Politica protejare date cu caracter personal

 

ROMÂNĂ

Politica de retentie

S.C. CARE&JOY S.R.L., inregistrat la evidetele Registrului Comertului sub nr. J2017001558025, avand CUI 38107218, cu sediul social in Orasul Gurahont, Strada Garii, Nr 1, Jud Arad, propietara website-ului accesibil la urmatoarea adresa: www.shop.laurul.ro.

1. General

Nevoia de a pastra date cu caracter personal variaza in functie de tipul de date care sunt prelucrate in cadrul companiei. Unele date pot fi sterse imediat, iar altele trebuie sa fie stocate pana in momentul in care utilitatea viitoare a acestora nu mai este o posibilitate.

Exista situatii in care datele cu caracter personal sunt stocate o perioada limitata de timp, termenele de stocare fiind astfel impuse de reglementarile legale aflate in vigoare, aplicabile la nivel national sau al Uniunii Europene. In alte cazuri, termenele de stocare trebuie sa fie stabilite de catre fiecare organizatie in parte, in functie de activitatea acesteia, tinand cont de principiile de prelucrare a datelor prevazute in cadrul Regulamentului UE 679/2016 privind protectia persoanelor fizice in ceea ce priveste prelucrarea datelor cu caracter personal si privind libera circulatie a acestor date (cunoscut prin acronimul englezesc „GDPR”).

Deoarece stabilirea de catre companie, a termenelor de prelucrare si de retentie a datelor personale poate fi un demers oarecum subiectiv, implementarea unei Politici de retentie este importanta pentru a se asigura ca regulile implementate la nivelul companiei privind stocarea datelor sunt aplicate in mod constant in intreaga organizatie.

In orice caz, prevederile Regulamentului General privind Protectia Datelor (GDPR) si ale Legii 190/2018 privind masuri de punere in aplicare a Regulamentului General privind Protectia Datelor, vor fi respectate de catre companie in cadrul activitatilor de stocare a datelor cu caracter personal prelucrate.

2. Politica de stocare

Domeniul de aplicare al prezentei Politici acopera toate datele companiei, respectiv datele stocate in sistemele informatice ale acesteia, datele furnizate de companie in mass-media, datele inchiriate sau provenite din colaborarile si parteneriatele contractuale, indiferent de locatia (sediul companiei sau punctul de lucru) in care aceste date sunt prelucrate.

Politica de stocare din cadrul S.C. CARE&JOY S.R.L. este un instrument care ofera garantia ca cerintele GDPR, legile si reglementarile relevante din domeniul protectiei datelor cu caracter personal sunt respectate. Aceasta Politica se refera, in principal, la principiul limitarii retinerii in timp a datelor cu caracter personal prelucrate si care presupune stocarea acestora numai pentru o perioada de timp necesara scopurilor pentru care sunt procesate aceste date. Politica de stocare (retentie) a datelor personale este destinata in primul rand ca o resursa favorabila activitatii companiei, care va aloca perioade de retentie relevante in toate domeniile de activitate si departamentele companiei, permitand desfasurarea activitatilor de eliminare/stergere a adatelor personale intr-o maniera consecventa si controlata.

3. Solicitari cu privire la Politica de stocare a datelor personale (retentie)

Prezenta Politica este aplicabila persoanelor fizice in calitate de clienti ai S.C. CARE&JOY S.R.L., persoane juridice in calitate de clienti, dar si reprezentantilor partenerilor nostri contractuali, atat in calitate de Operatori de date cu caracter personal in relatie cu S.C. CARE&JOY S.R.L. sau in calitate de Persoane imputernicite de Operator, conform Regulamentului General privind Protectia Datelor.

Stocam si prelucram datele personale numai in cazurile in care ne-ati furnizat voluntar aceste date, cum ar fi prin completarea unui formular de contact, prin abonarea la newsletter-ul companiei sau prin crearea unui cont.

In masura in care aveti solicitari sau intrebari legate de perioadele de stocare a datelor dumneavoastra personale in cadrul S.C. CARE&JOY S.R.L. va rugam sa contactati compania, utilizand adresa de e-mail mentionata.

