1.Overview

The General Data Protection Regulation no. 679/2016 (hereinafter referred to as GDPR) for the protection of individuals with regard to the processing of personal data and on the free movement of such data is applicable in all the European Union countries starting with May 25, 2018. This Regulation has a significant impact on all sectors of activity, for which reason Sky Group SRL (which is registered in the Personal Data Processing Register under the number 0003813) has revised the current programs in accordance with this Regulation so that it can identify possible impediments and implement the changes required in its activity.

The concept of personal data protection is the natural person's right to have those characteristics that lead to his identification protected and the correlated obligation of the operator Sky Group SRL to take appropriate measures in order to ensure an effective protection. Personal data means any information that can be directly or indirectly related to an identified or identifiable natural person such as: name, surname, personal identity number, address, telephone, image, voice, economic-financial situation, bank account number, profession.

Considering the need to defend and observe the fundamental right to personal and private life, the protection of personal data is an extremely important area, a fact that is also confirmed by the treatment of this issue in separate chapters in the Schengen Agreement Implementation Convention.

Over time, Sky Group has sent various emails in an attempt to keep you up-to-date with the latest offers and useful information about the products in our offer. We want you to further remain as informed as before without overwhelming you with unnecessary information.

In accordance with the GDPR requirements, in order to be able to further inform you for the purpose mentioned below, it is necessary to have your Consent. This Consent must be given by a clear action, showing the free, specific, informed and unambiguous consent, on the processing of your personal data.

2.Rights of the person / purchaser concerned conferred by GDPR no. 679/2016:

Once you have been required to give/have given consent, you are informed on the rights granted by GDPR with regard to personal data as well as on your consent to the collection of personal data and to the processing of such data by Sky Group, namely:

• The right to revoke it at any time, revocation that will be as accessible as the consent given;
• The right to information - the operator undertakes to inform the person concerned with regard to the processing of his personal data, upon his written request (within the limit of a request per year) sent to the operator at sesizari@skygroup.ro;
• Right of access to data - any person concerned has the right to obtain from the operator, upon request, the confirmation of the fact that his or her personal data is processed or not.
• Right to interfere with the data - any person concerned has the right to obtain from the operator, free of charge, the rectification, update, blocking or deletion of the data for which the processing is not in compliance with the law, in particular of incomplete or inaccurate data, through a written request sent to the operator at sesizari@skygroup.ro;
• Right to object - the person concerned has the right to oppose at any time, by a written, dated and signed request, for well-founded and legitimate reasons relating to his / her particular situation, that the data relating to him / her be subject to processing, through a written request sent to sesizari@skygroup.ro;
• Right to convert personal data collected into anonymous data by a written request sent to the SKY GROUP operator at sesizari@skygroup.ro;
• Right to be forgotten - individuals may request the deletion of their personal data if such data has been illegally processed without their consent or if the data is no longer necessary for the purpose for which they were initially processed.
• Right to data portability - Individuals have the right to request that their personal data be transferred to another operator, in which case Sky Group may provide the personal data of the person concerned to other companies with whom it has a partnership, but only based on a confidentiality commitment from them guaranteeing that such data is kept secure for the purposes mentioned above and subject to the existence of the consent of the person concerned for such portability.
• Right to not be subject to an individual decision made based on an automatic processing, the withdrawal or cancellation of any decision having legal effects with respect to it, adopted solely based on a personal data processing by automatic means.
• Right to go to court - any person who has suffered damage as a result of an illegal processing of personal data may refer the matter to the competent court for remedy. If the persons whose personal data are processed consider that the rights provided by GDPR have been violated, they may refer in writing to the Surveillance Authority provided that they have not previously filed a lawsuit with the same object, but only after having addressed the operator complained against in advance. The operator complained against has the obligation to respond to the party concerned in writing within 15 days of receiving the complaint. The complaint to the Surveillance Authority may not be filed earlier than 15 days after the submission of a complaint with the same content to the operator. If the complaint is found to be well founded, within 30 days of receiving the complaint, the Supervisory Authority must communicate the decision taken to the parties concerned, decision which must be reasoned. The Supervisory Authority may refer to the courts for the protection of any rights of the persons concerned, rights guaranteed by law.

3. The purpose for personal data collecting and processing is represented by:

• Informing clients / potential clients about the situation of their account, including validation, shipping and billing of ordered products, solving problems arising when issuing an order for goods or services purchased;
• Submitting newsletters and / or periodic alerts, using electronic mail (e-mail, SMS), commercial offers;
• For market research activities, tracking and monitoring of sales, as well as for Customer's / Buyer's behavior;

4. Obligations of the Sky Group SRL operator

According to GDPR requirements no. 679/2016, Sky Group SRL has the obligation to manage the personal data that you provide us in conditions of safety and only for the specified purposes. The Sky Group operator is also required to notify the person concerned whose data has been disclosed if such notification is not impossible or does not involve a disproportionate effort as compared to the legitimate interest that could be injured.

5. Acceptance given by the person / purchaser concerned

By filling in the data in the Account Creation and / or Order Form, the Buyer declares and accepts unconditionally that his / her personal data is included in the SkyOnline.ro database (Sky Group) and expresses his/her explicit and unambiguous agreement that all such personal data be stored, used and processed for the purposes outlined above in point 3.

By reading this information, the Buyer declares that he/she has read, understands and agrees that the Sky Group operator collects, stores and processes personal data in accordance with the requirements of Law no. 506/2004 and GDPR (2016/679), also taking into account the rights conferred by these legal provisions.

If you wish to be informed for the above-mentioned purpose, please give us your consent in order to inform you about them. You will be able to waive this feature at any time and ask us to modify your contact details or delete them.