Dates in English
RO

Privacy Policy

Hridaya Yoga Romania

About the site hridaya-yoga.ro

 

This site is owned by Asociația de Meditație și Yoga – a Romanian legal entity with its registered office at Str. Poarta Câmpului no. 408C, Sânpetru, Brașov County, fiscal code 5380598, hereinafter “Hridaya Yoga Romania”. The address of the website is: https://hridaya-yoga.ro  

 

The grounds for processing personal data

If you are a client of hridaya-yoga.ro, Hridaya Yoga Romania processes your personal data for the following purposes:

  • for carrying out the contractual relationship between you and Hridaya Yoga Romania, that is, for receiving, validating, sending and invoicing the orders placed on hridaya-yoga.ro, informing you about the status of your order, organizing the return of ordered products, and so on.

Ground: Processing your data for this purpose is based on the contract concluded between you and Hridaya Yoga Romania, defined in the Terms and Conditions. Providing your personal data is necessary. Refusing to provide the data may make it impossible to carry out the contractual relationship between you and Hridaya Yoga Romania.

  • for fulfilling the legal obligations incumbent on Hridaya Yoga Romania in the context of the activities carried out through hridaya-yoga.ro, including obligations in fiscal matters and in matters of archiving.

Ground: Processing your data for this purpose is necessary on the basis of legal obligations. Providing your data for this purpose is necessary. Refusing to provide the data may make it impossible for Hridaya Yoga Romania to comply with its legal obligations, and therefore impossible to offer you the services through hridaya-yoga.ro.

  • for marketing activities, that is, for sending, by means of distance communication (for example e-mail, web push messages), commercial communications about the products offered by Hridaya Yoga Romania through hridaya-yoga.ro.

Ground: Processing your data for this purpose is based on your consent, if you choose to give it. You can express your consent to the processing of data for this purpose by ticking the corresponding box when subscribing to the Hridaya Yoga Romania Newsletter, or after subscribing, in the Preferences section available at the end of every e-mail containing commercial communications. To unsubscribe from receiving such commercial communications you can use the option at the end of every e-mail containing commercial communications. In addition, you can unsubscribe through the Preferences section. In the case of web push notifications, the consent given can be withdrawn from the browser settings (for example Google Chrome). Providing your data for this purpose is voluntary. Refusing to give consent for the processing of your data for this purpose will have no negative consequences for you.

  • for carrying out various analyses and reports about how hridaya-yoga.ro works, the behavior of users on hridaya-yoga.ro, and the products purchased, mainly in order to improve the experience offered on hridaya-yoga.ro.

Ground: Processing your data for this purpose is based on the legitimate interest of Hridaya Yoga Romania in continuously improving the experience of clients on hridaya-yoga.ro. Providing your data for this purpose is voluntary. Refusing to provide the data for this purpose will have no negative consequences for you.

If you are a visitor of hridaya-yoga.ro, Hridaya Yoga Romania processes your personal data for the following purposes:

  • for marketing activities, that is, for sending, by means of distance communication (e-mail), commercial communications about the products and services offered by Hridaya Yoga Romania through hridaya-yoga.ro.

Ground: Processing your data for this purpose is based on your consent, if you choose to give it. You can express your consent to the processing of data for this purpose by ticking the corresponding box when subscribing to the Hridaya Yoga Romania Newsletter, or after subscribing, in the Preferences section available at the end of every e-mail containing commercial communications. To unsubscribe from receiving such commercial communications you can use the option at the end of every e-mail containing commercial communications. In addition, you can unsubscribe through the Preferences section. Providing your data for this purpose is voluntary. Refusing to give consent for the processing of your data for this purpose will have no negative consequences for you.

  • for resolving complaints and claims, and for monitoring traffic and improving the experience offered to you on hridaya-yoga.ro.

Ground: Processing your data for this purpose is based on the legitimate interest of Hridaya Yoga Romania in ensuring the correct functioning of hridaya-yoga.ro, as well as in continuously improving the experience of visitors to hridaya-yoga.ro, including by answering various questions or complaints. Providing your data for this purpose is voluntary. Refusing to provide the data for this purpose will have no negative consequences for you.

What types of personal data we collect and why we collect them

While you visit our site, we will track:

  • Products/sections you have viewed: we will use this in order to show you, for example, the products you have viewed recently
  • Location, IP address and browser type: we will use these for various purposes, such as estimating taxes and for delivery

We will also use cookies to track the contents of your basket while you browse our site. The cookie policy can be consulted here.

The information in your account

When you buy from us, we will ask you to provide information, including your name, billing address, delivery address, e-mail address, telephone number, preferred payment method and account information such as username and password. We will use this information for several purposes, such as:

  • Sending you information about your account and your order
  • Issuing invoices and delivering products through courier services
  • Answering your requests, including refunds and complaints
  • Preventing fraud
  • Setting up your personal account in our online shop and keeping it secure
  • Complying with all our legal obligations, such as calculating taxes
  • Improving our offerings for the shop
  • Sending you marketing messages, by e-mail or web push messages, if you choose to receive them

If you create an account, we will store your name, address, e-mail and telephone number, and the billing and delivery addresses, which will be used when completing future orders.

