Informatii generale | Politica de cookies | Politica de confidentialitate | Termeni si conditii

We are paperbag.store.ro , and you can contact us anytime.

The website paperbag.store.ro is owned by KOSYB GROUP SRL, RO22754978, registered in Ilfov County, Balaceanca town, Izvorului Street No. 27.

In accordance with the GDPR, we are a personal data controller, and as such, we are legally responsible for their processing. For any questions or requests regarding the exercise of your rights regarding the processing of personal data, please contact us.

The following terms and conditions regarding the protection of personal data are designed to inform you, as a user of our website, about the processing of personal data and your rights concerning this processing, in accordance with the General Data Protection Regulation ("GDPR").

In this document, we will use several abbreviations as follows: UN = unauthenticated user UA = authenticated user U = User TCUPC = terms and conditions of use and privacy policy DEVICE = computer, mobile terminal, or any other equipment used to access the internet SITE = the aforementioned website referred to in this document DCP = personal data GDPR = General Data Protection Regulation

We always and fundamentally respect your right to privacy, and our website is designed to uphold this right and keep your data safe.

In order for you to benefit from our products/services, and for the products and services we offer, including online, to function properly for you, we are required to collect some personal data. We assure you that all data we collect are kept to the minimum necessary and based on legal grounds.

By using any of the services and products offered by SITE and/or registering an account, you agree to read and understand our privacy policy and cookies, as follows.

To ensure that everything is easy to read, we have included a title and a brief simple explanation for each aspect. The details, as required by law, are also available below.

Principles of our privacy policy We request your consent for using cookies.

We request your consent for completing forms.

We provide you with control over personal data for viewing, editing, and deleting.

We protect forms from abuse with CAPTCHA.

We collect only the minimum necessary data.

We use secure passwords.

Newsletter registration is done with double opt-in.

Account deletion is confirmed with double confirmation.

Deletion of cookies To provide you with a pleasant browsing experience on our website, we use small files called cookies, which we place on your computers. These cookies retain, among other things, the fact that you accessed our website to provide you with a smoother browsing experience (e.g., not asking you to log in manually on each visit); some of these cookies belong to third parties (Google, Facebook) and provide us with anonymized statistical data on how our website is used, so that we can improve it.

Without cookies, for example, the website might bother you with dialogue windows with the same message on every visit, ask for your login details on each access, and not remember what you put in your shopping cart a day before. You can delete all data from our cookies right now by using the individual cookie deletion function found in your browser's options list.

The data we process when you use our services A few examples:

• We place cookies on your device.
• We need your contact details when you contact us so we can respond.
• We need your full home or work address for delivering our products.

Why we process this data: We process this data for the legitimate purpose of fulfilling our business objectives, including:

• Providing the services/products you want.
• Conducting statistics and measurements to help us understand how we can improve the quality of our services/products.
• Informing users/customers (buyers) about their account status on our website.
• Informing users/customers about the progress and status of their orders.
• Evaluating the offered products and services.
• Carrying out commercial, marketing, advertising, media, administrative, development, market research, statistical, sales tracking and monitoring, and consumer behavior activities.
• Improving the quality of our services/products and developing new ones.
• Facilitating your access to our services/products.
• Providing you with information about services/products that may interest you, as well as promotions and special offers.
• Ensuring enhanced security and protecting you against possible cyberattacks, fraud, and abuse.

According to the current laws for the protection of individuals with regard to the processing of personal data and the free movement of such data, we are obligated to safely administer and use only for the specified purposes the personal data you provide about yourself.

How we process personal data We process personal data collected through forms on the website for creating a User account and concluding the distance contract, the possibility of performing the distance contract, as well as data collected for advertising and marketing purposes, customer relations, and data analysis, such as market research, customer opinion surveys, customer analysis, customer segmentation, and customer profiling, to determine user's buying behavior and activity on the website, repeated purchase of certain goods, and purchase data.

For the above-mentioned purposes, User data will be stored in our database. This processing is based on Art. 6(1)(f) GDPR. We may contact you for these purposes by email, SMS, phone, mail, social media, or Google channels.

