Privacy policy
CREATIVE MEDIA AGENCY SRL is registered in the personal data processing register under no. 9876.
We consider ensuring the right to the protection of personal data as a fundamental commitment, therefore we will devote all the necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR "), as well as with any other applicable legislation. As one of the essential principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services ours, including through our website or apps available on your mobile phone.
We reserve the right to periodically update and amend this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such change, we will display the amended version of the Privacy Policy on our website, so please check the content of this Privacy Policy periodically.
Who are we and how can you contact us?
Topcoat is the commercial name of CREATIVE MEDIA AGENCY SRL, a legal entity of Romanian nationality, with its registered office in Șos. Olteniței, no. 232, bl. 23, sc. A, apartment 21, Sector 4, Bucharest, Romania, with order number in the Trade Register J40/18578/2006, unique tax registration code RO17829349 (hereinafter "Topcoat" or "we"). For the purposes of data protection legislation, we are the controller when we process your personal data.
As we are always open to your views, as well as to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact the Data Protection Officer Topcoat at the email address contact@topcoat.uk or by post or courier to the address Șos. Olteniței, no. 232, bl. 23, sc. A, ap. 21, Sector 4, Bucharest -- with the mention: to the attention of the data protection officer Topcoat.
What categories of personal data do we process?
We generally collect your personal data directly from you, so you have control over the type of information you give us. For example, we receive information from you like this:
We may also collect, store and further process certain information about your behavior while visiting our website in order to personalize your online experience and provide you with offers tailored to your profile.
We do not collect or otherwise process sensitive data, included by the General Data Protection Regulation in special categories of personal data. We also do not wish to collect or process data of minors under the age of 16.
What are the purposes and grounds of the processing?
We will use your personal data for the following purposes:
1. To provide the services Topcoat for your benefit. This general purpose may include, as appropriate, the following:
The processing of your data for these purposes is in most cases necessary for the conclusion and execution of a contract between Topcoat and you. Also, certain processing subsumed for these purposes is required by applicable law, including tax and accounting law.
2. To improve our services. We always want to give you the best shopping experience. For this, we may collect and use certain information related to your purchasing behavior, we may invite you to complete satisfaction surveys following the completion of an order, or we may conduct, directly or with the help of partners, studies and market research. We base these activities on our legitimate interest in carrying out commercial activities, always taking care that your fundamental rights and freedoms are not affected.
3. For marketing purposes. We want to keep you updated on the best deals on the products you are interested in. In this regard, we may send you, through electronic communication channels, general and thematic newsletters, information regarding products similar or complementary to those you have purchased or shown interest in purchasing, as well as other similar commercial communications, and we may display personalized recommendations on our site. In order to provide you with information of interest to you, we may use certain data regarding your purchasing behavior (for example: products viewed and/or purchased) to create a profile for you. We always ensure that this processing is carried out with respect for your rights and freedoms, and that the decisions taken on the basis of them do not have legal effects on you and do not similarly affect you to a significant extent.
You can change your mind and withdraw your consent at any time by:
In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. In any situation where we use information about you for our legitimate interest, we take care and take all necessary measures to ensure that your fundamental rights and freedoms are not affected. However, you can request us at any time, through the means described above, to stop the processing of your personal data for marketing purposes, and we will comply with your request as soon as possible.
4. To defend our legitimate interests. There may be situations where we will use or share information to protect our rights and business. These may include:
The general basis for these types of processing is our legitimate interest in defending our commercial activity, it being understood that we ensure that all measures we take guarantee a balance between our interests and your fundamental rights and freedoms. Also, in certain cases we base our processing on legal provisions such as the obligation to ensure the protection of assets and valuables provided by the applicable legislation in this matter.
How long do we keep your personal data?
As a general rule, we will store your personal data for as long as you are a customer Topcoat. You may request us to delete certain information at any time, and we will comply with such requests, subject to the retention of certain information where applicable law or our legitimate interests require it. The general rule is to keep the information related to the orders made for a period of 10 years from the moment of completion of the order. Similar to the previous situation, we may retain certain data after this period has expired, in accordance with applicable law or our legitimate interests.
Cookies policy
A cookie is a small file, consisting of letters and numbers, which will be stored on a user's computer, mobile phone, tablet or other equipment from which the Internet is accessed. The cookie is installed by the request issued by a server to a browser and is completely passive. It contains no software, viruses or spyware and cannot access information on the user's computer, mobile phone or tablet.
