Bizar Concept attaches great importance and attention to the entire processing of personal data. Regardless of the capacity as buyer, customer, or user, as described in the Terms and Conditions section, any person interacting with the website, products or representatives of Bizar Concept and communicating personal data in this process will benefit from the processing of these data in compliance with Regulation (EU) 2016/679, also known as the “General Data Protection Regulation” or, more simply, the “GDPR”, as well as any other privacy law on personal data applicable in Romania.
This document was designed to present you, in a clear and transparent way, the context in which we collect, use and protect your personal data, as well as the possible situations and terms in which we may transfer your personal data to third parties, whenever you provide us with such data. From simple information interactions about our products and services to firm orders, both through our website and through the applications available on your mobile phone or through direct interaction with the seller, we dedicate, for any personal data we collect, all our resources and make every effort to process them in full compliance with the above-mentioned legislation.
Who we are and in what capacity we process your personal data
Bizar Concept is the trade name of S.C. Bizar Concept & Design S.R.L., a Romanian legal entity, with headquarters in Bucharest, sector 4, 17 Podul Inalt Street. This company is registered with the Trade Register under no. J40/5974/2017, and tax registration code 37460750 and is referred to herein as “Bizar Concept” or simply “we”. Our involvement in the storage and processing of your personal data takes place as a Controller under the data protection legislation, whenever we need this data to respond to your inquiries regarding Bizar Concept products or Bizar Concept website content.
How you can contact us for information about processing your personal data
Bizar Concept, through its legal representatives, is always interested in finding out your opinions and willing to provide you with any kind of information regarding your data processing whenever you request them. In this regard, please contact the Bizar Concept Data Protection Officer, either using the post or courier services to Bucharest, Sector 2, 40 Neagota Street, with the clear mention “To Bizar Concept Data Protection Data Officer” or by using the means of online communication, more exactly the email address email@example.com.
The main categories of personal data processed by Bizar Concept
Personal data is generally collected directly from you, therefore you have control over the type of information you provide us. Some such examples where you will be required to transmit personal data include, but are not limited to, the following:
Creating a Bizar Concept User Account – In this process, you will be required to provide your email address, your first and last name, personal identification number, exact address, phone number;
Placing an order – In this process, you will be asked to provide the details of the product you desire, the first and last name with which you place the order, the address for the delivery, the billing details, your preferred payment method, your bank card details should you choose to pay by bank transfer, the phone number at which you can be contacted, etc.
In addition to the personal data you provide yourself, Bizar Concept reserves the right to collect and further process certain data about your behavior on our website or during the use of dedicated mobile applications. The purpose of collecting these data is to provide you with offers as close as possible to your profile and interests, but also to provide you with a personalized online experience. To find out more about this, please read the section below for the purpose of processing your personal data.
Bizar Concept does not collect or otherwise process sensitive data as included in the General Data Protection Regulation in special categories of personal data, nor does it collect or process data of minors who have not yet reached the age of 16.
The purpose and basis on which we process your personal data
Bizar Concept collects and processes personal data in order to provide services for the benefit of the customer, to constantly improve the services offered for marketing purposes, but also to protect its own legitimate interests, when appropriate.
1. Collection and processing of personal data in order to provide Bizar Concept services to the benefit of the customer is required in case of a request for the conclusion and execution of a contract between Bizar Concept and you. The processing of these data may be enforced by accounting and / or tax legislation and include, but is not limited to, the following situations:
Request to create an account within the Bizar Concept website;
Any subsequent account management action taken by the account holder within the Bizar Concept website;
Order processing, from takeover to validation, billing, and shipping;
Solving cancellation requests or any other issues, regardless of their nature, as long as they concern an active order, goods or services purchased through the Bizar Concept;
The process of returning the products, in accordance with the legal provisions;
The process of reimbursing the value of the products, in accordance with the legal provisions;
Providing support in customer relationships, including providing answers to inquiries about orders placed or the goods and services offered by Bizar Concept.
2. Collection and processing of personal data to improve Bizar Concept services takes place under our constant desire to offer the best experience to Bizar Concept customers. For this purpose, we reserve the right to collect and use certain information about your behavior as buyer, but also to occasionally invite you to fill in satisfaction questionnaires after the completion of orders or in collaboration with different partners, active market studies and research. All of these activities are based solely on our legitimate interest in doing business, but with the due care of observing your fundamental rights and freedoms.