4. Motivele care justifica stocarea pe termen lung a datelor personale la nivelul S.C. CARE&JOY S.R.L. 

Compania nu isi propune sa adopte o abordare de genul "salveaza totul”. Consideram ca o astfel de regula nu este practica sau eficienta din punct de vedere al costurilor si ar reprezenta o povara excesiva pentru tot personalul companiei si, in special, pentru departamentul IT care ar gestiona o cantitate tot mai mare de date. Cu toate acestea, anumite date trebuie sa fie pastrate pe termen lung, pentru a proteja interesele societatii, pentru a salva dovezi cu privire la prelucrarea sau stergerea conform legii si a prezentei Politici a datelor cu caracter personal prelucrate, daca S.C. CARE&JOY S.R.L. considera ca este necesar, si in general, pentru a ne conforma bunelor practici comerciale.

Unele dintre cele mai importante motive pentru stocarea pe termen lung a datelor in cadrul S.C. CARE&JOY S.R.L., sunt urmatoarele:

• Reclamatii privind calitatea serviciilor companiei.

• Litigii.

• Investigarea accidentelor de munca.

• Ancheta privind producerea unui incident de securitate.

• Reglementari legale.

• Siguranta proprietatii intelectuale.

5. Perioadele de retentie (stocare)

Perioadele de stocare a datelor cu caracter personal sunt specificate mai jos si se aplica pentru toate formatele de inregistrari, adica format hartie si/sau electronic, cu exceptia cazului in care se specifica altfel in prezenta Politica:

DEPARTAMENT - ACTIVITATE DE PRELUCRARE - PERIOADA DE RETENTIE:

• MARKETING - Formulare de campanie in format fizic - 3 luni, dupa ce sunt stocate in format electronic.

• MARKETING - Formulare de campanie in format electronic - 3 ani de la data completarii originalului.

• MARKETING - Documente care atesta castiguri sau premii acordate in baza concursurilor si extragerile la sorti - 10 ani de la data incheierii acestora.

• MARKETING - Apeluri telefonice in scop de marketing - 30 de zile.

• MARKETING - Informatii despre participarea la concursuri cu premii - 5 ani de la data finalizarii concursului. Informatii despre participarea in cadrul unor campanii organizate pe paginile companiei din retelele de socializare - 2 ani de la data finalizarii campaniei.

• RELATII CU CLIENTII - E-mail primit de la client pentru formularea unei reclamatii - 3 ani de la data primirii acestuia in format fizic, cat si in format electronic.

• RELATII CU CLIENTII - E-mail primit de la client pentru solicitari legate de activitatea comerciala a companiei - 3 ani de la data primirii acestuia in format fizic, cat si in format electronic.

• RELATII CU CLIENTII - E-mail primit de la client pentru solicitari legate de activitatile de prelucrare a datelor personale in cadrul companiei - 3 ani de la data primirii acestuia, atat in format fizic, cat si in format electronic.

• RELATII CU CLIENTII - Baza de date din cadrul Departamentului Relatii cu Clientii care include orice solicitare generala transmisa de clienti - Stergerea datelor din 3 in 3 ani.

• LOGISTICA - AWB (Airway Bill) si documente care insotesc expeditia marfii din depozit catre client (dispozitie de livrare) - 5 ani.

• LOGISTICA - Aviz de insotire a marfii (NIR) - 5 ani.

• RELATII DE AFACERI - Contractele incheiate de companie cu furnizori - 10 ani de la data incetarii contractului.

• RELATII DE AFACERI - Contracte de parteneriat incheiate de companie pentru evenimentele comerciale de promovare organizate de companie - 10 ani de la data incetarii contractului.

• RELATII DE AFACERI - Cartile de vizita colectate in cadrul intalnirilor de afaceri - 1 an de la data ultimului contact.

• RELATII DE AFACERI (B2B) - Date personale, precum: numele, functia si datele de contact ale reprezentantilor companiilor cu care colaboram - Pana la data solicitarii stergerii datelor sau pana la data la care am aflat ca datele au devenit inactive.

