1. Definitions:
● Controller = The controller responsible for data processing within the meaning of the GDPR Regulation is S.C. MIT CLIMA DISTRIBUTION S.R.Lwith its registered office in Bucharest, Șoseaua Virtuții 19D, Sector 6, registered with the Trade Register under no. J40/8173/2010, C.I.F. RO 27326182, Tel: 0372 724 768, E-mail: office@mitclima.ro .
● Data subject = an identified or identifiable natural person (who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity). The data subject may be a person requesting a service offered by the Controller, as well as any other natural person whose personal data are transmitted to the Controller (for example, a client or potential client, a candidate for a specific job position, a user of the Controller’s website, etc.).
● Categories of processed data = Personal data (first name, last name, date of birth, address, phone number, and email address, etc.) are processed by us only if you enter such data in a section of the website or transmit them to us by email.
● Processing of personal data = means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
2. Purpose of personal data processing:
a. Website access:
Each time a user accesses a page from our offer and each time a file is opened, access data are stored by us and partially by third parties in the form of log files. Each data set includes: the webpage from which you access our page, the IP address, the date and time of access, the client request, the HTTP response code, the amount of data transferred, information about the browser and operating system used by you.
b. Geographical location:
Through geographical location based on the IP address, it is technically possible to estimate the location of the internet user.
Certain traffic data (such as IP addresses or other device identifiers used to access our website) may, in certain circumstances, constitute personal data and will be treated as such.
3. Legal basis
This consists of the Controller’s legitimate interest in preventing online fraud and ensuring the general functionality of the website, the performance of a contract, and the consent of the data subject, as applicable.
4. Data subject rights regarding personal data processing
a. Right to information and access: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, access to those data.
b. Right to rectification: the right to request and obtain from the Controller, without undue delay, the rectification of inaccurate personal data concerning you and/or completion of incomplete personal data, noting that in the case of an online account you may perform these changes yourself in the account editing section.
c. Right to erasure (“right to be forgotten”): the right to obtain the erasure of personal data concerning you without undue delay, where certain grounds provided by the GDPR Regulation apply.
d. Right to restriction of processing: the right to obtain restriction of processing in certain cases.
e. Right to data portability: the right to receive personal data concerning you and to transmit them to another controller.
f. Right to object: you have the right to object at any time to the processing of your personal data, in accordance with the GDPR Regulation.
g. Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
h. Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that your data have not been processed in accordance with legal provisions.
5. Exercising your rights
To exercise the above rights, please submit a written, dated, and signed request to the email address: dataprotection@mitclima.ro
Within a maximum of one month from receipt of your request, you will be provided with information regarding the actions taken or, where applicable, the reasons why the requested measures cannot be taken.
In order to respond to a request for access to personal data, we will take all reasonable measures to verify the identity of the data subject.
According to the GDPR Regulation, the above response period may be extended by up to two months if necessary, taking into account the complexity and number of requests, and you will be informed accordingly.
6. Disclosure of personal data to public institutions, courts of law, and competent authorities
In special cases, where required by law, the Controller may provide competent institutions with information regarding personal data.
7. GOOGLE ADWORDS/ANALYTICS web analytics service
Our website uses the “Google Adwords/Analytics” web analytics service provided by Google Inc. for statistical purposes.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”), which in turn uses cookies. The information generated by the cookie about your use of the website will be transmitted to and stored on Google servers in the USA.
If IP anonymization is activated, your IP address will be shortened within the territory of the Member States of the European Union or other parties to the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is enabled for this website. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage.
The IP address transmitted by your browser will not be associated with other data held by Google. You can refuse the use of cookies by selecting the appropriate settings in your browser; however, in this case you may not be able to use all functionalities of the website. You can also opt out of Google Analytics in the future by downloading and installing the Google Analytics Opt-out Browser Add-on for your browser: https://tools.google.com/dlpage/gaoptout?hl=en .
Additional information is available on the pages: Google Analytics terms of service and Google Analytics .
8. Legal framework
Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (available at http://dataprotection.ro/?page=Regulamentul_nr_679_2016 ).
– Law no. 506/2004 regarding the processing of personal data and the protection of privacy in the electronic communications sector.
Top-level management undertakes to ensure that this privacy policy is observed by all employees through the implementation of specific internal procedures and rules regarding the protection of personal data, in accordance with the applicable legal framework governing such processing.
Document last updated on 01.04.2025.
