We would like to explain below which data we collect, use and process, when and for what purpose. In doing so, we would like to explain how the services we offer work and how the protection of your personal data is done. We process your data in accordance with the applicable legal provisions on the protection of personal data, in particular the EU General Data Protection Regulation (GDPR) and Romania`s Law no. 190/2018
Person responsible:
E-mail: [raz@shelbymedialtd.com]
Website: www.shelbymedialtd.com
Instagram: www.instagram.com/shelbymedia.crc/
Facebook: www.facebook.com/shelbycrcmedia
When you visit our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
The above data is processed by us for the following purposes:
The legal basis for data processing is Art. 6 para.1 lit.f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
If you have any questions, we offer you the opportunity to contact us using our contact form or request a proposal. In doing so, it is necessary to provide your name, a valid e-mail address and the specific enquiry so that we know who the enquiry is from in order to be able to answer it. Further information can be provided voluntarily. Among other things, you can submit requests for a free proposal digitally using this form.
The personal data collected by us for the use of the contact form or for the proposal forms are automatically deleted after complete completion of the enquiry you have submitted, unless another legitimising basis (e.g., a specific order or proposal or further processing) justifies further processing.
The data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para.1 lit.b GDPR on the basis of your specific request.
On our website, you have the option of subscribing to a free e-mail newsletter. When you register for the newsletter, the data from the input mask is transmitted to us.
In addition, the following data is collected during registration:
Your consent is obtained for the processing of data when you submit your registration for the newsletter.
If you commission us to provide services and provide us with your e-mail address, this may subsequently be used by us to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.
No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.
The collection of the user's e-mail address is used to deliver the e-mail newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address is stored for as long as the subscription to the newsletter is active.
The newsletter is sent using the dispatch service provider Mailchimp. The dispatch service provider is used on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR and an order processing agreement pursuant to Art. 28 Para. 3 p. 1 GDPR. The dispatch service provider may use the data of the recipients in pseudonymous form, i.e., without assignment to a user, to optimize or improve its own services.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in each newsletter. This also enables revocation of consent to the storage of personal data collected during the registration process.
The legal basis for the processing of the data after the user has registered for the newsletter is the user's consent (Art. 6 para. 1 lit. a GDPR). The legal basis for sending the newsletter as a result of the sale of goods or services is Art. 6 para. 1 lit. f GDPR.
Newsletter - performance measurement
The newsletters contain a so-called "pixel", i.e., a file the size of a pixel, which is retrieved from our server when the newsletter is opened or, if we use a dispatch service provider, from their server. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected.
This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behavior on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor, if used, that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
We do not transfer your personal data to third parties for purposes other than those listed.
We will only pass on your personal data to third parties if:
We use so-called cookies in some areas of our website. Through such file elements, your computer can be identified as a technical unit during your visit to this website, in order to make it easier for you to use our offer - also during repeat visits.
However, you usually have the option of setting your internet browser to inform you of the occurrence of cookies, so that you can allow or exclude them, or delete existing cookies.
Please use the help function of your internet browser to obtain information on how to change these settings. We would like to point out that some functions of our website may not work if you have deactivated the use of cookies.
Cookies do not allow a server to read private data from your computer, or the data stored by another server. They do not cause any damage to your computer and do not contain viruses.
Unless specifically regulated below, we base the use of cookies on Art. 6 para.1 lit.f GDPR. The processing is carried out to improve the functioning of our website. It is therefore necessary to protect our legitimate interests. For further details please read our Cookie Policy
We also use products on our website that may lead to data processing in the USA. The USA does not currently offer a level of data protection comparable to that of the EU. There is a risk that personal data may be analyzed by the US security authorities. It cannot be guaranteed that the data protection rights of EU citizens will be respected in the process. If you consent to the use of cookies, in particular the Facebook Pixel and Google Analytics, your consent also extends to data transfers and processing in the USA.
The data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e., the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.
According to legal requirements, data is stored in accordance with Romania`s statutory commercial, tax and other retention obligations.
You are entitled to the following data subject rights:
You have the right to request confirmation from us as to whether personal data relating to you is being processed.
You also have the right to request us to:
You have the right to receive personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller.
