PRIVACY POLICY

The atoma.ro website respects the privacy of its customers’ data and undertakes not to disclose customers’ personal information to third parties, using it exclusively for the purpose for which it was provided (processing orders) and for commercial communications regarding this store. We do not encourage SPAM. We do not provide your email address to third parties, we do not sell, offer, or exchange email addresses obtained through this website, and we do not disclose your email address to other individuals accessing the pages of this website.
In accordance with the requirements of Law no. 679/2016 regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, as amended and supplemented, and Law no. 506/2004 regarding the processing of personal data and the protection of privacy in the electronic communications sector, atoma.ro is required to securely manage and use, only for the specified purposes, the personal data you provide about yourself or another person.
The purpose of collecting personal data is to process and deliver orders.

1. GENERAL INFORMATION
The atoma.ro website is owned by S.C. TOMA ARTIST S.R.L. (hereinafter referred to as “ATOMA”, “we”, or “the company”) and is an online store operating under the name atoma.ro.
ATOMA respects your right to privacy and is committed to protecting your personal data and using it appropriately.
From the perspective of personal data protection, ATOMA acts as the Data Controller with regard to the personal data you provide to us.
This Privacy Policy explains how we process (collect, store, transmit, and use) the personal data you provide when you visit our website and/or communicate with us in any other way, as well as the data we generate about you, and it also explains your rights.
Before providing us with any information, please carefully and thoroughly read this Privacy Policy. IF YOU DO NOT UNDERSTAND THIS PRIVACY POLICY, PLEASE DO NOT REGISTER ON OUR WEBSITE AND DO NOT PROVIDE US WITH YOUR PERSONAL DATA.
By providing your personal data, you confirm that the information you make available to us is provided voluntarily and will be used for the purposes described in this Privacy Policy.
We reserve the right to modify or update this Privacy Policy periodically, at our discretion. You will be notified in advance regarding such changes and/or updates, which we kindly ask you to read carefully and ensure that you understand.

2. PERSONAL DATA WE COLLECT ABOUT YOU
As used in this Privacy Policy, personal data means any information that can be used to identify you directly or indirectly, individually or together with other information, or to contact you online or by other means.

The categories and volume of personal data we collect vary depending on the activities for which the data is collected and include the following information obtained directly from you:
– First and last name;
– Email address;
– Mobile phone number;
– Address.

We also collect personal data that we do not receive directly from you, namely: Information regarding your use of our website, obtained through tracking technologies such as cookies, IP address recording, and log files. These data include your IP address and, if you have registered, your registration details, as well as information such as the pages you have viewed, the duration of your visits, and your browsing path on the website.

3. HOW WE COLLECT PERSONAL DATA
We will collect personal data only with your knowledge and informed consent, namely when you voluntarily provide it to us or when such data is generated during our relationship with you.
For example, personal data is collected:
– when you participate in events organized by us;
– when you place an order through the atoma.ro website;
– when you agree to participate in our marketing campaigns;
– when you contact us for various reasons (feedback, reviews, questions, or comments through a “Contact us” form, or by completing a project inquiry form);
– through tracking technologies such as cookies, IP address recording, and log files.

Once collected, we will ensure at all times that any processing of your personal data is carried out in compliance with applicable laws, this Privacy Policy, and only for the purposes for which you provided us with this data.

4. HOW WE USE YOUR PERSONAL DATA
You should be aware that, in certain situations, processing the personal data you voluntarily provide to us requires your written consent.
Your consent will be considered granted when you expressly give us permission to process such data, most often by checking a box or clicking a button indicating your intention to place an order for a product, contact us for various reasons (feedback, reviews, questions, or comments through a “Contact us” form), or complete a project inquiry form.
Please note, however, that there are situations in which we may legally process your data without requiring your consent, namely:
– To comply with certain laws governing our economic activity;
– To fulfill our contractual obligations towards you;
– To take steps, at your request, before entering into a contract with you;
– To protect a legitimate interest that we or a third party may have, except where your interests or fundamental rights and freedoms override our interests.

