Data controller
The data controller is NIUCROM PROD COM SRL, 33 Rasaritului, Buftea, Ilfov, Romania, registered with the Trade Registry under J40/2761/2012, CUI RO29898008, legally represented by Romaniuc Vladimir.
Privacy requests may be sent to office@niucrom.com or by post to the address above. The responsible contact named in the published policy is Goanta Valentina Eugenia.
Personal data we collect
Personal data means information relating to an identified or identifiable natural person. Processing includes collecting, recording, organising, storing, adapting, consulting, using, transmitting or deleting that information.
- Name and surname
- Contact details, including email, phone and fax
- IP address and technical website-use information
- Information supplied by email, phone, fax or a newsletter signup
Consent and legal bases
Where processing relies on consent, consent must be freely given, specific, informed and unambiguous. You may withdraw it for the future by contacting Niucrom.
Depending on the interaction, processing may also be necessary to enter into or perform a contract, comply with a legal obligation, or pursue a legitimate interest such as efficient request handling, cybersecurity, fraud prevention and risk management.
Direct contact requests
Information sent by email, phone or fax is used to answer the request and any subsequent questions. It is not transmitted without permission except where another lawful basis or legal obligation applies.
The data is retained until you request deletion, withdraw consent, or the purpose for storage no longer applies. Mandatory statutory retention periods remain unaffected.
Why data is processed
- Providing products, services, support and problem resolution
- Operating, securing and improving the website and understanding service satisfaction
- Answering requests and managing contractual or pre-contractual relationships
- Sending offers, promotions, surveys or other communications where prior consent applies
- Protecting legitimate interests, including cybersecurity, fraud detection and cooperation with public authorities
Your rights
- Information about the processing of your data and access to that data
- Rectification of inaccurate or incomplete information
- Deletion or restriction of processing where the legal conditions apply
- Data portability
- Objection to processing
- The right not to be subject solely to automated decision-making
- Withdrawal of consent for the future
- A complaint to the Romanian data-protection supervisory authority or the competent courts
Security and breach notification
Niucrom states that it applies technical and organisational measures appropriate to the technology, context, purpose and risk of processing, including data minimisation and encrypted website connections.
Where required, a personal-data breach will be notified to the Romanian supervisory authority without undue delay and, where feasible, within 72 hours. Affected people will also be informed where the breach is likely to create a high risk, subject to the exceptions in GDPR Article 34.
Hosting, processors and external services
The published policy describes hosting and external service providers selected under GDPR Article 28 and required to apply suitable technical and organisational safeguards.
This website uses no advertising, analytics or social-media integrations, and its fonts are served from Niucrom’s own server. Pages linked from the website are governed by their own privacy information.
Processing records and data minimisation
Processing records may include controller contacts, purposes, categories of people and data, recipients, transfers, expected deletion periods and general security measures. Niucrom states that only data necessary for each purpose is processed by default.
Changes and contact
Niucrom may add to or amend this policy. Please review it periodically. Questions, requests to exercise a right, or requests for further details can be sent to office@niucrom.com or to NIUCROM PROD COM SRL, 33 Rasaritului, Buftea, Ilfov, Romania.