Processing of personal data

In order to ensure the respect of the website users' right to the protection of personal data, we have implemented specific protection measures, taking into account Romanian legislation, as well as the requirements established by Regulation (EU) 2017/679 - applicable throughout the European Union starting from of May 25, 2018 ("the Regulation").
Personal data is any information by which you can be identified, in particular by an identifier such as a name, an identification number, location data, an online identifier or one or more related elements with your physical, physiological, genetic, psychological, economic, cultural or social identity.
Our company takes all necessary measures to ensure compliance with your right to the protection of personal data, and these conditions represent the notification established by art. 13 or 14 of the Regulation explaining why we collect your personal data, how we protect this data, and what your rights are in relation to this data collection.
We encourage you to read the document carefully and ask us for any additional information or clarification you deem necessary regarding the content of this disclosure.
1) General considerations regarding your personal data
In accordance with Regulation (EU) 2017/679, Ohmygod Jewelry will administer the personal data provided by Users in a safe manner and only for the specified purposes. Through the Terms and Conditions, Users are informed that the personal data they provide will be processed for the purpose of providing optimal conditions by Ohmygod Jewelry for internet services, goods and services provision, advertising, marketing and advertising services and of statistical services.
Ohmygod Jewelry performs the following processing operations: collection, registration, organization, storage, adaptation, modification, extraction, consultation, use and, in some cases, transmission to third parties, on the exclusive and regulated basis of a commercial contract that ensures data security and confidentiality , as well as the respect of the user's rights, of the personal data of the Site Users in order to administer, maintain, improve and obtain information about the services they offer, as well as to prevent errors and leaks of information through the own IT network, violations of the law or contractual terms.
The personal data to be collected will be able to be used, including through the automatic creation of profiles (for those Users who have expressed their explicit consent) and to customize the services offered to Users through the site as much as possible and for marketing purposes. The automatic creation of profiles will not concern the data of minors, their personal data not being processed for this purpose.
Personal data will be provided by Users, at their own option, when creating a valid account on the site or subscribing to a service available on the site, in order to benefit from the services and products offered through it. When registering on the site, certain personal data are requested from the User, such as name and surname, gender, date of birth, e-mail address, telephone, profession, habits/preferences/behavior, as well as other personal information.
The user is solely responsible for all the data provided at the time of creating the user account on the site. To confirm the data and the account, the User will be notified at the e-mail address declared when the account was created. This confirmation email is intended to stop fraudulent actions by users who use other people's email addresses to create fictitious accounts. If you receive
such a message, if you have not personally registered on the site, please send us an e-mail at contact@shopohmygod.com to delete the respective account within a maximum of 3 working days. The e-mail will contain, in pdf format, the current version of this Contract.
The User's profile form contains fields that can be edited if it is desired to modify or complete the data provided when the account was created.
The user is not obliged to provide these data, they being necessary i) for evidence about the use of the site and ii) for offering services in optimal conditions through it, for bringing to
knowledge of promotional campaigns, for advertising purposes, for personalized marketing and advertising actions and for the User's access to additional facilities. The User's refusal to provide the requested data determines the non-participation in the promotional actions organized through the website and the non-use of the facilities, additional services offered exclusively to Users with an account on this website.
The website can also be used if the User decides not to create a profile by providing personal data, with the exceptions set out in the Cookies Policy (an integral part of this Agreement)
According to Regulation (EU) 2017/679 and Law no. 677/2001, Users benefit from the right of access, intervention on the data, the right not to be subject to an individual decision and the right to go to court. At the same time, Users have the right to object to the processing of their personal data and to request the deletion of the data.
To exercise these rights, Users can make a written request in this regard, which they will send by e-mail to the address contact@shopohmygod.com with the specification "Personal data request".
The site undertakes not to send spam messages (commercial messages for which it does not have the explicit prior consent of the User) and to undertake all accessible technical means to ensure the security and confidentiality of the user's data.
The site reserves the right to terminate, without prior notice, the accounts and access of members who violate the Terms and Conditions, who undertake activities proven by fraud, slander or attack the security and confidentiality of information within the site or the site's operating company of the
2) The personal data we collect, the basis of the collection and the purposes of the collection
As part of the online communication relationship established between the site and the user, we collect and process your personal data, the collection and processing of this data being necessary to provide informative and promotional content to the user, following the completion, by him, of the personal data personally voluntarily, within the site, by accessing one or more of the sections: create account, update account, subscribe to newsletter, complete online questionnaire, complete online form, to obtain personalized information or commercial benefits, within campaigns promoted on the site.
The grounds for collecting personal data on the site can be the following:
the data subject has given his consent for the processing of personal data for one or more specific purposes
the processing is necessary for the execution of a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract.
the processing is necessary in order to fulfill a legal obligation owed to the operator.
processing is necessary to protect the vital interests of the data subject or another natural person
the processing is necessary for the performance of a task that serves a public interest or that results in the exercise of the public authority with which the operator is vested.
the processing is necessary for the purposes of the legitimate interests pursued by the operator or a third party, unless the interests or fundamental rights and freedoms of the data subject prevail, which require the protection of personal data, in particular when the data subject is a child.
In the lists below we present you in detail what personal data is collected as well as the basis, purpose and duration of its collection. The provision of the data indicated below is not mandatory to view the Website, except for those related to Cookies.
The indicated data are only necessary to provide specific services for the Users who transmit them.