These files make it possible to recognize the user's terminal and present the content in a relevant way, adapted to the user's preferences. Cookies provide users with a pleasant browsing experience and support our efforts to provide comfortable services to users. They are also used in the preparation of anonymous aggregated statistics that help us understand how a user benefits from our site, allowing us to improve its structure and content, excluding the personal identification of the user.
What cookies do we use?
We use two types of cookies: persistent and per session. The latter are temporary files that remain in the user's terminal until the session ends or the application or browser is closed. Fixed files remain on the user's computer, mobile phone or tablet for a period within the cookie parameters or until they are manually deleted by the user.
How are cookies used by our site?
A visit to the Topcoat site may place the following types of cookies:
Strictly necessary cookies are essential for the proper functioning of the website. These cookies do not require your prior consent to be downloaded to your device. You can configure your browser to block these cookies, but in this case certain sections of our website will not work correctly (example: the shopping cart).
Cookies set by Topcoat:
Cookies set by third parties:
Who do we send your personal data to?
As appropriate, we may transmit or provide access to certain of your personal data to the following categories of recipients:
If we are under a legal obligation, or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities. We ensure that access to your data by third parties under private law is carried out in accordance with the legal provisions on data protection and information confidentiality, based on contracts concluded with them.
To which countries do we transfer your personal data?
Currently, we store and process your personal data on the territory of Romania, Austria and Finland. However, from time to time we may transfer certain of your personal data to entities located outside these countries. These entities may be located in the European Union or outside the Union, including in countries that the European Commission has not recognized as having an adequate level of personal data protection.
We will always take steps to ensure that any international transfer of personal data is handled carefully to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, other safeguards such as standard contractual clauses issued by the European Commission or certification schemes such as the privacy shield for the protection of personal data transferred from within the EU to the United States of America.
You can contact us at any time using the contact details set out above to find out more about the countries to which we transfer your data and the safeguards we have put in place in relation to these transfers.
How do we protect the security of your personal data?
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures in accordance with industry standards. We keep your personal data on secure servers and ensuring storage redundancy. To make payments we use the services of the payment processor Stripe. Any payment information is encrypted using SSL technology.
Despite the measures taken to protect your personal data, we draw your attention to the fact that the transmission of information over the Internet in general or through other public networks is not completely secure, and there is a risk that the data may be seen and used by third parties unauthorized. We cannot be responsible for such vulnerabilities of systems that are not under our control.
What rights do you have?
The General Data Protection Regulation recognizes a number of rights in relation to your personal data. You can request access to your data, correction of any mistakes in our files and/or object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or go to court. If applicable, you can also benefit from the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.
In order to exercise your rights, you can contact us using the contact details set out above. Please note the following points if you wish to exercise these rights:
The rights covered and their description
Access | You can ask us:
Rectification | You can ask us to correct or complete your inaccurate or incomplete personal data. We may attempt to verify the accuracy of the data before rectifying it.
Delete data | You can ask us to delete your personal data, but only if:
We are not obliged to comply with your request to delete personal data if the processing of your personal data is necessary:
There are certain other circumstances in which we are not obliged to comply with your data deletion request, although these two are the most likely circumstances in which we may refuse your request.
Restriction of data processing | You can ask us to restrict the processing of your personal data, but only if:
We may continue to use your personal data following a restriction request if:
Data Portability | You can ask us to provide your personal data in a structured, commonly used and machine-readable format, or you can request that it be ported directly to another data controller, but in each case only if the processing is based on your consent or the conclusion or performance of a contract with you; and the processing is done by automated means.
The opposition | You can object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest. You can also object to the processing of your data for direct marketing purposes at any time, without citing any reason, in which case we will stop this processing as soon as possible.
Automated decision making | You may request not to be subject to a decision based solely on automated processing, but only where that decision has legal effects on you or otherwise affects you in a similar and significant way. This right does not apply if the decision reached through automated decision-making is necessary for us to enter into or perform a contract with you, is authorized by law and there are adequate safeguards for your rights and freedoms, or is based with your explicit consent.
Claims
You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the supervisory authority for data protection are as follows:
The National Supervisory Authority for the Processing of Personal Data
Blvd. General Gheorghe Magheru, no. 28-30, Sector 1, Bucharest, Romania
Phone: +40318059211 or +40318059212
Email: anspdcp@dataprotection.ro
Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance and we promise to make every effort to resolve any issue amicably.
We remind you that you can contact the data protection officer Topcoat at any time by submitting your request in any of the following ways: