Privacy policy

 

This privacy policy determines how PeakBD (“us”) collects, stores, and uses information about you when you use or interact with   www.peakbd.eu , and / or the services offered.

By accessing or using this site and / or any information, tools and documents contained or described in it, you represent that you understand and confirm the privacy policy at any time in the current version. If you do not agree with this, it is not possible to access and use our site.

  1. About us.

You can contact us by sending an e-mail to contact@peakbd.eu. If you have any questions regarding this privacy policy, please contact us via the email address provided.

  1. The information we collect when you visit our site

We collect and use information from site visitors in accordance with this section, as well as section 9 below.

2.1 Server login information. We use a third party server to host our website www.peakbd.eu . The server automatically records the IP address you use to access our site, as well as other information about your visit, such as accessed pages, requested information, request date and time, the source of your access to our site ( e.g. the website or URL (link) you came to on our site), and your browser version and operating system. Our server is located in Romania.

2.2 Use of information stored on the server for IT security purposes . We and our third-party hosting providers collect and store logs on the server to ensure the security of networks and information so that the server and site are not compromised. This includes analyzing log files to help identify and prevent unauthorized access to our network, distributing malware, preventing server attacks, and other cyber attacks by detecting unusual or suspicious activity.

(i) Legal basis for processing: compliance with a legal obligation to which we are subject (Article 6 (1) (c) of the General Data Protection Regulation).

Legal obligation: we have a legal obligation to implement the necessary technical and organizational measures to ensure an adequate level of security for the risk of processing information about persons. Registering access to our site using server log files is one such step.

 

(ii) Legal basis for processing: the legitimate interests of us and of third parties (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: We and our third-party hosting provider have a legitimate interest in using your information to ensure the security of your networks and information.

2.3 Use of the login information on the site server to analyze the use of the site and to improve the site. We use the information collected by logging on to our site to analyze how users interact with the site and its features. For example, we analyze the number of unique visits and visitors we receive, the time and date of the visit, the location of the visit, the operating system, and the browser used. We use the information collected from the analysis of this information to improve our site. For example, we use the information we collect to change the information, content, and structure of your site and individual pages, depending on how users interact and how long you spend on certain pages on our site.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: improving our site for users and knowing their preferences so that our site can better meet their needs and desires.

2.4 Use of cookies and similar technologies. Cookies are data files that are sent from a website to a browser to record information about users for different purposes. We use cookies and similar technologies on our website, including essential, functional, analytical and targeted cookies and web beacons. For more information about how we use cookies, see our cookie policy.

You may reject some or all of the cookies we use on our site or through our site by changing your browser settings, but this may affect your ability to use some or all of our site. its functionalities. For more information about cookies, including changing your browser settings, visit www.allaboutcookies.org or see our cookies policy.

  1. The information we collect when you interact with our site

We collect and use information from people who interact with certain features of our site, in accordance with this section, as well as section 9 below.

3.1 Registration on our site. When you register and create an account on our site, we collect the following information: username, email address, IP address, avatar image, and any other information you provide to us when you complete the registration form. If you do not provide the required information required by the registration form, then you will not be able to register or create an account on our site.

 

Legal basis for processing: it is necessary to perform a contract or take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

The reason why it is necessary to make a contract: the creation of an account on our site is necessary to purchase the products from our offer.

Transfer and storage of your information. The information you provide to us via the registration form on our website will also be stored outside the European Economic Area. For more information on the safeguards used when your information is transferred outside the European Economic Area, see section 9 below.

  1. The information we collect when you contact us

We collect and use information from people who contact us in accordance with this section and section 9 below.

4.1 Contact by e-mail. When you send an email to the email address displayed on our site, we collect your email address and any other information you provide in that email (such as your name, your number and the information contained in the e-mail signature).

(i) Legal basis for processing : our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: we answer questions and messages we receive and keep track of e-mail.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

The reason why you need to enter into a contract: if your message is about providing goods or services or taking action at your request before providing you with our goods and services (for example, providing information about such goods or services). goods and services); we will process your information to do this.

Transfer and store your information. We use a third-party email provider to store the emails you send. For more information, see the section on this privacy policy entitled Transferring Your Information Outside the European Economic Area.

