Skip to content Skip to footer

Privacy Policy

Carfin S.A. certifies that it respects your rights under Regulation (EU) 2016/679 on the protection of individuals concerning the processing of personal data and on the free movement of such data and Law No 677/2001 on the protection of individuals concerning the processing of personal data and on the free movement of such data.

What is personal data?

Any information by which a natural person becomes identifiable, such as: a name, an identification number, location data, an online identifier, one or more elements specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity, etc.

What is the processing of personal data?

Any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission (including transmission to third parties), dissemination or otherwise making available, alignment or combination, blocking/restriction, erasure or destruction.

What are the risks arising from inappropriate processing that does not comply with national and European legal provisions?

The risk to which Regulation (EU) 2016/679 and Law 677/2000, as amended and supplemented, refer is defined as follows:

 “The risk […] may result from the processing of personal data that could result in damage of a physical, material or moral nature, in particular, where: the processing could lead to discrimination, identity theft or fraud, financial loss, damage to reputation, loss of confidentiality of personal data protected by professional secrecy, unauthorized reversal of pseudonymisation or any other significant disadvantage of an economic or social nature” (Regulation (EU) 2016/679 on the protection of individuals about the processing of personal data and on the free movement of such data).

What measures has our company taken to securely collect and process your data?

 We assure you at the same time that our company manages securely and only for the specified purposes the personal data you provide us about yourself, a member of your family, or another person, to eliminate risks to the security of your data.

What are the purposes of collecting and processing personal data?

The purposes of collecting personal data are advertising, marketing, and publicity as well as electronic communication services. You are required to provide the data, which is also necessary for commercial communications, delivery of products, and issuing of tax documents.

Who else can process personal data on our behalf?

Carfin S.A. may authorise courier companies to process such data for the delivery of products. Our employees are also involved in this process of collecting and processing personal data.

Carfin S.A. may also provide personal data to other companies with which it has a partnership relationship but only based on a confidentiality undertaking from them, guaranteeing that such data is kept secure and that the provision of such personal information is following the legislation in force, as follows: providers of marketing, courier, payment/banking, telemarketing or other services, provided by companies with which we may develop joint programs for offering our Goods and Services on the market, insurers.

The Buyer’s personal information may also be provided to the Public Prosecutor’s Office, the Police, the courts, and other authorized state bodies, on the basis and within the limits of the legal provisions and following express requests.

By filling in the order form on the Site with personal data, including CNP, for credit activity, the Buyer expressly consents that the legal entities with which Carfin S.A. has entered into partnerships to offer products through credit may process his/her data in their records for credit analysis and transmit them to consult the information registered in the name of the Buyer in the database of the Credit Bureau.

How long is the data kept?

We would like to point out that our company keeps the data as long as it is legally required for the accounting documents, does not archive them, and does not use them for advertising purposes without your express consent. Your data is also kept for the warranty period of the purchased product.

What are the rights of individuals whose data is collected and processed?

The right to information – you can request information on the processing activities of your data;

Right to erasure of data (“right to be forgotten”) – you can obtain the erasure of data if the processing was not lawful or in other cases provided for by law;

Right to restriction of processing – you can request restriction of processing if you question the accuracy of the data and in other cases provided for by law;

Right to object – you can object, in particular, to data processing that is based on our legitimate interest;

Right to rectification – you can rectify inaccurate personal data or complete them;

Right to data portability – you can receive, under certain conditions, the personal data you have provided to us in a machine-readable format or request that such data be transferred to another controller;

The right to complain – you can complain about the way personal data is processed with the National Supervisory Authority for Personal Data Processing;

Right to withdraw consent – in cases where processing is based on your consent, you can withdraw it at any time. Withdrawal of consent will only have an effect for the future, processing carried out before withdrawal will remain valid;

Additional rights related to automated decisions: you can request and obtain human intervention concerning the processing, you can express your point of view on it and you can challenge the decision.

Further information

If some of the data about you is incorrect, please inform us as soon as possible.

Your refusal makes it impossible for us to deliver the products to you.

By accepting the terms and conditions, you give the Seller – Carfin S.A. – the right to collect and process this personal data, you have taken note of all the information presented and you agree to it.