Personal data we collect:
Name, surname, e-mail address, telephone number, geographic location data, mailing address, link to social media profiles
The grounds for collecting this data: 1), 6)
Purposes of personal data collection:
To provide access to content and answers to questions and requests submitted by the online user, to transmit communications, offers and benefits consisting of access to services and products
Method and period of data collection:
Within the secure database, until the express desire for deletion by the user or up to 10 years from the user's last activity on the site. After the 10 years, the data will be electronically anonymous.
Personal data we collect:
Cookies, time stamps (date and time of access), site browsing history
The basis for the collection of this data:
1), 6)
Purposes of personal data collection:
To monitor the site's traffic and its access history, to create the content hierarchy and identify the most relevant content for the user.
Method and period of data collection:
Within the secure database, until the express desire for deletion by the user or up to 10 years from the user's last activity on the site. After the 10 years, the data will be electronically anonymous.
3) How to store your personal data, location, retention period
We will store your personal data for a period that does not exceed the period necessary to fulfill the purposes for which the data is processed and, in cases where we have a legal obligation to keep your personal data for a certain period of time, the period of preservation will be the one
provided by law. Depending on the specific situation, this period will vary, being between 1 day and 10 years.
For a good understanding of how we store, where your personal data will be stored and the exact period for which this data will be kept in our records or systems, please refer to the table above.
In order to guarantee the user's right to be protected with regard to the processing of personal data, we implement, for certain categories of data having a sensitive nature or which are able to affect the rights in a significant way, special measures of a technical and organizational nature , to protect these categories of personal data.
4) Users' rights regarding personal data and their exercise
In order to protect the data to the highest possible standard, the user has a series of rights regulated by law, which we briefly present in the following, asking you that for any additional details do not hesitate to contact the data protection officer personnel from our Company, using the following contact details: contact@shopohmygod.com, Mehedinti, Dr Tr Severin, Romulus Lepri, no 80, 220121, telephone 0758434488.
Right of access
The user has the right to obtain access to his personal data that we process, as well as the right to obtain copies thereof. At the user's request, the first such copy will be provided by us free of charge, following which any additional copies you may request may be subject to a fee corresponding to the effort required to extract and format for transmission. The copy of personal data can be provided to you either in electronic format or in physical format, depending on your request and the nature of the requested data. To request information about the personal data existing on the site, as well as to request the partial or total deletion of this data, it is necessary to send the request using the email address contact@shopohmygod.com or to send a letter by post or courier to the registered office of Ohmygod Jewelry.
The user also has the right to obtain any additional relevant information (such as the reason for the processing of personal data, the categories of personal data we collect, information on the processing and disclosure of such data and any other such information).
The right to data rectification
The user has the right to obtain the rectification of any inaccuracies concerning his personal data processed by us. He also has the right to obtain the completion of any personal data that is incomplete. Any user is encouraged to contact the site at contact@shopohmygod.com whenever he notices that there is an inaccuracy in his personal data or that his personal data processed by Ohmygod Jewelry is incomplete.
The right to data deletion
The user has the right to delete personal data. This right is not an absolute right, which means that the law imposes certain limitations on the exercise of this right ("the right to be forgotten").
The right to restrict data processing
The user has the right to obtain the restriction of the processing of his personal data that we collect and process, in particular if he disputes the accuracy of the data, if the data processing is illegal or if the processing of this data is no longer necessary , according to the law.
The right to object
The user has the right to object to the processing of personal data by us, especially if the processing is carried out for marketing purposes or for reasons related to the particular situation in which he is, in which case his data must be anonymous in the shortest time after reporting the objection from the site's database and their anonymization must be confirmed to the user.
The right to withdraw consent
For personal data processed on the basis of consent, the user has the right to withdraw his consent at any time, as easily as he initially granted it. However, the withdrawal of consent will not affect the legality of the data processing that we carried out before the withdrawal of consent. The right to withdraw consent is not an absolute one, which means that there are cases where data will not be deleted as a result of withdrawing consent (for example where personal data is used for the website to comply with an obligation legal). The application of the withdrawal of consent is applied from the moment of its registration and the operation of the withdrawal of consent will be carried out within a maximum of 3 working days from the registration.
The right to lodge a complaint with the competent authority
The user has the right to submit a complaint to the National Supervisory Authority for the Processing of Personal Data with reference to the aspects concerning the processing of personal data by our Company.
Automated decision-making, including profiling and the right to request that decisions based on or significantly affecting automated data processing be made by natural persons, not exclusively by computers
Personal data are collected and processed through an automated decision-making process in order to personalize the information and commercial communications addressed to you. The automated decision-making process involving health data is based on your express consent.
During these processes, your data is protected by special security measures such as data encryption and advanced security at the database server level.
You have the right to request the modification of the way your personal data is processed automatically by requesting the verification of the automated process by human intervention. For this purpose please contact us at contact@shopohmygod.com.
5) Exercise of rights
In order for its user to be able to exercise the rights specified above, to ask us any question regarding these rights or to ask us for clarification regarding any of the provisions of this information, please contact us at any time using the contact information.
How to submit requests or complaints - contact person
To find out more information about personal data, about how data is collected, processed and protected or to ask for any clarifications regarding those mentioned in these Terms and Conditions any user can contact at any time the responsible with the protection of personal data within the company, by sending an email to contact@shopohmygod.com or by post to Mehedinti, Dr Tr Severin, Romulus Lepri, no 80, 220121.