We may also process data about the User's behavior regarding the use of the website, including but not limited to session data, video session recordings, browsing behavior, location data, demographic data, Internet Protocol (IP) address, where available, operating system, and device browser type. These are statistical data about the actions and browsing patterns of visitors to our website; they do not identify any individual and are collected to improve and personalize the website and for communication and marketing purposes, including behavioral advertising based on cookies (more details about cookies). This processing is based on Art. 6(1)(a), (b), (c), (f) GDPR.

Data recipients To achieve the purposes mentioned above in point 2, we use service providers or processors, as defined in Article 28 of the GDPR, such as hosting providers, platforms that assist in completing an order made through the website, for processing the online transaction initiated by the User, where applicable, and for processing, invoicing, and delivering the User's order, providers of services for monitoring the User's activity on the website or providers of services for sending emails and SMS, phone contact, or communication of advertising and marketing campaigns. These may be external providers of services.

By contractual regulations, we ensure that these service providers process personal data in accordance with European data protection laws to guarantee a high level of data protection, even if personal data is transferred to a country where a different level of data protection is commonly used, and for which there is no adequacy decision from the EU Commission.

No other transfers of personal data are made to other recipients unless we are legally obliged to do so. For more information about the adequate protection of international data transfers, please contact us.

Providing data and duration of their retention Providing certain personal data is mandatory.

For example, to be able to conclude a distance contract and process the registration of a User account, we require your name, email, password, phone, billing information, and delivery details (address, city, county), as well as the chosen method of payment for the ordered products.

In case the User, having reached the age of 18, expresses the option to subscribe to our newsletter, the following data provided by the User through various forms on the website will be collected and processed: email address.

A series of other personal data collected by the Professional may be voluntarily provided by the User. The refusal to provide this personal data will not have any consequences on the User's trading decisions.

The User's personal data will be stored until the termination of the contractual relationship with us or at the User's request, except where we have a legal obligation to continue storing the personal data until the end of the legal obligation. The storage and transfer of the User's personal data to public authorities for the purpose of fulfilling a legal obligation are legally based on Art. 6, paragraph 1, sentence 1, letter c), GDPR.

For more details, please consult the corresponding section below.

User Rights As a data subject, the User can contact us at any time and free of charge, with a notification, using the contact details mentioned above in point 1, in order to exercise their rights in accordance with GDPR. These rights are as follows:

The right to receive information about the processing of data and a copy of the processed data (right of access, Article 15 GDPR).

The right to request the rectification of inaccurate data or the completion of incomplete data (right of access, Article 16 GDPR).

The right to request the erasure of personal data and, if personal data has been made public, the transmission of information regarding the request for erasure to other controllers (right to erasure, Article 17 GDPR).

The right to request the restriction of data processing (right to restriction of processing, Article 18 GDPR).

The right to receive personal data concerning the data subject in a structured, commonly used, and machine-readable format and to request the transmission of this data to another controller (right to data portability, Article 20 GDPR).

The right to object to data processing with the intention of ceasing the processing (right to object, Article 21 GDPR).

The right to withdraw consent given in order to stop processing based on your consent. The withdrawal will not affect the lawfulness of the processing based on the consent given before the withdrawal (right to withdraw consent, Article 7 GDPR).

The right to lodge a complaint with a supervisory authority if the User reasonably believes that the processing of personal data has been carried out by the Professional in violation of the GDPR (right to lodge a complaint with a supervisory authority, Article 77 GDPR).

Withdrawing consent regarding data processing, requesting the cessation or restriction of data processing, or requesting the deletion of personal data necessary to fulfill contractual obligations and respect rights resulting from the distance contract exempts us from fulfilling these obligations.

Moreover, exercising these rights regarding the processing of personal data cannot be done in relation to compliance with our legal obligations.

The User can use the tools made available to them, according to the details below, to exercise their rights regarding the data referred to by these tools.

Data Download, Data Access

If you have an account, you can download all your personal data we hold in CSV format from the account administration area, which opens with Microsoft Excel, Libre Office, or Open Office. If you do not have an account, you can contact us to request this data, and you will receive it within a maximum of 30 days.

Account Deletion

You can completely delete your account from its administration area. More details can be found below in the corresponding section.

