Terms & Conditions

Last updated: October 2024

1. WHO WE ARE AND WHAT IS THE PURPOSE OF THIS DOCUMENT

This Privacy Policy was prepared by IPPU Packaging S.R.L., with registered office in Iași, Calea Chișinăului no. 23, Jud. Iași, Romania (hereinafter, “we” or “the Company”), As the owner of the website www.ippu.ro (“Website”) and as the administrator of our pages on various social networks.

This document is intended to detail how and why we collect the personal data of visitors and users of our Website and of people who interact with us through social networks, as well as of people with whom we interact in our activity, in general.

By “personal data” we mean any information relating to an identified or identifiable natural person, and an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, location data or online identifiers.

This Privacy Policy contains important information regarding the Company’s use of your data. If you have any questions or concerns regarding what is presented in this Privacy Policy, please do not hesitate to contact us using the information at the end of this document.

This Privacy Policy is drawn up by our Company, as data controller, in accordance with the data protection legislation applicable in Romania, in particular Articles 13-14 of Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (“GDPR“).

• THE PURPOSES, GROUNDS FOR PROCESSING AND CATEGORIES OF PERSONAL DATA THAT WE PROCESS

We obtain and use various types of your personal data for the purposes detailed below in this section.

• If you visit our website www.ippu.ro

When you access our Website, we obtain some personal data from you which we use to facilitate your access to the Website, as well as to ensure its functionality and security. We also use this data to monitor traffic on the Website.

When accessing our Website, your data is automatically transmitted by the browser you use to our servers.

Your data obtained and used by us includes your IP address used for connection, the date and time of connection, some details regarding the equipment and browser used for connection, the pages visited and the content accessed by you on our Website.

We use this data primarily based on our legitimate interests in providing visitors with access to our Website, understanding how it is used and improving our advertising activity (Art. 6 para. 1 lit. f of the GDPR).

• If you request a quote or contact us via the form available on the Website, by phone or by email

If you wish to contact our Company to request a quote, you can access the “Request Quote” button on the pages of our Website, and then you will fill in the information requested in our form. The data you fill in the forms are sent to us via email which is analyzed by our employees. You can also contact us at the telephone numbers or email addresses specified on the Website.

In these situations, we will obtain from you personal data consisting of your full name, the company you work for, an email address and a telephone number, as well as the data included in the details you provide us with in relation to your interests. We record your data in our systems once we receive it. If we consider that we do not need some of the information you send us to administer your request, we will delete that data from our records.

We use this personal data to manage your requests, e.g. to provide you with price offers when you request a quote, to communicate with you (by phone, email, written message) or to manage your requests of any other nature. We rely on our legitimate interests to manage your requests, including those for concluding contracts with the company you represent, or any complaints or notifications, as the case may be, and to ensure and increase the satisfaction of our customers (art. 6 para. 1 lit. (f), GDPR). If you agree to us sending you commercial communications regarding our activity, you will need to express your consent to this (art. 6 para. 1 lit. (a), GDPR). Secondly, we carry out formalities for the conclusion of a contract between us and you, at your request, if you are a natural person (art. 6 para. 1 lit. (b), GDPR).

• If you subscribe to our newsletter

We offer you the opportunity to sign up to receive our periodic newsletters on our Website by completing a form with your name and email address. Once you consent to this, we record your details in a database held by our newsletter communication service provider and use them only for the purpose of sending our communications.

Receiving your data and using it to send you our newsletters by email represents processing of your data, which we carry out based on your consent (art. 6 para. 1 lit. (a), GDPR), which you can withdraw at any time either by contacting us at our contact details in Section 8 (Contact) below, or by using the “Unsubscribe” option at the end of our electronic communications.

• If you apply for a position within our Company

You can submit your application for open positions within our Company to our contact details on the Website or to those indicated in our job advertisements, or to other contact details of our Company (e.g., through our social media pages or directly to our team members).

