Privacy Policy

We understand that it is important for you to know how BEREZKA STORES SRL collects, stores, shares, and uses information that constitutes personal data. Through this Privacy Policy, we want to inform you about the processing performed and the control options you have, in accordance with European and national legislation requirements.

Please carefully read this document before continuing to use our services. The policy may be updated periodically, and you will be informed of such updates.

Company: Berezka Stores SRL, J40/11243/2014, Bd. Ion Mihalache, no 111, sector 1

Email: info@berezka.ro, mobile contact number: +40 770 424 037, +40 773 365 084

The competent authority for the protection of personal data in Romania is:

National Supervisory Authority for Personal Data Processing

Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania

More contact information can be found on the Authority's website: www.dataprotection.ro

Berezka Stores SRL is a trader under the law, with the main activity of retail trade in non-specialized stores, with the predominant sale of food, beverages, and tobacco. The company operates a network of supermarkets under the brand "Berezka" and an online store: Berezka - www.berezka.ro, which allows online purchase of products from various categories.

Definitions:

This policy refers to the following definitions:

Personal data - any information related to an identified or identifiable natural person ("data subject");

The terms "natural person," "user," "personal data holder," "data subject," and "customer" used in this policy are used in the sense of a natural person who is the subject of personal data within the meaning of Regulation 2016/679.

Personal data operator - means a natural or legal person, public authority, agency, or other body that, alone or together with others, determines the purposes and means of processing personal data;

Processing - means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction;

Sensitive data - personal data revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health; data concerning a person's sex life and sexual orientation;

The Data Protection Officer is responsible for all user queries regarding the processing and protection of personal data. Any user of the website can contact the Data Protection Officer by email at: info@berezka.ro or by mobile phone at +40 770 424 037.

1. Types of Personal Data Processed by BEREZKA STORES SRL

1.1. For delivery purposes - when concluding distance contracts for the sale and purchase of products through our website www.berezka.ro

We collect the following personal data:

Full name;

Delivery address;

Contact phone number;

Email address;

It is possible to process data related to the IP address.

1.2. Legal basis for issuing an invoice:

Billing data:

Three names of the person placing the order and their Personal Identification Number (CNP) when it comes to an individual;

The name of the representative, when the person placing the order is a legal entity, the unique identification number (CNP, CUI), according to legal requirements for accounting documents.

1.3. Legitimate interest in providing customers with the necessary assistance in choosing products on the site or providing additional information about orders placed:

User data:

Contact phone number;

Email address.

"BEREZKA BULGARIA" EOOD processes sales analysis data obtained from depersonalized and anonymous data:

Anonymous data

Statistical information regarding the total number of visits to the site, deliveries made, assistance requests, and complaints received, collected and analyzed to improve the products and services offered by www.berezka.bg. Through this statistical analysis, we strive to improve the quality of our services, manage and improve user satisfaction, and enhance the site to meet user expectations.

Cookies and pixel tags

When using our site: www.berezka.bg, "BEREZKA BULGARIA" EOOD collects information that may include personal data from visitors' browsers (Internet Explorer, Mozilla Firefox, Google Chrome, etc.). Various methods, including cookies and pixel tags, are used to collect this information, and it may include:

IP addresses;

Unique cookie identifier;

Cookie information;

Information about whether the visitor's browser allows the use of certain features and add-ons;

Unique device identifier (HWID);

Browser type;

Language settings;

Operating system and system settings;

Country and time zone;

Previously visited web pages;

Information about the user's interaction with the site, such as purchases and preferences, mode and speed of clicking (selection);

Login time and reference addresses.

For more information, you can consult our Cookie Policy (here) on our website.

2. Automated Solutions

BEREZKA STORES SRL does not use automated decision-making methods or profiling.

3. Purposes of Processing Personal Data

The personal data provided by users are processed for the following purposes:

Order requests and acceptance;

Contract fulfillment;

Delivery by our employees;

Issuance of accounting documents containing the necessary information provided by law;

Tracking and verifying payments;

Recovery of amounts (in case of exercising the right to withdraw from the order);

Contacting the buyer regarding a placed order;

Subsequent delivery;

Receiving feedback on the quality of the services provided;

Storing data about ordered products in the user's individual profile;

Sending notifications about the status of deliveries and any issues with delivery;

We may provide information via email or SMS about new products and/or services, as well as promotions on www.berezka.ro. For this processing, the explicit consent of the user is collected;

We may send messages for direct marketing and advertising purposes with the explicit consent of the user;

We may organize promotional campaigns and send information, including unsolicited commercial messages;

We process and store information from your order histories.

We process the information provided by you in accordance with legal obligations in case of checks performed by authorized authorities, as well as for the purpose of protecting legal interests in administrative and judicial proceedings;

Improving the service;

BEREZKA STORES SRL does not collect, process, or store the personal data of minors. Regarding personal data of minors, these are collected, processed, and stored only with the express and written consent of the parent/guardian.

