Privacy notice

For Mucca, ensuring the confidentiality and security of your personal data is an obligation, but also a challenge that we take on with all our hearts. Beyond the legal obligation to comply with the provisions of the EU Regulation 679/2016 (General Data Protection Regulation - abbreviated GDPR), we believe that it is extremely important for our partners and customers to know that, at any time, Mucca conducts its business based on the premises that it is absolutely natural to ensure the conditions for the confidentiality and security of personal data. Through this notice, we would detail the way we process your personal data, when: you visit mucca.ro, when you communicate or order from us.

Controller's identity and contact data

MUCCA PRODUCTION & ADVERTISING SRL, personal data controller (hereinafter referred to as the Controller), headquartered in Bucharest, 1 Mirea Mioara Luiza Alley, bl. N22, entrance 2, 1st floor, apt. 21, District 4, registered with the Trade Register under the no. J40 / 7147 / 2013, having the Tax Registration Number (CIF): RO 31750754, and bank account no. RO93 BACX 0000 0009 0345 8001, opened with Unicredit Tiriac Bank –N. Titulescu Branch, Bucharest, email: hello@mucca.ro; telephone: 0758094410, processes legally and responsibly the personal data collected through mucca.ro website, by complying with GDPR and the provisions of domestic law and by implementing and periodically reviewing the organizational and technical security measures.

What categories of personal data do we process?

Most of the time, the personal data detailed below are processed directly from you, when you contact us by phone, when you place an order or when you send us an email. When using the official means of contact and the mucca.ro webpage, the following types of personal data are processed:

• • last name and first name;;
• • email address;
• • telephone number;
• • home/correspondence address;
• • bank information;
• • industry (field of activity);
• • CNP (Personal Identification Number) (for invoices issued to natural persons);
• • IP, used browser and data regarding the mucca.ro webpage visitor behaviour.

We do not process special personal data, as defined by GDPR. We also do not want to collect or to process data from minors under the age of 16.

What are the purposes of data processing? On what grounds is this achieved?

The abovementioned personal data are processed for the following purposes:

• 1. invoicing of the products you purchased;
• 2. communication of information between the parties in respect of the purchased products;
• 3. solving the issue connected to the products ordered and shipped to you (return, reimbursement of the amounts paid for returned items);
• 4. delivery, by means of express courier services, of the products you ordered.
  The processing of personal data for such purposes (1 - 4) shall be carried out pursuant to Art. 6, para. 1, letters a, b, c of GDPR and, in most of the cases, is needed to enter into and execute an agreement (distance contract) between the parties. Also, some processing determined by these purposes are required under the applicable laws in the field of tax and accounting.
• 5. improving the services we provide to you.
  For this purpose, we can process some information connected to your behaviour as purchaser/visitor of mucca.ro website. We base this type of processing, which is being carried out under Art. 6, para. 1, letter f of GDPR, on our legitimate interest to carry out commercial activities, always taking care that your fundamental rights and freedoms are not violated.
• 6. protection and security;

Mucca may place security cameras at the company's headquarters and at the other premises held, in order to protects its legitimate interests. The areas where security cameras are places shall always be marked by a warning. We may process the data obtained through this type of processing based on a legitimate interest, which consists in ensuring the protection and security of our systems and clients.

The processing of personal data shall be carried out by automated and manual means.

Processed data storage period

We will process the personal data throughout the time necessary to perform the contractual obligations by any of the parties. The personal data will be stored as long as necessary for the purposes stated above or for a period of time set forth by the legal provisions. In certain cases, as per the legal requirements, we may keep some of your personal data, should there be a negative balance or an unsettled dispute. Not all your personal data are subject to the same storage period. The accounting documents, for example, the invoices issued by the Controller, shall be archived according to the law, for a period of 10 years as of the issuance thereof.

What categories of recipients do we share your data with?

The personal data processed by the Controller are/can be shared with the following categories of recipients:

• a) courier services providers;
• b) providers of banking and non-banking services;
• c) companies that provide services related to the operation of information systems;
• d) companies providing hosting services;
• e) public authorities, when we have a legal obligation or if we have to protect a legitimate interest.

When we use a natural person or a legal entity as entity empowered to process some parts of your personal data, we will make sure that they undertake the obligations to process the data as per our instructions and to implement measures to protect privacy. We do not transfer nor do we intent to transfer your personal data to other companies, organizations or individuals in third countries.

Security of personal data

Having in view the processing of your personal data, the Controller shall apply the technical and organizational measures needed in order to ensure the security thereof, the protection against accidental or illegal destruction, amendment, disclosure or unauthorised access, as per industry standards. Continuous improvement of computer security measures is one of our priorities.

What rights do you have? How can you use them?

