Privacy Policy
1. Introduction and Scope of this Policy
Vedra Chemicals (SC VEDRA SRL), a company duly incorporated and operating under the laws of Romania, with its registered office at Calea lui Traian no. 82, Râmnicu Vâlcea, Romania, is profoundly committed to safeguarding the privacy and ensuring the security of personal data pertaining to its business contacts, partners, and clients. This comprehensive Privacy Policy meticulously outlines the methodologies by which we collect, utilize, disclose, and protect information when representatives of business entities interact with our digital platforms – currently accessible viahttps://vedrachemicals.ro/ (our official corporate domain ) – engage with our specialized B2B services, or communicate with us in a professional capacity. Our data processing activities are conducted in strict adherence to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), and all pertinent national legislation, notably Law No. 190/2018 on measures for the implementation of Regulation (EU) 2016/679.
This policy is specifically and exclusively tailored for our business-to-business interactions. It explicitly does not extend to personal data collected from individual consumers for personal, family, or household purposes, as Vedra Chemicals operates solely within a B2B framework. We strongly urge all business representatives and professional contacts to meticulously review this Privacy Policy to gain a thorough understanding of our practices concerning their professional personal data and the rigorous measures we employ for its protection.
2. Identity and Contact Details of the Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the entity responsible for determining the purposes and means of the processing of your professional personal data is:
SC VEDRA SRL
•Registered Office: Calea lui Traian no. 82, Râmnicu Vâlcea, Romania
•Registration Number (J):J38/53/1993
•Unique Identification Code (CUI):3567108
•Email: office@vedrachemicals.ro
•Telephone: +40 350 408 098
For any inquiries or concerns regarding this Privacy Policy or our data processing practices, please contact us using the details provided above.
3. Fundamental Principles Governing Data Processing
Vedra Chemicals is steadfast in its commitment to the core principles of personal data processing as articulated in Article 5 of the GDPR. These principles form the bedrock of our data handling practices:
•Lawfulness, Fairness, and Transparency (Article 5(1)(a)): All processing of professional personal data is conducted on a lawful basis, in a fair and transparent manner, ensuring that data subjects (business representatives) are fully informed about how their data is being used.
•Purpose Limitation (Article 5(1)(b)): Personal data is collected for specified, explicit, and legitimate business purposes only. These purposes include, but are not limited to, contract negotiation, service delivery, B2B marketing, and compliance with legal obligations. Data will not be further processed in a manner that is incompatible with these initial, clearly defined purposes.
•Data Minimization (Article 5(1)(c)): We ensure that the professional personal data collected is strictly adequate, relevant, and limited to what is absolutely necessary in relation to the specific business purposes for which it is processed. We actively avoid the collection of superfluous or irrelevant information.
•Accuracy (Article 5(1)(d)): Vedra Chemicals takes all reasonable steps to ensure that professional personal data is accurate, complete, and, where necessary, kept up to date. We implement procedures to promptly erase or rectify any inaccurate data, taking into account the purposes for which it is processed.
•Storage Limitation (Article 5(1)(e)): Personal data is retained in a form that permits the identification of data subjects (business representatives) for no longer than is strictly necessary for the fulfillment of the business purposes for which the data was processed. Once data is no longer required, it is securely deleted or anonymized.
•Integrity and Confidentiality (Article 5(1)(f)): We process professional personal data in a manner that guarantees appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. This is achieved through the implementation of robust technical and organizational measures.
4. Categories of Professional Personal Data Collected
Our data collection is exclusively focused on information relevant to our B2B operations. We may collect and process various categories of professional personal data, contingent upon your interaction with our website and B2B services:
4.1. Data Provided Directly by You (as a Business Representative)
This category encompasses information you voluntarily provide to us when acting on behalf of your organization. This includes, but is not limited to, data submitted when you:
•Complete and submit contact forms on our website (e.g., the “Request a Quote” form, general inquiry forms).
•Engage in direct communication with us via professional email addresses, business telephone numbers, or other dedicated communication channels.