In these cases, we will carry out data processing consisting of receiving and checking applications, conducting interviews and assessing and selecting candidates. The data we use in these situations are your identification data, contact data, data regarding your career history, education and qualifications and certifications (which you include in your applications), audio recordings or images of you and other data that may be necessary to assess your application. We rely, for the processing of your data, on taking steps prior to concluding a contract, at your request (art. 6 para. 1 lit. (b), GDPR).

If you are not selected for the position you applied for with us, we may also retain your application for further analysis and recruitment activities , for a limited period of time (no more than 6 (six) months from the date on which we notify you that you were not initially selected). We carry out this data processing only on the basis of your consent (art. 6 para. 1 lit. (a), GDPR) which we ask you for upon completion of our selection process.

• If you are or represent a client, partner or supplier of our Company or a public authority

When you are or represent a client, partner or supplier of our Company or a public authority, we use your data to communicate with you and the company or authority you represent in the course of our relationships (including contractual ones, if applicable). We use for this purpose your contact data (name, email, telephone number), your professional data (title, employer, position, etc.) and other data related to the context of our relationships.

We generally rely on our legitimate interests to initiate and conduct our relations with the company you represent (art. 6 para. 1 lit. (f), GDPR), respectively, if you, as a natural person, are our customer, partner or supplier, to take steps prior to entering into a contractual relationship and to perform the contract with you (art. 6 para. 1 lit. (b), GDPR). It is also possible that in connection with certain activities we have legal obligations (art. 6 para. 1 lit. (c) of the GDPR) that require us to carry out certain processing activities of your data. If you represent a public authority, we also take into account our legal obligations (art. 6 para. 1 lit. (c), GDPR), the fulfillment of which requires us to respond to or communicate with the authority through you.

• For various purposes through the use of cookies and similar tools

A cookie is a text file sent by our Website servers to your browsers and stored by them each time you visit our Website. This process is used to identify and track your internet browsers. There are also other tools through which our servers can track your activity, such as pixels (web beacons). We refer to cookies and all of these tools as cookies, in general.

You can refuse the use of cookies through our Website at any time. You should know that cookies do not read or affect information on your computer or device.

We use cookies, in general, for the following general purposes:

• Technical necessity, when the cookies we use allow us to provide our Website and all its functionalities (e.g., those regarding Website security).
• Ensuring functionalities of our Website that are not essential for its operation (e.g. cookies that allow sharing of Website content on some social media platforms).
• Analyzing your interaction with our Website through analytical cookies (e.g., those that analyze how you use the Website, the pages you visit or the options you access, or your interests).
• The performance of our Website by analyzing the Website’s key performance indicators, which allows us to provide a better user experience for visitors.
• Advertising through cookies used to provide you with personalized advertisements or to analyze the effectiveness of our advertising campaigns.

For the above purposes, we use cookies and other tools to track your activity on the internet, such as (without limitation) those provided by Google (Google Analytics), Facebook (Facebook pixel) or LinkedIN (LinkedIN pixel).

You can consult the list of cookies we use on our Website, the processing purposes pursued by each one, the data storage periods and the third-party providers involved in our Cookie Policy, available in the footer area of ​​the Website.

We use cookies that meet this purpose based on our legitimate interest in providing our Website and ensuring its proper functioning (art. 6 para. 1 lit. (f), GDPR). We use cookies that meet functional, analytical, performance or advertising purposes only based on your consent (art. 6 para. 1 lit. (a), GDPR), which you can express or not when accessing our Website.

• If you interact with us through our social media pages

When you interact with us through our social media pages, either directly through the social media buttons displayed on our Website or through your personal accounts, through posts or messages, we will collect certain information about you. This includes your name or pseudonym, your profile picture and any messages or attachments you send us. We will also have access to the public information in your profile on the respective social network. In these situations, we rely on your consent (art. 6 para. 1 lit. (a), GDPR) to interact with us through the respective social networks.

