Privacy policy

PRIVACY POLICY REGARDING THE USE OF PERSONAL DATA

SC IQBOX.RO SRL (named “Helius”), a Romanian legal entity, with headquarters in Bucharest, Str. George Constantinescu, 2C, Sector 2, Bucharest, registered at the Trade Register J40/1018/2005, unique tax registration code RO17141560, we send you this Privacy Policy to explain how we process and protect personal data.

To whom does this Information Note apply?

This Information Note applies to the processing of personal data of:

To our contractual partners such as suppliers, customers (“Commercial Partners”);
To the visitors and users of our website helius.ro (“Users”);

What data do we collect about you?

We collect and process your personal data as follows:

from the information you provide us by filling out forms on our website;
by corresponding with us by e-mail, official Facebook page, official Instagram page, or in any other way.

The information you provide to us may include your name, surname, date of birth, gender, home address, email address and telephone number, as well as other information as appropriate.

Every time you visit the helius.ro website, we automatically collect the following data:

technical data, for example this may include the Internet Protocol (IP) address used to connect your computer to the Internet, login information, browser type and version, time zone setting, types and versions of browser extensions (plug-ins), system and operating platform, device type, and mobile device brand; this data is collected and processed on our behalf through third party cookies and you can find more information about this at Cookie Policy
data about your visit, for example this may include data about the URL, sequence of clicks to, through and from the helius.ro site including date and time), the information or products you viewed or searched for on the site.

If we obtain your personal data from a third party, we will provide you with all relevant information about their processing as soon as possible, but no later than one month after obtaining your personal data.

What are the purposes of personal data processing and what is the legal basis for processing?

We can process your personal data in the following cases:

when we need to take the necessary steps to enter into a contract with you;
when we need to perform a contract we have entered into with you;
when we have to comply with a legal obligation (i.e. accounting, auditing);
when necessary for our legitimate interests (or those of a third party) and your interests (i.e. to detect and prevent fraud or to ensure IT and network security), unless your fundamental rights prevail over these interests;
where necessary in the public interest or for official purposes.

We process your personal data for various technical, administrative and operational reasons, such as:

to ensure we present content in the most effective way for you;
to improve the ro website, including its functionality;
for the administration of the ro website;
for internal operations, including troubleshooting, data analysis, testing, research, statistical and research purposes;
to keep the ro website safe;
for advertising and marketing, including for specific marketing purposes, so that we can provide content, including personalized content, that may be of greater interest to you.

In some cases, we will process your personal data only with your consent (i.e. in cases of advertising and marketing). In these cases, we will ask for your consent separately, transparently, when you provide your personal data. Afterwards, you can withdraw your consent, at any time, by sending a request to the e-mail address contact@helius.ro. The withdrawal of consent will not affect the legality of the processing that took place before its withdrawal.

When we request personal data to comply with legal or contractual obligations, your provision of such personal data is mandatory. This means that if such personal data is not provided, we will not be able to manage the contractual relationship or comply with the legal obligations imposed on us. In all other cases, the provision of personal data is optional and you are not obliged to provide it.

We may process your personal data, such as identification data, contact data and residential address, for the purpose of the possible exercise of our rights or claims against you in the future. This processing is based on our legitimate interest, being necessary to exercise our rights in case of possible disputes. SPECIFICALLY, WE WILL USE YOUR PERSONAL INFORMATION AS FOLLOWS:

Users and customers:

For the purpose of providing services, delivering goods and making payments under the relevant contracts, we may process your personal data, such as identification data, contact data, bank data.

This processing is based on:

Execution of a contract to which Users (especially customers) are a party, or
A legal obligation imposed on us.

We will not pass on your personal data to third parties for marketing purposes without your explicit consent.

We may also use your personal data to measure or understand your preferred content related to our products; and to make suggestions and recommendations to you and other Users of our website about products that may be of interest to you or them.

To whom do we transmit personal data?

Helius will not transmit (through sale or rental) to third parties your personal information.

Within Helius, only a limited number of staff members, such as those in the Sales, Accounting, and IT departments, have access to your personal data on a need-to-know basis. These staff members are subject to confidentiality obligations regarding personal data. Helius staff members have the right to manage personal data only on the basis of instructions communicated by Helius, in connection with their job responsibilities.