•Subscribe to our B2B newsletters, industry updates, or other marketing communications specifically relevant to your professional role or industry sector.
•Enter into business transactions, negotiate terms, or establish contractual agreements with Vedra Chemicals on behalf of your company.
Specific Categories of Data Collected:
•Business Contact Identification Data: Full name, professional title, department, and role within your organization.
•Business Contact Information: Professional email address, direct business telephone number, mobile business number, and the postal address of your company.
•Company Information: Full legal name of your company, legal form, registration number (CUI/J), VAT number, industry sector, size of the organization, and specific business needs or interests.
•Inquiry and Transactional Data: Detailed information regarding your organization’s chemical product requirements, desired quantities, preferred packaging, specific delivery timelines, technical specifications, quality certifications required, and any other data pertinent to your business requests or ongoing transactions.
4.2. Data Collected Automatically (Website Interaction)
As you, in your professional capacity, navigate and interact with our website, certain technical and usage data may be collected automatically. This process primarily relies on the deployment of cookies and analogous tracking technologies. For an exhaustive explanation of these technologies and your control options, please refer to our dedicatedCookie Policy.
Specific Categories of Data Collected Automatically:
•Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, geographical location derived from IP, browser plug-in types and versions, operating system, platform, and the type of device utilized for accessing our website in a business context.
•Usage Data: Comprehensive information detailing your interactions with our website for business purposes, including the specific pages visited, the duration of visits, clickstream data, navigation paths, and referring website addresses.
5. Purposes and Legal Basis for Processing Your Professional Personal Data
Vedra Chemicals processes your professional personal data exclusively for specific, legitimate business purposes, and only when a valid legal basis, as defined by Article 6 of the GDPR, can be unequivocally established. Our processing activities are underpinned by the following justifications:
|
Purpose of Processing |
Legal Basis for Processing (GDPR Article 6) |
Detailed Explanation |
|
Responding to Business Inquiries and Providing Quotes |
Legitimate Interest: To effectively respond to business-related requests for information and to provide accurate and timely quotations for our B2B services and products.Performance of a Contract: To undertake necessary steps at your organization’s request prior to the formal establishment of a commercial contract. |
This processing is essential for initiating and developing potential business relationships, ensuring that we can address your company’s specific needs and provide relevant commercial proposals. |
|
Fulfilling Contractual Obligations with Your Organization |
Performance of a Contract: To execute the terms and conditions of agreements pertaining to chemical intermediation, supply, and logistics services formally entered into with your company. |
This is a fundamental requirement for the successful delivery of our services and products, encompassing order processing, delivery coordination, and invoicing. |
|
Conducting B2B Marketing Communications |
Consent: Where you, as a business representative, have provided explicit, informed, and unambiguous consent to receive B2B marketing communications (e.g., newsletters, product updates, industry insights).Legitimate Interest: To promote our B2B services and products to existing business partners or potential corporate clients, provided that your fundamental rights and freedoms are not overridden by our interests. This is always subject to your right to opt-out. |
This enables us to keep your organization informed about relevant product developments, market trends, and service enhancements that may be of professional interest. |
|
Improving Our Website and B2B Services |
Legitimate Interest: To analyze website usage patterns and user behavior (in a B2B context) to identify areas for enhancement, optimize website functionality, and refine the overall user experience for business representatives. |
This continuous improvement process ensures that our digital platforms and service offerings remain relevant, efficient, and user-friendly for our corporate clientele. |
|
Ensuring Website and Data Security |
Legitimate Interest: To protect our IT infrastructure, prevent fraudulent activities, detect and mitigate security threats, and ensure the secure and uninterrupted operation of our website for all business interactions. |
Security measures are vital for maintaining the integrity of our systems and protecting both our and your organization’s data from unauthorized access or breaches. |
|
Complying with Legal and Regulatory Obligations |
Legal Obligation: To adhere to all applicable national and European Union laws and regulations, including those pertaining to data protection, international trade, chemical product safety, and financial reporting relevant to B2B operations. |
This ensures that Vedra Chemicals operates within the legal framework, avoiding penalties and maintaining its license to operate. |
6. Disclosure and Sharing of Your Professional Personal Data
Vedra Chemicals may disclose or share your professional personal data with specific categories of recipients, strictly for the legitimate business purposes outlined in this Privacy Policy and always under stringent contractual obligations and appropriate safeguards. We do not sell or rent your personal data to third parties for their independent marketing purposes.
