Privacy policy
Thank you for your interest in our company, website, services and/or products.
When you wish to establish a relationship with us and use the services of our company (hereinafter CAMELEON TEXTIL SRL), you entrust us with information about yourself, also referred to as personal data, and we thank you for the trust you place in us. The protection and confidentiality of personal data is a very important matter for us, and we strive to store it securely and process it carefully; to this end, we explain to you in a clear and transparent manner our practices regarding the confidentiality of your data.
Our Privacy Policy aims to inform you about the processing of your personal data in connection with your visit to our website https://cameleontextil.com (hereinafter the “website”) and your use of any additional services offered by CAMELEON TEXTIL SRL
By visiting the website, purchasing our products and/or services or interacting with us by any means, you declare that you agree to the Privacy Policy. If you do not agree with what is described in this Document, please do not use our services.
Please note that CAMELEON TEXTIL SRL is a controller of personal data within the meaning of the GDPR for the processing of personal data.
- 1. Introduction. Definitions.
- 1.1. Purpose of the Privacy Policy
- 1.2. Who are we?
- 1.3. Who are you?
- 1.4. Definitions
- 1.5. Other services
- 1.6. Complaints
- 2. Personal data and data processing
- 2.1. The data we collect and how we use it
- 2.2. What happens if you do not provide us with your data
- 2.3. The purposes for which we collect your personal data
- 2.4. The legal bases for the processing of personal data
- 3. Disclosure of personal data and data transfers
- 4. Storage of personal data
- 5. Security of personal data
- 5.1. Dedicated policies
- 5.2. Data minimization
- 5.3. Restriction of access to data
- 5.4. Specific technical measures
- 5.5. Ensuring the accuracy of your data
- 5.6. Staff training
- 5.7. Anonymization of data
- 5.8. Direct marketing
- 6. Your rights - questions, requests and exercise of rights
- 6.1. The right to be informed about the processing of your data
- 6.2. The right of access to data
- 6.3. The right to rectify inaccurate or incomplete data
- 6.4. The right to erasure (“right to be forgotten”)
- 6.5. The right to restriction of processing
- 6.6. The right to transmit the data we hold about you to another controller (“right to data portability”).
- 6.7. The right to object to the processing of data
- 6.8. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you
- 6.9. The right to apply to the courts to defend your rights and interests
- 7. Changes/Modifications/Updates to the Privacy Policy
1. Introduction. Definitions.
1.1. Purpose of the Privacy Policy
The purpose of this Privacy Policy is to explain to you what information we process (collect, use, share), why we process it, how we process it, your rights under the GDPR and how you can update, manage, export and delete it; for this purpose, we act as a controller and are required by law to provide you with this information.
Please note that this Privacy Policy applies wherever you find us online.
1.2. Who are we?
Below you will find our identification details:
- Name
- CAMELEON TEXTIL SRL
- Registered office
- ORADEA, SOS.BORSULUI 38/D, BIHOR, RO
- Trade Register number
- J05/15/2011
- Tax identification number
- RO23791680
- OFFICE@CAMELEONTEXTIL.COM
- Phone
- 0732125136
In accordance with the legislation in force, our company is a controller of personal data, and in order for your data to be processed securely, we make every effort to implement reasonable and appropriate technical and organizational measures to protect your personal data.
1.3. Who are you?
According to the law, you, the natural person benefiting from our services/products, the representative or contact person of a company that is our customer or potential customer, the visitor of the website or the person in any kind of relationship with us, are a “data subject”, that is, an identified or identifiable natural person. In order to be fully transparent about data processing and to allow you to exercise your rights easily at any time, we have implemented measures to facilitate the exercise of your rights.
