Privacy Policy – Sanco Grup

Sanco Grup SRL respects your privacy and the protection of your personal data. This Privacy Policy explains what personal data we may process when you use sancogrup.ro, place an order, request information or interact with our services, the purposes for which the data is used and your rights regarding your personal data.

Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation.

1. Who is the data controller?

The controller of your personal data is:

Sanco Grup SRL
Trade Register No.: J2003002323403
VAT No.: RO15215318
Registered office: 15 Nerva Traian Street, Building M69, Apartment 50, District 3, Bucharest, Romania
Data protection e-mail: dpo@sancogrup.ro
General e-mail: office@sancogrup.ro
Phone: +40 752 645 008

2. What personal data may we process?

Depending on how you use the Sanco Grup online store and services, we may process the following categories of personal data:

• identification and contact details, such as first name, last name, e-mail address and telephone number;
• billing and delivery information, including your address and, where applicable, information required to issue fiscal documents;
• information regarding orders, purchased products, returns, warranties and the history of our commercial relationship;
• payment-related information and data required to confirm transactions, without Sanco Grup storing the complete details of the bank card used for online payment;
• information provided through contact forms, quotation requests, messages or other communications sent to Sanco Grup;
• technical data and information regarding website usage, such as IP address, device type, browser and information generated through cookies or similar technologies, under the conditions described in our dedicated Cookie Policy.

3. For what purposes do we process personal data?

We may use personal data for the following purposes:

• creating and managing customer accounts;
• receiving, confirming and processing orders;
• issuing invoices and managing payments;
• preparing and delivering products;
• managing returns, warranties and complaints;
• responding to requests for information, quotations or assistance;
• complying with accounting, tax and other legal obligations;
• ensuring the security of the online store and preventing abusive or fraudulent use;
• analysing and improving the operation of the website and our services, where permitted by law;
• sending commercial communications and newsletters where there is a lawful basis for doing so.

4. What are the legal bases for processing?

Depending on the circumstances, the processing of personal data may be based on one or more of the following legal bases:

• performance of a contract or taking steps prior to entering into a contract – for example, to process an order or a request for quotation;
• compliance with a legal obligation – for example, to comply with tax, accounting or record-keeping obligations;
• Sanco Grup's legitimate interests – where processing is necessary for the operation, security and protection of our business, while respecting the rights and freedoms of data subjects;
• consent – where consent is required, for example for certain marketing communications or certain categories of cookies.

Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

5. Who may receive your personal data?

In order to conduct our business and provide our services, certain personal data may be shared, where necessary, with service providers and partners who assist us in operating the online store and fulfilling orders.

Depending on the circumstances, these may include:

• courier and transport service providers;
• payment processors and financial institutions;
• e-commerce platform, IT, hosting, security and maintenance service providers;
• communication, newsletter and marketing service providers;
• website analytics and performance measurement service providers, subject to applicable cookie settings and consent;
• service providers involved in collecting and managing customer reviews, where such services are used;
• consultants, accountants, auditors or other professional service providers, where necessary;
• public authorities and institutions where disclosure of the data is required by law.

We only disclose the personal data necessary for the purpose for which the respective service provider or partner is involved.

6. Transfers of personal data outside the European Economic Area

Certain service providers used for the operation of the online store, analytics, communications or marketing may process personal data through infrastructure located outside the European Economic Area.

Where such a transfer takes place, the mechanisms and safeguards required by applicable data protection legislation are used, as appropriate.

7. How long do we retain personal data?

Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

Retention periods may vary depending on the type of data and the purpose of processing. For example, data relating to orders, invoices and commercial documents may be retained for the periods required by tax, accounting or other applicable legal requirements.

Data used for marketing communications is processed until consent is withdrawn or the right to object is exercised, as applicable, subject to any relevant legal obligations.

8. Newsletter and commercial communications

If you have subscribed to our newsletter or chosen to receive commercial communications, we may use your contact details to send you information about Sanco Grup products, services, news and offers, in accordance with applicable law.

You may unsubscribe at any time by using the unsubscribe link provided in our commercial communications or by contacting us at office@sancogrup.ro.

9. Cookies and similar technologies

The online store may use cookies and similar technologies that are necessary for the operation of the website and, depending on your choices, technologies used for analytics, personalisation or marketing.

Information about the types of cookies used, their purposes and the options available for managing your consent is provided in the Cookie Policy available on sancogrup.ro.

10. Data security

Sanco Grup applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unauthorised disclosure, taking into account the nature of the data and the risks associated with its processing.

Access to personal data is limited to persons and service providers who require this information in order to perform their duties or provide their services.

11. Your rights

Subject to the conditions provided by the GDPR, you may have the right to access your personal data, request rectification or erasure, restrict processing, object to processing, request data portability and withdraw your consent, where applicable.

For detailed information about these rights and how to exercise them, please refer to the dedicated Personal Data Protection – Your Rights page available on sancogrup.ro.

To exercise your rights regarding personal data, you can contact us at dpo@sancogrup.ro or office@sancogrup.ro.

If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or to seek a remedy before the competent courts.

12. Updates to this Privacy Policy

Sanco Grup may update this Privacy Policy where necessary to reflect legislative, technological or commercial changes or changes in the way personal data is processed.

The updated version will be published on this page.

13. Contact

For questions regarding this Privacy Policy or the way Sanco Grup processes personal data, you can contact us using the details below:

Sanco Grup SRL
Data protection e-mail: dpo@sancogrup.ro
General e-mail: office@sancogrup.ro
Phone: +40 752 645 008

Frequently Asked Questions (FAQ)

1. What personal data may Sanco Grup collect when I place an order?
We may process the data necessary to register and fulfil your order, such as your name, contact details, billing and delivery address and information relating to the products ordered and the transaction.

2. Does Sanco Grup store my bank card details?
Sanco Grup does not store the complete details of the card used for online payment in its online store. The information required to authorise the transaction is processed through the secure infrastructure of the payment processor.

3. How can I request access to, correction or deletion of my personal data?
You can send your request to dpo@sancogrup.ro or office@sancogrup.ro. Full information about your rights and how to exercise them is available on our dedicated Personal Data Protection page.