4.2 Contact through the contact form on the site. When you contact us using the contact form on our website, we collect your name, email address and IP address. We also collect any other information you provide to us when you complete the contact form. If you do not provide the required information required by the contact form, you will not be able to submit the contact form and we will not receive your request.

(i) Legal basis for processing : our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: we respond to requests and messages we receive and keep track of correspondence.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

The reason why you need to enter into a contract: if your message is about providing goods or services or taking action at your request before providing you with our goods and services (for example, providing information about such goods or services). goods and services); we will process your information to do this.

Transfer and store your information. The messages you send us via our contact form will be stored in the European Economic Area.

4.3 Contact by mail. If you contact us by mail, we will collect all information you provide to us in any written communications you send us.

(i) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: we answer questions and messages we receive and keep track of correspondence.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

The reason why you need to enter into a contract: if your message is about providing goods or services or taking action at your request before providing you with our goods and services (for example, providing information about such goods or services). goods and services); we will process your information to do this.

  1. Information collected or obtained from third parties

5.1 Information received from third parties . We generally do not receive information about you from third parties. Third parties from whom we receive information about you will generally include group companies or partners. Third parties with whom we have had no prior contact may also provide us with information about you. The information we obtain from third parties will generally be your name and contact details, but will include any additional information. about you they provide us.

(i) Legal basis for processing: it is necessary to perform a contract or take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Reason for making a contract: If a third party has provided information about you (such as your name and email address) to provide you with services, we will process your information to measures at your request to conclude a contract with you and terminate a contract with you (as applicable).

(ii) Legal basis for the processing: your consent (Article 6 (1) (a) of the General Data Protection Regulation).

Your consent: in the event that you have asked a third party to share information about you with us and the purpose for which you share this information is not related to the performance of a contract or services by us for you, we will process your information. on the basis of your consent, which you give by requesting the third party concerned to provide your information.

(iii) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: If a third party has shared information about you with us and you have not given your consent to the exchange of information, we will have a legitimate interest in processing such information in certain circumstances. For example, we would have a legitimate interest in processing your information in order to fulfill our obligations under the subcontract with the third party, if the third party has the main contract with you. Our legitimate interest is to fulfill our obligations under our subcontract. Similarly, third parties may provide information about us if you have violated or could violate any of our legal rights. In this case, we will have a legitimate interest in processing this information in order to investigate and prosecute any such possible breach.

5.2 Incorrectly received information. If we mistakenly receive information about you from a third party and / or do not have a legal basis for the processing of this information, we will delete your information.

  1. How we use your information

Creating a profile. Please note that we use a visitor profile on our site. We do not believe that this has any legal effect on you or affects you in a similar way. You may object to the use of automated profile information described in this section. You can do this by waiving cookies and similar technologies in accordance with the method described in the relevant section below. Your IP address is not associated with any of your other information, as it is only used for traffic / connection statistics - therefore we cannot identify you based on your IP. You can learn more about the use of cookies and similar technologies (including the legal basis we use) and how to opt out of our cookie policy.

Profiling is any form of automatic processing of your information to assess personal aspects of you, in particular to analyze or estimate things like your work performance, economic situation, health, personal preferences, interests, reliability. , behavior, location or movements performed.

6.1 Using the profile for web analytics. Our web analytics service, Google Analytics, uses and collects information such as your location (based on your IP address) and your behavior (based on cookies) when you visit the site (such as the pages you visit and where you click). We will only process information from cookies, if you have agreed to the installation of cookies on your device in accordance with the cookie policy.

Logical approach: by automatically analyzing and classifying information, such as location (based on IP address), and the behavior and devices of visitors to our site (using cookies), we can better understand what they want site visitors (in terms of the content of our site and our products), how to improve the site and how to promote and market our products and services.

Significance and Expected Consequences : Cookies will be used to track and store information about your behavior and device on our site (unless you have declined to receive such cookies through the pop-up window). -up or by emailing your IP address, and your location will be analyzed based on your IP address.

Legal basis for processing: legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: providing the best experience for our visitors based on region, language and interests.