Third parties to whom BEREZKA STORES SRL may provide personal data:

Payment service providers for payment or reimbursement purposes in case of product withdrawal, as well as for accounting purposes.

Mobile and internet communication service providers for informing the Buyer about changes in the order status and others.

Consultants in various fields to protect the legitimate interests of BEREZKA STORES SRL regarding maintaining and improving service quality, compliance with legal requirements, and protection of legal rights and interests in judicial and administrative procedures.

Authorities and state institutions regarding checks performed by them in accordance with legal requirements and restrictions.

Regarding the personal data provided to the mentioned third parties, BEREZKA STORES SRL requests and monitors the application of all technical and organizational measures necessary to protect the data provided by the company, in accordance with Regulation (EU) 2016/679 and applicable Romanian law.

4. Storage Periods:

We process your personal data for the periods set by the legislation in force in our country, by the supervisory authorities, as well as until the purposes for which the data were provided are achieved. After achieving these purposes or after the cessation of our legitimate interest or the legal basis for processing the data (e.g., when consent for the processing of certain data is withdrawn), we will delete personal data without undue delay.

In cases where you do not use the personal profile created on our site for 5 years, the data in it will be deleted, and your profile will be deactivated. Before deactivation, you will receive a notification from us, and the profile will remain active for an additional 5 years after you log in.

Information about the orders placed by you in your personal profile will be kept for 5 years from the date of their conclusion. After this period expires, they will be automatically deleted, respecting the rule of deleting older records.

The criteria on which the storage period of personal data was established include:

(a) The period during which we maintain business relations with you and provide our services;

(b) Terms provided by applicable accounting laws in relation to us;

(c) The period for which it is necessary to keep data in connection with our participation and for the protection of our legal rights and interests in judicial and administrative proceedings, and the expiration of the relevant limitation periods.

Personal data for which there is no explicit legal/supervision obligation for storage will be deleted after achieving the purposes for which the data were collected and processed.

For documents containing personal data and for which there are no regulated terms in normative acts or in the internal regulations of the Administrator, they will be kept for 5 years from their provision.

Data provided based on your consent will be processed by the Company until this consent is withdrawn in writing.

After the expiration of the mentioned terms, the data will be deleted and can no longer be recovered or used.

Exception: The data will not be deleted but will be processed only for the purpose of protecting our legitimate rights and interests or fulfilling our legal obligations, in case at the expiration date of the mentioned term there are ongoing judicial, administrative, or pre-judicial proceedings - until their completion.

5. Technical Measures to Protect Personal Data

We have taken the necessary technical and organizational measures to protect your data against accidental or unlawful destruction, accidental loss, unauthorized access, alteration, or disclosure, as well as against other illegal forms of processing.

6. Rights of Individuals:

Right to Access

At any time, as the data subject, you have the right to request information about your personal data processed by us. We will respond to your request within 30 days, using the addresses and contact details provided.

Right to Rectification

If your personal data contains factual errors or is incomplete, you have the opportunity to correct your personal data in your profile or request us to correct them.

Right to Erasure

You have the right to request the erasure of personal data processed by us or delete them yourself by deleting your profile on our website. Please note that the right to be forgotten is not an absolute right, and information regarding your orders may be retained for accounting and tax purposes until the expiration of legal deadlines.

Right to Restriction of Processing

You have the right to request us to restrict the processing of your personal data provided by you. In case of correction, deletion, or restriction of processing, we will communicate these changes to all third-party recipients to whom we have transmitted personal data, unless this is impossible or requires disproportionate effort.

You have the right to freely withdraw your consent for the processing of your personal data. The consent withdrawal request can be made at any time by receiving an email from us, using the "Unsubscribe" button, or another technical means provided in our information platforms.

Withdrawal of consent for direct marketing and advertising is done by sending a notification to the address specified in the direct marketing and advertising message.

Withdrawal of consent does not affect the legality of processing based on consent before withdrawal.

Right to Data Portability

You have the right to receive your personal data directly concerning you and provided by you. Personal data is provided directly to the data subject, upon their request, and technically, the data can be provided to another administrator at the data subject's choice.

Right to Object

You have the right to object to the collection and processing of your data at any time.

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing if you believe that we violate any of the regulatory rules established in the processing of your personal data.

Contact Information: National Supervisory Authority for Personal Data Processing

Address: 28-30 G-ral Gheorghe Magheru Blvd., Sector 1, Postal Code 010336, Bucharest, Romania

More contact information can be found on the Authority's website: www.dataprotection.ro

Changes in Privacy Policy

The privacy policy of BEREZKA STORES SRL may be updated at any time, based on changes in the legal framework (applicable law) and changes in circumstances. When such changes are necessary, they are published in the relevant section of the website, and all users are informed about them. In case of a significant change in how users' personal data is processed, BEREZKA STORES SRL will notify all affected individuals before the policy change takes effect and, where necessary, will request the explicit consent of the data subjects.

Last Update: September 13, 2023. Effective Date: September 13, 2023.