Cookies

Cookie settings can be directly managed by you through the browser you are using, and you can choose to disable or refuse them. All current browsers offer the possibility to change cookie settings. These settings are usually found in the "options" or "preferences" menu of your browser.

Disabling and refusing to receive cookies may make certain sections/pages impractical or difficult to visit and use. Also, refusing to accept cookies does not mean that you will no longer receive/see online advertising.

For settings related to third-party cookies and for more information on behavioral online advertising (delivered based on user interests) and online privacy, we recommend using the website www.youronlinechoices.com/ro, following ANSPDPC's recommendation.

For more details about our cookies, please read the corresponding section below.

Monitoring your visit through Google Analytics

You have the option to use the tool developed by the Google platform to stop monitoring behavior during an online session: use the Google Analytics Opt-out Browser Add-on accessible here: https://tools.google.com/dlpage/gaoptout, following Google's recommendation.

Monitoring Facebook

You have the option to use the tool provided by the Facebook platform here: https://www.facebook.com/help/568137493302217 and use the instructions for unsubscribing from your browser and device.

Other information provided by the Facebook platform regarding online advertising based on Facebook's interest categories is available here: https://www.facebook.com/help/164968693837950?helpref=faq_content.

Newsletters

You can unsubscribe from our newsletter at any time by clicking on the link at the bottom of each newsletter sent by us.

Mentions

1. The use of the tools presented above will have effects from the moment the options are activated and will not have retroactive effects.

2. Deleting cookies, accessing a web page in incognito/private mode, or using another browser after activating the options presented above will allow the resumption of online session monitoring.

Your data is safe with us We do not provide your data to third parties except as provided by law, to entities empowered under contracts made for the optimal fulfillment of our activity, and with respect to your rights.

Under no circumstances do we sell your data, either individually or as part of a database.

We provide you with additional protection Our website is hosted in ISO 27001 secure conditions and uses SSL technologies, which ensure the encryption of forms for added protection. Passwords are hidden and represented by symbols that cannot be read over your shoulder.

What else you need to know By completing your data in the account creation and/or Order form, you understand that, in the legitimate interest of fulfilling our activity and under legal grounds, which require the issuance of documents with legal and fiscal value, your personal data will be included in our database.

Therefore, you should know that, safely and without causing you any harm, this personal data is stored, used, and processed by us, our affiliates, and their collaborators for carrying out various activities for the purposes mentioned above. In cases where we work with collaborators and affiliates outside the country or outside the European Union, this personal data may be transferred to them (for example, to use a newsletter sending service belonging to a company from the United States, it is necessary to enter your emails into their system).

In any case, we will always seek partnerships with companies that know and respect European data protection.

Important! You are in control of how your data is used.

For example, when you accessed our website, you accepted the fact that we use cookies. However, if you change your mind, you can manage cookies in your browser and refuse to accept them on your computer at a later access.

You can connect to your account at any time if you wish to see the data you have provided to us, and you can update, download, or delete your account or request us to perform these operations for you. You can request your data from us at any time, and you will receive it within a maximum of 30 days, in an easily readable format with common programs such as Microsoft Office, Acrobat Reader, or others.

Your rights provided by law are guaranteed, including the right to be informed, the right to access data, the right to intervene, the right to object, the right not to be subject to individual decisions, the right to appeal to the courts in case of violation of the rights guaranteed by the laws in force for the protection of individuals regarding the processing of personal data and the free movement of such data. Additionally, you have the right to object to the processing of your personal data and to request the total or partial deletion of such data (the right to be forgotten).

In conclusion: The website can notify users/customers about current offers through the weekly newsletter and can send greetings, gift coupons, or other special messages.

The website does not promote SPAM.

Any user/customer who has explicitly provided their email address on our website can choose to delete it from our database. The information you provide will be used for the purpose for which it was provided, to administer, support, and evaluate our services and prevent security breaches, violations of the law, and our contractual terms.

