> WHO WE ARE
SC COVERED SRL, hereinafter referred to as covered, is a company registered in Romania with its registered office in Strei, Hunedoara county, Str. Main no. 98 registered at the Trade Register with no. J20/341/2023, having Fiscal Identification Code 47818139.
> PERSONAL DATA WE PROCESS
Our personal data privacy policy governs the use and storage of your data.
We collect the following types of personal data from you:
- Name and surname
- Phone number
- Billing and payment details (address)
- IP address
> WHY DO WE NEED THEM
We need your personal data to provide you with the following services:
Covered orders
• Name and surname – we need this data for the delivery of the ordered products
• Email – the email address we use to confirm your order and inform you about the status of your order.
• Telephone number – we will contact you if there are problems with the delivery of your products and we will notify you via SMS about the status of the order
• Delivery address – we need this data to deliver the ordered products
• Billing address – we need this data to issue your invoice
Covered support
• Name and surname – we need this data to identify you
• E-mail – we use the e-mail address to communicate with you to solve your problem or provide you with the necessary information
• Phone number – we will contact you to expedite the resolution of a problem
• IP & session details on covered.ro – we need this data to be able to offer you the Chat communication service and to be able to answer your questions by finding out which pages you visited during the session on covered.ro
Site operation covered
• IP address – filtering and detecting attacks from the Internet
• covered.ro account information – your information will be kept in the internal CRM to allow our sellers and the covered.ro website to provide you with a personalized experience
With your consent, we would also like to process the following personal data Newsletter covered.ro
• First and last name – we need this information to communicate with you in a more personal way.
• Email – we need this information to be able to send the newsletter.
Online behavior
• Your personal data for browsing history are transmitted to our partners described in the cookies policy. Please see the description of these partners on this Cookie Policy page
> WHAT DO WE DO WITH THEM
Your personal data are processed within the SC COVERED SRL company located in Romania. Your data is hosted and stored at Shopify Inc.
The service providers we collaborate with to carry out our activity are:
- 2Checkout - provider of online payment services
- Google Analytics - website traffic analysis provider
- Fan courier and PrioriPost - courier service providers
- SmartBill - provider of issuing documents (invoices)
- Recart - provider for displaying personalized offers/recommendations
- xConnector - provider of issuing documents (awb/invoices)
- Facebook pixel - paid advertising display service
- smshare - sms sending provider (order details)
- Product Reviews Addon - reviews service provider
- MailChimp - newsletter sending service provider
> HOW LONG DO WE KEEP PERSONAL DATA
For the newsletter we will keep your personal data only for the lifetime of the newsletter or until you notify us that you no longer wish to receive the newsletter. After this period, your personal data will be irreversibly destroyed.
For orders from covered.ro, your personal data, from those contained in the financial-accounting documents or in documents attached to the financial-accounting documents, will be kept for 10 years according to the provisions of art. 38 of Annex 1 to Order no. 2634/2015 on financial-accounting documents, issued by the Ministry of Public Finance and will not be accessed for any purpose other than the legal purpose for which they are archived. After 10 years this data will be destroyed.
> WHAT ARE YOUR RIGHTS
If you have reason to believe that any personal data we hold about you is incorrect or incomplete, you have the right to request to see this information, have it rectified or have it deleted, request restriction of processing or object to processing and you also have the right to data portability. To exercise these rights, please contact us at gdpr@covered.ro
Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:
- the right to information, respectively the right to receive details regarding the processing activities carried out by covered.ro , according to what is described in this document;
- the right to access the data, respectively the right to obtain confirmation from the covered regarding the processing of personal data, as well as details regarding the processing activities such as the manner in which the data are processed, the purpose for which the processing is done, the recipients or categories of recipients of the data, etc.;
- the right to rectification, respectively the right to obtain correction, without justified delay, by covered of inaccurate/unjustified personal data, as well as completing incomplete data; The correction/completion will be communicated to each recipient to whom the data were sent, unless this proves impossible or involves disproportionate efforts.
- the right to delete data, without undue delay, ("the right to be forgotten"), if one of the following reasons applies:
- they are no longer necessary to fulfill the purposes for which they were collected or processed;
- if consent is withdrawn and there is no other legal basis for processing;
- if the data subject objects to the processing and there are no overriding legitimate reasons;
- if the personal data were processed illegally;
- if personal data must be deleted to comply with a legal obligation;
- personal data were collected in connection with the provision of information society services according to Union law or internal law under which the operator is subject.
It is possible that, following the data deletion request, covered.ro to anonymize these data (thus depriving them of their personal character) and continue processing them for statistical purposes under these conditions;
- the right to restrict processing to the extent that:
- the person contests the accuracy of the data, for a period that allows us to verify the correctness of the data;
- the processing is illegal and the data subject opposes the deletion of personal data, requesting instead the restriction of their use;
- the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or
- the data subject has objected to the processing (other than those for direct marketing), for the time interval in which it is checked whether the legitimate rights of the operator prevail over those of the data subject.
- the right to data portability, namely (i) the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as (ii) the right to have this data transmitted by [website owner] to another data operator, to the extent that the conditions provided for by law are met;
- the right to opposition – regarding processing activities can be exercised by submitting a request as indicated below;
- at any time, for reasons related to the particular situation in which the data subject is, that the data concerning him/her be processed on the basis of the legitimate interest of [website owner] or in the public interest, except where [website owner] can demonstrate that it has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the data subjects or that the purpose is to establish, exercise or defend a right in court;
- at any time, free of charge and without any justification, that the data concerning it be processed for direct marketing purposes.
- the right not to be subject to an automated individual decision, i.e. the right not to be the subject of a decision taken solely on the basis of automated processing activities, including the creation of profiles, which produce legal effects concerning the data subject or similarly affect him in -a significant measure;
- the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider necessary.
For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact the email address: gdpr@covered.ro