  1. As long as we keep your information

This section determines how long we will keep your information. If possible, we provide specific retention periods. If this is not possible, we have established the criteria we use to determine the retention period.

7.1 Shelf life

  • Server history information: We keep information about logging in to our server in accordance with the legal requirements of our country. For logins that do not fall under a special status, we keep the information for a maximum period of three years.
  • Correspondence and requests: If you make a request or correspond with us for any reason, whether by e-mail, mail or telephone, we will keep the information with you for as long as we need to answer and resolve your request and for more. Monday, after which we will delete your information.

7.2 Criteria for determining retention periods. In any other circumstances, we will not keep your information longer than necessary, taking into account the following:

  • the purpose (s) and use of your information both now and in the future (such as whether we need to continue to store this information in order to continue to fulfill our obligations under a contract with you or to contact you) future);
  • if we have a legal obligation to continue processing your information (such as any obligation to keep information required by law or relevant regulations);
  • if we have any legal basis to continue processing the information (such as your consent);
  • how important your information is (both now and in the future);
  • any agreed practices in the field of retention of information;
  • the levels of risk, cost and liability involved in continuing to hold the information;
  • how difficult it is to make sure that the information can be up-to-date and accurate; and
  • any relevant circumstances (such as the nature and status of our relationship with you).
  1. How we provide you with information

We take appropriate technical and organizational measures to secure your information and to protect it against unauthorized or unlawful use and accidental loss or destruction, including:

  • the information is stored in an encrypted manner and access to it is restricted to internal staff with a specific interest, using login credentials and in accordance with the rules set out in the internal policies regarding the use of personal data as defined in the company register.
  • use of secure servers for storing information;
  • verifying the identity of any person requesting access to information before granting access to information;
  • use Secure Sockets Layer (SSL) and Layer Security (TLS) software to encrypt any information you send us through any forms on our site;

Improper way of sending information via the Internet (encryption does not exist or is weak) by the user releases us from any responsibility incumbent on him.

  1. Transferring your information

Your information will be transferred and stored outside the European Economic Area (EEA) under the conditions set out below. We will also transfer your information to you outside the EEA or to an international organization in order to comply with our legal obligations (for example, compliance with a judgment). If we are required to do so, we will provide adequate safeguards and safeguards.

9.1 Contact form. The information you send us through our contact form may be transferred outside the EEA and stored on the host servers of third parties and email providers.

9.2 E-mail. The information you send us by e-mail is transferred outside the EEA and stored on the servers of our third-party e-mail service provider.

9.3 Google Analytics . The information collected by Google Analytics (IP address and actions you take on our site) is transferred outside the EEA and stored on Google's servers. You can access Google's privacy policy here: https://www.google.com/policies/privacy/

Country where we store data: United States of America. This country is not subject to an appropriate decision by the European Commission.

Security measures used: Google has automatically certified compliance with EU-US private protection, available here: https://www.privacyshield.gov/welcome . EU-US protection of privacy is a certification mechanism approved under Article 42 of the General Data Protection Regulation, which is permitted under Article 46 (2) (f) of the General Data Protection Regulation. You can access the European Commission's decision on the adequacy of the EU-US Data Protection Shield here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm

  1. Disclosure of your information

10.1 Disclosure to Service Providers. We use third parties to provide us with services that are necessary to run our business or to assist us in running our business and which process your information on our behalf. These include:

  • Hosting provider (s), located in Romania.

Your information will be shared with these service providers, if necessary, to provide you with the services you have requested, whether you are accessing our site or ordering goods or services from us. We do not publicly disclose the identity of all our service providers in terms of security and competition. If you would like more information about the identity of your service providers, please contact us directly via our contact form or by email and we will provide you with such information if you have a legitimate reason to request it ( if we have shared your information with such service providers, for example).

(i) Legal basis for processing: legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: If we share your information with these third parties in a context other than where it is necessary to perform a contract (or take action at your request to do so), we will share it with you. information with such third parties so that we can conduct and manage our business efficiently.