Additionally, the website may provide your personal data to other companies with which it is in a partnership, but only to companies that guarantee the protection of personal data in accordance with the European legislation in force, or based on a commitment of confidentiality from them, guaranteeing that this personal information is kept safe and that the provision of this personal information complies with the legislation in force, as follows: marketing service providers, courier services, payment/banking services, telemarketing, or other services, other companies with which we can develop joint programs to offer our products and services, insurers.

Your personal information may also be provided to the Prosecutor's Office, Police, Courts, and other authorized state authorities, based on and within the limits of legal provisions and as a result of express requests.

Informatii generale | Politica de cookies | Politica de confidentialitate | Termeni si conditii

Informatii generale | Politica de cookies | Politica de confidentialitate | Termeni si conditii

Contact Form

The contact form collects the following Personal Data (DPD):

• Name or pseudonym
• Email address
• Phone number (optional)

All this data is necessary to ensure effective communication with the user who has filled out the form.

The form does not retain the user's ID, not even for User Accounts, so no connection can be established between the form submitter and other DPD provided by the User.

The form requires explicit consent for the Terms and Conditions and retains the date and time when the consent was given.

The form is protected with a Captcha system.

Since the collected data is limited and not connected through a unique ID for any visitor, automatic viewing or deletion cannot be ensured, even for User Accounts.

Users who wish to view or delete their data are requested to send a request to the email address of the website administrator, provided in the form, to prove that they are the data owners.

Deletion will be performed through encryption with a public key, and decryption will require the use of a private key, which is not directly accessible to the data controller and is not stored on the server for security reasons. The encryption of the name and email address is necessary to demonstrate that consent to the Terms and Conditions was given in relation to that name and email address.

Comment Forms Depending on the version and type of platform, there may be two types of comment forms, one for pages/articles and another for products. Both comply with the following specifications.

The form collects the following Personal Data (DPD):

• Name or pseudonym
• Email address

In the case of User Accounts, these two fields are auto-filled with the ones from the user's profile but can be modified as desired without saving the data in the profile.

All this data is necessary to ensure effective communication with the user who has filled out the form.

The form does not retain the user's ID, not even for User Accounts, so no connection can be established between the form submitter and other DPD provided by the User.

The form requires explicit consent for the Terms and Conditions and retains the date and time when the consent was given.

The form is protected with a Captcha system for non-logged-in users. For User Accounts, since logging in already provides sufficient protection, Captcha is not used.

Since the collected data is limited and not connected through a unique ID for any visitor, automatic viewing or deletion cannot be ensured, even for User Accounts.

Users who wish to view or delete their data are requested to send a request to the email address of the website administrator, provided in the form, to prove that they are the data owners.

Deletion will be performed through encryption with a public key, and decryption will require the use of a private key, which is not directly accessible to the data controller and is not stored on the server for security reasons. The encryption of the name and email address is necessary to demonstrate that consent to the Terms and Conditions was given in relation to that name and email address.

User Account The User Account may contain multiple components depending on the version. The compatible specifications and policies with the current implementation apply.

New Account Form The new account form is designed to request minimal Personal Data (DPD) that is absolutely necessary for the secure identification and differentiation of users, as well as for functions such as password reset or others necessary for the normal functioning of the account.

The new account form requests the following data:

• User: Generally, a pseudonym that may not be related to the user's real data; it is requested only if authentication is based on the username.
• Email address
• First name and last name
• Phone number (optional)
• Password
• Password confirmation

The form requires explicit consent for the Terms and Conditions and retains the date and time when the consent was given.

The contact form is protected with JavaScript and password verification through Ajax, which excludes robotized access and makes Captcha unnecessary.

For increased security, the password cannot be set unless it contains at least one uppercase letter, one lowercase letter, one digit, and one special character.

My Account - Form and Annexes The My Account interface allows the modification of the following data:

• Email address
• First name
• Last name
• Phone number (optional)

These are the minimum data required for defining the account.

Additionally, it displays the delivery address and billing information as they were saved during the placement of the last order.

Due to the complexity of defining preferences for payment, delivery, and billing, along with the fact that data can be modified when placing an order, and considering that these data can be deleted, the effort of integration would be disproportionate to the utility of editing delivery and billing data in the absence of an order. Thus, these data cannot be directly edited outside the order form.

Additionally, the possibility of downloading editable and/or viewable data in previous situations is ensured.