In general, we store information about you for as long as we need it for the purposes for which we collect and use it, and we do not keep it any longer unless we are legally obliged to. For example, we will store order information for 10 years, for fiscal and accounting purposes. This includes the name, e-mail address, telephone number, and billing and delivery addresses.

Social Login (secure sign-in with social accounts)

Hridaya Yoga Romania offers you the possibility of signing in to hridaya-yoga.ro without having to remember a username and password, by using accounts you already hold with social networks such as Facebook or Google, through the sign-in facilities of those accounts. When you choose to sign in with these services, the Hridaya Yoga Romania site may receive from them your first and last name, username, profile photograph (avatar) and, possibly, the locality associated with the account. This information is then associated with, and stored in, your account on hridaya-yoga.ro. If you wish us to delete your account, this information will be deleted as well. Hridaya Yoga Romania has no access to the accounts you use for signing in.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the site. All images you upload are publicly accessible.

Contact forms

We use the contact forms on the site to give you the possibility of sending us messages. We collect the information you send: name, e-mail, the subject of the message, and the order number (for forms sent in order to obtain our support regarding orders placed). The forms cannot be sent without the name and e-mail fields being completed, so that we can reply to you. The information you fill in is not stored on the site, but is sent by e-mail by the site software to us and, as a confirmation, to you. The forms use the Google reCAPTCHA anti-spam service. You can consult the Google privacy policy here.

Cookies

A cookie is a small piece of text created in the browser by the website you access. With its help, the website remembers information about your visit, for example your preferred language and other settings. In this way, your next visit can be simpler, and the site can be more useful to you. Cookies have an important role. Without them, using the internet would be a much more frustrating experience.

If you leave a comment on our site, you can choose to save your name, e-mail address and website in cookies. These are for your convenience, so that you do not have to fill them in again when you leave another comment. These cookies will last one year.

If you have an account and you sign in to this site, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is removed when you close your browser.

When you sign in, we will also set a few cookies to save your sign-in information and your on-screen display options. Sign-in cookies are kept for two days, and those for display options are kept for one year. If you select “Remember me”, your sign-in cookies will be kept for two weeks. If you sign out of your account, the sign-in cookies will be removed.

The contents of the shopping basket are also displayed and saved on the site using a unique cookie linked to your account.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the ID of the article you have just edited. It expires after 1 day.

In addition, we use cookies from our partners such as Google and Facebook in order to monitor the traffic of the site and to display advertisements on other sites using services such as Google Adwords or Facebook Ads.

For more details you can consult our cookie policy.

Embedded content from other websites

The pages and articles on this site may include embedded content (for example videos, images, articles, and so on). Embedded content from other websites behaves exactly as if the visitors had viewed another website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction with the embedded content if you have an account and are signed in to that website.

Analysis of user data

We use the Google Analytics and Facebook Pixel services in order to monitor the users of this site statistically. The data gathered through these services cannot be used to identify individuals, being pseudonymized by Hridaya Yoga Romania within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the General Data Protection Regulation).

The data collected through Google Analytics will be kept for 26 months from the date of collection.

The data gathered through the Google and Facebook services are:

  • the addresses of the hridaya-yoga.ro pages accessed and the exact time of access
  • the behavior of users on the site, including product orders and their value
  • the sites that referred users to our site (the site from which users arrived at the Hridaya Yoga Romania site)
  • data about the connection to the site, the hardware and software used, including browser, operating system, screen resolution, and the make and type of the devices used

Hridaya Yoga Romania uses the data collected by the Google Analytics and Facebook Pixel services in order to analyze statistically the behavior of users in relation to the site hridaya-yoga.ro, especially regarding the products purchased and their value, and in order to deliver personalized advertisements using the Google and Facebook services.

Hridaya Yoga Romania does not collect sensitive personal data, such as data about health.

Who we share your data with

In order to fulfil the purposes of processing, Hridaya Yoga Romania may disclose your data to Partners, to third persons or entities that support Hridaya Yoga Romania in offering products through hridaya-yoga.ro (for example courier companies, IT service providers), or to central/local public authorities, in the following cases, given as examples:

  • for administering hridaya-yoga.ro, including invoicing, delivery and payment;
  • in situations where this communication is necessary for awarding prizes or other benefits to clients, obtained as a result of their participation in various promotional campaigns organized by Hridaya Yoga Romania through hridaya-yoga.ro;
  • for maintaining, personalizing and improving hridaya-yoga.ro and the services carried out through it;
  • for carrying out data analysis, testing and research, monitoring usage and activity trends, developing safety features and authenticating users;
  • for sending commercial marketing communications, under the conditions and within the limits provided by law;
  • when the disclosure of personal data is provided for by law

The personal data provided to hridaya-yoga.ro may be transferred outside Romania, but only to states within the European Union.