It is important to know that when you interact with our social media pages, your data is processed both by us, to facilitate our interaction, and by the social media platforms. In these situations, we act as a data controller in conjunction with the social media operators. Each of us and the social media operators is responsible for its own activities; we are not responsible for how the social media platforms manage the information you provide during your interactions with us in their own interests.

We also have access to aggregated statistics provided by social networks regarding users interacting with our accounts, and sometimes we can define the categories of recipients of our pages using the tools available through these platforms. In these cases, we do not have access to personal data that directly identifies individuals, but only to general and aggregated information. They are not responsible for the methodology by which social media platforms collect and use this data to generate the statistical results that reach us. We rely, when carrying out this data processing, on our legitimate interests to improve the interaction with users of our social media pages (Art. 6 para. 1 lit. (f) of the GDPR).

To better understand how your personal data is used by the social media platforms associated with our Website, the rights you have with respect to these platforms and how you can exercise these rights, we recommend that you consult the information notes of each social network, accessible through the following links:

• Facebook: http://www.facebook.com/policy.php
• Instagram: https://help.instagram.com/155833707900388?cms_id=155833707900388
• YouTube: https://policies.google.com/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy

For more details on how social media operators use your data when you interact with us, please contact them at the contact details available in the information notes above.

• PROVISION OF DATA AND CONSENT BY YOU

When you provide us with your personal data directly, it is essential that you provide us with all the personal data we request. If you do not provide us with complete information, there is a chance that we will not be able to properly carry out the activities for which you have contacted us, such as responding to your requests.

If the use of your data is based on your consent, as detailed in Section 2 (Purposes, grounds for processing and categories of personal data we process) above, you have the right to withdraw your consent at any time. We will no longer use your data from the moment you withdraw your consent. However, any activity carried out before the withdrawal of consent, involving your data, will remain valid.

To withdraw your consent where this is the basis for processing your data, as detailed in Section 2 (Purposes, grounds for processing and categories of personal data we process), please contact us using the information in Section 8 (Contact) below.

If you provide us with data about other individuals, it is important that you inform them, before disclosing their data to us, about how we intend to use that information, for example by providing a link to this Privacy Policy. If it is necessary for us to obtain their consent to use their data, we will ensure that we provide them with this Privacy Policy when we contact them.

• TO WHOM WE DISCLOSE YOUR PERSONAL DATA

We disclose your personal data to our external service providers, including, but not limited to, IT service providers, accountants, consultants and marketing agencies. These providers receive from us and use only your data strictly necessary to provide the services for which they have been contracted by us, based on appropriate contractual documentation. The basis for this disclosure is our legitimate interest in engaging and benefiting from the services of these providers for the performance of our activities.

We may also disclose your personal data as follows:

• we may disclose relevant personal data to our business partners, if this is necessary in the context of providing their services, when justified by our interaction with you;
• to our auditors, consultants, lawyers or other providers of specialized professional services, if necessary for the provision by them of services contracted by us, given our legitimate interest or our legal obligation to contract these services; and
• to public authorities and institutions, if we have a legal obligation to do so or at their express request, if permitted by law.

As a general rule, we only transfer your personal data to recipients in countries belonging to the European Union (EU) and/or the European Economic Area (EEA); we do not transfer your data to countries outside the EEA and we require the same from our service providers.

• HOW WE PROTECT YOUR DATA

It is very important to us to protect your personal data. To this end, we apply appropriate measures to ensure the security of personal data, including dedicated policies, specific technical measures, training of our staff or restricting and regulating access to data for our staff members.

We also undertake to adopt any other further measures required by law in the field of personal data protection in relation to the use of your data.

However, although we take all reasonable steps to ensure the security of your data, we cannot guarantee the absence of any security breach or the impossibility of penetration of our security systems. In the unfortunate event that such a breach occurs, we will follow legal procedures to limit the effects and inform the data subjects.

• HOW LONG DO WE KEEP YOUR DATA?