You have the right to withdraw your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
If the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) GDPR) or for the protection of our legitimate interests (Article 6(1)(f) GDPR), you have the right to object.
If you believe that the processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other legal remedy.
The National Supervisory Authority for the Processing of Personal Data in Romania (ANSPDCP) is the for us relevant supervisory authority. You can find the ANSPDCP contact details here. In case you wish to make a complaint, we would like to ask you to contact us in the first instance so we can address the complaint first.
We take contractual, organizational, and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and to protect the data we process against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, a 256-bit SSL (AES 256) encryption technology is used. This includes your IP address.
In doing so, your personal data is protected within the scope of the following points (excerpt):
In order to maintain the confidentiality of your personal data stored with us, we have taken various measures to control access, entry and access control.
In order to maintain the integrity of your personal data stored with us, we have taken various measures to control disclosure and input.
In order to maintain the availability of your personal data stored with us, we have taken various measures to control orders and availability.
The security measures in place are continuously improved in line with technological developments. Despite these precautions, due to the insecure nature of the Internet, we cannot guarantee the security of your data transmission to our online service. Therefore, any data transmission from you to our website is at your own risk.
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion or object to its processing, please contact us at [raz@shelbymedialtd.com].
For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.
Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user.
Also, we may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore.
In the event that we use personal data for the purposes of automated decision-making and those decisions have a legal (or similarly significant effect) on you, you have the right to challenge to such decisions under the GDPR, requesting human intervention, expressing their own point of view, and obtaining an explanation of the decision from us.
Personal information will be collected, processed or used in connection with the services offered. This is always done in compliance with the provisions of the GDPR. Insofar as we use your personal information for a purpose that requires your consent according to the legal provisions, we will always ask for your express consent.
We also process data in the context of administrative tasks as well as organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In this regard, we process the same data that we process in the course of providing our contractual services. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services. The deletion of data with regard to contractual services and contractual communication corresponds to the data mentioned in these processing activities.
In this context, we disclose or transfer data to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee offices and payment service providers.
Furthermore, based on our business interests, we store information on suppliers and other business partners, e.g., for the purpose of contacting them at a later date. This data, most of which is company-related, is generally stored permanently.
So-called social plugins ("plugins") of the social networks Facebook, Instagram, are used on our website. The plugins are marked with the logo of the respective social network.
When a data subject calls up a page of our website that contains such a plugin, the browser establishes a direct connection with the servers of the respective social network. The content of the plugin is transmitted directly to your browser by the social network concerned and integrated into the page. Through this integration, the social network in question receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in to the social network in question. This information (including your IP address) is transmitted by your browser directly to a server of the respective social network and stored there.
The described data processing operations are carried out on the basis of the legitimate interests of the respective social network in displaying personalized advertising, to inform other users of the social network about the activities of the data subject on our website and for the needs-based design of the respective social networks.
If a data subject does not want the respective social network to assign the data collected via our website directly to their profile, the data subject should log out of the respective social network before visiting our website.
For the purpose and scope of the data collection and the further processing and use of the data by the respective social network as well as the related rights and setting options for protecting the privacy of the data subject, please refer to the privacy policy of the respective social network.
The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our website if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is done in the interest of our public relations and communication.
If you wish to object to certain data processing over which we have control, please contact us. We will then consider your objection. If you send us a request via the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the desired response. You always have the option of sending us confidential enquiries to our address given in the imprint.
As already mentioned, we take care to make our social media pages as data protection compliant as possible if the provider of the social media platform gives us the opportunity to do so. We can only exert limited influence on statistics provided to us by the social media platform provider and cannot switch them off. However, we ensure that no additional optional statistics are made available to us.
We do not sell information that directly identifies you, like your name, address or phone records.
It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us, and we take the necessary steps to remove that information from our server.
Our website contains links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.
We reserve the right to adapt this privacy policy in the event of any changes to the legal situation, the service as well as the data processing. However, this only applies with regard to declarations on data processing. If user consent is required or parts of the privacy policy contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.
Users can regularly inform themselves about any changes in this privacy policy.
If you would like to exercise any of our rights as set out above in the “Data subject rights” section above or have a complaint, please contact us. Any such request will be responded to within one month and we might require proof of identity to verify and process your request. For more information about these rights, please contact us.