Pentru informatii cu privire la termenele de stocare ale unor activitati de prelucrare a datelor personale in cadrul companiei, care nu se regasesc specificate in prezenta Politica, va rugam sa transmiteti solicitarile dumneavoastra pe adresa de e-mail gdpr@explorado.ro sau prin accesarea celorlalte mijloace de comunicare puse la dispozitie.

6. Planul de retentie

Tabelul care contine perioadele recomandate de pastrare in evidentele companiei (sisteme sau arhive fizice) a datelor cu caracter personal ale clientilor este furnizat pentru fiecare domeniu de activitate relevant. Perioada de stocare se aplica in mod implicit tuturor inregistrarilor din categoria respectiva si va fi respectata ori de cate ori este posibil, desi admitem ca pot exista circumstante exceptionale care necesita pastrarea documentelor fie pentru perioade mai scurte, fie mai lungi. In cazul in care inregistrarile sau documentele individuale necesita o perioada de pastrare diferita de cea recomandata, S.C. CARE&JOY S.R.L. trebuie contactata pentru a discuta cerintele specifice de stocare.

7. Distrugerea datelor

Distrugerea datelor este o componenta esentiala in cadrul normelor de stocare a datelor cu caracter personal neutilizate in activitatea viitoare a companiei. Distrugerea datelor asigura utilizarea in mod eficient a datelor colectate in cadrul activitatii, ceea ce face ca gestionarea datelor si recuperarea acestora sa fie posibila si rentabila

Cand perioada de retentie expira, compania trebuie sa distruga in mod activ datele acoperite de aceasta Politica. Daca un angajat (sau colaborator) care are acces la datele personale prelucrate considera ca anumite date nu ar trebui sa fie distruse, acesta/aceasta ar trebui sa contacteze superiorul direct, Responsabilul cu Protectia Datelor sau, in lipsa acestuia, managementul direct al companiei, astfel incat sa poata sa fie luata in considerare o exceptie de la regulile instituite in prezenta Politica. Intrucat aceasta decizie are implicatii juridice pe termen lung, exceptiile vor fi facute doar de un membru sau de membrii echipei de conducere a companiei.

Compania ii indruma in mod special pe angajati (sau pe colaboratori) sa nu distruga date care incalca aceasta Politica. Distrugerea datelor pe care un angajat (sau colaborator) le poate considera daunatoare pentru companie sau distrugerea datelor in incercarea de a ascunde o incalcare a legii sau a prevederilor prezentei Politici sunt demersuri in mod explicit interzise.

8. Solicitarile de stergere a datelor

Puteti solicita stergerea datelor cu caracter personal trimitand un e-mail pe adresa: office@dpo-arad.ro in care trebuie sa precizati urmatoarele:

– Datele dumneavoastra de contact pentru transmiterea raspunsului/punctului de vedere al companiei.

– Numele dumneavoastra.

– Activitatile de prelucrare prin care datele au fost colectate sau procesate (campanii de marketing, promotii, etc.).

– Tipul datelor colectate sau prelucrate pe care doriti sa le stergeti.

– Numarul total de inregistrari care trebuie sterse.

Termenul de raspuns la solicitarea transmisa este de 30 zile de la data transmiterii solicitarii. In masura in care complexitatea solicitarii dumneavoastra implica necesitatea prelungirii termenului de raspuns, vom prelungi acest termen pentru o perioada suplimentara care nu va depasi 30 de zile lucratoare de la data transmiterii solicitarii. In acest sens, un reprezentant al companiei va va comunica situatia solicitarii transmise.

In masura in care solicitarea transmisa se va solutiona dupa evaluarea acesteia in cadrul S.C. CARE&JOY S.R.L., cu stergerea datelor dumneavoastra, vom trimite in atentia dumneavoastra un document care reprezinta punctul de vedere al companiei cu privire la solicitarea dumneavoastra si actiunile intreprinse, prin mijlocul de comunicare agreat. Documentul va cuprinde cel putin urmatoarele informatii:

– Scopul/scopurile pe baza pentru care datele au fost prelucrate.

