My GDPR tools
WHAT IS PERSONAL DATA AND HOW DO WE OBTAIN IT:
Personal data is that information by which a customer can be identified directly or indirectly. SC Déjà Vu Facility Services SRL obtains this data as follows:

Directly from the customer
SC Déjà Vu Facility Services SRL collects personal data directly from the customer, when placing an online order or when enrolling in our loyalty program:

Name, surname, personal identification number
Postal and email address
Phone number
Details of online transactions (products purchased, prices, payment methods)
In addition, in order to be able to offer the best products and services, SC Déjà Vu Facility Services SRL may sometimes request information regarding the customer's experience while using SC Déjà Vu Facility Services SRL products.

This information can be comments or suggestions, but also recommendations for improvement.

In certain situations, SC Déjà Vu Facility Services SRL may also collect customer data through automated means. For example, personal data may be collected through cookies, web or telephone beacons, when the customer interacts with SC Déjà Vu Facility Services SRL advertisements and mobile applications or when visiting SC Déjà Vu Facility Services SRL websites and other computer systems. The data thus collected may include: IP address, browser type, operating system, mobile device identification number, geographic location, redirection URLs, information about actions taken or about interaction with SC Déjà Vu Facility Services SRL

WHY WE PROCESS PERSONAL DATA
SC Déjà Vu Facility Services SRL will process the client's personal data only to ensure the best possible relationship with him during the contract. The processing of personal data may be based on the client's consent, may be in connection with the contract or imposed by a legal obligation.

The legitimate interest of SC Déjà Vu Facility Services SRL may be the basis for the processing of personal data, to which the Client may object. Along with the legitimate interest, the processing may be based on the client's consent, the need to perform the contract or a legal obligation on the part of SC Déjà Vu Facility Services SRL.

When SC Déjà Vu Facility Services SRL asks the client for consent for processing, the client has the free choice of whether or not to give consent.

Only with the client's consent, SC Déjà Vu Facility Services SRL will process personal data for the purpose of informing them about offers, promotions or special events organized by SC Déjà Vu Facility Services SRL.

As it is necessary for the provision of products and services, SC Déjà Vu Facility Services SRL will process personal data for the purpose of fulfilling customer orders and processing payments made for SC Déjà Vu Facility Services SRL products.

WHAT ARE CUSTOMERS' RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA?
The client has specific rights regarding data protection, and SC Déjà Vu Facility Services SRL provides an environment that facilitates their exercise (right of access, rectification, objection, deletion, receipt of personal data or filing a complaint).

SC Déjà Vu Facility Services SRL has taken the necessary precautions to ensure the client that his data protection rights are properly respected.

The customer has the right:

to access his/her personal data, to modify, restrict, withdraw his/her consent or oppose their processing or request their deletion (right to be forgotten)
to access his/her personal data or to request SC Déjà Vu Facility Services SRL to transmit them to another company (right to portability)
to file a complaint with the competent supervisory authority – in Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP)
to request SC Déjà Vu Facility Services SRL to correct any inaccuracies in his/her personal data. In the case of an online account, this can usually be done from the account data editing section. In any case, the Client may submit a request to rectify his/her data.
SC Déjà Vu Facility Services SRL informs the client that he may object at any time to processing carried out on the basis of legitimate interest. Any objection will be analyzed and resolved in accordance with the law.

HOW DOES GDPR APPLY TO CHILDREN?
SC Déjà Vu Facility Services SRL does not knowingly request or collect personal data from children under the age of 16.

SC Déjà Vu Facility Services SRL requires prior to data collection, confirmation from customers that they have reached the age of 16.

CAN YOUR PERSONAL DATA BE TRANSFERRED TO THIRD PARTIES?
SC Déjà Vu Facility Services SRL will transfer the personal data of customers only to the legal entity that will handle the delivery of the order, exclusively for the purpose of delivery and only based on the consent previously given by the customer.

HOW WE PROTECT YOUR PERSONAL DATA
SC Déjà Vu Facility Services SRL applies appropriate security measures to guarantee the safety of the client's personal data and retains personal data only as long as necessary to fulfill the stated purpose.

Data security
To guarantee the safety of personal data, SC Déjà Vu Facility Services SRL has implemented a series of security measures that are in line with industry standards.

Data retention
SC Déjà Vu Facility Services SRL will retain personal data for as long as necessary for the stated purpose, taking into account the need to respond to requests/requests and to comply with applicable legal requirements. Therefore, SC Déjà Vu Facility Services SRL may retain personal data for a reasonable period of time after the client's last interaction with SC Déjà Vu Facility Services SRL, in accordance with applicable law.

When the client's personal data is no longer necessary for the purpose for which it was collected or agreed upon, and there is no legal obligation to retain it, SC Déjà Vu Facility Services SRL will destroy or delete it in a secure manner.

HOW CAN I FIND OUT MORE ABOUT THIS REGULATION?
For any questions regarding personal data or to exercise legal rights, the client can contact the SC Déjà Vu Facility Services SRL data protection officer by using the dedicated address: vanzari@dejavunatural.ro

HOW DO THESE REGULATIONS APPLY TO LEGAL ENTITIES?
In the case of legal entity clients, SC Déjà Vu Facility Services SRL will obtain the express consent of the legal entity's representative for the types of personal data processing or for categories of personal data for which the law imposes such a condition.

In this regard, the representative of the legal entity undertakes that before transferring personal data of users and the contact person to SC Déjà Vu Facility Services SRL, he must obtain their consent for the processing carried out by SC Déjà Vu Facility Services SRL.

By transferring personal data to SC Déjà Vu Facility Services SRL, the representative of the legal entity certifies that the consent of all persons whose personal data is transferred has been obtained and assumes full responsibility in this regard.