The data we collect will be used exclusively for the purpose for which you provided it, and this purpose will be clearly communicated to you at the time of collection or within this Privacy Policy.
Therefore, we intend to use your personal data as follows:
(A) We will process your personal data in order to perform the contract under which we provide services, or to take certain steps at your request before entering into a contract regarding our services, in the following situations:
– To fulfill your order for a product placed on the atoma.ro website;
– To fulfill your order for a service placed on the atoma.ro website.
(B) Based on your prior consent, we will process your personal data in the following situations:
– When you complete contact or project inquiry forms, in order to respond to your questions as quickly as possible.
(C) Based on our legal obligations, we will process your personal data in the following situations:
– To strengthen the security of our data and our ability to prevent fraud;
– To comply with obligations imposed by the applicable legal framework;
– To fulfill our tax obligations in accordance with the Tax Code and other applicable tax legislation.
(D) In order to pursue our legitimate interests, we will process your personal data as follows:
– Based on our interest in improving our products and services — we will process your personal data for statistical purposes, in order to create aggregated and anonymized statistical data that we will use to improve our products and services.
– Based on our legitimate interest in consolidating, expanding, or streamlining our business — we may process your personal data in the event of a reorganization, merger, acquisition by another company, or transfer of our business activities.
– Based on our legitimate interest in protecting, securing, or preventing the loss or damage of our rights — we will process your personal data in the context of submitting complaints or responding to complaints filed against us.

5. WHERE YOUR PERSONAL DATA IS STORED
Your personal data will be stored, processed, and retained by us within the territory of Romania, in full compliance with legal requirements and under conditions of maximum security and protection.

6. RETENTION PERIOD OF YOUR PERSONAL DATA
We assure you that your personal data will be stored only for the period strictly necessary, in accordance with the purpose for which it was collected.
For your information, we will retain your personal data:
– For the period during which we are required to comply with applicable laws and reporting or regulatory requirements (for example, the archiving obligations provided by accounting legislation);
– For the period necessary to provide our services and fulfill our obligations towards you;
– For the period established by the applicable limitation period, in order to respond to any potential complaints or requests and to protect our rights and legitimate interests;
– For the period necessary to answer your questions, provide guidance, and resolve issues related to our services;
– To prevent fraud and abuse (for example, personal data collected as part of customer identification procedures must be stored for a minimum period of 6 years, in accordance with the provisions of Law no. 656/2002 on the prevention and sanctioning of money laundering, as well as measures for preventing and combating the financing of terrorist acts);
– Until the moment you exercise your Right to erasure or Right to data portability, under the conditions described in the section “Your Rights”, subsections D and F.
Upon expiry of the periods mentioned above, your personal data will be deleted.
If, at any time, you wish us to stop using your personal data for the purpose of providing services, you may exercise your rights by submitting a written, dated, and signed request by post to our company address.
If your request for deletion of personal data conflicts with our legal or regulatory obligations, or if the data subject to deletion is necessary for the exercise or defense of our legal claims, we may not be able to fulfill your request.

7. HOW WE MAINTAIN THE SECURITY OF YOUR PERSONAL DATA
ATOMA has implemented all necessary technical and organizational measures, whether physical, electronic, or procedural, to protect the confidentiality and security of the personal data you share with us.
These measures have been implemented to protect your data against unauthorized access, destruction, loss, alteration, disclosure, or use.
Our security controls are designed to maintain an appropriate level of confidentiality, integrity, and availability of data.
Information transmitted and received through the ATOMA website and our applications is encrypted using Secure Socket Layer (SSL) technology.

