Red Owl SRL headquartered in Str Poligonului nr 8, Mogosoaia, Ilfov County, Romania, registered at the Trade Register with J23/2577/2016, with CUI 36231901, is a personal data controller.

Personal data will be collected and processed by RedOwl only to the extent permitted by the General Data Protection Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR)

Terms within the meaning of General Regulation (EU) 2016/679:

"personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;

"processing" means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

"restriction of processing" means marking stored personal data for the purpose of limiting their future processing;

"controller" shall mean the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of processing are determined by Union or national law, the controller or the specific criteria for its designation may be laid down in Union or national law;

"processor" means the natural or legal person, public authority, agency or other body processing personal data on behalf of the controller;

"third party" shall mean a natural or legal person, public authority, agency or body other than the data subject, the controller, the controller's processor and the persons who, under the direct authority of the controller or the controller's processor, are authorized to process personal data;

"Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's free, specific, informed and unambiguous will by which the data subject signifies his or her agreement, by an unequivocal statement or action, to personal data relating to him or her being processed;

RedOwl SRL, processes personal data collected under the conclusion and execution of contracts with customers, in order to realize legitimate interests in relation to the purposes mentioned above and in other situations on the basis of customer consent; The purposes of data collection are: informing users/customers (buyers) on the status of their account on www. redowlcraft.ro, informing users/customers about the evolution and status of orders, evaluation of products and services offered, commercial activities, promotion of products and services, marketing, advertising, media, administrative, development, market research, statistics, tracking and monitoring of sales and consumer behavior.

By reading this Privacy Policy and regulamentului protectiei datelor cu caracter personal ati luat la cunostinta faptul ca va sunt garantate drepturile prevazute de GDPR, respectiv:

- the right to transparency of information, communications and the means of exercising your rights,
- the right to information and access to your personal data, - the right to rectification and deletion of data,
- the right to restriction of processing,
- the right to data portability,
- the right to opposition and
- not to be subject to automated individual decision-making,
- the right to apply to the Supervisory Authority (ANSPDCP) in case of violation of your rights guaranteed by the personal data protection legislation.

To exercise the above-mentioned rights or for any questions related to the way in which your data is used or if any of the data about you is incorrect, you can contact us at the following e-mail address office@redowlcraft.com.

In the request, please indicate whether you want the information to be communicated to a specific address (postal or e-mail) or by a courier service that will ensure that you personally receive the information. Please note that we reserve the right to verify your identity in order to ensure that the request comes from you before granting any such request. We also recognize your right to take legal action for any infringement of your rights regarding the processing of your personal data. The information you provide to us will be used and stored only for the purposes for which you have provided it, to administer, support and evaluate our services, including to prevent breaches of systems security, and to comply with the law and our contractual terms. To this end, RedOwl will store your data in accordance with our Data Retention Policy which regulates pre-established and well-documented time limits for different categories of personal data, depending on the specifics of the operations for which it is needed. Furthermore, RedOwl ensures that personal data is adequate, relevant and limited to what is necessary for the purposes for which it is processed and also ensures that the period for which personal data is stored is limited and that upon expiration of the time limits, personal data will no longer be processed for those purposes.

RedOwl may provide your personal data to other companies with which it is in a partnership relationship, but only on the basis of a confidentiality undertaking on their part, whereby they guarantee that these data are kept secure and that the provision of this personal information is made in accordance with the legislation in force, as follows: courier service providers, banking services, other companies with which we may develop joint programs to offer our products and services on the market, RedOwl's representatives acting within the limits and for the purposes established by RedOwl, under the conditions of this Policy.

Personal Data Protection Regulation

We process your personal data (data related to orders and transactions, identification data, data that you provide to us or that we receive by law or by contract in order to be able to deliver products and services to you) - generally for the provision of goods and services, to interact with you, to send you, with your consent, details about our business, products and promotions.

