Privacy Policy

By using the FILTRO.ro website, the services offered through it, or when contacting us via the contact form, email, or phone, visitors entrust us with personal information.

FILTRO.ro's policy is to never sell or rent the personal data of its visitors.

Through this document, entitled "Privacy Policy", we wish to explain what data we store, transmit or process and for what purposes.

The Privacy Policy, together with the Cookie Policy, which form an integral part of the website's Terms and Conditions, applies to all visitors in their relationship with FILTRO.ro

We wish to emphasize that we take privacy seriously, which is why we make every effort to store and process the information entrusted to us safely and carefully.

1. TERMS

The terms used in the Privacy Policy are those presented in the website's Terms and Conditions, in addition to which we also include:

GDPR (General Data Protection Regulation) refers to Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/CE.

Data subject means any person whose data is collected, retained or processed.

EEA refers to the European Economic Area.

Personal data means any information relating to an identified or identifiable natural person (the data subject).

According to GDPR, any User of the website is a Data Subject, meaning an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

2. WHO WE ARE

The FILTRO.ro website and its subdomains (hereinafter referred to as "FILTRO") is managed by S.C. PureTECH Solutions S.R.L.. (abbreviated as "PureTECH") through the FILTRO team, with the following identification details: Unique Registration Code RO 35379722, registered at the Trade Register under no. J23/29/2016, with registered office at Strada Rezervelor, nr. 64, bl. 1, ap. 101, Chiajna, Ilfov, Romania. Email: contact@filtro.ro.

According to GDPR, PureTECH is a personal data controller.

3. WHAT INFORMATION WE COLLECT

Information that the User voluntarily provides to us in order to use various services on the website:
– Within the forms associated with the member account: first name, last name, form of address, email address, billing address, delivery address, phone number;
– When creating/connecting a member account with Google, we also collect: Google ID.
– Within billing data: first name, last name, residential address (used solely for billing purposes), phone number;
– Within the contact form or when contacting us by email: first name, last name, email address and any other information you send us.

Information we collect automatically: During browsing, we collect technical information about the user's visit to the website. This information may include IP address, operating system, browser, browsing activity and other information about how the User has interacted with the website and the traffic generated by the User through our website.
We may collect this information through the use of cookies or other similar technologies (e.g. web beacons, pixels, ad tags, JavaScript pixels/tags) to recognise the User. We also grant access to third parties (e.g. service providers) to use cookies and similar technologies on our website. Details about cookies and the technologies used can be found on the cookies page.

4. LEGAL BASIS FOR PROCESSING

Regarding the data you provide voluntarily (by completing it in the website's forms or by sending it via email), the legal basis is "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract" (Art. 6(1)(b) of Regulation (EU) 679/2016).
According to GDPR, your consent is not required in situations where processing is necessary for taking steps to conclude a contract, fulfilling a legal obligation, or pursuing a legitimate interest.

Regarding the data we collect automatically through the use of cookies or other similar technologies, the legal basis for processing is consent. By accessing the website, you validly provide your consent to the processing.

5. PURPOSES OF DATA COLLECTION AND PROCESSING

We collect and process user data for the following purposes:
– to provide internet services (online information and sales);
– to provide information on the status of orders, services and products offered;
– to respond to users' questions and requests;
– to offer and improve the services we provide;
– to protect against cyber attacks and abuse;
– to ensure the security and integrity of systems;
– to defend ourselves in the event of litigation;
– to provide information at the request of authorities;
– for advertising and publicity;
– for marketing and promotion of PureTECH products and services and those of its partners (only where you have given your prior consent);
– for tracking and monitoring sales and consumer behaviour;
– for electronic communication services;
– for market research;
– for statistical purposes.

6. HOW LONG WE STORE DATA

We store personal data only for the period necessary to fulfil the purposes, but no longer than 10 years from the last visit to the website or the last interaction with us.

