GDPR
I. General Information
The confidentiality of personal data is one of the main concerns of ATNOM, located in 51B Borșului, Oradea, Bihor 410605, as a data controller. This document aims to inform you about the processing of your personal data in the context of using the website www.atnom.eu.
II. Categories of Personal Data Processed
a. If you are a customer of the Site, ATNOM will process your personal data, such as your first and last name, phone number, email address, billing address, shipping address, information regarding how you use the Site, such as your behavior/preferences/habits within the interaction with www.atnom.eu, and any other categories of data you provide directly in the context of creating a user account, placing an order through the site, or in any other way resulting from the use of our online communication tools.
b. If you are a visitor of the Site, ATNOM will process your personal data provided directly in the context of using the Site, such as data provided in the contact/queries/complaints section, to the extent that you contact us in this way.
III. Purposes and Legal Grounds for Processing
a. If you are a customer of the Site, ATNOM processes your personal data as follows:
- To carry out the contractual relationship between you and ATNOM, namely for the receipt, validation, shipping, and invoicing of the order placed on the Site, informing you about the status of your order, and possible organization of product returns, etc.
- To comply with the legal obligations that ATNOM is subject to in the context of services provided through the Site, including obligations in fiscal matters as well as in archiving. Legal basis: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is required. Refusal to provide data may result in ATNOM being unable to comply with its legal obligations and, therefore, unable to offer services through the Site.
- For marketing activities, namely for sending communications regarding the products and services offered by ATNOM through the Site via email, SMS, or other distance communication means. Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.
Providing your data for this purpose is voluntary. Refusal to provide consent will not have negative consequences for you.
- For various analyses and reports on how the Site functions, creating consumer preference profiles, mainly to improve the experience offered on the Site. Legal basis: The processing of your data for this purpose is based on ATNOM’s legitimate interest in constantly improving the customer experience on the Site. Providing your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.
b. If you are a visitor of the Site, ATNOM processes your personal data as follows:
- For marketing activities, namely for sending communications about the products and services offered by ATNOM through the Site via email, SMS, or other distance communication means. Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.
- To address complaints, queries, and to monitor traffic and improve your experience on the Site. Legal basis: The processing of your data for this purpose is based on ATNOM’s legitimate interest in ensuring the proper functioning of the Site, as well as in continually improving the experience of Site visitors, including by resolving comments, queries, or complaints.
Providing your data for this purpose is voluntary. Refusing to provide data will not have negative consequences for you.
IV. Duration of Data Processing
In general, ATNOM will process your personal data for as long as necessary to achieve the processing purposes mentioned above.
If you are a customer, we will process your data throughout the duration of our contractual relationship and afterward in accordance with the legal obligations of ATNOM (e.g., in the case of financial-accounting documents, the retention period is 10 years from the date the financial year in which they were prepared ends).
If you withdraw your consent for data processing for marketing purposes, ATNOM will cease processing your personal data for this purpose, without affecting the processing carried out by ATNOM based on your consent prior to its withdrawal.
V. Disclosure of Personal Data
For the purposes of processing, ATNOM may disclose your data to partners, third parties, or entities that support ATNOM in conducting its activities through the Site (e.g., courier companies, IT service providers), or to public authorities, in cases such as:
- For managing the Site;
- In cases where communication is necessary for awarding prizes or other benefits to individuals involved in promotional campaigns conducted by ATNOM through the Site;
- For the maintenance, customization, and improvement of the Site and services carried out through it;
- For data analysis, testing, research, monitoring trends in use and activity, development of security features, and user authentication;
- For sending marketing communications within the legal limits;
- When disclosure of personal data is required by law, etc.
VI. Transfer of Personal Data
Personal data provided to ATNOM may be transferred outside Romania, but only to countries within the European Union.
VII. Your Rights
Under the applicable data protection legislation, you have the following rights:
- The right to be informed, namely the right to receive details about the processing activities carried out by ATNOM, as described in this document;
- The right of access to data, namely the right to obtain confirmation from ATNOM as to whether or not your personal data is being processed, as well as details on how data is processed, the purpose of processing, recipients, or categories of recipients of the data, etc.;
- The right to rectification, namely the right to obtain from ATNOM the correction of inaccurate or unjustified personal data, as well as the completion of incomplete data. Rectification/completion will be communicated to each recipient to whom the data was sent, unless this proves impossible or involves disproportionate effort;
- The right to erasure of data without undue delay (“right to be forgotten”), if one of the following grounds applies:
- The data is no longer necessary for the purposes for which it was collected or processed;
- You withdraw your consent and there is no other legal basis for processing;
- You object to the processing, and there are no overriding legitimate grounds for processing;
- The data was processed unlawfully;
- The data must be erased to comply with a legal obligation;
- The data was collected in connection with the provision of information society services under EU or national law to which the data controller is subject.
ATNOM may anonymize such data (depriving it of personal character) and continue processing it for statistical purposes.
