• Privacy Policy

    PERSONAL DATA PROTECTION POLICY

    Thank you for accessing the online scheduling Platform https://www.pinloops.com/

    The following information is intended to provide the user with more details about the processing and security of personal data, as well as the placement, use and management of cookies used by the https://www.pinloops.com/ Platform.

    The confidentiality of your personal data is one of the main concerns of SC DUK-TECH SRL, owner of the https://www.pinloops.com/ Platform.

    INTRODUCTION

    This Privacy Policy describes our privacy practices in relation to the use of the Pinloops Platform and the related applications, services, and programs offered by Pinloops Platform (collectively, the “Services”), as well as individuals’ choices regarding use, access and correction of personal information.

    SC DUK-TECH SRL, the owner of the Pinloops Platform, recognizes the importance of complying with all legal procedures laid down by the Regulation, related to the processing and security of personal data, as well as electronic transactions, and has taken all necessary measures to provide the highest possible degree of security. All information related to the personal data of users/subscribers is treated as confidential data.

    SC DUK-TECH SRL assumes the obligation to process, in accordance with the provisions of the General Regulation on Data Processing, in safe conditions and only for the purpose of legitimate interests or on the basis of the user's consent, the personal data that users provide when accessing https://www.pinloops.com/ and/or filling in the forms available on https://www.pinloops.com/.

    In order to benefit from the services offered by the Pinloops.com Platform, there is no need to transmit to SC DUK TECH SRL sensitive personal data (e.g. information related to racial or ethnic origin, political opinions, religious or other beliefs, health or trade union membership) or information related to criminal records.

    According to Article 13 of the Regulation, before collecting your personal data we will identify ourselves and inform you of the reason, purpose and justification for collecting it.

    THE OPERATOR

    SC DUK TECH SRL, owner of the Platform https://www.pinloops.com, with the following identification data:

    Fiscal code: RO 14935337,

    Ord. Reg. Com./year: J22/1097/2002,

    Registered office address: Iasi, I. CIHAC, nr.17, floor 1-2,

    Bank account: RO72RZBR0000060010327463,

    Bank: RAIFFEISEN BANK

    as a data controller, hereby provides you with information to explain how we process and protect personal data.

    The reason for the collection of personal data occurs when you interact with the Pinloops Platform through the website https://pinloops.com (by filling in the forms to register, make a reservation or request information - triggers for the collection action).

    WHAT KIND OF PERSONAL DATA DO WE PROCESS?

    SC DUK TECH SRL, owner of the https://www.pinloops.com/ Platform, processes:

    A. - as data controller, the personal data uploaded to the Pinloops Platform by users Customers (“End Users”) and

    B. - as processor of the controller, the personal data collected and posted by Business users (“Businesses” or “Providers”).

    A. Personal data of End Users:

    1. When an End User schedules or books an appointment with a Business using the Pinloops Services, SC DUK TECH SRL collects and processes some Personal Information: first name, last name, phone, e-mail address, postal address, gender, date of birth and CNP, appointments, vouchers. Among these, first name, last name, phone number, email and date of birth are mandatory to introduce the end-customer in the Pinloops Platform and to benefit from the services of the Platform.Some of the Personal Information may be collected and stored with Pinloops when the End User makes the appointment either as a Guest End User or by creating an End User Account through https://www.pinloops.com/ Platform. Such Personal Information may be used by SC DUK TECH SRL for the limited purpose of:
    2. Verifying creation of End User Account through Pinloops Platform.
    3. To provide reminders and notifications related to the appointments.
    4. To improve and personalize the End User experience on Pinloops Platform.
    5. To comply with legal obligations and assist in the prevention or investigation of fraud or other illegal activities.

    B. Personal data of Businesses/Providers:

    The personal data processed by SC DUK TECH SRL, as a person authorized by the Operator, respectively by the Business users, are:

    - name, surname, e-mail address, telephone, Facebook ID, appointments (date, time, duration, location, procedure, resources), subscriptions, vouchers, prices, other business specific data.

    For the collection and processing of this personal data, the data controller (in this case the Business user) will ensure the implementation of the General Data Processing Regulation, i.e. the identification of the legitimate interest or obtaining consent for the processing of sensitive data, for which it is fully responsible. The Controller shall be responsible for compliance with the provisions of the Regulation in the collection and processing of personal data by its own employees.