– Date care au fost sterse/eliminate/distruse si activitatea de prelucrare din cadrul S.C. CARE&JOY S.R.L. de care acestea au apartinut.

– Numarul de inregistrari eliminate.

Documentul fizic transmis este semnat de un reprezentant al S.C. CARE&JOY S.R.L. si este stocat si scanat in format fizic, pentru o perioada de 3 ani de la data transmiterii notificarii, urmand ca dupa aceasta perioada documentul original sa fie distrus si reciclat. Daca punctul de vedere va fi transmis prin email, acesta va fi stocat pe serverele companiei o perioada de 3 ani de la data transmiterii acestuia catre Client pe adresa de e-mail furnizata, apoi va fi sters.

Daca trimiteti o solicitare catre S.C. CARE&JOY S.R.L. in vederea accesului la activitatile de procesare a datelor dumneavoastra personale in compania noastra, va rugam sa aveti in vedere ca, din cauza procesarii continue a datelor dumneavoastra personale si luand in considerare rutina stabilita in sistemele noastre pentru stergerea informatiilor prelucrate in conditiile Politicii de Stocare a datelor, incercam sa va mentinem datele actualizate si exacte in orice moment. Astfel, aceasta procesare de rutina poate implica modificarea sau stergerea informatiilor personale pe care le procesam, dupa ce ati trimis o solicitare catre noi. In acest caz, S.C. CARE&JOY S.R.L. va furniza informatiile detinute in momentul in care va trimitem raspunsul, chiar daca acestea difera de informatiile pe care le-am avut stocate la data trimiterii solicitarii. Retineti ca stergerea datelor dumneavoastra personale este o procedura pe care S.C. CARE&JOY S.R.L. ar fi efectuat-o chiar daca nu ati fi trimis solicitarea.

9. Dezvoltare continua

Perioadele de stocare (retentie) vor fi mentinute de catre S.C. CARE&JOY S.R.L. care va efectua modificari, completari si actualizari, ori de cate ori legislatia, orientarile Autoritatii Nationale de Supraveghere a Prelucrarii Datelor cu caracter Personal sau modificarile organizationale sau structurale ale S.C. CARE&JOY S.R.L. impun aceste schimbari.

10. Actualizari

Politica noastra de stocare a datelor personale (retentie) este in curs de revizuire si poate fi modificata din cand in cand (in general, pentru a respecta legislatia si practicile privind protectia datelor). Versiunile actualizate vor fi publicate pe pagina noastra website-ul: www.shop.laurul.ro.

© S.C. CARE&JOY S.R.L. – Versiune: 29 Ianuarie 2026

ENGLEZĂ

Retention Policy

S.C. CARE&JOY S.R.L., registered with the Trade Register under no. J2017001558025, having VAT number 38107218, with its registered office in Gurahont town, Garii Street, No. 1, Arad County, owner of the website accessible at the following address: www.shop.laurul.ro.

1. General

The need to retain personal data varies depending on the type of data processed within the company. Some data may be deleted immediately, while other must be stored until the moment when their future utility is no longer possible.

There are situations when personal data is stored for a limited period, with storage terms imposed by the legal regulations in force, applicable at the national or European Union level. In other cases, storage terms must be established by each organization individually, depending on its activity, taking into account the data processing principles laid down in Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (known by the English acronym "GDPR”).

Since the establishment by the company of the processing and retention periods of personal data may be a somewhat subjective endeavor, the implementation of a Retention Policy is essential to ensure that the rules applied at the company level regarding data storage are consistently enforced throughout the organization.

In any case, the company shall comply with the provisions of the General Data Protection Regulation (GDPR) and Law 190/2018 on measures for the enforcement of the General Data Protection Regulation within the scope of activities involving the storage of processed personal data.

2. Storage Policy

The scope of this Policy covers all company data, namely data stored in the company’s IT systems, data provided by the company to the media, rented data, or data originating from contractual collaborations and partnerships, regardless of the location (company headquarters or branch office) where such data are processed.