1.4. Definitions
Personal data - means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing - means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
GDPR (General Data Protection Regulation) or RGPD (Regulamentul General privind Protecția Datelor) or the Regulation - means REGULATION No 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF THE EUROPEAN UNION of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, together with the repeal of Directive 95/46/EC;
The Controller or We - means CAMELEON TEXTIL SRL, a company of Romanian nationality with its registered office in ORADEA, SOS.BORSULUI 38/D, BIHOR, ROMANIA, registered with the Trade Register under order no. J05/15/2011, with tax identification number RO23791680;
Data subject - means any identified or identifiable natural person whose data is processed by us as controller, such as customers, potential customers or visitors of the website;
Consent - means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Anonymization - means the irreversible removal of the identification of personal data, so that the person cannot be identified using a reasonable amount of time, cost and technology, either by the Controller or by any other person, in order to identify that natural person. The principles of personal data processing do not apply to anonymized data, as it is no longer personal data.
1.5. Other services
This Privacy Policy does not cover the applications and websites of other third parties that you may reach by accessing links on our website, and we encourage you to review the Privacy Policy of any website and/or application before providing personal data.
Furthermore, we are not responsible for any links of our business partners or of those who place advertising in our podcasts or articles, including those on social media profiles. When you click on those links, third parties may collect or share data about you.
You should be aware that we do not control any links placed on the website by us or by other Users (such as, for example, links left in comments, videos, the community, on social networks, etc.) and that you are fully responsible when you access such links and assume any damage (direct or indirect) that may occur.
1.6. Complaints
For any problem or concern regarding the processing of personal data, you should know that you may lodge a complaint with the supervisory authority for personal data; however, we ask that you first send us a request at the address stated in this document, and we will make every effort to resolve your request amicably as soon as possible.
For Romania, the contact details are as follows:
- Name
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
- Address
- B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, Romania
- Phone
- +40.318.059.211 or +40.318.059.212
- anspdcp@dataprotection.ro
2. Personal data and data processing
2.1. The data we collect and how we use it
Personal data or personal information means any information about an individual that can help identify that person; this does not include data from which the identity has been removed (anonymized data).
When you browse our website or when you contact us for any purpose and through any communication channel, you may provide us with your personal data. We will need to collect, use, store or transfer certain personal data, directly from you or from other sources, as explained in the table below:
| Category | Data included | Legal basis |
|---|---|---|
| Identification data | Last name, first name, company name, trade register number, unique identification code, username or a similar identifier, job title, date of birth, gender, the language in which you wish to interact with us, country, etc. | Art. 6 (1) a), b), c) GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
| Contact data | Billing address, delivery address, e-mail address, phone number | Art. 6 (1) a), b), c) GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
| Profile and usage data |
Username, password, orders placed by you, your interests and preferences, feedback provided, responses to surveys Information about how you use our website, products and services. |
Art. 6 (1) a), b), c) GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
| Financial and transaction data |
Information regarding payments or regarding the bank card/account, information about purchases Details of payments from and to you and other details of the products and services you have purchased from us |
Art. 6 (1) a), b), c) GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
| Marketing & communication data | Your preferences for receiving marketing materials from us and from our third parties, and your preferred methods of communication | Art. 6 (1) a), b), c) GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
| Automated/technical data | IP (internet protocol) address, login data, browser type and version, location and time zone settings, browser plug-ins and their versions, operating system, operating platform and other technologies on the devices you use to access this website | Art. 6 (1) GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
Please note that we do not collect any Special Categories of Personal Data about you (this includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying you, data concerning health or data concerning your sex life or sexual orientation, or information about criminal convictions and offenses.
2.2. What happens if you do not provide us with your data
When we ask you to fill in personal data in order to give you access to certain functionalities or services of the website, we will mark some fields as mandatory, because this is information we need in order to provide you with the service or to give you access to the functionality in question.
Please note that if you decide not to provide us with this information, you may not be able to complete your registration as a user or to benefit from these services or functionalities.