Moreover, the possibility of deleting delivery and billing data without affecting the account is provided.

As a final option, to ensure full control and transparency over data, the possibility of deleting the account is provided.

In the case of account deletion, the name and email address are encrypted using a public key, along with the date, the consent for processing personal data, and the date of account deletion. For decryption, a private key is required, which is not directly accessible to the data controller and is not stored on the server for security reasons. The encryption of the name and email address is necessary to demonstrate that consent to the Terms and Conditions was given in relation to that name and email address.

Password Reset

In case of password loss, the reset is performed under special security conditions:

• The desired new password is entered in the form, without it becoming active.
• An email with a unique confirmation code is sent to the specified email address or the email address associated with the user if authentication is based on the username.
• The requested password becomes active only after accessing the verification email.

The system used ensures increased security conditions that comply with GDPR specifications.

Password Modification from the Account Password modification can only be done with confirmation of the previous password, guaranteeing that the only user who can modify the password is the account holder.

For increased security, the new password cannot be set unless it contains at least one uppercase letter, one lowercase letter, one digit, and one special character.

Shopping Cart The shopping cart consists of 3 steps:

1. The actual cart, consisting of: product list, quantity ordered, unit price, subtotal, total.
2. An intermediate step consisting of login/new account/order without an account.
3. Delivery, payment, and billing data.

In step 1, no Personal Data (DPD) is collected.

In step 2, Personal Data is collected only if a new account is created, but the form is the same as in the case of the "New Account Form" (please read the details above).

In step 3, a minimal amount of Personal Data (DPD) is collected as follows:

1. Review of name, first name, email address, and phone number – all of which are absolutely necessary for order delivery. In the case of orders without an account, this data is entered.

2. Delivery method – does not constitute Personal Data, but depending on the delivery method, further data may be collected.

3. Delivery address: county, locality, street address – these are the minimum pieces of information required for order delivery; in the case of pick-up from the headquarters, this data is not requested.

4. Payment method – does not constitute Personal Data.

5. Billing method: individual or legal entity – for individuals, no additional billing data is collected; for legal entities, no DPD is collected.

6. Billing address: county, locality, street address – collected only if the billing address differs from the delivery address or if the delivery address was not collected earlier.

7. Order preferences – do not constitute Personal Data, do not form part of the profile, are optional, and are considered necessary for order delivery when completed.

In the case of placing an order without creating an account, it is mandatory to confirm agreement with the Terms and Conditions and Privacy Policy (TCUPC).

The contact form is protected through JavaScript and the step-by-step generation of the form via Ajax, which ensures protection against automated access and makes the use of Captcha unnecessary.

Physical Security Measures to Ensure Privacy Policies Information security of the server, in accordance with ISO 9001 and 27001 quality standards.

Physical security of the server is ensured through a biometric access control system, video monitoring, motion detectors, etc.

Exclusive access to the site through SSL (Secure Sockets Layer) encryption.

Secure MD5 hashed passwords.

Protection against "Brute force" attacks – after 3 unsuccessful login attempts from the same IP, Captcha is added to the form.

Final Mentions: For other requests regarding the exercise of rights to withdraw consent for data processing, cessation or restriction of data processing, or deletion of Personal Data, please contact us.

Due to possible changes in legislation, a modification of these data protection notifications may become necessary. In this case, we will inform you of such modifications. If the changes affect processing based on the User's consent, we will request new consent if necessary.

Informatii generale | Politica de cookies | Politica de confidentialitate | Termeni si conditii

The use, including visiting and purchasing products from the website paperbag.store.ro , implies the acceptance of the terms and conditions detailed below. pungi-hartie.ro reserves the right to make any modifications to these provisions, as well as any modifications to the website paperbag.store.ro, its structure, or any other changes that could affect the site, without any prior notification to users in this regard. pungi-hartie.ro will not be held responsible for any errors that may occur on the site for any reason, including due to modifications, settings, upgrades, etc.

Electronic Communications

By accessing the website paperbag.store.ro, using, visiting, purchasing products, or sending emails addressed to pungi-hartie.ro, communication is conducted electronically, and thus the user consents to receive notifications from pungi-hartie.ro in an electronic manner, including communications via email or announcements on the site only in the case of subscribing to the Newsletter.

