PREMIUM SURGICAL SRL with headquarters in Republicii Square, no. 29, Targu Mures, Romania, as operator of personal data takes care of your personal privacy and makes every effort to protect your privacy.
This page has the role of informing you about the processing of your personal data, in the context of using the website https://www.premiumsurgical.ro, which we will refer to hereinafter as “the site”.
Categories of personal data processed
If you become a visitor or customer of the site, we will process the following personal data:
Name and surname
We also process data about how you use the site, for example, your behavior / preferences when searching for products on the site, as well as any other categories of data that you provide voluntarily and directly for the purpose of placing a telephone order or via the email address displayed on the site.
If you want to place an order for a product on our site but initiate access to the site using your Facebook, Instagram, LinkedIn or Google account, we process the profile data publicly displayed by those applications. If you only visit our page through these applications to see the products displayed on our site, the site does not collect nor store your personal data, for more information on this regard, please consult the cookies page.
If you are a direct visitor to the site, we process your personal data only in the case of a direct order placed via telephone or via the e-mail displayed on the site or the contact page.
Indirectly, data such as: IP address, browser used, browsing duration, search history, operating system used, language and pages viewed, full URLs, sequence of clicks to, through and from our site, information or products viewed / searched, duration of visits on certain subpages, information on interaction with subpages (eg scrolling, clicks, mouse clicks), data on user behavior;
When you send a message to the e-mail address displayed on our site, we collect your e-mail address and any other information you provide in that e-mail, such as your name, phone number, and the information contained therein;
Legal basis for processing: our legitimate interests – Article 6 (1) (b), (f) of the General Data Protection Regulation, respectively for the performance of a contract or to start the process of engaging in a commercial contract at your request;
Legitimate interest: To answer the questions and messages we receive and to keep track of the correspondence. The reason why it is necessary to perform a contract is, if your message clearly stipulates the purchase of a product or services displayed on our site, we will process your information to perform these requests;
When you contact us by phone, we do not collect your phone number or record calls. We only collect the phone number if you request, in an exclusive mode, an order for a product or service.
We also process your personal data when using the site’s “career” and “contact us” sections; the data you provide in these sections are: name, surname, e-mail address and if you send us your CV by this “career”section, we will process of all the data provided by you in that document.
Purposes and grounds for processing
If you are a customer of the site, the processing of your personal data is carried out as follows:
For the development of the contractual relationship between you and our company for taking, validating, sending and invoicing an order placed on the phone or via e-mail displayed on the site, aslo to inform you on the status of the order, organizing the return of ordered products (where applicable );
Theme: The processing of your data is carried out in order to conclude and carry out a commercial contract between our company and you in order to make, complete and send an order, data defined in the Terms and Conditions of the site https://www.premiumsurgical.ro. Refusal to provide the necessary data may lead to the impossibility of conducting the contractual relations between our company and you.
For the fulfillment of the legal obligations arising from the context of the services provided through the site, including the fiscal obligations arising from the conclusion of a contract between the parties, as well as for archiving.
Theme: Your data processing necessary for this purpose is based on the legal and fiscal obligations. The refusal to provide the necessary data only for this purpose, may result in the impossibility of complying with the legal and fiscal obligations that are necessary for the conclusion of a commercial or service contract between our company and you.
For marketing activities, respectively for the transmission by means of distance communication – e-mail / sms messages – of commercial communications regarding the products and services offered by our company.
Theme: Processing your data for this purpose is based on your explicit consent. If you choose to give your consent but have the right to withdraw this consent at any time.
You can consent to the processing of data for this purpose by e-mail or telephone. To unsubscribe from receiving such commercial communications, you may use the option at the end of each email containing commercial communications or to contact us by telephone.
Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this marketing purpose will not affect the relationship between us and you. We respect your choice!
We collect data through cookies and in order to perform various analyzes, reports on how the site works, creating profiles of consumer preferences, mainly in order to improve the experience offered on the site.
Theme: Processing your data for such purposes is based on the legitimate interest to continuously improve our customer experience on the site. Providing your data for these purposes is voluntary. Refusal to provide data for purposes, through cookies, does not affect your relationship with our company.
