GDPR policy

Personal data and GDPR

The data collected from you during browsing, ordering and other occasions are considered private; sigmanortec.ro undertakes to strictly respect the confidentiality of customer data and not to transmit this data to third parties, other than those specified in this section, necessary for the delivery of the package and the issuance of the tax invoice.

Personal data are stored indefinitely or until the request to delete this data is received. They are kept as long as you have an active account open on the sigmanortec.ro site. This data contains:

- Delivery and billing address (Surname, Surname, Mail, Telephone, Full address)

- IP address

- Site connection history

- Shopping baskets

- Order history

- Complementary addresses

- Favorite products

- Purchased products

The user's personal data (email address) will be used by sigmanortec.ro only for:

- sending the confirmation and delivery/payment status of the order

- changing the status of the order

- if it is necessary to contact the customer for the successful completion of the order

- an email for the review of a recent order

- sending the invoice by mail

The personal data collected at the time of placing the orders will be sent to the courier services strictly for sending the package. The data sent to the courier are Name and Surname/Name, Delivery address, Telephone number, as well as other information necessary for delivery.

The user's phone number will be used strictly for the delivery of the package (it is sent to the courier by generating the AWB) and to contact the customer strictly for problems or uncertainties related to the order being processed.

The personal data communicated in the Billing Address will be used to generate the fiscal invoice and will be stored in the billing program, either "local" or "cloud".

We use the "SmartBill" cloud service for invoicing. It complies with GDPR requirements. The personal data collected by this service are used exclusively for the purpose of providing the services offered by SmartBill - invoicing and management. Data for invoicing and management are required by law and are registered in the SmartBill program for a purpose clearly defined and imposed by law.

Data collected by SmartBill: the data entered in the billing address, Surname, Surname, Full address, Mail address, Telephone number.

SmartBill is authorized to send messages by e-mail on our behalf (in our case only the invoice) and to collect and process information if the documents sent and hosted in the SmartBill platform have been opened and/or viewed by our clients.

The duration of personal data processing is identical to the duration of the main service provision contract between Sigmanortec Srl and Intelligent IT Srl (SmartBill). The personal data present in SmartBill are stored in the data centers in Ireland and Germany of Amazon Web Services Inc. Seattle, US which is certified in the US-EU data protection program called Privacy Shield and is GDPR-compliant.

In order to avoid registering the sender of the email as SPAM, the invoice is sent in electronic format, not by attachment, but by a link that makes a secure connection to our account and allows viewing, printing and downloading the invoice.

Your rights:

- You have the right to know the reason why your personal data is necessary.

- The right of access: you have the right to access your personal data of which we are aware.

- The right to correction/rectification of personal data.

- You have the right to revoke our access to your personal data.

- You have the right to transfer your personal data.

- To exercise these rights, please contact us at [email protected]

You can always download a copy of the personal data in our possession directly from your account, in the GDPR section.

Deleting your personal data from our database can be done with a written request to [email protected]