Categories of Recipients:
•Service Providers: We engage trusted third-party companies to perform various services on our behalf. These may include IT support and hosting providers, analytics service providers, customer relationship management (CRM) platforms, and B2B marketing automation tools. These providers are contractually bound to process your data exclusively according to our documented instructions and to implement robust security measures.
•Business Partners: In the context of facilitating chemical intermediation and supply chain management, it may be necessary to share relevant professional personal data with our trusted network of suppliers, manufacturers, and logistics partners. This sharing is meticulously limited to the data strictly required for the successful execution of a specific business transaction or service delivery to your organization.
•Legal and Regulatory Authorities: We may disclose your data to competent governmental, regulatory, or judicial authorities when mandated by law, in response to valid legal processes (e.g., court orders, subpoenas, government requests), or to protect our legal rights, property, or safety, or the rights, property, or safety of others.
•Professional Advisors: Our external legal counsel, accountants, auditors, and insurers may receive access to relevant data as necessary for the provision of their professional services to Vedra Chemicals, always under strict confidentiality obligations.
We ensure that any third party with whom we share your data is contractually obligated to respect the security and confidentiality of your professional personal data and to treat it in accordance with applicable data protection laws. We explicitly prohibit our third-party service providers from utilizing your professional personal data for their own independent purposes.
7. International Data Transfers (Outside EEA)
Given Vedra Chemicals’ active engagement in both Romanian and international markets, it may, on occasion, be necessary to transfer your professional personal data to countries situated outside the European Economic Area (EEA). Such transfers are typically required to facilitate our global B2B services, for instance, when collaborating with international suppliers, manufacturers, or logistics partners located in non-EEA countries.
In all instances of international data transfer, Vedra Chemicals is committed to ensuring that your data receives a level of protection equivalent to that afforded within the EEA. We implement robust safeguards, which may include:
•Adequacy Decisions: Transferring data to countries that the European Commission has officially deemed to provide an adequate level of data protection, thereby ensuring a comparable standard of privacy protection.
•Standard Contractual Clauses (SCCs): Implementing the Standard Contractual Clauses approved by the European Commission. These are legally binding contractual commitments that impose specific data protection obligations on the recipient of the data, ensuring adequate safeguards are in place.
•Explicit Consent: In specific, limited circumstances where no other legal basis or safeguard applies, we may seek your explicit consent for the proposed transfer, having first informed you of the potential risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards.
We conduct thorough due diligence on all international data transfer mechanisms and recipients to ensure compliance with GDPR requirements.
8. Data Security Measures
Vedra Chemicals employs a multi-layered approach to implement stringent technical and organizational measures designed to protect your professional personal data from unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework is continuously reviewed and updated to adapt to evolving threats and best practices. These measures include, but are not limited to:
•Encryption: Utilization of industry-standard encryption protocols (e.g., SSL/TLS) for all data transmitted over our website, ensuring secure communication channels. Where appropriate, data at rest may also be encrypted.
•Access Controls: Implementation of strict access control policies, ensuring that access to professional personal data is granted only to authorized personnel on a need-to-know basis, aligned with their specific job roles and responsibilities. Role-based access and strong authentication mechanisms are enforced.
•Data Minimization: Our systems and processes are designed to collect and retain only the minimum amount of professional personal data strictly necessary for the stated business purposes, thereby reducing the potential impact of any security incident.
•Regular Security Audits and Vulnerability Assessments: Conducting periodic internal and external security audits, penetration testing, and vulnerability assessments of our IT infrastructure and data processing systems to identify and remediate potential weaknesses.