Processing time of your personal data
We process your personal data for as long as is necessary to achieve the legal and commercial purposes of processing mentioned above.
If you are already a customer, we will process your data for the entire duration of the contractual relationship between our company and you and subsequently according to legal and fiscal obligations in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year for which they were drawn up.
If you are a customer and exercise the option to delete data from our database, we will interpret this request as your option to unsubscribe from receiving commercial communications about the products and services offered through the site.
If you request the deletion of the data but at that time you have at least one active order, the request to delete the data can only be registered after the delivery of the products and the completion of the last active order.
If you withdraw your consent to the processing of data for marketing purposes, you will cease the processing of your personal data for this purpose, without affecting the processing carried out on the basis of the consent expressed by you before its withdrawal.
If we receive information about you by mistake from a third party and / or we do not have a legal basis for the processing of this information, we will immediately delete your information.
Disclosure of personal data
As personal data controllers, in certain situations required by law, your data may be accessible to third parties, data controllers or proxies such as service providers, transport operators, telephone service providers, e-mail service providers, IT service providers, website developers, web hosting service provider (s), marketing service providers, email marketing service provider;
They are obliged by contract to maintain the confidentiality of the data and to use them exclusively for the purpose for which they were provided.
We may also disclose your personal data to national or local public authorities on the basis of a well-established legal basis, institutions such as IRS, the Court, etc.
Legal basis for processing: legitimate interests – Article 6 (1) (f) of the General Data Protection Regulation.
Legitimate interest: where we share your information to allow us to lead and effectively manage our business.
Legal basis for the processing: it is necessary to perform a contract at your request to conclude a contract – Article 6 (1) (b) of the General Data Protection Regulation.
Why it is necessary – concluding a contract: We may share information with our service providers to enable us to fulfill our obligations under this contract or to take measures which you may have requested before entering into this contract.
We also disclose certain information to third parties in certain circumstances, as set out below:
Providing information to third parties, such as Google Inc., Facebook. Google collects information by using Google Analytics on our website. Google, Facebook, uses this information, including IP addresses and cookie information, for various purposes, such as improving the quality of our services and your browsing experience. The information is collected by Google and Facebook anonymously.
If we suspect that a criminal or potential behavior involving you has taken place, we will need to contact the police in certain circumstances. If we suspect that a fraud or cybercrime has been committed or if we receive threats or communications that are malicious to us or to our third parties.
Legal basis for processing: our legitimate interests – Article 6 (1) (f) of the General Data Protection Regulation;
Legitimate interest: prevention of crime and suspected criminal activities, such as fraud.
In connection with a dispute or legal or potential legal proceeding, we may need to use your information if we are involved in legal proceedings with you or a third party, either to resolve the dispute or as part of mediation, arbitration or a court decision or similar process.
Legal basis for processing: our legitimate interests – Article 6 (1) (f) of the General Data Protection Regulation.
Legitimate interest: the settlement of disputes or possible disputes.
For continued compliance with laws, regulations and other legal requirements we will use and process your information to comply with the legal obligations to which we are subject. For example, we may need to disclose your information based on a court order or subpoena.
Legal basis for processing: compliance with a legal obligation – Article 6 (1) (c) of the General Data Protection Regulation.
Legitimate interest: if the legal obligations are part of the laws of another country and have not been integrated into the legal framework of Romania, we have a legitimate interest to comply with these obligations.
Transfer of personal data
In certain exceptional situations, your personal data may be provided to third party partner companies outside Romania only on the basis of your explicit consent and only to European Union countries.