2.3. The purposes for which we collect your personal data
| Personal data | Purpose |
|---|---|
|
Identification data (including audio-video, where applicable) Contact data |
Registration as a user Access to materials and products |
|
Identification data Contact data Financial and transaction data Profile data Marketing and communication data Automated/technical data |
Conclusion and performance of the sales or service contract that you enter into with us |
|
Identification data Contact data Financial data Transaction data Profile data Marketing and communication data |
Requests or applications submitted through Customer Service/Support To manage our relationship with you, which may include notifying you of changes to the terms and conditions and to the processing policies, or our suggestion that you leave us a review or take part in a survey |
|
Identification data Contact data Financial and transaction data Profile data Usage data Marketing and communication data Automated/technical data |
Marketing To deliver relevant content and personalized advertisements and to measure and understand the effectiveness of the advertisements we offer you |
Please note that we will use your personal data only for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
Please bear in mind that we may process your personal data without informing you or without needing your consent, in accordance with the above rules, where the law allows us to do so.
2.4. The legal bases for the processing of personal data
Our legal bases for processing your personal data will generally be the following:
- You have given your consent to the processing of personal data;
- Processing is necessary for the conclusion or performance of a contract between you and us;
- Processing is necessary for the purposes of the legitimate interests pursued by us or by another party.
3. Disclosure of personal data and data transfers
Please note that we may disclose your data, in compliance with the applicable law, to business partners or other third parties. We continuously make reasonable efforts to ensure that these third parties have implemented appropriate protection and security measures. We have contractual clauses with these third parties so that your data is protected. In these situations, we will ensure that any transfer is lawful under the legislation.
We may also transmit data to other parties with your consent or in accordance with your instructions, for example, where you submit a portability request, or to competent state authorities, on the basis and within the limits of the legal provisions and following expressly formulated requests.
A transfer of personal data to a third country may take place only if the country to which the transfer is intended ensures an adequate level of protection.
A transfer of data to a country whose legislation does not provide a level of protection at least equal to that offered by the General Data Protection Regulation is possible only if there are sufficient safeguards regarding the protection of the fundamental rights of data subjects. These safeguards will be established by us through contracts concluded with the suppliers/service providers to which your personal data will be transferred.
Whenever we transfer your personal data outside the EEA, we will ensure a similar level of protection through one of the following safeguard mechanisms:
- we will transfer your personal data to countries that the European Commission has determined provide an adequate level of protection for personal data.
- when we use certain service providers, we may use certain model contracts provided and approved by the European Commission which give personal data the same protection it has in Europe.
4. Data storage
Please bear in mind that we store your personal data only for the period necessary to fulfill the purposes, but no longer than 5 years from the termination of the contract or your last interaction with us.
After the period ends, the personal data will be destroyed or deleted from the IT systems or converted into anonymous data to be used for scientific, historical or statistical research purposes.
In certain circumstances, we may anonymize personal data (so that it can no longer be associated with you) for scientific, historical or statistical research purposes, in which case we may use this information for an unlimited period without notifying you in advance. Please note that in certain expressly regulated situations, we store the data for the period required of us by law.
| Categories of personal data | Storage period |
|---|---|
|
E-mail address Content of messages |
5 years from the last interaction with us |
| Data necessary for invoicing (i.e. address, customer name, name of the delegate) | 10 years in accordance with the legislation |
| Other personal data | 5 years |
5. Data security
We understand how important the security of personal data is, and we take the necessary measures to protect our customers and other persons whose data we process against unauthorized access to personal data, as well as against unauthorized alteration, disclosure or destruction of the data we process in the course of our current activity.
We have implemented the following technical and organizational measures for the security of personal data:
5.1. Dedicated policies
We adopt and constantly review our internal practices and policies for the processing of personal data (including physical and electronic security measures) in order to protect our systems against possible unauthorized access or other possible threats to their security. These policies are subject to constant checks to ensure that we comply with legal requirements and that the systems function properly.
