REGARDING THE PROTECTION OF PERSONAL DATA
This document aims to inform you about the processing of your personal data, in the context of using the website https://naturapaper.ro, hereinafter referred to as "the site".
INFORMATION ABOUT THE DATA CONTROLLER. WHO ARE WE?
Our identity is NATURA PAPER SRL, registered with the Trade Register under no. J12/2913/2006, fiscal code 18985346.
Registered office address
Romania, Cluj-Napoca, Piața Unirii, no. 10, ap. 1, Cluj county
Our customers can send questions regarding data protection, privacy, and personal data security to the company administrator, Bánffy Béla, at the e-mail address office@naturapaper.ro.
WHAT IS PERSONAL DATA
Personal data is information based on which a natural person can be identified or is identifiable. Various pieces of collected information (such as preferences or shopping habits, the IP of the computer used) can lead to your identification and fall into the category of "personal data".
We collect personal data directly or indirectly from you through your interaction with us, with the purpose of providing you with products, services, or personalized offers.
WHAT PERSONAL DATA DO WE PROCESS
A. If you are a customer of the site, NATURA PAPER SRL, in its capacity as data controller, will process your personal data, such as:
· Name and surname
· Personal Identification Number (CNP)
· Phone number
· E-mail address
· Billing address
· Delivery address
· Data regarding how you use the site (e.g., your behavior/preferences/habits within domains)
· As well as any other categories of data that you provide directly in the context of creating a user account, placing an order through the site, or in any other way resulting from the use of the site.
If you choose to create a user account only before completing an order for a product available on the site, your e-mail address will be requested, based on which an account will be automatically created.
If you do not complete the order, the e-mail address and other data provided will not be stored by NATURA PAPER, and the created account will be automatically deleted.
B. If you are a visitor to the site, NATURA PAPER SRL will process your personal data that you provide:
· Directly in the context of using the site, such as data you provide in the contact / questions / complaints section, insofar as you contact us in this way,
· Indirectly, data such as: IP address, browser used, browsing duration, search history, operating system used, language and pages viewed, full URLs, clickstream to, through, and from our site, information or products viewed / searched, duration of visits on certain pages, information on interaction with pages (e.g., scrolling, clicks, mouse-overs), data on user behavior.
A. If you are a customer of the site, we process your personal data as follows:
- for the performance of the contractual relationship between you and us, respectively for taking, validating, shipping, and invoicing the order placed on the site, informing you about the order status, organizing the return of ordered products, etc.
Legal basis: The processing is based on your consent. Providing your personal data is necessary for the execution of this contract. Refusal to provide data results in the impossibility of carrying out contractual relations.
- for fulfilling the legal obligations incumbent on us in the context of the services provided through the site, including obligations in fiscal matters, as well as in archiving.
Legal basis: The processing is based on legal obligations. Providing your data for this purpose is necessary. Refusal to provide data may result in the impossibility of complying with the legal obligations incumbent on us and thus the impossibility of offering you services through the site.
- for marketing activities, respectively for sending, through means of distance communication (e-mail, SMS), commercial communications regarding the products and services offered by us, through the site.
Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.
You can express your consent for data processing for this purpose by checking the corresponding box at the time of account creation, or after account creation, in the my account information section.
To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/SMS containing commercial communications. In addition, you can unsubscribe by accessing the "My Account Information" section.
Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
- for the purpose of carrying out various analyses, reports on the functioning of the site, creating consumption preference profiles, mainly, to improve the experience offered on the site.
Legal basis: The processing is based on our legitimate interest to permanently improve the customer experience on the site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
B. If you are a visitor to the site, the data controller processes your personal data as follows:
- for marketing activities, respectively for sending, through means of distance communication (e-mail, SMS), commercial communications regarding the products and services, through the site.
Legal basis: The processing is based on your consent, if you choose to provide it.
You can express your consent for data processing for this purpose by completing and checking the corresponding box in the newsletter subscription form available on the site.
To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/SMS containing commercial communications.
Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
- for resolving complaints, monitoring traffic, and improving your experience offered on the site.
Legal basis: The processing is based on our legitimate interest to ensure the correct functioning of the site, as well as to permanently improve the experience of site visitors, including by resolving complaints.
Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you, but we will not be able to respond to your requests.
Natura Paper SRL will process your personal data as long as necessary to achieve the processing purposes mentioned above.
If you are a customer, we will process your data for the entire duration of the contractual relations and subsequently according to the legal obligations incumbent on us (e.g., in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the end of the financial year during which they were drawn up).
If you are a customer and you exercise the option to delete your user account, by pressing the "delete account" button in the "my account information" section, we will interpret this action as your option to unsubscribe from receiving commercial communications by which we keep you informed about the products and services offered through the site.
