Privacy Policy and Processing of Personal Data

URBAN MOWGLI SRL (hereinafter referred to as UM), with headquarters in Bucharest, Palisandrului str., no. 12 A, sector 1, having unique registration code 45908065 and serial number in the trade register J40/6349/2022, collects and processes personal data, in accordance with the legal provisions on the processing of personal data and the free circulation of these data.
This Policy refers only to the personal data that we process through our website (hereinafter referred to as the “Site” or “Platform”) in the context in which you interact with it by filling in the forms available on the platform, by creating an account, registering a review, placing an order, subscribing to the newsletter, filling in the contact form or if you are just browsing it.
Personal data that may be processed may refer to: name, surname, series and number of identity card, CNP, home address, delivery address, e-mail address, landline and mobile phone number or other designated by law as having a personal character.
We want to assure you that we have taken all the necessary measures to ensure the confidentiality of your data, these being processed only by the Operator’s staff who have been previously trained on the processing of personal data and authorized in this sense and which respects firm confidentiality commitments.

· “personal data – means any information regarding an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as a name, an identification number, location data, an online identifier, or to one or more specific elements of his physical, physiological, genetic identity, psychological, economic, cultural or social;
· “processing” – means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as the collection , recording, organizing, structuring, storing, adapting or modifying, extracting, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combination, restriction, deletion or destruction;
· “operator” means the person who, alone or together with others, establishes the purposes and means of personal data processing;
· “data subject” means the person whose data of a personal nature are the object of the processing.
· “consent of the data subject” – means any manifestation of the data subject’s free will, specific, informed and unambiguous by which he accepts, through a statement or through an action without equivocal, that the personal data concerning it be processed;
· “person authorized by the operator” means the person who processes the personal data on behalf of the operator.

Your navigation on the Site and interaction with it involves the processing by the Operator of the personal data that you disclose voluntarily (e.g. through the order or contact form, respectively in the case of subscribing to the newsletter), these being collected individually.
The user is properly informed about the processing of personal data when he makes his data available to the Operator through the forms on the website, thus UM fulfilling its obligation user information law.
UM collects, based on the voluntary provision of the data subject, the following personal data: name, surname, series and number of identity card, CNP, home address, e-mail address, number landline and mobile phone or other data designated by law as having a personal nature made available to the Operator.
The Operator also processes personal data marketing and communication only based on the prior consent of the users, but also technical data and browsing actions through cookie files and similar technologies.
The data specified above contribute to the provision of services offered by UM, specifically to online sale of products and services sold through the platform, but also when communicating with the Operator or sending marketing communications from him, but with the prior consent of the User.
In the event that you provide us with personal data which are not necessary for our purpose described below, respectively to honor the ordered services, to resolve complaints or to provide additional information, we reserve the right to remove them immediately from our database.
The operator may involuntarily collect other personal data belonging to you namely: IP address, browser version, time zone setting and location, operating system, platforms on the devices used to access our sites, etc. This information will not be used to identify natural or legal persons as the case may be, and will not be made public other than under the conditions inserted in this Privacy Policy, supplemented by the Cookies Policy.

UM processes your personal data for the following purposes and having the following legal grounds:
a) the processing is necessary for the execution of a contract to which the person the data subject is a party or to take steps at the request of the data subject before concluding a contract (art. 6 para. (1) letter b) of Regulation (EU) no. 679/ 2016 of the European Parliament and of the Council of April 27, 2016), specifically, in order to ensure the data subject’s access to the products/services sold on the platform and to conclude the online sale;
b) the processing is carried out based on the data subject’s consent (art. 6, paragraph (1), letter a) of Regulation (EU) no. 679/2016 of the European Parliament and of the Council of April 27, 2016), in the case of the transmission of commercial and marketing communications or the acceptance of cookies, other than the necessary ones;
c) the processing is necessary to fulfill a legal obligation (art. 6, paragraph (1), letter c) of Regulation (EU) no. 679/2016 of the European Parliament and of the Council of April 27, 2016), which is up to the UM to inform the consumer/client about the validation, dispatch, invoicing of the orders,
d) the processing is necessary for the purpose of the legitimate interests pursued by the Operator (art. 6 paragraph (1) letter f) of Regulation (EU) no. 679/2016 of the European Parliament and of the Council of April 27, 2016), in order to be able to provide correct and complete information about the products sold through the online platform, including by adding the reviews function, to solve problems of any nature related to the content of the site or the services and products offered by the Operator, as well as for the actions that involve interaction with the online platform.
In the case of minors under the age of 16, the processing of personal data may be carried out legally, only if and to the extent that the consent is granted or authorized by the holder of parental responsibility over the child.

