the name of the legal representative, personal identification number, company registration number, phone number, email address, facial and body images, entry and exit times, and data resulting from transactions (payment methods, purchased products). Furthermore, geolocation and internet traffic information (e.g., IP address), personal information, and transaction data are processed when a purchase is made from the Company’s website, and interactions with Data Subjects online may involve the processing of personal data.

Data Protection Officer: The data protection officer is BASSEL KOJA and can be reached by phone at 0799440000 or by email at INFO@CHCOLOCO.RO.

Purpose of processing and legal basis: The Company processes the personal data of Data Subjects (including names, first names, company names, personal identification numbers, company registration numbers, phone numbers, email addresses, facial and body images, entry and exit times), as well as data resulting from transactions (payment methods, purchased products), for the legitimate interests of the Company and to ensure the security and safety of premises and employees.

The processing of your personal data depends on the relationship between you and the Company. We process your personal data when we have your consent, when it is necessary for the conclusion and execution of contractual relationships, or when the Company has to comply with legal obligations. It may also be processed for the legitimate interests of the Company that do not override your fundamental rights and freedoms.

If the processing of your personal data is based on your consent, you have the option to give, refuse, or revoke your consent at a later date. The Company may contact you until you choose your consent.

Specifically, with your consent, the Company may process your personal data to:

– Send advertising materials through various communication methods (email, SMS, mail);

– Verify customer satisfaction regarding the Company’s activities;

– Personalize and transmit promotional offers;

– Execute the contract concluded with the Company;

– Better understand social media users to tailor our websites to your preferences and improve our products and services;

– Respond to your requests, questions, and comments;

– Comply with rules, legal regulations, codes of conduct, or Company guidelines, as well as for law enforcement and cooperation with competent authorities (including, but not limited to, tax and judicial authorities);

– Prevent, detect, and investigate crimes, including fraud, money laundering, or terrorism financing, and analyze and manage business risks;

– In connection with any  claim, action, or procedure and/or to protect or exercise the rights and obligations of the Company, both contractually and legally;

– Manage and prepare internal reports.

Legal basis:

– 6 (1) (a) GDPR – the data subject has given consent to the processing of his personal data for one or more specific purposes;

– 6 (1) (b) GDPR – processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject before entering into a contract;

– 6 (1) (f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Company to protect its business activity, including intellectual property rights and trade secrets, as well as to ensure that employees comply with applicable laws and Company regulations, policies, and procedures.

– 6 (1) (c) GDPR – processing is necessary for compliance with a legal obligation to which the Company is subject.

Categories of recipients of collected personal data: We may transfer your personal data to third parties, including:

– Providers of operational services, such as courier, security, telecommunications, IT, payment, processing, training, storage, archiving, and customer support services;

– Any business partner, investor, or assignee (current or potential) to facilitate commercial asset transactions;

– Professional advisors, such as auditors or lawyers;

– Regulatory authorities, professional bodies, and/or public authorities for compliance with applicable regulations.

Retention of personal data: We will retain your personal data for as long as is reasonably necessary for the purposes outlined in this Information Notice. However, in certain circumstances, we may retain your personal data for longer periods of time, for example, when required by law, regulation, tax, or accounting requirements. The Company will retain your personal data for the time necessary to comply with legal obligations specific to our field of activity or applicable prescription terms, or to comply with data archiving obligations imposed by applicable law (e.g., those specific to the financial-accounting field).

Moreover, we may retain your personal data for longer periods to have an accurate record of your relationship with us in case of any complaints or issues that may arise or if we reasonably believe there is a prospect of litigation regarding your personal data or the transactions carried out. The Company will make all reasonable efforts to protect your personal data under our control by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copying, modification, or unauthorized disposal, as well as other similar risks.

Your rights regarding your personal data: Concerning the processing of personal data, under the conditions specified by the GDPR, and unless the law provides otherwise, the Company guarantees the respect of your rights:

– The right to access personal data, i.e., the right to obtain confirmation from the Company that we are processing your personal data, as well as information about the processing method;

– The right to request rectification whenever your data is inaccurate or incomplete;

– The right to erase data (“the right to be forgotten”) – you can request the erasure of data if the processing is not lawful or in other cases provided by law;

– The right to restrict data processing – you can request that the processing be restricted if you have doubts about the accuracy of the data and in other cases provided by law;

– The right to be informed by the operator in case of data security breaches;

– The right to data portability – you have the possibility to receive, in certain circumstances, your personal data that you have provided to us in a format that can be automatically read or you can request the data to be transmitted to another operator;

– The right to object – you can object, especially to the processing based on legitimate interest;

– The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you unless such processing is permitted by law.

You can exercise these rights (except for the right to file a complaint with the ANSPDCP) individually or collectively very simply by sending a written request to our headquarters in Bucharest, Sector 2, Str. Str. Ceaikovski 9  or by email to: info@chocoloco.ro

In addition, the data protection officer can be contacted if there are concerns about any aspects related to the protection of personal data by sending a request to the contact details mentioned above.

By signing this Information Notice, the undersigned confirms that they have read its contents and agree to the processing of their personal data for the purposes and in accordance with the conditions mentioned above.