    SC DUK TECH SRL processes the personal data indicated above exclusively in the legitimate interest of providing the services of the Pinloops Platform in favor of the users, according to their requests, ensuring the maintenance, storage and data security, solving requests, questions or complaints made by users.

    The Personal Information collected may be used for the following purposes:

    • To create and manage the Business’s account on the Pinloops Services.
    • To communicate with the Business and provide customer support.
    • To provide the requested services and features to the Business.
    • To improve and optimize the Pinloops Services.
    • To comply with legal obligations and assist in the prevention or investigation of fraud or other illegal activities.

    We collect personal data in the following situations:

    1. 1. Directly from you, when you complete a registration, booking or information and contact form on https://www.pinloops.com/;
    2. 2. When you send us a request by email, phone or SMS or when you send us your CV for possible employment;
    3. 3. When provided to us indirectly: your information may be shared with us by services that already have access to your data (e.g. Facebook).
    4. 4. When you visit our Platform: we use cookies to identify you when you visit our Platform and to allow us to personalize your online experience (e.g. your login details, information you are interested in, etc.).

    The https://www.pinloops.com/ Platform does not send spam. We only send emails to those who have signed up to our subscription list and respect the decision of those who wish to unsubscribe.

    The Pinloops.com Platform processes personal data for specified purposes:

    1. a. In the legitimate interest of providing the services offered by the Pinloops Platform for the benefit of the End Users, i.e. for the purpose of the purchase by the End Users of the services offered by the Providers through this Platform, i.e. the provision in optimal conditions of the services requested by the End Users of the Provider, and, in general, the administration of the relationship between the Provider and the End Users. The processing of this personal data is necessary for user identification, account creation, login, change of account access data, request for information on the processing of personal data, communication of notifications on scheduling management and/or maintenance.
    2. b. For marketing purposes (including direct marketing), for market research purposes and including the undertaking of other activities by the Provider as permitted by law, based on the End User's consent for each specific purpose.
    3. c. For the purpose of analyzing whether your training meets the requirements of the job, where data processing is carried out following receipt of a CV from you;
    4. d. In addition, we may process your personal data in order to satisfy legitimate interests such as:
      • - managing and preparing reports for internal purposes, soliciting feedback or participating in surveys, and conducting research and/or analysis for statistical or other purposes so that we can establish our services, understand customer behavior, preferences and market trends, and review, develop and improve the quality of our products and services;
      • - the prevention, detection and investigation of crime, including fraud and money laundering or the financing of terrorist acts, and the analysis and management of business risks.

    SC DUK TECH SRL, as the owner of the Pinloops.com Platform, cannot be held liable for the inaccuracy of the data you have provided, your failure to update it and/or your negligence regarding data security, in the event that third parties have come into possession of your data.

    SC DUK TECH SRL, as the owner of the Pinloops.com Platform, keeps, according to the specifications of the Regulation, all information collected for the purpose of contractual or pre-contractual relations, as well as a record of transactions carried out in electronic format and which are necessary for the establishment, exercise or defense of a right in court.

    In this regard, a minimum set of data regarding your identity will be processed with the sole purpose of complying with the legislation in force regarding the recording, inventory, selection, storage and use of documents held by SC DUK TECH SRL.

    YOUR RIGHTS UNDER GDPR

    According to the General Data Protection Regulation, you enjoy the following rights regarding the processing of personal data:

    Right to information and access - you can request information on the activities of processing of your personal data.

    Right to rectification - you can rectify inaccurate personal data or complete them.

    Right to erasure of data ("right to be forgotten") - you can have your data erased if the processing was unlawful or in other cases provided for by law.

    A request for deletion of data will result in the impossibility to provide the Pinloops.com Platform services to the applicant, who will be fully liable.

    Right to restriction of processing - you may request restriction of processing if you contest the accuracy of the data and in other cases provided for by law.

    Right to data portability - you can receive, under certain conditions, personal data relating to you which you have provided to the controller in a machine-readable format or you can request that such data be transferred to another controller.

    Right to complain - you can complain to the National Supervisory Authority for Personal Data Processing.

    The right to withdraw your consent - where processing is based on your consent, you can withdraw your consent at any time. Withdrawal of consent will only be effective for the future, the processing carried out prior to withdrawal will remain valid.