•Employee Training and Awareness: Mandatory and ongoing data protection training for all employees, fostering a strong culture of privacy awareness and ensuring that staff are fully cognizant of their responsibilities under GDPR.
•Data Processing Agreements (DPAs): Establishing legally binding Data Processing Agreements with all third-party processors, obligating them to adhere to GDPR standards and implement appropriate security measures.
•Physical Security: Implementing physical security measures to protect our premises and data storage facilities from unauthorized access.
While we strive to use commercially acceptable means to protect your professional personal data, it is imperative to acknowledge that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your data transmitted to our website; any transmission is undertaken at your own risk. Upon receipt of your information, we commit to employing strict procedures and robust security features to endeavor to prevent unauthorized access.
9. Your Data Protection Rights (GDPR Articles 15-22)
Under the General Data Protection Regulation (GDPR), you, as a data subject (business representative), are endowed with a comprehensive set of rights concerning your professional personal data. Vedra Chemicals is fully committed to respecting and facilitating the exercise of these rights:
•Right of Access (Article 15): You have the right to obtain confirmation from us as to whether or not professional personal data concerning you is being processed, and, where that is the case, to request access to that personal data and receive specific information regarding the processing activities.
•Right to Rectification (Article 16): You have the right to request that Vedra Chemicals rectify any professional personal information you believe is inaccurate or incomplete without undue delay.
•Right to Erasure (‘Right to be Forgotten’) (Article 17): You have the right to request the erasure of your professional personal data under certain specific conditions, for instance, if the data is no longer necessary for the business purposes for which it was collected, or if you withdraw consent and there is no other legal ground for processing.
•Right to Restriction of Processing (Article 18): You have the right to request that Vedra Chemicals restrict the processing of your professional personal data under certain conditions, such as when you contest the accuracy of the data, or the processing is unlawful.
•Right to Data Portability (Article 20): You have the right to receive your professional personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller without hindrance from us, where technically feasible.
•Right to Object (Article 21): You have the right to object to our processing of your professional personal data, under certain conditions, particularly when the processing is based on legitimate interests (including profiling) or for direct B2B marketing purposes.
•Right to Withdraw Consent (Article 7): Where our processing of your professional personal data is based on your explicit consent, you have the right to withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
•Right to Lodge a Complaint (Article 77): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you believe that the processing of your professional personal data infringes GDPR.
To exercise any of these rights, please submit your request in writing tooffice@vedrachemicals.ro. We commit to responding to your request within one calendar month of receipt. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests, in which case we will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
10. Lodging a Complaint with the Supervisory Authority
If you, as a data subject, have concerns regarding our data processing practices or believe that your data protection rights have been infringed, you possess the right to lodge a formal complaint with the competent supervisory authority in Romania:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
•Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, code 010336, Bucharest, Romania
•Phone: +40.318.059.211 / +40.318.059.212
•Email: anspdcp@dataprotection.ro
•Website: https://www.dataprotection.ro/
11. Data Breach Notification Procedures
In the unlikely and unfortunate event of a personal data breach, Vedra Chemicals has established rigorous internal procedures to promptly assess the risk to individuals’ rights and freedoms. Where such a breach is likely to result in a high risk to these rights and freedoms, we commit to notifying the National Supervisory Authority for Personal Data Processing (ANSPDCP) without undue delay and, where feasible, not later than 72 hours after having become aware of it. Furthermore, affected data subjects will be notified without undue delay, in accordance with GDPR Articles 33 and 34.
12. Amendments to This Privacy Policy
Vedra Chemicals reserves the right to update or amend this Privacy Policy periodically to reflect changes in our data processing practices, technological advancements, or for other operational, legal, or regulatory reasons. Any significant revisions will be communicated by posting the updated Privacy Policy on this page and by revising the “Last Updated” date. We strongly advise you to review this Privacy Policy regularly to stay informed about how we are protecting your information.