Source: http://vestal.ro/en/politica-de-confidentialitate/
Timestamp: 2019-04-19 03:16:44+00:00

Document:
When visitors leave comments on the site, we collect the data shown in the comment forms, but also the visitor’s IP address and the user agent’s roster in the browser to help us detect spam.
If you upload images to your website, you should avoid uploading images that have embedded embedded location data (EXIF GPS). Website visitors can download and retrieve all location data from images on the site.
When you ask us a question we need your name and your email address to provide the answer to the question.
Vestal Trading SRL undertakes to protect your personal data against loss, misuse, disclosure, alteration, unavailability, unauthorized access and destruction and takes all reasonable precautions to protect the confidentiality of such data, including through the use of appropriate organizational and technical measures. Organizational measures include physical access control at our headquarters, staff training, and physical file lock in storage cabinets. Technical measures include the use of encryption, passwords for access to our systems, the use of SSL security certificates, encryption of transit data, etc.
While personal information is being provided to you, personal data can be transferred over the Internet. Although we make every effort to protect the personal data you provide to us, the transmission of information between you and us on the Internet is not entirely secure (the terminal you are writing to may be monitored by third parties, for example, without we can do nothing about it). Therefore, we can not guarantee the security of your personal information transmitted over the Internet. So you understand that any such transmission is at your own risk. Once we receive personal data, we will use strict procedures and security features to prevent unauthorized access to it.
If you leave a comment on our site, you can choose to save your name, email address and web site in cookies. These are for your convenience, so you do not have to fill them again when you leave another comment. These cookies will be valid for one year.
If you have an account and log in to this site, we will set a temporary cookie to determine if your browser supports cookies. This cookie does not contain personal data and is removed when you close the browser.
When you sign in, we’ll set up some cookies to save your login information and on-screen display options. Authentication cookies are kept for two days, and screen display options are kept for one year. If you select “Remember me,” your login cookies will be kept for two weeks. If you get unapplied from your account, authentication cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not include personal data and simply indicates the ID of the article you just edited. It expires after 1 day.
Articles in this site may include embedded content (e.g., videos, images, articles, etc.). Content embedded on other websites behaves exactly as if visitors viewed another web site.
The personal data we collect is not transmitted to any other institution or organization outside of Vestal Trading SRL. We use this data only within Vestal Trading SRL and strictly for the purpose of providing dedicated information and services consistent with the objective of the activity. We will never disclose, sell or rent your personal information to a third party without notifying you and, if necessary, without obtaining your consent.
If you leave a comment, your comment and metadata are kept indefinitely. This is how we can automatically recognize and approve all the following comments instead of keeping them in a queue for moderation.
For users (if any) registering on our website, we also store the personal information they provide on their user profile. All users can view, edit, or delete their personal information at any time (but can not change their username). Webmasters can also see and edit this information. In Analytics, data is automatically deleted after a period of 28 months.
If you have an account or left comments on this website, you can ask for an export file with the personal data we hold about you, including all the data you have provided us with. You can also ask us to delete all the personal data we hold about you. They do not include all data that we are required to keep for administrative, legal or security purposes.
– The right to information – art. 13 and 14 GDPR. This enables the data subjects to know from the time they are collected how to use those data, to whom they will be disclosed or transferred, what rights the data subjects have on their data, etc.
– Right of access to data – art. 15 GDPR. Allows you to obtain from us a confirmation that personal data concerning you are processed or, if so, access to that data and other useful information.
– The right to delete data – art. 17 GDPR. It allows you to obtain from us the deletion of your personal data, without undue delays. There are, however, exceptions to this rule, such as the idea that some data are processed to give the public the right to information, are processed for statistical purposes or archive, are processed to fulfill a legal obligation or we process them to find or defend a right in court.
– Right to rectification of data – art. 16 GDPR. It allows you to obtain from us, without undue delay, the rectification or completion of inaccurate personal data concerning you.
– The right to data restriction – art. 18 GDPR. It is a temporary right. In some situations, between the moment when, for example, we take the decision to delete certain data (we no longer need personal data for processing) and the actual deletion of the data, you are sending us a request that opposes erasure, motivating the fact that you need these data to find, exercise or defend a right in court. As a result of such a request, we will “freeze” the data by stopping processing for a certain amount of time.
– The right to data portability – art. 20 GDPR. You have the right to receive the personal data concerning you and which you have provided to the operator (who processes them under a contract or on your consent by automatic means) in a structured format that is currently used and which can be automatically read and you have the right to transmit this data to another operator without any obstacles on our part. In other words, personal data will be provided to you in a structured format so you can decide to download them or, on the contrary, send them to another operator.
– The Right to Opposition – Art. 21 GDPR. You have the right to oppose, for example, the processing of your personal data when it is processed for direct marketing purposes. To make it clearer how you can exercise this right, it should be noted, for example, that in all newsletters from C (no matter if we are talking about newsletters that only provide information or newsletters promoting PFA Community services or products) you will always be able to unsubscribe. We offer this possibility in all situations, regardless of whether or not the law compels us (not all mail from us is considered to be direct marketing), because it seems important for you to interact with the PFA Community only for as long as you -You want it.
– The right not to be the subject of a decision based solely on automatic processing, including the creation of profiles, which produces legal effects affecting the data subject or which affects similarly to a significant extent. The PFA community does not achieve such profiling to be followed by automated decisions with a significant legal or similar effect on the target person. At the time we do this, we will notify you and we will modify this information note.
– The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing. B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania. +40.318.059.211 / +40.318.059.212.
Please address your inquiries about the subject of data protection and any requests in the exercise of your legal rights using the contact form.
We will investigate and attempt to resolve any claim or complaint regarding the use or disclosure of your personal information.
If you are not satisfied with our response, you may file a complaint with the National Supervisory Authority for Personal Data Processing.

References: art. 13
 art. 15
 art. 17
 art. 16
 art. 18
 art. 20
 Art. 21