We generally retain your data for as long as is necessary to fulfill the purposes for which we obtain and use it. There are situations where we are required by law to retain certain information for periods defined by law, usually for archival purposes, such as 5 or 10 years for financial and accounting needs. We may also need to retain certain data to protect and support our legitimate interests; in these cases, we will not retain the data for more than 3 years after the end of our relationship, including communications.

For users of the Website, your data will be retained during navigation on it and subsequently, according to our Cookies Policy, which can be accessed in the footer area of ​​our Website or here: https://www.ippu.ro/politica-de-utilizare-cookies/

When we process data based on your consent, such as when you contact us through the contact form or social media interactions, we will retain the data until you decide to withdraw your consent.

• YOUR RIGHTS

According to the law, you have the following rights related to the processing of your personal data that we carry out:

• Right of access: you can obtain from us confirmation that we are processing your personal data, as well as information on the specifics of the processing such as: the purpose, the categories of personal data processed, the recipients of the data, the period for which the data are kept, the existence of the right to rectify, erase or restrict processing. This right allows you to obtain a copy of the processed personal data free of charge, as well as any additional copies against payment.
• Right to rectification of data: you can ask us to amend your incorrect personal data or, where applicable, to complete data that is incomplete.
• Right to erasure: you may request the erasure of your personal data when: (i) it is no longer necessary for the purposes for which we collected and process it; (ii) you have withdrawn your consent to the processing of your personal data and we can no longer process it on other legal grounds; (iii) the personal data is processed unlawfully; or (iv) the personal data must be erased in accordance with the relevant legislation.
• Withdrawal of consent: you may withdraw your consent at any time to the processing of personal data processed on the basis of consent, without this affecting in any way the processing carried out prior to the withdrawal. You may withdraw your consent to the sending of newsletters at any time by clicking the “Unsubscribe” button in each newsletter we send you or by sending us an email to the address indicated in Section 8 (Contact) below.
• Right to object: You may object at any time to processing based on our legitimate interests by providing us with reasons relating to your specific situation. For details on the processing we carry out in legitimate interests, please see Section 2 (Purposes, grounds for processing and categories of personal data we process) above.
• Restriction of data processing: you may request the restriction of our processing of your personal data if: (i) you contest the accuracy of the personal data, for a period that allows us to verify the accuracy of the data in question; (ii) the processing is unlawful and you oppose the erasure of the personal data, requesting instead the restriction of their use; (iii) the data are no longer necessary for our processing, but you request them from us for legal action; respectively (iv) if you have objected to the processing, for the period during which it is verified whether our legitimate rights as a data controller prevail over your rights as a data subject.
• Right to portability: you may request us, under the law, to provide you with the personal data you have provided to us in a structured, commonly used and machine-readable format (for example in CSV format). We may also, if you expressly request us to do so, transmit your personal data to another entity, if technically feasible. You will only be able to exercise your right to portability if (cumulatively): (i) the processing is carried out by automated means; and (ii) the processing is based on your consent or in order to perform a contract with you.
• The right not to be subject to automated individual decision-making, including profiling: We do not currently process your personal data solely through automated individual decision-making. If we initiate such processing of personal data, we will supplement this Privacy Policy accordingly.
• Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing: you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) if you believe that your rights have been violated, using the contact details of the authority provided below. However, we respectfully request that you contact us with any complaint or concern you may have before contacting the authority.

National Authority for the Supervision of Personal Data Processing

B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, cod poștal 010336 București, România anspdcp@dataprotection.ro

You can exercise any of these rights against us using the contact details in Section 8 (Contact) below.

If you exercise any of your rights under the law, this will not affect: (i) data processing that has already taken place; or (ii) data processing that is not based on your consent.

• CONTACT

To exercise one or more of the rights set out above or to ask a question about these rights or about our processing of your personal data, please contact us using the following contact details:

Tel: 0764 608 994
Email: contact@ippu.ro

• VERSIONS OF THIS PRIVACY POLICY

This Privacy Policy is valid from October 2024.

We may change this Privacy Policy to reflect our activities in which we use your personal data. We will indicate any changes to this Privacy Policy by indicating the date it was last updated.