Preliminary information

The purpose of this Privacy Policy is to explain to you what data we process, why we process it and what we do with it. Your privacy is important to us and we never sell lists or email addresses. Personal information belongs to you, so we store it securely and process it carefully. We do not give information to third parties without informing you. This information is important. Read it carefully!

This Privacy Policy does not cover other third party applications and sites that you can reach by accessing links on our site. This is beyond our control.

Please read carefully the Privacy Policy of any website and/or application before providing any personal data.

Who are we?

The Romanian Association of Green Roofs, Walls and Façades is responsible for processing your personal data that we collect directly from you or from other sources.

Under the law, our company is a controller of personal data. To ensure that your data is processed securely, we have implemented the necessary measures to protect your personal information.

What is your quality?
According to the law – you – the natural person, the recipient of our services or the person in any kind of relationship with us, are a “data subject”, i.e. an identified or identifiable natural person. In order to be fully transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us, the data controller, and you, the data subject.

We respect the law regarding your personal data
Protecting your personal information is very important! That is why we are committed to complying with national and European legislation on the protection of personal data, including Regulation (EU) No 679/2016, and in particular the following principles:
  • Lawfulness, fairness and transparency
  • We process your data lawfully and fairly. We are always transparent about the information we use and you are properly informed.
  • Control is yours – Within the limits of the law, we give you the opportunity to review, amend, delete personal data you have shared with us and exercise your other rights.
  • Data integrity and purpose limitation – We use data only for the purposes described at the time of collection or for new purposes consistent with the original purpose. In all cases, our purposes are compatible with the law. We take steps to ensure that personal data is accurate, complete and up to date.
  • Security – We have implemented security and encryption measures to protect your information to the best of our ability. However, please note that no website, no application and no internet connection is completely secure.
We may change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notice, which we will provide by posting on the Site and/or notification via email.

Questions and Requests
If you have any questions or concerns about the processing of your data or wish to exercise your legal rights in relation to the data we hold, or if you have concerns about the way we handle any privacy issue, you can write to us at the email address in the contact section of the site.

What kind of information do we collect about our users?
When you interact with us in any way you may give us or we may receive from other sources information including:
  • Your first and last name
  • Email address
  • Social profile
  • Interests and preferences
  • Address
  • Information about products and services purchased
  • Banking information

We may collect data through cookies or other similar technologies, including:

  • IP address
  • Internet browser
  • Ads you clicked on
  • Location
  • Web pages you access on our site
Purpose of collecting information
We collect your information for specified and legitimate purposes which include, but are not limited to the following:
  • For the purpose of entering into or performing a contract between you and us;
  • Please note that providing your first name, last name and contact address information is mandatory, otherwise we cannot deliver your goods.
  • To answer your questions and requests;
  • For marketing purposes, but only where we have your prior consent;
  • To provide and improve the services and products we offer;
  • To diagnose or fix technical problems;
  • To provide you with advertising and personalized content;
  • To defend against cyber attacks;
  • To create and/or maintain accounts;
  • To comply with legislation;
  • To establish or assert a claim in court;
Legal basis
  • You have given your consent to the processing of personal data
  • You can withdraw your consent at any time by following the unsubscribe instructions in each e-mail or by sending a written request to the e-mail address in the contact section of the website.
  • The processing is necessary for the conclusion or performance of a contract between you and us
  • Certain information, such as your name, surname and delivery address is required for the execution of the sales contract between us.
  • The processing is necessary in order to fulfil a legal obligation 
  • In certain situations, processing is necessary in order to fulfil a legal obligation, such as keeping invoices for 10 years.
How long is data stored in our database?

We only store personal data for as long as necessary to fulfil the purposes, but no longer than 10 years after the termination of the contract or the last interaction with us. After the end of the period, personal data will be deleted from computer systems or anonymised for scientific, historical or statistical research purposes.

In certain expressly regulated situations, we store data for the period required by law.

How do we share your information with others?
We may disclose your data, in compliance with applicable law, to product suppliers, business partners or other third parties. We make reasonable efforts at all times to ensure that these third parties have appropriate safeguards and security measures in place. With these third parties we have contractual clauses so that your data is protected. We will inform you of the identity of these companies prior to transmission or within a reasonable time and ensure that any transfer is lawful based on your consent or other legal basis.
For example, we may provide your data to other companies, such as IT or telecommunications service providers, accountants, legal services and other third parties with whom we have a contractual relationship. These third parties are selected with great care so that your data is only processed for the purposes we indicate.

We may also share your data with business partners as part of a joint effort to provide a product or service.
Although unlikely, we may in the future sell the business or part of the business, which will include transferring your data.
We may also transfer data to other parties with your consent or as instructed by you.

We may also provide your personal information to prosecutors, police, courts and other authorized state bodies, based on and within the limits of the law and following specific requests.

We will ensure, within reasonable limits, that your data does not leave the European Economic Area, but to the extent that we transfer data to non-EEA countries, we will in all cases ensure that the transfers are lawful, based on your explicit consent or other lawful basis.

Your rights
  • You have the right to withdraw your consent
  • You have the right to be informed about the processing of your data
  • You have the right to access your data
  • You have the right to rectify inaccurate or incomplete data
  • You have the right to erasure (“right to be forgotten”)
  • You have the right to restrict processing
  • You have the right to transfer the data we hold about you to another controller
  • You have the right to object to the processing of your data
  • You have the right not to be subject to a decision based solely on automated processing, including profiling
  • You have the right to take legal recourse
  • You have the right to lodge a complaint with a Supervisory Authority
Please note that:
  • You may withdraw your consent to direct marketing at any time by following the unsubscribe instructions in each email/sms or other electronic message.
  • If you wish to exercise your rights, you may do so by sending a written, signed and dated request to the email address in the contact section of the website.
  • The rights listed above are not absolute. There are exceptions, so each request received will be examined to decide whether it is justified or not. To the extent that your request is justified, we will make it easier for you to exercise your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to lodge a complaint with the Supervisory Authority and to take legal action.
  • We will try to respond to your request within 30 days. However, the time limit may be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility of identifying you within a reasonable time.
  • If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to identify you, we are not obliged to process your request.
Questions, requests and exercise of rights
If you have any questions or concerns about the processing of your information or wish to exercise your legal rights or have any other privacy concerns, you can write to us at the email address in the contact section of the website.
We’re glad you took the time to learn how we protect your personal information!