3. The collection and processing of personal data for marketing purposes is intended to send to Bizar Concept customers the most attractive offers on products and / or services for which they have expressed interest through previous interactions within the website or directly with Bizar Concept representatives. As a consequence, we can send you any kind of message on different communication channels, from email to SMS or phone calls, push or web push messages, etc., general or thematic news messages, with information about similar / complementary products to those you’ve already purchased, information about new offers or promotions, information on different products you’ve added to your Basket or Favorites, information about other types of products that you’ve been interested in, commercial communication information, from opinion polls to market research. In any of these situations, we will provide you with information that we consider to be of interest to you based on data about your user behavior, such as the products you have viewed, the products you have already purchased, or just products added to the wish list, data that contribute to creating a user profile. As always, we ensure that this data is processed based on your rights and freedoms, and that the decisions taken according to them will not have legal effects on you and will not, implicitly, affect you similarly to an extent significant. As a rule, all of these marketing communications are based on your prior consent, revocable at any time, provided that the decision to withdraw your consent is communicated to us either by contacting the Bizar Concept directly using the contact details listed above, either by using the unsubscribe link that accompanies the messages you receive from us.
Our marketing activities may occasionally rely on our legitimate interest in promoting us and developing our commercial activity, but even in these situations we will ensure that your fundamental rights and freedoms are not affected. Regardless of the context, you may request us at any time, by any of the means of communication listed above, to cease processing your personal data for marketing purposes, and we will comply with your request as soon as possible.
4. Collection and processing of personal data in order to defend our legitimate interests will take place should we need to use or transmit certain information in order to protect our rights and / or commercial activity. Such situations may include but are not limited to:
Bizar Concept website protection measures;
Measures to protect the Bizar Concept platform against cyber-attacks;
Measures to prevent fraud attempts;
Measures to detect fraud attempts, with the possibility of transmitting information to competent public authorities;
Measures to manage various other risks.
All these types of processing can be performed based on general grounds of our legitimate interest in protecting our commercial activity, but without excluding our duty to ensure that any of the measures implemented will provide a balance between those personal interests we try to protect and the fundamental rights and freedoms of Bizar Concept customers. Occasionally, the processing of such data will take place on the basis of legal provisions such as the obligation to safeguard the goods and values, as it is set forth in the relevant legislation.
For how long your personal data will be stored
A user’s personal data are, as a rule, stored for the duration of an account created by that user within the Bizar Concept website. Requests for deletion of certain information may be made even when the account is still active and the request to close the account may be made at any time, mentioning that Bizar Concept reserves the right to keep certain account information subsequent to the closure in special situations imposed either by the applicable law or by our legitimate interests.
To which third parties your personal data can be submitted
Access to your personal data will be granted by the Bizar Concept to third parties, private entities or public authorities, only in certain situations, when we have a legal obligation or the need to defend our legitimate interest, and only in compliance with the legal provisions on data protection and confidentiality of information, following the conclusion of contracts with these parties. Depending on the situation, we may transmit or give third parties access to some of your personal data, third parties such as service providers:
Other companies with which we develop Bizar Concept products and services offering programs.
In which countries can your personal data be transferred
At this time, your personal data is stored and processed only on the territory of Romania, with the possibility of subsequent transferring certain data to certain entities within or outside the European Union, even in countries the personal data protection level of which has not yet been recognized by the European Commission.
In the event of an international transfer of personal data, Bizar Concept will take all necessary steps to ensure that the process is carefully managed and that your rights and interests are protected. All such transfers to various service providers or other third parties will benefit from contractual protection and, where applicable, additional safeguards such as standard contractual clauses issued by the European Commission, certification schemes such as Privacy Shield concerning the protection of personal data transferred from within the European Union to the US, etc.
As with any other situation, you may contact us at any time, using any of the contact details listed above, to request additional information on the countries where we transfer your data or the safeguards applied to these transfers.
Measures to protect and safeguard your personal data
Bizar Concept is committed to ensuring the security of your personal data by implementing technical and / or organizational measures in line with the applicable standards in the field. In the case of transmitting personal data, the latest generation encryption algorithms will be used, storing the data itself on secure servers and ensuring data redundancy. With regard to making payments, these are facilitated by the MobilPay payment processor, any payment information being encrypted.
However, please note that despite all these measures to protect your personal data, the transmission of information via the Internet in general or through public networks in particular cannot be completely secure, with the risk of leakage data that can be seen and / or used by third parties other than those mentioned above, unauthorized third party. Bizar Concept cannot be held responsible for such vulnerabilities of systems that are not under our control.
Your rights in relation to the storage and processing of personal data
According to the General Data Protection Regulation, you have a number of rights related to your personal data. Based on these rights, you may request at any time not only access to your data, but also their amendment to correct mistakes in our files and, if applicable, you may oppose the processing of your personal data or you can exercise the right to submit complaints to the competent supervisory authorities, i.e. the right to appeal to the courts. Last but not least, depending on the situation, you may also be entitled to request the deletion of personal data or the restriction of processing of such data and the right to portability of your personal data.