(ii) Legal basis for processing: necessary to conclude a contract and / or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Why we need to make a contract: We may share information with our service providers to enable us to fulfill our obligations under this contract or to take the steps you have requested before concluding a contract. with you

10.2 Disclosure to other third parties . We also disclose your information to third parties under certain circumstances, as shown below.

10.2.1 Providing information to third parties, such as Google Inc. Google collects information through our use of Google Analytics on our site. Google uses this information, including IP addresses and cookie information, for various purposes, such as improving Google Analytics. The information is shared with Google on an aggregated, anonymous basis. To learn more about what information Google collects, how it uses this information, and how to control the information sent to Google, please visit https://www.google.com/policies/privacy/partners/ .

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: compliance with Google's contractual obligations under the Google Analytics Terms and Conditions ( https://www.google.com/analytics/terms/us.html ). You can opt out of Google Analytics by installing the browser plugin here: https://tools.google.com/dlpage/gaoptout .

Transferring and Storing Your Information The information Google Analytics collects is stored on Google's servers in the United States. For more information on the safeguards used when your information is transferred outside the European Economic Area, see section 9 above.

10.2.2 Sharing your information with third parties, which are either related to or associated with our business operations, if necessary for us. The information is stored encrypted and can only be decrypted using login credentials assigned to specific users with specific interests, in accordance with our GDPR policies.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: the efficient operation and management of the site.

  • Occasionally, we get advice from consultants such as accountants, financial advisors, lawyers, public relations professionals, and security professionals. We will only share your information with these third parties when necessary to provide relevant advice.
  • Business partners. Business partners are companies we work with that provide goods and services that are complementary to our own business or that allow us to provide goods or services that we cannot provide on our own. We share information with our business partners if you have requested services that they provide either independently of us or in connection with our services, or our own services.
  • Independent contractors. We use independent contractors in some cases. Your information will only be shared with independent contractors if it is necessary for them to perform certain tasks.
  • We will share your information with our insurers if necessary, for example in connection with a complaint or a potential complaint that we receive or make, or in accordance with our general disclosure obligations under the contract. our insurance with them.

10.2.3 Sharing information within the institution for internal administrative purposes, including information about customers and employees.

(i) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: the efficient operation and management of the site.

(ii) Legal basis for processing: necessary to conclude a contract or to take action at your request before concluding a contract (Article 6 (1) (b) of the General Data Protection Regulation).

Why you need to enter into a contract: We need to share information about you with other companies so that we can fulfill our contractual obligations to you or take action at your request before concluding a contract, e.g. due to the services or information you requested.

10.3 Disclosure of information for legal reasons.

10.3.1 Reporting offenses or threats to public security. If we suspect that criminal or potentially criminal conduct has taken place, in certain circumstances we need to contact an appropriate authority, such as the police. This could be the case, for example, if we suspect that a fraud or cybercrime has been committed or if we receive malicious threats or communications. In general, we will only process your information for this purpose, only if you have been involved in or affected by such an incident in some way.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: prevention of crime or suspected criminal activity (such as fraud).

10.3.2 Execution or possible application of legal rights. We will use your information in connection with the implementation or possible enforcement of our legal rights. Our legal rights may be contractual (if we have entered into a contract with you) or non-contractual (such as the legal rights we have under copyright or tort law).

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to impose our legal rights and to take measures to ensure our legal rights.

10.3.3 In connection with litigation, possible litigation or legal proceedings. We may need to use your information if we are involved in a dispute with you or a third party, for example, either to resolve the dispute or as part of any mediation, arbitration or resolution of the court or tribunal. similar process.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: settling disputes and possible disputes.

10.3.4 Compliance with laws, regulations and other legal requirements. We will use and process your information to comply with our legal obligations. For example, we may need to disclose your information based on a court order or subpoena if we receive it.

(i) Legal basis for processing: compliance with a legal obligation (Article 6 (1) (c) of the General Data Protection Regulation).

Legal obligation : legal obligations to disclose information that is part of Romanian law or that is binding on Romanian legal entities, for example on the basis of an international agreement signed by Romania.

(ii) Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: if the legal obligations are part of the laws of another country and have not been integrated into the legal framework of Romania, we have a legitimate interest in complying with these obligations.

