Processing of personal data

Last update: 17.08.2024

Who we are

HERBAL THERAPY LABORATORIES SRL, with headquarters in Botoșani, 9 Aleea Decebal Street, and a working point in Brașov, Stupini Neighborhood, 17 Fântânii Street, Trade Register number J7/345/2013, CUI RO32511151, is the operator of your personal data. We are committed to respecting the confidentiality and security of the information you provide to us, in accordance with applicable legislation, including Regulation (EU) 2016/679 (GDPR) .

Who does this policy apply to?

This policy applies to the processing of personal data of:

  • To customers and users of the website : www.herbal-therapy.ro
  • Our contractual partners : suppliers, customers, collaborators
  • Newsletter subscribers

What data do we collect?

Data you provide directly :

  • Name and surname
  • Email address
  • Phone number
  • Shipping and billing address
  • Health details (if applying for specific products or services)

Data collected automatically :

  • IP address and technical details about the device
  • Data about website browsing behavior
  • Usage preferences and interaction with the site

Sensitive data : We process sensitive personal data through the medical history form and make it strictly available to pharmacists to confirm your purchase of OTC medications, according to Order MS-444/2019 .

Purposes of data processing

We process your personal data for the following purposes:

  • Execution of a contract : We process the data to deliver the requested products and services, in accordance with Law no. 365/2002 on electronic commerce and Law no. 227/2015 on the Fiscal Code .
  • Legal obligations : We retain data to comply with legal requirements, such as archiving accounting documents, in accordance with Law No. 82/1991 on Accounting .
  • Legitimate interests : We process data for the protection and security of the site, the detection and prevention of fraud, in accordance with our legitimate interest, except in cases where the fundamental rights of users prevail.
  • Marketing and advertising : We use data to send you personalized offers and to analyze the effectiveness of our campaigns, based on your explicit consent.

Legal basis for processing

We process personal data based on:

Who do we share data with?

Your data may be shared with:

  • Trusted partners : Service providers, including for payment processing, deliveries, and service improvement.
  • Legal Authorities : If necessary to comply with applicable laws, or to protect our legitimate interests.
  • External consultants : Lawyers, accountants, auditors or other professionals, when necessary.

International data transfers

Your personal data may only be transferred outside the European Economic Area (EEA) if there are adequate safeguards in place, including:

  • Standard Contractual Clauses : Approved by the European Commission.
  • Binding Corporate Rules : Implemented by our partners.
  • Privacy Shield Certification : Or other approved data protection mechanisms.

Your rights

You have the following rights over your personal data:

  • Right of access : You can request a copy of the personal data we hold about you.
  • Right to rectification : If the data is inaccurate or incomplete, you can request its correction.
  • Right to erasure : You can request the deletion of your personal data under certain conditions.
  • Right to restrict processing : You can ask us to limit how we use your data.
  • Right to portability : You can request the transfer of your data to another service provider.
  • Right to object : You can object to the processing of your data for marketing purposes.
  • Right to withdraw consent : You can withdraw the consent you have given at any time.
  • Right to lodge a complaint with the supervisory authority : Complaints shall be lodged with the National Supervisory Authority for the Processing of Personal Data, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro

To exercise these rights, visit contact page to send us a message.

Data security

We use technical and organizational measures to protect personal data against unauthorized access, loss or destruction. Data transmission over the internet is not completely secure, but we take all necessary measures to protect your information.

Data retention period

Personal data is kept only as long as necessary for the stated purposes or as required by law:

  • Customers : During the contract period and 10 years after its conclusion, according to Law No. 82/1991 on Accounting .
  • Subscribe to the newsletter : Until unsubscribed.
  • Job candidates : During the recruitment process and 2 years after its completion.

Minors' privacy

Our website does not knowingly collect personal data from people under the age of 16. If we discover such data, we will delete it immediately.

Cookie policy

We use cookies to give you a better experience on our website. Full details are available in our Cookie Policy .

Contact

If you have any questions or concerns regarding the processing of your personal data, please visit the contact page . We are here to help you with any clarifications or additional information.