PERSONAL DATA PROCESSING STATEMENT

1. Purpose of this Statement
The protection of personal data in the online environment has become both a legal obligation and a necessity. Every data controller is required to inform their clients or partners regarding the processing of personal data and to ensure its secure storage.

ALTIUS S.R.L., headquartered at Str. Lotrului 18, Brașov, Romania, registered with the Trade Register under No. J1992001017082, VAT No. RO 1106353, as data controller, hereby informs you about the collection, processing, and storage of your personal data submitted during the provision of our services and products.

2. What is Personal Data?
Personal data includes any information relating to an identified or identifiable natural person such as:

Full name, address, email, phone number, signature, financial information;

Data required by public authorities for service/product provision;

Audio-video recordings taken during your visit to any ALTIUS S.R.L. location or during technical support interactions;

IP address or any other technical or behavioral data essential for ALTIUS S.R.L.’s activity.

Any action (or set of actions) such as: collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure to third parties by transmission or dissemination, alignment, combination, restriction, archiving, erasure or destruction – that applies to personal data – falls under the scope of personal data processing.

3. Collection of Information
Sources of Information:
When using www.sergiana.ro or ALTIUS S.R.L.’s apps, you may be asked to complete forms or surveys (optional) required for service provision;

Through direct or indirect transactions between ALTIUS S.R.L., its partners, and users;

From public institutions and legal external sources.

Methods of Collection via www.sergiana.ro:
Directly;

Through browser usage and traffic data;

Through cookies.

3.1 Direct Collection of Personal Data
A1. Placing an order (with or without account creation) on [www.sergiana.ro] may involve providing: full name, address, email, and other necessary data for contracting, invoicing, and delivery.

Contractual data is stored for 3 years (general statute of limitations);

Fiscal data is stored for 10 years (according to tax legislation);

Orders cannot be fulfilled without the above data.

A2. Support services may require your phone number or email address in order to resolve your query. Additional personal data may be requested if strictly necessary. Support communications may be recorded.

A3. Newsletter subscriptions require an email address for personalized communication, retained only until consent is withdrawn.

A4. Payments are processed through partner financial institutions. ALTIUS S.R.L. does not retain payment information; data is shared securely with authorized partners.

3.2 Collection via Traffic Data
When visiting [www.sergiana.ro], your IP address, time of visit, location, and page views may be automatically collected. We use services such as Google Analytics exclusively for service improvement and website security.

3.3 Cookie-Based Data Collection
Cookies (session and persistent) are used to:

Remember passwords and language preferences;

Apply age-restriction filters;

Manage ad display preferences and frequency.

4. Purpose of Data Processing
ALTIUS S.R.L. processes personal data in order to:

Identify users accessing its services;

Monitor operations for internal audit and customer service;

Conduct marketing research and internal performance analytics;

Comply with legal proceedings related to service provision;

Archive data securely, both electronically and physically.

Certain legal authorities in Romania may request personal data through regulated procedures.

5. Legal Basis for Processing
According to EU Regulation 2016/679 (GDPR):

Art. 6(1)(b): Processing is necessary for performance of a contract (e.g., placing an order);

Art. 6(1)(c): Processing is required for compliance with legal obligations (e.g., invoicing);

Art. 6(1)(a): Consent is required for marketing-related activities (e.g., newsletters, cookies);

Art. 6(1)(f) & Law 506/2004 Art. 12(2): Processing is based on legitimate interest in securing and optimizing our website (Recital 49 GDPR).

6. Obligation and Consent
Providing personal data is mandatory for the provision of services.
Refusal to supply such data renders it impossible to fulfill your requests.
Users may object to data processing for direct marketing purposes.

7. Data Recipients
As previously stated, personal data may be disclosed to:

Legal authorities;

Contractual partners (auditors, lawyers, accountants, group companies, etc.) under strict confidentiality obligations.
In accordance with GDPR, personal data may be transferred outside the EU if necessary, under lawful safeguards.

Data will be retained:

3 years for contractual data;

10 years for financial data;

Until the purpose for which it was collected is achieved, after which data will be archived or securely destroyed.

8. Security Measures
Confidentiality is ensured through individual usernames and passwords;

All access/modification operations on personal data are logged (date, time, action);

Only authorized users can generate documents containing personal data (invoices, delivery notes, contracts, etc.).

9. User Rights under GDPR
Users have the following rights:

Right to be informed (Art. 13 & 14);

Right of access to their data (Art. 15);

Right to rectification or erasure (Art. 17), with legal exceptions;

Right to restriction of processing (Art. 18);

Right to data portability (Art. 20);

Right to withdraw consent at any time;

Right to object to processing for marketing or profiling purposes.

Users who feel their rights have been violated may file a complaint with the Romanian Data Protection Authority (ANSPDCP) or take legal action in a competent court.

10. Amendments to This Statement
ALTIUS S.R.L. reserves the right to modify this statement without prior notice. The updated version will always be available on www.sergiana.ro.

For any inquiries, please contact:
Email: office@sergiana.ro
Mailing address: Str. Lotrului 18, Brașov, Romania