    The right not to be subject to an automated decision, including profiling - you can request and obtain human intervention in relation to that processing, express your views and challenge the decision.

    The rights can be exercised, under the conditions of the Regulation, by means of a written request, dated and signed, sent by post to SC DUK TECH SRL, Iasi, I. CIHAC, nr.17, floor 1-2, or by e-mail to office@duk-tech.com.

    We will respond to the request within the time limit provided for by the GDPR. Please note that in order to send you a reply to such a request, you will need to prove your identity and provide us with any other details that will help us to respond to your request.

    We would like to inform you that we have the right to refuse, on the basis of legal provisions, abusive requests and/or certain requests that do not fall within the limits set by the rules in force.

    If you consider that the processing of your data is not carried out in compliance with all the requirements imposed by the Regulation, you may contact the National Supervisory Authority for the Processing of Personal Data ("ANSPDCP") - www.dataprotection.ro and/or the competent courts.

    PROCESSING OF PERSONAL DATA

    Your data will be processed by SC DUK TECH SRL on the basis of the consent given by you when you provide us with your personal data.

    Subsequently, you will be able to withdraw your consent at any time by sending a request to office@duk-tech.com. However, withdrawal of consent will not affect the lawfulness of any processing that has taken place prior to the withdrawal of consent.

    Personal data will be processed on the territory of Romania and/or other countries within the European Union, in compliance with the requirements of the Regulation.

    TRANSFER OF PERSONAL DATA TO THIRD PARTIES

    Your data collected and processed by SC DUK TECH SRL, as owner of the Pinloops.com Platform, will not be sold to third parties.

    Certain personal data may be made available to strategic partners that collaborate with Pinloops Platform, but only in situations that concern the legitimate interest of the service. These third parties may be:

    • - Domain hosting service provider;
    • - Email service provider;
    • - Scheduling service provider.

    Personal data will only be made available to third parties to provide and improve our products, services and advertisements; they will not be disclosed to third parties to be used for marketing purposes.

    SC DUK TECH SRL also complies with the provisions of the Regulation on anonymisation of personal data shared with third parties such as Google Analytics or Facebook.

    The categories of data processors processing data on behalf of the Company may include, but are not limited to:

    • - accounting service providers;
    • - IT support service providers;
    • - IT security service providers;
    • - analytics and search engine service providers that help us improve and optimize the Pinloops.com Platform.

    SC DUK TECH SRL will carry out appropriate prior assessments in selecting third party service providers and will require them to maintain adequate technical and organizational security measures to protect personal data and to process personal data only as instructed by SC DUK TECH SRL.

    Personal data may be disclosed to authorities and/or law enforcement agencies if required by applicable laws or if necessary to exercise our rights, including the Terms of Use, or to protect our legitimate interests under applicable laws.

    SC DUK TECH SRL may share personal data with other third parties in the context of certain types of transactions, including in the context of transactions involving a change of control of the Pinloops.com Platform, the sale of substantially all of its assets, or business restructurings.

    DATA SECURITY

    SC DUK TECH SRL will store your data on our servers and/or on servers hosted by third parties (including third party cloud services).

    We use appropriate technical and organizational measures designed to protect your personal data and prevent unauthorized access to it. These include:

    • - Data storage is carried out in a form that allows the identification of business account holders, i.e. user accounts, strictly for the time necessary to perform the services offered by the Pinloops.com Platform.
    • - SC DUK TECH SRL designates authorized users for the operations of collecting and entering personal data into the information system. Any modification of personal data may only be made by authorized users designated by the operator.
    • - SC DUK TECH SRL has taken steps to ensure that the information system records who made the change, the date and time of the change.
    • - SC DUK TECH SRL establishes the time interval at which backup copies of personal databases and programs used for automated processing will be executed. The users who perform these backups will be appointed by SC DUK TECH SRL, in a limited number. SC DUK TECH SRL has taken steps to ensure that access to backups is monitored.
    • - Computers and other access terminals are installed in lockable rooms with restricted access, and access to computers is by password and user only.
    • - If personal data is not acted upon for a certain period of time, set by the operator, the working session is automatically closed. The size of this period is determined according to the operations to be performed.
    • - Any access to the personal database is recorded in an access file (called log).
    • - For automatic processing, this information is stored in a general access file or in separate files for each user. Any unauthorized access attempt will also be logged. SC DUK TECH SRL will keep access files for at least 2 years, to be used as evidence in case of investigations. If investigations are prolonged, these files will be kept as long as deemed necessary.
    • - SC DUK TECH SRL has designed the telecommunications system so that personal data cannot be intercepted or transmitted from anywhere. If the telecommunications system cannot be secured, the operator is obliged to require the use of encryption for the transmission of personal data. Only strictly necessary personal data shall be transmitted via telecommunications systems.
    • - SC DUK TECH SRL has informed its employees about the provisions of Law no. 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data, the minimum security requirements for processing personal data, as well as the risks involved in processing personal data, depending on the specific activity of the user. Employees who have access to personal data have been trained by the controller on their confidentiality. They are obliged to log off when they leave the workplace.
    • - SC DUK TECH SRL ensures that all stations are protected with antivirus/antimalware software.
    • - Any security incidents such as: unauthorized access to the network or confidential information, block data changes, successive attempts of multiple passwords on a user account will be continuously monitored and reported.