Verifying the identity of the person who exercises his / her rights – as we take seriously the confidentiality of all personal data, it is necessary that when you communicate a request relating to such records, to use the email address with which you created your Bizar Concept account, precisely to confirm your identity and the right to benefit from the measures requested. Otherwise, Bizar Concept reserves the right to submit additional requests to confirm your identity, requests to provide additional identification information.
Applying charges for granting rights – Bizar Concept requires no fee to facilitate the exercise of a right to your personal data, except when your claim proves to be unreasonable, repetitive or excessive. In such situations, a reasonable amount will be charged, with the indication that it will be specified in advance, prior to the settlement of the request.
Response time to requests for personal data – Bizar Concept aims to respond to any valid requests for your personal data, within one month at the most, when the request is not particularly complicated. If the same user has submitted more than one request, resolving all requests may take up to two months, in which case you will be notified if a response will exceed the above-mentioned one-month deadline. Bizar Concept reserves the right to ask for additional questions or requests, such as the exact detailing of the type of information you wish to receive or the issues that concern you about your personal data, any question or additional request having the role of helping us to act faster and shorten the response time to your request.
Third party right – Bizar Concept does not have to comply with a specific request if its resolution would result in obvious and negative violation the rights and freedoms of other persons concerned by that application.
Access rights – include requests to confirm the processing of your personal data, to provide a copy of your personal data we process, detailed information about your personal data (what data we have and how we obtained them, how we use them, whom we offer access to, how we protect them, whether we transfer them abroad or how to file a complaint), if this information has not already been provided to you in this document.
Rectification rights – include requests for rectification or completion of your personal data already provided, which are incomplete or inaccurate, with the mention that we reserve the right to initiate additional data accuracy checks before the actual rectification, if we deem it necessary.
Data deletion rights – include personal data removal requests, requests that will only be approved under certain conditions: if those data are no longer necessary to meet the purpose for which they were initially collected, if you have decided to withdraw your consent to processing data on which you have initially consented to, if you have a legal basis to oppose the collection of those data, if your data has been processed illegally or if we have a legal obligation to respond to such request. However, Bizar Concept does not have the obligation to respond to requests for the deletion of your personal data in situations where the collection and processing of the data you wish to delete is necessary for the observance of a legal obligation or for the finding or exercise or defense of a right before the competent courts. In addition to these two main circumstances that could lead to the refusal to delete your personal data, there may occasionally be other circumstances in which we will decline your request, although the two above mentioned remain the most likely causes of a potential refusal.
Restrictions on data processing – include requests to restrict the processing of your personal data only in situations where: their accuracy can be challenged under the rectification rights so that the Bizar Concept can verify the accuracy of those data; data processing is illegal but you do not want them to be deleted; the data in question are no longer necessary to meet the purpose in which they were initially collected, but you need them to be able to ascertain, exercise or defend a right before the competent courts of law; you have already made use of the right to oppose the processing of your personal data and the request is being evaluated. Even following such a request for restrict, Bizar Concept reserves the right to continue to use your personal data in the situation in which you have your consent, we need to find out, exercise or secure the defense of a right before the competent courts, or we need to protect the rights of Bizar Concept or of any other individual or legal entity.
Data portability rights – include requests for the provision of your personal data in a structured format that can be routinely used and automatically read, as well as requests for direct porting to another data controller, provided that the processing of those data rely on your consent or the conclusion / execution of a contract with you and only if the processing is performed by automatic means.
Opposition rights – include the possibility to oppose at any time, for any reason whatsoever, depending on your particular situation at that time, to the processing of your personal data on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over our legitimate interest. In addition, you may at any time oppose any processing of your personal data for the purpose of direct marketing, including the creation of a personalized profile without the need to provide any reason, and Bizar Concept shall cease as soon as possible the processing of those data that are the subject of your opposition.
Automatic decision-making rights – include requests not to be the subject of decisions based solely on automatic data processing, provided that such decision produces legal effects with respect to your person or brings you similar damage to a significant extent. This right is excluded in situations where the automatic decision has been reached because of the need to conclude or run a contract with you and the decision is authorized by law, accompanied by appropriate safeguards to observe your rights and freedoms, or is already based on your explicit consent.
Complaint rights – include any complaint forms with the National Supervisory Authority for Personal Data Processing. In Romania, you can contact the supervisory authority at G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, on the telephone numbers +40.318.059.211 or +40.318.059.212 respectively, as well as at the email address firstname.lastname@example.org . Bizar Concept will ask you to contact us in advance and assures you that we shall use our best endeavors to solve any problem amicably, without this notice affecting in any way whatsoever your right to contact the National Supervisory Authority.