For example, your personal data may be shared with:

  • SC NETOPIA SRL (Mobilpay, card payment processors)
  • Dynamic Parcel Distribution SA, Delivery Solutions SA (courier services)
  • The e-mail marketing service provider – MailerLite.com
  • an authorized accountant
  • fiscal bodies, institutions and authorities of the state, according to the law

How long we keep your data

If you leave a comment, the comment and its metadata are kept for an indefinite period. In this way we can recognize and approve automatically any following comments, instead of keeping them in a moderation queue. The same applies to reviews.

For users who register on our website, we also store the personal information they provide in their user profile. All users can see, edit or delete their personal information at any time (but they cannot change their username). The administrators of the website can also see and edit this information.

As a principle, Hridaya Yoga Romania will process your personal data for as long as is necessary to achieve the purposes of processing mentioned above.

Inactive accounts (accounts in which users have not signed in and have not placed any order) are kept for 2 years, after which they are deleted automatically.

If you are a client, we will process your data for the whole duration of the contractual relationship and afterwards according to the internal policies of Hridaya Yoga Romania, that is, for the period necessary to fulfil the legal obligations incumbent on Hridaya Yoga Romania (for example, in the case of supporting financial and accounting documents, for which the retention period provided by law is 10 years from the end of the financial year in which they were drawn up).

If you are a client and you exercise your option to delete your user account, Hridaya Yoga Romania will interpret this action as your choice to unsubscribe from receiving commercial communications through which we keep you informed about the products and services offered through hridaya-yoga.ro. Accordingly, if you choose to delete your user account, we will no longer send you e-mails of this kind. However, we wish to inform you that deleting the account will not automatically delete your personal data. If you request the deletion of the account, but there is at least one active order on that account, the request to delete the account can only be registered after the products have been delivered and the last active order completed. We mention that the billing and delivery data will be kept as supporting documents, according to the law, for 10 years.

If you withdraw your consent for the processing of data for marketing purposes, Hridaya Yoga Romania will stop processing your personal data for this purpose, without, however, affecting the processing carried out by Hridaya Yoga Romania on the basis of the consent you expressed before its withdrawal.

What rights you have over your data

If you have an account or have left comments on this website, you can ask to receive an export file with the personal data we hold about you, including all the data you have provided to us. You can also ask us to delete all the personal data we hold about you. This does not include the data we are obliged to keep for administrative, legal or security purposes. You also have the right of access to your personal data, you can ask for rectification, you can object to processing within the limits and conditions provided by law, and you can lodge complaints with the National Supervisory Authority for Personal Data Processing.

Who from our team has access

The members of our team have access to the information you give us. For example, both administrators and shop managers can access:

  • Information about orders, such as what was bought, when it was bought and where the purchases were sent, and
  • Information about clients, such as name, e-mail address, and billing and delivery information.

The members of our team have access to this information in order to help fulfil orders, process refunds, and offer you support.

Further information

For any further questions about the way personal data are processed, and in order to exercise the rights mentioned above, please write to us at: info@hridaya-yoga.ro

 

How we protect your data

Your data are transmitted over the internet using industry-standard SSL encryption (TLS 1.3). You can check this in the address bar of your browser. The site hridaya-yoga.ro also uses HTTP Strict Transport Security (HSTS Preload) technology, under which the site cannot be loaded by the browser without valid encryption.

The servers of Hridaya Yoga Romania are hosted by reputable providers in the European Union. The software run by the servers is installed using automated open-source deployment scripts that follow best practices in the field, including for security. Access to the servers is granted to a single person and takes place in encrypted form, through private keys. Any attempt at unauthorized access to the servers is recorded in the corresponding logs. The server logs are monitored using dedicated software.

hridaya-yoga.ro runs on the most widely used open-source CMS in the world — WordPress. Hridaya Yoga Romania makes sure that this software and the additional modules used are kept up to date. Hridaya Yoga Romania regularly makes secure backups of the site, the database and the corresponding servers.

The administrator accounts of hridaya-yoga.ro are limited and are based on secure passwords.

The accounts of hridaya-yoga.ro clients are created with an indication of the strength of the password chosen by the user.

What procedures we have in place for a breach of data security

  • Documenting the incident and the symptoms shown by the site
  • Scanning the site and the workstations with access to the site, with specific tools provided by third parties
  • Restoring from an earlier backup
  • Changing the passwords of the administrator accounts
  • Carrying out any necessary updates
  • Making a new backup
  • Identifying the extent of the security incident (vector, code, purpose, extent of access, services and accounts affected).
  • Contacting the National Supervisory Authority for Personal Data Processing
  • Contacting the clients and users affected with information about the security incident, and inviting them to change their passwords
  • Identifying preventive measures to secure the site, taking into account the lessons learned.

 

All the provisions set out in this document also apply to third parties and resellers who use the site hridaya-yoga.ro to sell their services and products.

This English text is a translation of the Romanian original. In case of any difference between the two, the Romanian version at hridaya-yoga.ro/gdpr prevails.