Copyright

The entire content of paperbag.store.ro, including the website's design, texts, images, graphics, programs, web graphics, or any other data, is the property of pungi-hartie.ro and/or its associates/partners/suppliers and is protected under the Copyright Law and laws regarding intellectual and industrial property rights. Any use without the written consent of pungi-hartie.ro is punishable according to the applicable laws.

Access to the information contained on the website

By using, visiting, or purchasing products from the website paperbag.store.ro, the user agrees to the following terms and conditions. paperbag.store.ro grants the user limited access, for personal interest only, to this website and does not confer the right to download, modify, reproduce, copy partially or entirely the website, or exploit it in any other way, for commercial purposes or contrary to the interests of paperbag.store.ro, without its prior written consent.

Personal Data

On the website paperbag.store.ro, the user is responsible for the accuracy of the data provided during the account creation process and for all activities that occur through accessing the account and personal password. paperbag.store.ro cannot be held responsible for any errors resulting from the user's negligence regarding the security and confidentiality of their account or password.

The user's personal data will only be used by paperbag.store.ro for the declared purpose of this website: the information from the registration account, as well as the data from the order form, will be used solely to confirm orders and send the ordered products to the user. Information about possible promotions, announcements, etc. will only be transmitted with the prior consent of the customer through subscribing to the Newsletter.

Information Security

paperbag.store.ro guarantees the security and confidentiality of the data hosted and transmitted through its computer system, but does not assume responsibility for information losses caused by any software malfunctions or errors with which the website is designed and hosted. Furthermore,paperbag.store.ro is not responsible for any failures that endanger the security of the server hosting the website.

The information provided for placing an order is used strictly for processing and shipping the products. The personal information of individuals, such as NAME, SURNAME, CNP (Personal Identification Number), ADDRESS, is necessary for issuing fiscal invoices. All this information is reported monthly to ANAF (National Agency for Fiscal Administration) according to the applicable legislation. The delivery address and contact phone number are transmitted to the courier company responsible for the delivery. By placing the order, the buyer agrees to these pieces of information being transmitted to ANAF and the courier company. The provided email address will only be used to inform you about the status of your order.

Product Responsibilities

paperbag.store.ro does not guarantee that the product descriptions or any other content on the website are free of errors or complete and objective. Additionally, the images presented on the site are for informational purposes only, and the actual delivered products may differ in terms of color, appearance, etc. paperbag.store.ro does not guarantee the availability of the displayed products in stock. The maximum value of paperbag.store.ro's obligations towards any customer, in case of non-delivery or improper delivery of purchased products, is the value of the sums collected by paperbag.store.ro from that customer. In case the prices or other product details have been displayed incorrectly, including due to input errors in the database, paperbag.store.ro reserves the right to cancel the delivery of that product and inform the customer as soon as possible about the error, if the delivery has not been made yet. Products (where applicable) are accompanied by manufacturers' warranty certificates. pungi-hartie.ro cannot be held responsible for any discrepancies or deficiencies regarding the products, their quality, or any other aspects concerning these products. Any complaint will be brought to the attention of pungi-hartie.ro within 24 hours of receiving the products, and it will be transmitted to the supplier of the respective products for resolution.

Limitations of Liability

paperbag.store.ro will not be held responsible and does not guarantee expressly or implicitly, in any way, for the operation of the website, the information or content of the website, the materials, or the products on the site. pungi-hartie.ro is not responsible for any damages of any kind, including but not limited to any direct, indirect, or incidental damages.

Disputes

Any conflicts between paperbag.store.ro and customers will attempt to be resolved amicably through understanding between the two parties. If this is not possible, the Romanian legal provisions in this field will apply, and the resolution of disputes falls under the competence of Romanian courts.

Pricing Policy

The prices of the products are those displayed for each product. paperbag.store.ro may conduct any promotional campaigns regarding the products displayed on the site, under conditions entirely established by paperbag.store.ro.

Informatii generale | Politica de cookies | Politica de confidentialitate | Termeni si conditii