5.2. Data minimization
We ensure that the personal data we process is limited to what is necessary, adequate and relevant for the purposes stated in this Policy.
5.3. Restriction of access to data
We try to restrict access to the personal data we process as much as possible, to the minimum necessary: employees, collaborators and other persons who need to access this data in order to process it and perform a service. Our partners and collaborators are subject to strict confidentiality obligations (either contractual or legal).
5.4. Specific technical measures
We use technologies that ensure the security of our customers, always trying to implement the most optimal solutions for data protection. We also make periodic data backups so that we can recover data in the event of a possible incident, and we have implemented periodic audit procedures regarding the security of the equipment used. However, no website, application or internet connection is completely secure and impenetrable.
5.5. Ensuring the accuracy of your data
From time to time, we may ask you to confirm the accuracy or currency of your data to make sure that it reflects reality.
5.6. Staff training
We constantly train and test our employees and collaborators on the legislation and best practices in the field of personal data processing.
5.7. Anonymization of data
Where we can, we try as far as possible to anonymize/pseudonymize the personal data we process, so that we can no longer identify the persons to whom it relates.
However, although we make constant efforts to ensure the security of the data you entrust to us, we may also experience less fortunate events and security incidents/breaches. In such cases, we will strictly follow the procedure for reporting and notifying security incidents and will take all necessary measures to restore the situation to normal as soon as possible.
5.8. Direct marketing
To the extent that we have obtained your prior consent or you are already a customer of the company, we may use direct marketing technologies using the information collected about you. We currently send commercial messages by e-mail (e-mail marketing).
You may object to direct marketing and/or withdraw your consent at any time by following the unsubscribe instructions in each e-mail (“unsubscribe”) or by sending a request to that effect to the e-mail address OFFICE@CAMELEONTEXTIL.COM
6. Your rights - questions, requests and exercise of rights
We are not required to designate a data protection officer; therefore, any question regarding the use of your personal data should be addressed to the contact details above.
For any questions, concerns, comments or complaints regarding the processing of your information, or if you wish to exercise your legal rights or rights regarding privacy, you may contact us at the e-mail address OFFICE@CAMELEONTEXTIL.COM
Your rights under the GDPR are the following:
6.1. The right to be informed about the processing of your data
6.2. The right of access to data
You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to that data and to the information set out in Art. 15 (1) of the GDPR.
6.3. The right to rectify inaccurate or incomplete data
You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you.
6.4. The right to erasure (“right to be forgotten”)
In the situations provided for in Art. 17 of the GDPR, you have the right to request and obtain the erasure of personal data.
6.5. The right to restriction of processing
In the cases provided for in Art. 18 of the GDPR, you have the right to request and obtain the restriction of processing.
6.6. The right to transmit the data we hold about you to another controller (“right to data portability”).
6.7. The right to object to the processing of data
In the cases provided for in Art. 21 of the GDPR, you have the right to object to the processing of data.
6.8. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you
6.9. The right to apply to the courts to defend your rights and interests
Please note that the rights listed above are not absolute. There are exceptions, which is why each request received will be analyzed so that we can decide whether or not it is well founded. To the extent that the request is well founded, we will facilitate the exercise of your rights, and if the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to lodge a complaint with the Supervisory Authority and to apply to the courts.
We will also try to respond to your request within 30 (thirty) days. However, this period may be extended depending on various aspects, such as the complexity of the request, a large number of requests received or the impossibility of identifying you within a reasonable time. If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable us to identify you, we are not obliged to act on the request.
7. Changes/Modifications/Updates to the Privacy Policy
We may occasionally update the Privacy Policy and will notify you of the most recent version via the website or by e-mail. All updates and changes to this document take effect immediately upon notification, which we will carry out by posting on the website and/or by e-mail notification. Even if you do not receive a notification, we encourage you to periodically access and read the Privacy Policy to stay informed of the latest versions.
Privacy Policy updated on 12.04.2023.