Privacy Policy
Information on the processing of personal data
In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, MBA JEWELRY S.R.L. (“MBA JEWELRY”) is required to manage the personal data you provide to us securely and only for the specified purposes.
Personal data is processed on the basis of your consent, the need to perform a contract, or other legal grounds provided by Regulation 2016/679 (GDPR).
Changes to this document
This information on the processing of personal data is updated periodically; any new changes will be published on our website www.mbajewelry.ro.
Last updated: December 2024
How to contact us
Your opinion matters to us. If you have any questions about the processing of personal data, you can send your request by email to contact@mbajewelry.ro or by post or courier to Bd. Timisoara 26, Plaza Mall, 1st floor, Bucharest, for the attention of the data protection officer.
Security measures
The website mbajewelry.ro uses security measures against the loss, alteration or misuse of information under its control. MBA JEWELRY will make every effort and take all necessary measures against the loss of information caused by software errors.
MBA JEWELRY may contain links to other websites and is not responsible for their privacy policies. We recommend that you first review the legal terms and other information regarding the collection of personal data. The practices described below apply only to information collected on mbajewelry.ro.
Online payment data
For online card payments, data is processed through authorised payment processors. mbajewelry.ro does not store information about your card.
By entering your details in the account creation and/or order form, you agree that your personal data will be included in the database of MBA JEWELRY S.R.L. and you give your express and unequivocal consent for all such personal data to be stored, used and processed, without territorial or time limitation, by MBA JEWELRY S.R.L., its affiliates and partners for commercial, promotional, marketing, advertising, administrative, development, market research, statistical, sales tracking and consumer behaviour monitoring purposes.
Your rights
Following any consent given, you have the right at any time to withdraw your previously expressed consent and change your options.
Purpose of data collection
We collect your data for the following purposes:
- Marketing (including direct marketing)
- Providing the services or products presented on the website
- Storing and processing information to improve our relationship with users
- Market research and statistics
- Monitoring sales and consumer behaviour
- Evaluating the products and services offered
MBA JEWELRY may notify users/customers of current offers by newsletter and may send greetings, gift vouchers or other special messages. MBA JEWELRY does not promote SPAM.
MBA JEWELRY S.R.L. may share your personal data with other companies with which it has partnerships, but only under a confidentiality undertaking on their part.
Your personal information may also be provided to the Public Prosecutor's Office, the Police, the courts and other competent state authorities, on the basis and within the limits of the law and following expressly formulated requests.
Rights granted by law
You have the following rights guaranteed by law:
- Right to information: You may request information about your personal data at any time.
- Right of access: You have the right to request a copy of the personal data MBA JEWELRY holds about you.
- Right to rectification: You have the right to correct the data held about you.
- Right to restrict processing: In certain circumstances, you have the right to ask us to restrict the processing of your data.
- Right to data portability: You have the right to take with you the data you have provided to us.
- Right to object: In certain circumstances, you have the right to object to the processing of your data.
- Right to erasure: In certain circumstances, you have the right to ask us to delete your data.
Any of your rights may be exercised by written request (email, fax, post).
Transaction security
The company recognises the importance of complying with all legal procedures relating to the security of personal data and electronic transactions, and has taken all necessary measures to provide the highest possible level of security. All information relating to users' personal data is treated as confidential.
Transaction confidentiality
All information provided by the user is confidential, and the company takes all necessary measures to ensure it is used only to the extent considered necessary in the context of the services offered. Only authorised employees have access to transaction information, and only when absolutely necessary.
Secure payment solutions
The products/services on this website are sold through online payment solutions provided by EuroPayment Services, to eliminate the risk of your data falling into the hands of, and being misused by, third parties.
Any attempt to access another user's personal data, modify the content of the website or affect the performance of the server hosting the website will be considered an attempt to defraud the website and will trigger criminal proceedings against those responsible.
Data security policy
When accessing the website and using the services offered, only in cases where a “username” is required, you agree to provide true, accurate and complete information about yourself as requested in the user registration form.
If the information is untrue, inaccurate or incomplete, MBA JEWELRY reserves the right to suspend or close your account without prior notice. Website users can view and change their personal data at any time if it has changed.
In accordance with Order no. 52 of 18 April 2002 of the Romanian Ombudsman, MBA JEWELRY complies with the minimum security requirements for the processing of personal data.
a) User identification and authentication
- Users must identify themselves to access personal data.
- Identification can be done by several methods: identification code, barcode card, smart card, biometric fingerprint.
- Passwords must be changed periodically and kept confidential.
b) Type of access
- Users access only the data needed to perform their duties.
- The application keeps a log of activities.
- The log retains information for at least 2 years.
c) Data collection
- Data is collected only from data subjects, for a specific and lawful purpose.
- Data is collected through online forms.
- The online form contains all the required legal information.
d) Backups
- Backups are made monthly.
- Backups are stored in secure locations.
- Backups are checked for restoration.
e) IT systems
- IT systems are protected by security measures (antivirus, firewall, etc.)
- Access to IT systems is restricted.
- IT systems are continuously monitored.
By using our website, you accept our privacy policy.