The Storage Policy within S.C. CARE&JOY S.R.L. is an instrument that ensures compliance with the GDPR requirements, as well as with the relevant laws and regulations in the field of personal data protection. This Policy primarily concerns the principle of limiting the retention period of processed personal data, which entails storing such data only for the duration necessary to achieve the purposes for which they are processed. The Storage (Retention) Policy of personal data is primarily intended as a resource supportive of the company's operations, allocating appropriate retention periods across all business areas and company departments, thereby enabling the consistent and controlled execution of personal data disposal/deletion activities.

3. Requests regarding the Storage Policy of personal data (retention)

This Policy is applicable to natural persons as clients of S.C. CARE&JOY S.R.L., legal entities as clients, as well as to representatives of our contractual partners, both in their capacity as Controllers of personal data in relation toS.C. CARE&JOY S.R.L. or as Persons Authorized by the Controller, pursuant to the General Data Protection Regulation.

We store and process personal data solely in cases where you have voluntarily provided such data, such as by completing a contact form, subscribing to the company’s newsletter, or creating an account.

Should you have any requests or questions regarding the retention periods of your personal data within S.C. CARE&JOY S.R.L., please contact the company using the email address indicated.

4. The reasons justifying the long-term storage of personal data at S.C. CARE&JOY S.R.L. 

The Company does not intend to adopt a 'save everything' approach. We consider that such a rule is neither practical nor cost-effective and would impose an excessive burden on all company personnel, particularly the IT department, which would manage an increasingly large volume of data. However, certain data must be retained long-term to protect the company’s interests, to preserve evidence regarding processing or deletion in accordance with the law and this Personal Data Policy if S.C. CARE&JOY S.R.L. deems it necessary, and, in general, to comply with sound commercial practices.

Some of the most important reasons for the long-term retention of data within S.C. CARE&JOY S.R.L. are the following:

• Complaints regarding the quality of the company’s services.

• Litigation.

• Investigation of workplace accidents.

• Inquiry into the occurrence of a security incident.

• Legal regulations.

• Protection of intellectual property.

5. Retention (storage) periods

The retention periods for personal data are specified below and apply to all recording formats, namely paper and/or electronic, except where otherwise stated in this Policy:

DEPARTMENT – PROCESSING ACTIVITY – RETENTION PERIOD:

• MARKETING – Campaign forms in physical format – 3 months after storage in electronic format.

• MARKETING – Campaign forms in electronic format – 3 years from the date of completion of the original.

• MARKETING – Documents certifying winnings or prizes awarded based on contests and prize draws – 10 years from their conclusion.

• MARKETING – Telephone calls made for marketing purposes – 30 days.

• MARKETING – Information regarding participation in contests with prizes – 5 years from the contest’s completion date. Information concerning participation in campaigns organized on the company’s social media pages – 2 years from the campaign’s completion date.

• CUSTOMER RELATIONS – Email received from the client for the submission of a complaint – retained for 3 years from the date of receipt, both in physical and electronic format.

• CUSTOMER RELATIONS – Email received from the client regarding requests related to the company’s commercial activity – retained for 3 years from the date of receipt, both in physical and electronic format.

• CUSTOMER RELATIONS – Email received from the client regarding requests related to personal data processing activities within the company – retained for 3 years from the date of receipt, both in physical and electronic format.

• CUSTOMER RELATIONS – Database within the Customer Relations Department containing any general requests submitted by clients – data to be deleted every 3 years.

• LOGISTICS - AWB (Airway Bill) and documents accompanying the shipment of goods from the warehouse to the client (delivery order) - 5 years.

• LOGISTICS - Goods Accompanying Note (NIR) - 5 years.

• BUSINESS RELATIONS - Contracts concluded by the company with suppliers - 10 years from the date of contract termination.

• BUSINESS RELATIONS - Partnership contracts concluded by the company for commercial promotional events organized by the company - 10 years from the date of contract termination.

• BUSINESS RELATIONS - Business cards collected during business meetings - 1 year from the date of last contact.

• BUSINESS RELATIONS (B2B) - Personal data, such as the name, position, and contact details of the representatives of the companies with which we collaborate – retained until the date of the data deletion request or until the date on which we became aware that the data had become inactive.