8. YOUR RIGHTS
At any time, you have the following rights regarding the personal data we process about you (“Rights”):
(A) Right to basic information. You have the right to receive information regarding the identity of the personal data controller, the reasons why the personal data controller processes your personal data, and any other relevant information necessary to ensure fair and transparent processing of your personal data.
(B) Right of access. You have the right to obtain confirmation as to whether and where our company processes your personal data, as well as the right to receive information regarding:the purpose of processing; the categories of processed data; the categories of recipients with whom the data may be shared; the period for which the data will be stored (or the criteria used to determine this period); the existence of the rights to erasure, rectification, restriction of processing, and the right to object to processing; the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP); the source of the data, if the data was not collected directly from you; the existence and explanation of the logic involved in any automated processing that produces significant effects concerning you.
(C) Right to rectification. You have the right to obtain, without undue delay, the correction of inaccurate personal data concerning you.
(D) Right to erasure (“right to be forgotten”). You have the right to obtain, without undue delay, the deletion of your personal data, and we are required to delete your personal data without undue delay if: (a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed; (b) you withdraw your consent on which the processing is based, and there is no other legal basis for processing; (c) you object to the processing under your right of objection and there are no overriding legitimate grounds for processing, or you object to the processing of your personal data for direct marketing purposes; (d) the personal data has been unlawfully processed; (e) the personal data must be deleted in accordance with a legal obligation under European Union law or other applicable legislation. Notwithstanding the above, we may continue to lawfully process your personal data where processing is necessary: (i) for exercising the right to freedom of expression and information; (ii) for compliance with a legal obligation; (iii) for the establishment, exercise, or defense of legal claims.
(E) Right to restriction of processing. You have the right to obtain restriction of processing by us in one of the following situations: (a) you contest the accuracy of the personal data, for a period that allows us to verify its accuracy; (b) the processing is unlawful and you oppose the deletion of personal data, requesting instead the restriction of its use; (c) we no longer need your personal data for processing purposes, but you require it for establishing, exercising, or defending legal claims; (d) you object to processing, for the period necessary to verify whether our legitimate interests override those invoked by you.
(F) Right to data portability. You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another personal data controller where: (a) the processing is based on consent or a contract; and (b) the processing is carried out by electronic means.
(G) Right to object. You have the right, for reasons related to your particular situation, to object at any time to the processing of your personal data based on our legitimate interests or those of a third party. However, we may demonstrate that we have legitimate and compelling grounds for processing that override your interests, rights, and freedoms, or that processing is necessary for the establishment, exercise, or defense of legal claims.
(H) Right not to be subject to decisions based solely on automated processing. Unless the decision: (a) is necessary for entering into or performing a contract between you and us; (b) is authorized by European Union law or applicable legislation; or (c) is based on your explicit consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We will respect your rights of access, rectification, restriction, erasure, and objection free of charge. We may request a reasonable fee for repeated requests, requests that we consider manifestly unfounded or excessive, or for additional copies.
We will respond to your request within 30 days from receipt. If we receive a large number of requests or particularly complex requests, this period may be extended by a maximum of two additional months.
If we fail to comply within this timeframe, you may lodge a complaint with ANSPDCP and seek legal remedies.
How you can access, modify, delete, or object to the use of your personal data
To exercise the Rights mentioned above, you can contact us at: contact@atoma.ro. You may refuse at any time to provide your personal data or object to our processing of your personal data. However, you should understand that, in certain situations, this may prevent us from fulfilling our contractual obligations towards you, as described in the section “What happens if you do not provide and allow us to use your personal data” above.
We recommend that you do not opt in to communications or services when first registering if you do not wish to receive such services or communications (newsletters, phone calls, announcements, or other communications and/or services) from us.
If you have opted to receive such communications and later decide that you no longer wish to benefit from these services, we provide you with the option to stop receiving future communications and services by unsubscribing. To do so, please follow the unsubscribe procedure or instructions provided in our communications, or notify us of your intention at: contact@atoma.ro.

9. HOW YOU CAN CONTACT US
For any questions or requests for clarification regarding this Privacy Policy, please contact us at: contact@atoma.ro