In this regard, if you choose to delete your user account, we will no longer send you e-mails and/or SMS messages of this kind.
However, we want to inform you that deleting the account will not automatically result in the deletion of your personal data.
If you request the deletion of the account, but there is at least one active order on that account, the account deletion request can only be registered after the products are delivered and the last active order is completed.
If you withdraw your consent for data processing for marketing purposes, we will stop processing your personal data for this purpose, but without affecting the processing carried out by us based on the consent expressed by you before its withdrawal.
As a general rule, we will not disclose, market, or transfer your personal data to third parties in any way, except in the following situations:
• Public authorities and institutions – only when there is a legal obligation in this regard or for the purpose of defending a legitimate interest.
• Our contractual partners or collaborators – by way of example, we list online payment processors Netopia SRL, Stripe Inc, courier companies, post office, website development, online marketing, accounting, and audit.
• Auditors, lawyers, individual consultants from Romania or abroad, natural or legal persons acting in the name and for NATURA PAPER SRL, for the purpose of exercising and defending the rights and legitimate interests of the undersigned.
• Other third parties – only if you have given your express consent.
All our subcontractors who process personal data must comply with the provisions of the GDPR. We will monitor the maintenance of the standards imposed by the GDPR by subcontractors and sub-processors to ensure that data protection requirements are met.
In the case of data transfers to countries outside the European Economic Area, we assure you that these transfers will take place in compliance with the General Data Protection Regulation, based on adequate guarantees and provided that there are enforceable rights and effective remedies for you.
Changes regarding the addition or replacement of subcontractors or partners who handle personal data will be announced by updating this document. You have the opportunity to object to such changes and request data deletion according to the procedure below.
The technical and organizational measures implemented and periodically reviewed in this segment aim to prevent and eliminate unauthorized access, modification, use, disclosure, copying, deletion, or destruction of the personal data we process.
The technical and organizational measures are complemented by internal work policies and procedures, internal and external audit, and control measures.
In accordance with the General Data Protection Regulation, you as a data subject have the following rights, except where the law provides otherwise:
· Right to information – data subjects whose data are processed within our specific activities (e.g., customers, potential customers, collaborators, etc.) have the right to receive information about the processing operations performed on their personal data.
· Right of access - data subjects have the right to obtain from us confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and information about the processing.
· Right to rectification – data subjects have the right to obtain from us, without undue delay, the rectification/correction of inaccurate personal data and/or the completion of incomplete data.
· Right to erasure ('right to be forgotten') – data subjects have the right to request the deletion of personal data. This deletion will be carried out without undue delay if this data is no longer necessary for fulfilling the purposes for which it was collected.
· Right to restriction of processing – in cases where it is not clear if and when personal data will have to be deleted, you can exercise the right to restriction of processing. This right can be exercised when: (i) the accuracy of the data in question is contested; (ii) you do not want
the data to be deleted; (iii) the data is no longer necessary for the original purpose, but cannot be deleted yet for legal reasons; (iv) a decision on your objection is pending.
"Restriction" means that – apart from storage – your personal data can only be processed with your consent for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the EU or an EU member state.
Data regarding the contractual relationship between you and us will be kept due to tax regulations for up to ten years after closing or deleting your account.
· Right to data portability – the right of data subjects to receive the personal data concerning them, which you have provided to us for the purposes described above, in a structured, commonly used, and machine-readable format, and the right to transmit this data to another controller.
· Right to object – data subjects have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them, including profiling. We, as controllers, shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
· Right not to be subject to a decision based solely on automated processing, including profiling – except when such processing is necessary for entering into, or performance of, a contract or is permitted by law.
· Right to lodge a complaint with a supervisory authority, namely the National Supervisory Authority for Personal Data Processing (ANSPDCP).
To exercise these rights, except for the right to lodge a complaint with ANSPDCP, you can send a written request, as described above, as follows:
- by post, to the address: NATURA PAPER SRL, Romania, Cluj-Napoca, Piața Unirii, no. 10, ap. 1, Cluj county, to the attention of the DATA PROTECTION OFFICER who is the company administrator, Bánffy Béla,
or
- by e-mail, to the address: office@naturapaper.ro
Complaints can be sent to ANSPDCP, located at B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, postal code 010336, Bucharest, Romania
FINAL PROVISIONS
By using the site, you confirm that you agree to and accept this Privacy Policy.
Natura Paper SRL may decide from time to time to modify the Privacy Policy, we will make those changes on this page and update the modification date of the Privacy Policy below.
If you are our customer, you will receive an email or SMS notification regarding the change in the Privacy Policy.
This privacy policy was updated on 17.07.2025.
Abonează-te la newsletter-ul nostru pentru a fi la curent cu toate noutățile.
Designed & Developed | Prisma Solutions