For information regarding the retention periods of certain personal data processing activities within the company that are not specified in this Policy, please submit your requests to the e-mail address gdpr@explorado.ro or by using the other communication means provided.

6. Retention Plan

The table containing the recommended retention periods for clients’ personal data within the company’s records (systems or physical archives) is provided for each relevant field of activity. The storage period applies by default to all records within the respective category and shall be observed whenever possible, although it is acknowledged that exceptional circumstances may require retaining documents for either shorter or longer periods. If individual records or documents require a retention period different from the recommended one, S.C. CARE&JOY S.R.L. must be contacted to discuss the specific storage requirements.

7. Data Destruction

Data Destruction is an essential component of the regulations governing the retention of personal data no longer utilized in the company's future operations. Data Destruction ensures the efficient utilization of data collected during activities, thereby enabling data management and retrieval to be both effective and economical.

When the retention period expires, the company must actively proceed with the data destruction covered by this Policy. If an employee (or collaborator) with access to the processed personal data considers that certain data should not be destroyed, he or she must contact their direct supervisor, the Data Protection Officer, or, in their absence, the company’s direct management, so that an exception to the rules established in this Policy may be considered. Given that this decision has long-term legal implications, exceptions will be granted only by a member or members of the company’s management team.

The company expressly instructs employees (or collaborators) not to destroy data that breaches this Policy. The destruction of data which an employee (or collaborator) may consider harmful to the company, or any destruction of data intended to conceal a violation of the law or the provisions of this Policy is strictly prohibited.

8. Requests for data deletion

You may request the deletion of personal data by sending an email to: office@dpo-arad.ro where you must specify the following:

– Your contact details for the transmission of the company’s response/opinion.

– Your name.

– The processing activities through which the data was collected or processed (marketing campaigns, promotions, etc.).

– The type of data collected or processed that you wish to have deleted.

– The total number of records to be deleted.

The response deadline for the submitted request is 30 days from the date of submission. If the complexity of your request necessitates an extension of the response deadline, we will extend this period by an additional duration not exceeding 30 working days from the date of submission. In this regard, a company representative will communicate to you the status of the submitted request.

Should the submitted request be resolved following its evaluation within S.C. CARE&JOY S.R.L., entailing the deletion of your data, we shall send you a document presenting the company’s position concerning your request and the measures taken, via the agreed method of communication. The document shall contain at least the following information:

– The purpose(s) on the basis of which the data were processed.

– The data that have been erased/deleted/destroyed and the processing activity within S.C. CARE&JOY S.R.L. to which they pertained.

– The number of records deleted.

The physical document transmitted is signed by a representative of S.C. CARE&JOY S.R.L. and is stored and scanned in physical format for a period of three years from the date of notification transmission, after which the original document shall be destroyed and recycled. If the opinion is transmitted via email, it shall be stored on the company’s servers for a period of three years from the date it was sent to the Client at the provided email address, after which it shall be deleted.

If you submit a request to S.C. CARE&JOY S.R.L. for access to the processing activities concerning your personal data within our company, please be advised that, due to the continuous processing of your personal data and in consideration of the routine established in our systems for deleting processed information in accordance with the Data Retention Policy, we endeavor to keep your data updated and accurate at all times. Thus, this routine processing may involve the modification or deletion of personal information we process after you have submitted a request to us. In this case, S.C. CARE&JOY S.R.L.will provide the information held at the time we send you the response, even if it differs from the information stored at the date of the request. Please note that the deletion of your personal data is a procedure that S.C. CARE&JOY S.R.L. would have had carried out even if you had not submitted the request.

9. Continuous Development

The storage (retention) periods shall be maintained by S.C. CARE&JOY S.R.L.,which shall make modifications, additions, and updates whenever legislation, the guidelines of the National Supervisory Authority for Personal Data Processing, or the organizational or structural changes of S.C. CARE&JOY S.R.L. impose such changes.

10. Updates

Our personal data storage (retention) policy is currently under review and may be amended from time to time (generally, to ensure compliance with data protection legislation and best practices). Updated versions will be published on our website at: www.shop.laurul.ro.

© S.C. CARE&JOY S.R.L. – Version: 29 January 2026