Under the conditions provided by the legislation on the processing of personal data, you as data subjects enjoy the following rights:
the right to information – the right to request and receive details regarding your data processing activities as described in this document;
the right of access to the processing of your personal data as well as details on the processing activities, the way in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc;
the right to rectification – the right to correct inaccurate personal data, without justified or unjustified delays and the completion of incomplete data;
the right to delete data, without undue delay – “right to be forgotten” – the data subject has the right to obtain from the controller the deletion of personal data, without undue delay, and operators are obliged to delete personal data, if there is one of the following reasons:
the data are no longer necessary for the purposes for which they were collected or processed;
the data subject withdraws his / hers consent on the basis of which the processing takes place;
the data subject opposes the processing pursuant to Article 21 (1) the right to object
there are ambiguities regarding the legality of the processing of personal data;
the data must be deleted in order to comply with a legal obligation incumbent on the operator;
personal data belong to children under 16 years of age;
The right to restrict the processing, under certain conditions, according to the provisions of art. 18 of the GDPR, any data subject has the right to request the restriction of the processing of its data, when:
the data subject disputes the accuracy of the data, for a period that allows the operator to verify the accuracy of the data;
the processing is illegal, and the data subject opposes the deletion of personal data, requesting instead the restriction of their use;
the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for finding, exercising or defending of a right in the court of law; or
the data subject objected to the processing in accordance with art. 21 paragraph (1) of the GDPR – the right to object, for the time interval in which it is verified whether the legitimate rights of the operator prevail over those of the data subject.
the right to data portability – the right to receive personal data in a structured, commonly used and easy-to-read format, as well as the right to have this data transmitted by another data controller, in the extent to which the conditions provided by law are met;
the right to object – on the processing of personal data concerning the data subject:
creation of profiles based on those provisions. The controller shall no longer process personal data unless the controller demonstrates that he has legitimate and compelling reasons justifying the processing and prevailing over the interests, rights and freedoms of the data subject or that the purpose is to establish, exercise or defend a right in court;
when the processing of personal data is for the purpose of direct marketing, the data subject has the right to object at any time to the processing of its personal data, including the creation of profiles, insofar as it is related to that direct marketing.
if the data subject opposes the processing for the purpose of direct marketing, the personal data are no longer processed for this purpose.
at the latest at the time of the first communication with the data subject, the right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.
in the context of the use of information society services and notwithstanding Directive 2002/58 / EC, the data subject may exercise his right to object by automatic means using technical specifications.
at any time, for a reason related to the special situation of the data subject and the data concerning him to be processed on the basis of his legitimate interest or on the basis of the public interest, unless it can be demonstrated that he has legitimate and compelling reasons which justifies the processing and which prevails over the interests, rights and freedoms of the data subjects or that the purpose is to establish, exercise or defend a right in court;
in accordance with Article 77 of the General Regulation on data protection, you also have the right to submit a complaint to the National Authority for the Supervision of Personal Data Processing or to the competent courts at contact details: B-dul G-ral Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, telephone: +40.318.059.211, +40.318.059.212, www.dataprotection.ro.
For any additional questions regarding the way in which your personal data are processed and in order to exercise your rights mentioned above, please contact us at the email address: firstname.lastname@example.org or at the telephone number: +40,723,317,912 or +04,265,265,110
Sensitive personal data
Personal data referred to as “sensitive personal data” is information that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs or membership of a trade union or political formation, genetic information, biometric information for the purpose of identifying an individual, information about health or information about the sexual life or sexual orientation of an individual. We do not collect or request such information.
If, however, you inadvertently or intentionally provide us with such sensitive personal information, we will consider that you have explicitly given us your consent to process sensitive personal information in accordance with Article 9 (2) (a) of the General Regulation on data protection. We will use and process your sensitive personal information only for the purpose of deleting it.
We will provide you with information about the change in question and about the purpose and any other relevant information before using your information for the new purpose.
Whenever necessary, we will obtain your prior consent before initiating any procedure to use your information for a purpose other than the purposes for which we originally collected it.
Premiun Surgical SRL does not knowingly collect information from persons under 18 years of age. The website is not intended to solicit information of any kind from persons under the age of 18.
If we mistakenly become aware of such information and are notified of this, we will initiate the procedure for obtaining appropriate parental consent immediately to use this information or, if this is not possible, will automatically delete the information from our servers. We may receive information about persons under the age of 18 through fraud or deception by a third party. If we are notified of this, as soon as we verify the information, when required by law, we will immediately obtain the consent of the legal representative to use this information or, if we cannot obtain this consent, we will delete the information from our servers.
If you would like to notify us of the receipt of such information about persons under the age of 18, please send an e-mail to email@example.com