FILTRO.ro retains personal data only for as long as necessary to fulfil the purposes for which it was collected, in compliance with applicable legal requirements. Retention periods are determined based on the type of data and the purposes of processing, as follows:

• Order and billing data: Personal data related to placed orders, including name, delivery address, and billing details, are retained for a period of 5 years, in accordance with the provisions of the Romanian Fiscal Code (Law no. 227/2015). This period is required to fulfil the legal requirements for retaining financial and tax records.
• Payment data: Data processed through services such as NETOPIA Payments is stored in accordance with the privacy policies of these platforms and is retained only for as long as necessary to complete the transaction. FILTRO.ro does not retain full credit card details, only the information necessary to identify the transaction.
• Marketing data: Information used for email and SMS marketing campaigns is retained until the user withdraws their consent or unsubscribes from marketing communications. Users may withdraw their consent at any time, and their data will be removed from our marketing lists.
• Support and communications data: Information collected through customer support platforms or via email is retained for a period of 3 years from the last interaction with the customer. This period allows us to provide efficient support services and to resolve any disputes or complaints.
• Reviews and user-generated content: Data and reviews provided by users through the TRUSTED.ro application or on the FILTRO.ro website are retained for as long as the review is active on the website or until the user requests its removal.
• Analytical data: Data collected through Google Analytics and Microsoft Clarity is retained for a period of 13 months. This information is used to analyse website usage trends and to improve the user experience.

7. WHO WE SHARE USER DATA WITH

We will not disclose member/customer data to third parties for their own marketing or commercial purposes without the prior consent of the members.

User information is transmitted to the following entities:
Service providers. The most frequently used being:
– Online payment processor MobilPay – on a case-by-case basis, when required to process a payment;
– Facebook Pixel – for statistics related to campaigns run through Facebook (we do not send personal data through it; it will only be used when we run campaigns through Facebook plus a period after their completion);
– Facebook Login – for authentication to the member account;
– Google Youtube – for displaying video content (e.g. video tutorials);
– Google Analytics – for statistical purposes (if you do not wish to be processed for statistics, you can use this tool). Within Google Analytics: data is collected for remarketing and advertising; data associated with cookies, user identifiers or advertising identifiers is retained for 50 months from the last visit to the website (the shortest period possible); the User's IP address is anonymised (details); no associations are made or transmitted with IDs within the website (the User-ID feature being disabled);
– Tawk.to – live chat through which we communicate online with website visitors and customers. It tracks the pages visited by a visitor and helps us better understand questions asked through the chat.
– Mailchimp – email sending service. Subscription is carried out only for direct FILTRO customers or through double opt-in, on a voluntary basis.
– Microsoft Clarity – a service for the anonymous tracking of user interaction with the website. This service helps us improve the browsing experience based on statistics.
– TikTokPixel – for statistics related to campaigns run through TikTok (we do not send personal data through it; it will only be used when we run campaigns through TikTok plus a period after their completion);
– TRUSTED.ro – This online store sends certain personal data of its customers (order ID, first name, email address, county) to the Processor Feedback.TRUSTED.ro, in order to obtain (independently from the store) and publish customer opinions about its services. Personal data is retained by the Processor for a maximum period of 67 days (TRUSTED.ro reserves the right to modify the maximum period to meet the needs of its customers). All published reviews are anonymous.

All providers are selected with care to ensure they provide enhanced confidentiality for personal data. Providers have a limited capacity, or no capacity at all, to use user information for purposes other than providing the contracted services to us.

The storage and/or processing of data by service providers is carried out in accordance with their respective Privacy Policies, which users can consult on the providers' websites.

Courts, prosecutors' offices or other public authorities when there is an express request from them and the law requires it;

Other third parties only on a case-by-case basis with the user's consent or at their request/instructions.

PureTECH may provide third parties with general information relating to sales, website traffic and other information; however, such information will be provided for statistical purposes and will not contain personal data.

Transfer of Personal Data Outside the European Union: In order to provide and improve our services, we transfer users' personal data to service providers located outside the European Union. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission or, in certain cases, by other recognised legal mechanisms, such as the EU-US Privacy Framework.

