Privacy

Personal Data Processing Policy

SC NANO BIO MEDICAL SRL, with its registered office at 55 Smaranda Brăescu Street, Building 22D, Entrance 1, Apartment 8, Sector 1, Bucharest, 014206, Romania, registered with the Trade Register under No. J40/2891/2009, Tax Identification Number RO25228145, hereinafter referred to as the COMPANY, as the creator, owner and administrator of the website www.nbmedical.ro, respects the privacy and security of the personal data of every individual who accesses the website to place online orders.

In accordance with Law No. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data, and Law No. 506/2004 on the processing of personal data and the protection of privacy, the COMPANY is required to manage the personal data provided to us securely and solely for the purposes described below.

The COMPANY undertakes to maintain the confidentiality of personal data provided through www.nbmedical.ro, in accordance with Law No. 677/2001, as subsequently amended, concerning personal data protection.

Under Law No. 677/2001, registered individuals, as data subjects, have the following rights:

• The right to information (Article 12);
• The right of access to personal data (Article 13);
• The right to intervene in relation to personal data (Article 14);
• The right to object (Article 15);
• The right not to be subject to an individual decision (Article 17);
• The right to seek judicial remedy (Article 18).

Any information you provide will be deemed to constitute your express consent to the COMPANY’s use of your personal data for the purposes specified below.

If you wish to have your personal data updated or removed from our database, or if you have questions about data privacy, you may contact or notify us at any time using the contact details available on the website.

Every individual has the right to object, on legitimate grounds, to the processing of their personal data. This right may be excluded for certain processing activities required by law, such as processing carried out by financial and tax authorities, the police, the judiciary or social security services. Consequently, this provision cannot apply where processing is mandatory. Every individual also has the right to object, free of charge and without providing a reason, to the processing of their personal data for direct marketing purposes. Further information is available at www.dataprotection.ro.

If you do not wish your data to be collected, you may choose not to provide it.

Purpose of Data Collection

By registering on the WEBSITE or placing an ORDER and entering personal data in the registration forms, USERS/CUSTOMERS agree to the inclusion of all their personal data in the COMPANY’s database. They expressly and unequivocally consent to the storage and use of their personal data for:

• Marketing activities, including receiving informational or commercial messages at the email addresses provided to the COMPANY, such as offers, promotions, advertising and marketing messages concerning the COMPANY’s activities and those of third parties with which the COMPANY has relationships of any kind;
• Participation in competitions and promotions;
• Sending non-commercial or administrative messages concerning website changes, administration and similar matters;
• Internal statistical analysis to improve service quality and the WEBSITE’s presentation, and to develop new features, promotions, functions and services;
• Providing access to restricted sections of the WEBSITE;
• Market research;
• Tracking sales data.

The COMPANY will not disclose information about the WEBSITE’s USERS/CUSTOMERS without first obtaining their express consent. However, it may disclose information and personal data where expressly required by law.

Security of Collected and Processed Data

The COMPANY uses advanced security methods and technologies, together with strict employee policies and working procedures, to protect personal data collected and processed in accordance with applicable legislation.

The server hosting the website through which we collect personal data is protected against unauthorised physical and remote access, with remote access restricted. It is located in a data centre and undergoes periodic security audits.

We make all reasonable, commercially justified efforts to protect the personal data we collect. We assess new technologies in this field and, where appropriate, implement them to upgrade our security systems.

Definitions

Personal data: Any information relating to an identified or identifiable natural person. An identifiable person is someone who can be identified, directly or indirectly, particularly by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity.

Processing of personal data: Any operation or set of operations performed on personal data, whether by automated or non-automated means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

Storage: Keeping collected personal data on any type of medium.

Controller: Any natural or legal person governed by private or public law, including public authorities, institutions and their territorial bodies, that determines the purposes and means of processing personal data.