  1. Your rights regarding your information

11.1 Subject to certain restrictions on certain rights, you have the rights listed below regarding your information. You may also exercise these rights by sending an e-mail to contact@peakbd.eu .

  • The right to request access to your information and information related to the use and processing of your information;
  • The right to request the correction or deletion of your information;
  • The right to request a restriction on the use of your information;
  • The right to receive the information you have provided to us in a structured, commonly used format that can be read on any device (for example, a CSV file) and the right to transfer it to another data operator (including a third party data controller);
  • The right to object to the processing of your information for certain purposes (for more information, see section 12 below); and
  • The right to withdraw your consent to use your information at any time, if we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of the use and processing of your information based on your consent prior to the time you withdraw your consent.

In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with a supervisory authority, in particular in the State where you are habitually at work or in connection with an alleged infringement. of the General Data Protection Regulation.

11.2 The above rights are provided only in summary form and certain limitations apply to many of these rights. You can find more information about your rights as well as information about any limitations that apply to these rights by reading the underlying legislation contained in Articles 12-22 and 34 of the General Data Protection Regulation, available here:

https://ec.europa.eu/info/law/law-topic/data-protection/reform_ro/

11.3 In the event that you request access to your information, we are required by law to use all reasonable steps to verify your identity before doing so. These measures are designed to protect your information and to prevent the risk of identity fraud, identity theft or unauthorized general access to your information.

How we verify your identity . If we have relevant information about you, we will try to verify your identity using this information. If we are unable to identify you with such information or if we do not have sufficient information about you, we may request original documents or certified copies of certain documents in order to verify your identity before providing access to your information. We will be able to confirm the exact information we need to confirm your identity in your specific circumstances, if and when you make such a request.

  1. The right to challenge the processing of your information for certain purposes.

With regard to the use or processing of your information, you are entitled to the objections listed below. You can also exercise these rights by sending an e-mail to contact@peakbd.eu .

  • The right to oppose the use or processing of your information, whether we use it or process it in the performance of a public interest task or for our legitimate interests, including “profiling” (analyzing or estimating your behavior under your information) based on any of these purposes; and

For more information on how you can oppose the use of information collected from cookies and similar technologies, please refer to the cookie policy.

  1. sensitive personal information; children's privacy.

13.1 "Sensitive personal information" means information about an individual who discloses racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic information, biometric information for the purpose of uniquely identifying an individual, health or life information. sexual orientation or sexual orientation of an individual.

We do not knowingly or intentionally collect sensitive personal information from individuals and you must not send us sensitive personal information. However, if you mistakenly or intentionally provide us with sensitive personal information, we will consider that you have explicitly given us your consent to the processing of sensitive personal information in accordance with Article 9 (2) (a) of the General Data Protection Regulation. We will use and process your sensitive personal information for the purpose of deleting it.

13.2 We do not knowingly contact or collect information from persons under the age of 18. Our site is not intended to solicit information of any kind from people under the age of 18. We may receive information about persons under the age of 18 through fraud or deception by a third party. If we become aware of this, as soon as we verify the information, when required by law, we will immediately obtain the appropriate parental consent to use this information or, if we are unable to obtain parental consent, delete the information from our servers. If you would like to let us know about receiving information about people under the age of 18, please do so by sending an e-mail to contact@peakbd.eu .

  1. Changes to our privacy policy

We may update and change our privacy policy from time to time.

14.1 Minor changes. If we make minor changes to our privacy policy, we will update the privacy policy with a new date mentioned at the beginning. The processing of your information will be determined by the practices set out in the new version of the Privacy Policy as of its effective date.

14.2 Major changes. If we make major changes to our privacy policy, or if we intend to use your information for a new or different purpose from the purposes for which we originally collected it, we will notify you by email (if possible). ) or by posting a notice on our site. We will provide you with information about the change in question and its purpose and any other relevant information before using your information for the new purpose. Whenever necessary, we will obtain your prior consent before using your information for any purpose other than for the purposes for which we originally collected it.

  1. More information

Our site may contain links to third party sites. Third party privacy policies or practices are beyond our control. Therefore, please read the privacy policies of these sites before using them.