    Data transmission over the Internet is not completely secure, and we cannot guarantee the security of your data until it reaches our website.

    Any transmission is done at your own risk and SC DUK TECH SRL will not be liable for any damage you or any other person may suffer as a result of unauthorized interception. Once we receive your data, we will use strict procedures and security features to try to prevent unauthorized access.

    CONFIDENTIALITY OF MINORS' DATA

    SC DUK TECH SRL does not knowingly collect personal data from persons under the age of 18.

    If a parent or guardian becomes aware of situations where their children have provided us with their personal data, they must inform SC DUK TECH SRL immediately.

    If SC DUK TECH SRL discovers that a person under the age of 18 has provided it with personal data, SC DUK TECH SRL will delete this information from its systems immediately, unless the parent or guardian explicitly consents to SC DUK TECH SRL processing the child's personal data for the specified purposes.

    COOKIES AND SOCIAL COMMUNICATION FEATURES

    Our website uses cookie files.

    Social communication functions, such as Facebook, used by SC DUK TECH SRL, may collect information about you, such as your IP address and the websites you visit, and set a cookie file to enable it to function properly. The processing of this information through interactions with these features is governed by the existing information policy/privacy policy of the company providing them.

    DISCLAIMER

    The www.pinloops.com Platform, owned by SC DUK TECH SRL, may contain links to other websites and/or other web pages that are not owned by SC DUK TECH SRL.

    SC DUK TECH SRL assumes no responsibility for the content of these sites and therefore shall not be liable for the content, advertising, goods, services, software, information or other materials available on or through these sites. SC DUK TECH SRL shall not be liable for any loss of personal data, any negative effects on the personal data of visitors or any other moral and/or patrimonial damage caused by access to those sites.

    HOW LONG YOUR DATA IS KEPT AND PROCESSED

    SC DUK TECH SRL will process and process your data for a period not exceeding the period necessary to fulfill the purpose for which the data is processed.

    Thus, if you withdraw your consent to the processing of your data, SC DUK TECH SRL will stop processing your data.

    In such cases, we will cease processing such personal data for the relevant purposes, subject to any legal obligation to process such personal data and/or our need to process such personal data for the purpose of exercising our legitimate rights.

    FINAL CLAUSES

    We may update this Policy from time to time in line with changes and additions to applicable legislation, as the services we provide change, and as technology develops.

    In these situations, we will notify you of any changes by posting a new version on the www.pinloops.com Platform. If you have provided us with your contact information and authorized us to contact you, we will notify you if we change this Policy.

    Please check this Policy periodically for changes.

    If you have any questions or concerns regarding the processing of your personal data or if you wish to exercise a right, please contact us using the contact details listed below.

    SC DUK TECH SRL

    Address: Iasi, I. CIHAC, nr.17, floor 1-2,

    Tel. 0040 725 925784, email office@duk-tech.com

    You can also contact the National Authority for Data Protection,

    Address: B-dul Magheru 28-30, Sector 1, postal code 010336, BUCHAREST.

    Contact details: http://www.dataprotection.ro/?page=contact

    e-mail: anspdcp@dataprotection.ro;

    Website: www.dataprotection.ro

    By ticking the acceptance box, you consent to the processing of your personal data for the purposes outlined above.