According to GDPR, you have the following rights (they are disclosed in detail in Articles 12 – 23 of GDPR):

• - iinformation and access (you can obtain information on the processing of your personal data, based on a request to which we will respond within maximum 30 days);
• - correction (the right to obtain the correction of incorrect data or the supplementation of incomplete data);
• - deletion of data (“the right to be forgotten”);
• - processing restriction (you can reasonably request the restriction of your data processing);
• - data portability (you can request the receipt of personal data, upon request, in a structured format, currently used and which can be read automatically);
• - objection to data processing (for example, you have the right to object at any time to our processing of your personal data for direct marketing);
• - the right not to be subject to an automated individual process.

You have the right to address the courts of law or the National Supervisory Authority for Personal Data Processing. You can exercise these rights at any time, via email, at the following address: hello@mucca.ro, or you can send us a letter at 1 Mirea Mioara Luza Alley, District 4, Bucharest.

This document, disclosed as a first issue, shall be applicable as of 25.05.2018. We reserve the right to make any necessary additions or amendments.

Cookie Modules Policy

Yes, you are right. The "cookie modules policy" sounds a bit pompous for the way we are and work with our customers. So far, Mucca has accustomed you with a new, creative, uninhibited approach. However, we send you this notice because, as of May 25, 2018, a special collection of European regulations, known as Regulation (EU) 2016/679 on the protection of natural persons (General Data Protection Regulation) has become effective. We'll call it GDPR from now on, it's easier that way.

Let's cut to the chase. One of GDPR effects is that every personal data controller who uses websites should inform its visitors in respect of the specifications of that website and, in particular, the cookies used, guiding them thorough the management thereof. Mucca.ro uses cookie modules to make sure that our website works efficiently and that you will have an OK browsing experience. Please read this policy carefully. If you do not agree with the information included, you have the possibility, at any time, not to use this website, although we would be very sorry to lose your attention and friendship.

But what are cookies? We shall begin by telling you what they are not. Cookies are not viruses. Our cookies do not retain data, such as your name/first name or bank details. Cookies are harmless, they do not contain software or spyware and cannot access the information on user's hard drive. Cookies are small text files, that contain limited amount of information and are downloaded to the device you use by a special server for mucca.ro. The browser then sends these cookies to mucca.ro during each subsequent visit, so that it can recognise you and remember things such as user preferences (e.g.: visits or clicks). A list of the cookies used by our website can be obtained by using the tool available on the website https://cookies.bit-sentinel.com/. The detailed information on how cookie modules work can be found at http://www.aboutcookies.org/.

We use the following categories of cookies: necessary, statistic and marketing. Let's take them one at a time.

• • necessary cookies (they make the site functional and allow you, among other things, to browse the mucca.ro pages. Without this type of cookie, our website has little chance of working)
• • statistical, analytical or performance cookies (these are cookies used to help us understand whether the information we offer you are efficient, whether our communication method regarding our services is the best. The analytical cookies also give us the possibility to improve the website operation. For example, we can track how many individual users access this website and how often. This information is used only for statistical purposes and not to personally identify any user. Some of these cookies are managed for us by other companies, however, they are not entitled to use them for purposes other than those set forth above. For example, First Party Cookies: Google Analytics. These cookies are used by Google to compile reports and to help us improve our website. You can find out more about the cookies used by Google Analytics here.
• • marketing cookies (some of the cookies are managed for us by other companies, but these are not entitled to use the data for purposes other than those mentioned. For example, Third Party Cookies: Facebook. You can find out more about the cookies used by Facebook here).

The methods to control the cookie modules exist and they give you the possibility to customize your browsing experience. However, please remember that eliminating or blocking cookies may have an impact on your user experience. For example, if you choose to disable the necessary cookies, certain parts of this website can no longer be fully accessible. The setting for using cookies is included in the Internet browser. Most Internet Browsers are initially set to automatically accept cookies. However, with the help of your browser you can refuse these cookies or you can reduce them to certain types, which you select in particular. Information about browsers and setting cookies preferences can be found on the following web pages: Chrome, Firefox, Internet Explorer, Android. For more information about changing browser settings to block or filter the cookie modules, please see http://www.aboutcookies.org/.

We use "social buttons" (Facebook, Instagram, LinkedIn, Google+) to allow our users to share or bookmark web pages. These are buttons for third party social media sites and these sites can record information about your activities on the Internet, including on this website. Please see the terms of use and the privacy policies of these sites to understand exactly how they use your data and to find out how you can delete or discard these cookies.

Our site contains links to other web pages, usually, those of our clients These sites may be owned and operated by other companies and organizations, which may have other security and personal data protection policies. Mucca does not accept any responsibility in respect of the information, materials, products or services included or accessible through these websites.

Policy Updates

This policy is in its first edition and is applicable from. We reserve the right to make any additions or amendments to this Cookie Modules Policy. Please visit this page periodically to find out about any changes that may occur.

Contact

If you have any questions or want to send us requests regarding the aspects described here, you can write to us at the email address hello@mucca.ro or you can send us a letter at Ilfov, Popesti Leordeni, Sos. Oltenitei nr. 209.