1. Standard Contractual Clauses (SCCs). To ensure adequate protection of personal data, we have concluded agreements based on Standard Contractual Clauses (SCCs) with the following international service providers:

• Google: We use Google services, including Google Analytics and Google Ads, to analyse and improve the performance of our website and to run advertising campaigns. Data transfers are governed by SCCs.

• Microsoft: We use Microsoft services, such as Microsoft Azure and Office 365, for data storage and management. Data transfers are governed by SCCs.

• Amazon: We use Amazon Web Services (AWS) for data storage and processing. Data transfers are governed by SCCs.

2. EU-US Privacy Framework. For service providers that are certified under the EU-US Privacy Framework, the transfer of personal data is carried out in accordance with this framework. We currently have the following providers that comply with this framework:

• Meta (Facebook): We use Meta services for advertising and data analysis. Data transfers are governed by the EU-US Privacy Framework.

• TikTok: We use TikTok for promotion and to analyse usage trends. Data transfers are governed by the EU-US Privacy Framework.

8. USER RIGHTS

– Right to withdraw consent – Pursuant to Art. 7 of GDPR
– Right of access – Pursuant to Art. 15 of GDPR;
– Right to rectification – Pursuant to Art. 16 of GDPR
– Right to erasure ("right to be forgotten") – Pursuant to Art. 17 of GDPR
– Right to restriction of processing – Pursuant to Art. 18 of GDPR
– Right to data portability – Pursuant to Art. 20 of GDPR
– Right to object – Pursuant to Art. 21 of GDPR
– Right to lodge a complaint with a supervisory authority – List of authorities
– Right not to be subject to a decision based solely on automated processing, including profiling
– Right to seek judicial remedy

9. EXERCISING YOUR RIGHTS

Users may update their cookie preferences at any time by using the tools available on the Cookie page.

Customers may update at any time their preferences regarding the emails they wish to receive from PureTECH or PureTECH's partners in the Account Settings page.

PureTECH reserves the right to maintain a log of all user preferences for the entire duration of their data storage period.

For any questions regarding the processing of personal data or to exercise your legal rights in relation to the data we hold, you can contact us via the contact form or by sending an email to dpo@filtro.ro.

Notes: We will endeavour to respond to requests within 30 days or less. However, this period may be extended for specific reasons related to the complexity of the request;
In certain situations, we may be unable to provide access to some or all personal data due to legal provisions. In such cases, we will specify the reason for the refusal;
In some cases, we may be unable to identify certain personal data solely on the basis of the identifiers provided in the request. In these cases, we will be unable to fulfil the request unless additional information is provided to enable identification.

10. AGE RESTRICTIONS

The services offered and the website itself are intended for users who are at least 16 years of age.
If any person knows or has reason to believe that a person under the age of 16 has sent us personal data, we ask them to contact us.

11. DATA SECURITY

To ensure data security, PureTECH uses advanced security procedures alongside employee policies and working procedures to protect personal data collected in accordance with applicable legal provisions.

Some of these include:
– Interaction between the website and users, as well as the collection and transmission of data, takes place over an encrypted SSL connection (A+ certified);
– We use encryption, pseudonymisation and anonymisation methods where necessary;
– Servers are co-located in data centres where they are protected by limited and monitored physical and remote access;
– The software used is continuously updated and improved;
– We use monitoring, detection and protection systems against vulnerabilities, attacks, exploits, etc.;
– Access to data is restricted to authorised personnel only and solely for the actions required.

PureTECH's technical team makes every commercially reasonable effort to protect and process the personal data received from Users under optimal security conditions.
Nevertheless, in the unlikely event of a security breach, we will notify the affected users (where applicable) and will take all necessary steps to minimise the impact on users.

12. CHANGES

The Privacy Policy may be updated at any time. In the event of changes that have a significant impact, we will display a notification on the website, in the Member's account, or via an email notification (if the Member has opted for this).

All changes become effective and enter into force immediately after the update.

13. ACCEPTANCE OF THE PRIVACY POLICY

By using the website, the services offered through it, or when contacting us, you declare that you have been adequately informed about the processing of your personal data through the information specified in this "Privacy Policy".

This document was last updated on 30 July 2024.