Privacy Policy
Personal Data Processing Policy
- Definitions
“Personal data” refers to any information that relates to an identified or identifiable natural person (“data subject”). An identifiable person is one who can be identified, directly or indirectly, by reference to identifiers such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
“Processing” refers to any operation or set of operations performed on personal data, whether by automated or manual means. This includes, but is not limited to, the collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or making available, alignment or combination, restriction, erasure, or destruction.
“Controller” refers to TYBET OKO S.R.L., headquartered at Str. Scorpionului nr. 8, Loc. Șindrilita, Jud. Ilfov, registered with the Bucharest Trade Register under no. J2020002654230, tax identification number RO41387150, email: oko@tybet.ro.
- Purpose of data processing
We process personal data for the following purposes:
- Customer registration and order management
- Sending email notifications to confirm orders
- Providing customer support and benefits for registered users
- Processing orders, including acceptance, validation, shipping, and invoicing
- Handling order cancellations and issues related to purchased goods or services
- Processing product returns in accordance with legal requirements
- Refunding product costs as per legal regulations
- Sharing information about TYBET OKO S.R.L.’s products or services
- Periodically updating customers on special offers and services provided by TYBET OKO S.R.L.
- Managing promotional campaigns and contests, including the notification of winners
- Investigating, preventing, or addressing illegal activities and/or violations of our Terms and Conditions
- Conducting financial and accounting activities within TYBET OKO S.R.L.
- Meeting legal obligations related to TYBET OKO S.R.L.’s business operations
- Supporting internal statistical analysis within TYBET OKO S.R.L.
- Data recipients
We may share personal data with the following categories of recipients:
a) Public authorities or institutions in Romania or abroad, as required by law
b) Courts or arbitration bodies in Romania or abroad, as required by law
c) Employees, collaborators, and representatives of TYBET OKO S.R.L., both in Romania and abroad
d) Courier service providers
e) Payment and banking service providers
f) IT service providers
g) Other companies with which we may jointly develop programs to market our goods and services
- Estimated duration of data processing
a) TYBET OKO S.R.L. will process personal data for the time necessary to fulfill the purposes outlined in Section 2, and for an additional period of 10 years for internal statistical purposes, unless a different duration is mandated by law. In such cases, the legally specified period will apply.
b) Data processing may include any legally permitted methods, such as collection, storage, consultation, use, disclosure, restriction, erasure, or destruction.
- Transfer of personal data outside Romania
Personal data processed under this policy will not be transferred to a country outside the European Union (EU) or the European Economic Area (EEA) without the prior written consent of the data subject. If personal data is transferred outside the EU or EEA, appropriate safeguards will be applied to protect the data in accordance with applicable legal standards. Unless otherwise agreed, such transfers will be based on the European Union’s standard contractual clauses for personal data transfers.
- Data subject rights
In accordance with applicable data protection laws, data subjects are entitled to the following rights:
a) Right to information: Data subjects have the right to be informed about TYBET OKO S.R.L.’s identity, the purposes for which their data is processed, the recipients or categories of recipients of their data, and their rights under applicable law.
b) Right of access: Data subjects may request confirmation from TYBET OKO S.R.L. as to whether or not their personal data is being processed. This right can be exercised by sending a signed and dated written request to TYBET OKO S.R.L.’s headquarters or the email address listed in the preamble.
c) Right to rectification: Data subjects have the right to request, free of charge, the correction, updating, restriction, blocking, erasure (“right to be forgotten”), or anonymization of unlawfully processed data, particularly incorrect or incomplete data. This right can be exercised through a written request specifying the data in question, the reasons for the request, and the desired actions.
d) Right to object: Data subjects may object to the processing of their personal data at any time, for legitimate reasons related to their specific situation, except in cases where such processing is required by law. Objections can be submitted in writing to TYBET OKO S.R.L., specifying the legitimate and justified reasons for the objection.
e) Right not to be subject to automated decisions: Data subjects have the right to request and obtain the withdrawal, cancellation, or reevaluation of any decision that has legal effects and was based solely on automated processing, including profiling.
f) Right to data portability: Data subjects have the right to request and receive their personal data processed by TYBET OKO S.R.L. and to transmit it to another data controller. This right can be exercised by submitting a signed and dated written request.
g) Right to file a complaint: Data subjects may file a complaint with the National Authority for the Supervision of Personal Data Processing (A.N.S.P.D.C.P.) if they believe their rights have been violated. Complaints can be sent to A.N.S.P.D.C.P. at B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, postal code 010336, by email at anspdcp@dataprotection.ro, or by fax at +40 318 059 602.
h) Right to judicial remedies: Data subjects also have the right to take their concerns to court. This right can be exercised through a written request to the competent judicial authority.
- Final provisions
a) TYBET OKO S.R.L. has implemented appropriate technical and organizational measures to ensure the security of personal data processing.
b) TYBET OKO S.R.L. will maintain a detailed record of personal data processing activities as required by applicable legal provisions.