The processing of your personal data takes place:
a) in order to enter into and perform a contract that you have entered into with us, resolving complaints and requests from customers, including issues related to orders, such as delivery, invoicing, product returns, potential litigation before the courts, debt recovery;

b) in order to comply with a legal obligation, including, but not limited to, communications or reports to authorized state or governmental authorities, institutions or agencies;

e) based on your consent for the following purposes:
1) newsletter, direct mailing, offering products and services, advertising;
2) the processing of your personal data processed under Art. 9 para. (2) GDPR, indispensable for the provision of goods and services.

The categories of recipients to whom the collected personal data may be transmitted:
       - state authorities (including but not limited to tax authorities, consumer protection authorities, state bodies competent in criminal matters, etc.), following a legal obligation of the Operator;
- suppliers directly/indirectly involved in the provision of goods and services (e.g. IT service developers etc.);
- providers of marketing services, market research, customer satisfaction surveys and other similar services;
- court or arbitration courts, notaries public, lawyers, bailiffs, authorized translators, other authorized services.

Transfer of personal data to a country outside the European Economic Area
RedOwl may transfer personal data to other companies outside the European Economic Area. For such transfers, RedOwl has taken a number of measures to ensure an adequate level of protection for individuals, similar to that afforded by European legislation. These measures include the conclusion of standard contractual clauses approved at European level.

Storing personal data
Personal data will be processed at least for the duration of the validity of the contract concluded, as well as thereafter, for the duration necessary for the performance of the contractual obligations by either party. Personal data will be stored for as long as necessary for the above-mentioned purposes or for a period of time required by law, in accordance with our internal data retention policy.

If you consent to the processing for marketing purposes, the personal data collected will be kept until you inform us of the withdrawal of your consent for this purpose.

With the entry into force of GDPR as a customer, you have the following rights:

Right to information and access
You have the right to be informed, on request, whether your personal data are processed and if so, you have the right to request access to them. You have the right to obtain a copy of your personal data processed.

Right to rectification
You have the right to obtain from us the rectification of your inaccurate personal data and you may fill in incomplete data at any time you consider necessary.

The "right to be forgotten" or the right to be erased
You have the right, in accordance with the law, to ask us to delete your personal data.

Right to restriction
You have the right to request restriction of the processing of your personal data. In this case, the data may be marked and may be processed by us only for certain purposes.

Right to withdraw your consent
Consent may be withdrawn at any time when the processing of personal data concerning you has been carried out on the basis of your consent.

Right to restriction of processing
It entails the right to request and obtain restriction of the processing of personal data concerning you, in certain circumstances, such as (i) you contest the accuracy of the data, for the period that would allow us to verify the accuracy of that data, (ii) your data has been processed unlawfully, and you object to its deletion, requesting restriction of its use.

Right to data portability
You have the right to receive the personal data you have provided to us in a structured, machine-readable and commonly recognizable format and you have the right to transmit this data to another entity without objection from us.

Right of opposition
You have the right to object at any time to the processing of your personal data by us, in particular for direct marketing purposes; you can request that we stop processing your personal data in our legitimate interest. If you have and exercise your right to object, we will no longer process your personal data for that purpose. There is no cost for exercising this right. This right may be overridden in particular if the processing of your personal data is necessary for the formalities relating to the conclusion of a contract or the performance of a contract already concluded.

The right to lodge a complaint with us and/or with the competent data protection authority - the National Authority for the Supervision of Personal Data Processing (ANSPDCP) - - www.dataprotection.ro

Right to go to court
You may exercise the above mentioned rights by submitting a written, dated and signed request to:

Red Owl SRL head office in Str Poligonului nr 8, Mogosoaia, Ilfov County, Romania, or by email at office@redowlcraft.com

In your request, please indicate whether you want the information to be communicated to a specific address (postal or e-mail) or by a courier service that will ensure that you personally receive the information. Please note that we reserve the right to verify your identity in order to ensure that the request comes from you before granting any such request.