Adequate technical and organizational measures are taken for the protection of personal data. This site uses security measures against the loss, alteration or misuse of information under our control. However, Helius does not assume responsibility for the loss of information caused by errors in the software with which the website is designed and hosted. We are also not responsible for errors in the security of the server that hosts the site.

Personal data may be disclosed to government authorities, tax authorities and/or law enforcement authorities if this is required by applicable laws or if it is necessary to exercise our rights, including the terms of use, or to protect our legitimate interests (including the legitimate interests of third parties) in accordance with applicable laws.

Your personal data may also be disclosed to third parties as follows:

To business partners, suppliers and subcontractors for the execution of all contracts we enter into with you, in order to provide the products and services requested by you
To service providers who provide administrative, professional and technical support to the Company for IT support, security and business resources;
To external consultants (i.e. lawyers, accountants, auditors), for specific purposes, when necessary

Helius performs appropriate prior assessment in the selection of third party service providers and requires these service providers to maintain appropriate technical and organizational security measures to protect personal data and to process personal data only in accordance with instructions specified by Helius. Service providers will be entitled to use subcontractors in providing the services to Helius, provided that each subcontractor complies with the same data protection obligations as the service providers.

What is the personal data retention period?

We will retain your personal data for the period necessary to fulfill the purposes listed in this Policy or for the period required by applicable national law, in accordance with the applicable minimum legal retention periods and/or as long as necessary to exercise our legitimate rights ( and legitimate rights of others).

If you are a Customer, we will keep your personal data for the duration of the contractual relationship with you.

If we process your personal data based on your consent, this personal data will only be processed for the period provided for by your consent, unless you withdraw or limit your consent before the expiry of this period. In such cases, we will stop processing that personal data for the relevant purposes, subject to any legal obligation to process such personal data and/or our need to process such personal data for the purpose of exercising our legitimate rights (including the legitimate rights of other persons).

What are your rights?

You have the following rights according to the legislation in the field:

The right to confirm whether or not your personal data is being processed by us, and to provide you with a copy of your personal data;
The right to request the rectification or deletion of personal data processed by the helius.ro website;
The right to request the restriction of personal data processing by the ro website;
The right to object to the processing of personal data by the ro website (for example, the use of processing for direct marketing purposes);
The right to request portability of personal data;
The right to withdraw your consent, at any time, without affecting the legality of the processing carried out on the basis of the consent before its withdrawal;
The right to submit a complaint to the National Supervisory Authority for the Processing of Personal Data.
Please note that your rights described above may be limited in certain situations and are subject to applicable data protection laws and regulations. For example, the right to object to the processing of your personal data may be limited where we can demonstrate that we have compelling legitimate grounds for processing your personal data that override your interests. You will need to prove your identity and provide us with other details to help us respond to your request.

We will not charge a fee to respond to your request unless permitted by law and, if such a fee is charged, it will be reasonable and proportionate to your request.

To exercise one or more of these rights, please contact us at contact@helius.ro.

Security of personal data

We use appropriate technical and organizational measures to protect personal data and prevent unauthorized access to it. We have entered into contractual relationships with third parties that offer hosting services and these contracts include obligations regarding the organizational and technical security of personal data.

You are responsible for maintaining the confidentiality of all means of transmitting personal data (for example, the form on the website) used by you to access parts of the helius.ro website. Data transmission over the Internet is not completely secure. Although we do our best to protect your data, we cannot guarantee 100% the security of your data transmitted to our site; any transmission of personal data is done at your own risk.

After we receive your data, we will use strict security procedures to try to prevent unauthorized access.

Minors’ data privacy

The helius.ro website does not knowingly collect personal identification data from persons under the age of 16. If the parent or legal guardian is aware of the fact that the minor in his custody has provided the helius.ro website with his personal data, he must immediately inform Helius, at the e-mail address contact@helius.ro. If we discover that a person who has not reached the age of 16 has provided personal data through the helius.ro website, then we will destroy this information from our servers immediately, unless the parent or the guardian gives explicit consent for the website to process the child’s personal data for the specified purposes.

Cookies type files

The helius.ro website uses cookie files to give you a better experience when you browse our website. This processing is based on your consent expressed on the website or through the settings in your browser. You can find more information about cookies at Cookie Policy.

Contact

If you have any questions or uncertainties regarding the processing of your personal data by the helius.ro site or if you wish to exercise one or more of your rights, you can contact us at contact@helius.ro