Personal data processed through the site are retained for a reasonable period of time relative to the purpose of data processing, in accordance with the legal provisions on data archiving. The operator respects the data archiving deadlines imposed by law.
The data processed as a result of your subscription to the newsletter will only be processed until you withdraw your consent for processing.

UM undertakes that the collected data will be processed only in accordance with the declared purposes and not to publish, sell, rent, license, transfer, etc. unauthorized the database containing information about the data of the persons concerned to any third party not involved in the fulfillment of the declared purposes, with the exception of the situation in which the transfer/access/viewing etc. is required by the competent bodies, in the cases provided for by the regulations in force on the date of the event.
It is possible that your data will be disclosed to other companies that provide us with services and act as authorized persons, such as suppliers that provides website maintenance, IT, legal services, order delivery, etc.
Also, your data may be processed by our partners who provide payment processing services. These data are processed in order to make the payment related to your online order.
The provision of personal data to the previously mentioned partners and service providers will only be carried out on the basis of a confidentiality commitment from them, which constitutes an additional document to the contract of provide services, by which we guarantee that all personal data are kept safe and are provided based on the legislation in force.

Any natural person that browses our website, as a data subject, has the following rights in relation to UM, as a personal data Operator:
· The right to access means the data subject’s right to obtain a confirmation from the Operator whether or not it processes the personal data concerning it and, if so, access to the respective data and to information regarding the manner in which the data are processed;
· The right to rectification refers to the correction, without undue delay, of of inaccurate personal data processed or when completing them, if they are incomplete; requests that his personal data be deleted, without undue delay, if one of the following reasons applies: they are no longer necessary for the fulfillment of the purposes for which they were collected or processed, withdraws consent and there is no other legal basis for processing, objects to processing and there are no legitimate reasons to prevail, personal data were processed illegally, personal data must be deleted to comply of a legal obligation, the personal data were collected in connection with the provision of information society services;
· The right to restrict processing can be exercised if the data subject requests the limitation of the processing of his personal data, in which case they will be used strictly for the exercise of the other legal rights of the person concerned, including to respond to any requests/complaints from him;
· The right to portability refers to the right to receive personal data in a structured format, used in current mode and which can be read automatically and to the right that these data are are transmitted directly to another operator, when the processing is based on consent or the execution of a contract and is carried out by automated means, if this is technically feasible;
· The right to opposition refers to the right of the data subject to oppose the processing of personal data when the processing is necessary for the performance of a task that serves a public interest or when it has a legitimate interest in mind;
· The right to oppose the processing of data based on automatic individual decisions refers to the fact that the person the data subject has the right not to be the subject of a decision based exclusively on automatic processing, including the creation of profiles, which produces legal effects that concern the data subject or similarly affects him to a significant extent. However, it will not be possible to exercise this right if the decision is necessary for the conclusion or execution of a contract between the data subject and UM and is authorized by the law applicable to the Operator, provided that adequate protection of rights, freedoms and interests is ensured to the persons concerned or is based on the consent of the concerned person obtained in compliance with the legislation in force;
· The right to address the National Authority for the Supervision of the Processing of Personal Data. In the event that the concerned person considers that the rights provided above have been violated, he has the possibility to address the ANSPDCP by submitting a complaint.

The provisions of the Privacy Policy are supplemented by the provisions of the Cookie Policy, present on the website.