General Data Protection Regulation

I. General Information

The confidentiality of personal data is one of the main concerns of ENSYS Renewable Solutions SA, with a workplace in Oradea, Bicazului Street, no. 6-8, as a data controller.

This document aims to inform you about the processing of your personal data in the context of using the website www.ensys.eu.

II. Categories of Processed Personal Data

a. If you are a customer of the Website, ENSYS Renewable Solutions SA will process your personal data, such as name, phone number, email address, billing address, delivery address, data related to your use of the Website, such as behavior/preferences/habits within interactions with the website www.ensys.eu, as well as any other categories of data you provide directly in the context of creating a user account, placing an order through the website, or in any other way resulting from the use of our online communication channels.

b. If you are a visitor of the Website, ENSYS Renewable Solutions SA will process your personal data that you provide directly in the context of using the Website, such as the data you provide in the contact/questions/complaints section, to the extent that you contact us in this way.

III. Purposes and Legal Bases of Processing

a. If you are a customer of the Website, ENSYS Renewable Solutions SA processes your personal data as follows:

for the performance of the contractual relationship between you and ENSYS Renewable Solutions SA, specifically for the acceptance, validation, dispatch, and invoicing of the order placed on the Website, informing you about the status of the order, eventual organization of product returns, etc.
for compliance with legal obligations that bind ENSYS Renewable Solutions SA in the context of the services provided through the Website, including fiscal obligations, as well as archiving obligations.

Legal Basis: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusing to provide the data may result in ENSYS Renewable Solutions SA’s inability to fulfill its legal obligations and therefore unable to provide you with the services through the Website.

for marketing activities, specifically for the transmission, through distance communication means (email, SMS), of commercial communications regarding the products and services offered by ENSYS Renewable Solutions SA through the Website.

Legal Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

Providing your data for this purpose is voluntary. Refusing to provide consent for the processing of your data for this purpose will not have negative consequences for you.

for conducting various analyses, reporting on the functioning of the Website, creating consumer preference profiles, primarily for the purpose of improving the experience offered on the Website.

Legal Basis: The processing of your data for this purpose is based on ENSYS Renewable Solutions SA’s legitimate interest in continuously improving the customer experience on the Website. Providing your data for this purpose is voluntary. Refusing to provide the data for this purpose will not have negative consequences for you.

b. If you are a visitor of the Website, ENSYS Renewable Solutions SA processes your personal data as follows:

for marketing activities, specifically for the transmission, through distance communication means (email, SMS), of commercial communications regarding the products and services offered by ENSYS Renewable Solutions SA through the Website.

Legal Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

for the resolution of complaints, claims, and to monitor traffic and improve your experience offered on the Website.

Legal Basis: The processing of your data for this purpose is based on ENSYS Renewable SolutionsSA’s legitimate interest in ensuring the proper functioning of the Website and continuously improving the visitor experience on the Website, including by addressing various comments, questions, or complaints.

Providing your data for this purpose is voluntary. Refusing to provide the data for this purpose will not have negative consequences for you.

IV. Retention Period

In general, ENSYS Renewable Solutions SA will process your personal data for as long as necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently in accordance with the legal obligations that apply to ENSYS Renewable Solutions SA (e.g., for financial-accounting documents, the retention period prescribed by law is 10 years from the end of the financial year in which they were prepared).

If you withdraw your consent for the processing of data for marketing purposes, ENSYS Renewable Solutions SA will cease processing your personal data for this purpose, without affecting the processing carried out based on your consent expressed before its withdrawal.

V. Disclosure of Personal Data

To achieve the processing purposes, ENSYS Renewable Solutions SA may disclose your data to partners, third parties, or entities that support ENSYS Renewable Solutions SA in carrying out its activities through the Website (e.g., courier companies, IT service providers), or to central/local public authorities, in the following exemplifying cases:

for the administration of the Website; in cases where such communication is necessary for the allocation of prizes or other benefits to the data subjects, obtained as a result of their participation in various promotional campaigns organized by [the website owner] through the Website; for the maintenance, personalization, and improvement of the Website and the services carried out through it;
for data analysis, testing and research, monitoring usage trends and activity, developing safety features, and user authentication;
for sending marketing communications, within the limits and conditions provided by law;
when the disclosure of personal data is required by law, etc.

VI. Transfer of Personal Data

The personal data provided to ENSYS Renewable Solutions SA may be transferred outside Romania, but only to states within the European Union.

VII. The rights you benefit from

Under the conditions provided by personal data processing legislation, as data subjects, you have the following rights:

The right to be informed, meaning the right to receive details regarding the processing activities carried out by ENSYS Renewable Solutions SA, as described in this document;
The right of access to data, meaning the right to obtain confirmation from ENSYS Renewable Solutions SA [the website owner] regarding the processing of personal data, as well as details regarding the processing activities, such as the manner in which the data is processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.;
The right to rectification, meaning the right to obtain without undue delay the correction by ENSYS Renewable Solutions SA of inaccurate/unjustified personal data, as well as the completion of incomplete data. The rectification/completion will be communicated to each recipient to whom the data has been disclosed, unless this proves impossible or involves disproportionate efforts.
The right to erasure of data, without undue delay (“right to be forgotten”), in case one of the following reasons applies:
acestea nu mai sunt necesare pentru îndeplinirea scopurilor pentru care au fost colectate sau prelucrate;
The data is no longer necessary for the purposes for which it was collected or processed.
The data subject withdraws consent, and there is no other legal basis for the processing.
The data subject objects to the processing, and there are no legitimate grounds that override the objection.
The personal data has been processed unlawfully.
The personal data must be erased to comply with a legal obligation.
The personal data has been collected in relation to the offer of information society services according to Union or Member State law applicable to the data controller.

It is possible that, following a request for erasure of data, ENSYS Renewable Solutions SA may anonymize this data (thus removing its personal character) and continue processing it for statistical purposes;

The right to restriction of processing, to the extent that :

The data subject contests the accuracy of the data, for a period that allows the controller to verify the accuracy of the data.
The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
The controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise, or defense of legal claims.
The data subject has objected to processing (other than direct marketing), for the period during which it is verified whether the legitimate grounds of the controller override those of the data subject.
The right to data portability, meaning: (i) The right to receive personal data in a structured, commonly used, and machine-readable format, and (ii) the right to transmit those data by ENSYS Renewable SolutionsSA to another data controller, to the extent that the conditions provided by law are met;
The right to object, regarding the processing activities, which can be exercised by sending a request as indicated below:
At any time, due to the particular situation of the data subject, that the data concerning them is processed based on the legitimate interest of [the website owner] or the public interest, unless ENSYS Renewable Solutions SA can demonstrate compelling legitimate grounds that override the interests, rights, and freedoms of the data subject or that the purpose is the establishment, exercise, or defense of a legal claim.
At any time, free of charge and without any justification, that the data concerning them is processed for direct marketing purposes
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
The right to address the National Supervisory Authority for Personal Data Processing or competent courts if deemed necessary.

For any further questions regarding the processing of personal data and to exercise the aforementioned rights, please contact the email address: office@ensys.eu.