Privacy Policy

For GC INDOOR S.R.L., headquartered in Bucharest, Tudor Arghezi St. no. 26, entrance A, 7th floor, apt. 22, district 2, identified by the unique registration code 43677240 and registration number in the Trade Register J2021001907400 (hereinafter referred to as "GC INDOOR" and/or "We"), the privacy of your personal data is one of our main concerns. As a data controller, GC INDOOR S.R.L. wishes to inform you about the processing of your personal data in the context of the operation concerning the provision of GC INDOOR S.R.L. services/products to customers, for the purposes specified below.

Since one of the essential principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer, and protect your personal data when you interact with us in relation to our products and services, including through our website.

Personal data is processed in compliance with the provisions of European Regulation no. 679/2016 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("the Regulation").

GC INDOOR S.R.L. is the company that manages the domain www.designradar.com. For the purposes of data protection legislation, we are the controller when we process your personal data.

PERSONAL DATA WE PROCESS

In general, we collect personal data directly from you, so you have control over the type of information you provide to us.

If you are a customer/user of the www.designradar.com website, the website owner will process your personal data, such as (as applicable):

• First and last name
• Phone number
• E-mail address
• Billing address
• Delivery address
• Data regarding how you use the website

As well as any other categories of data that you provide directly in the context of creating a user account on our website, in the context of placing an order through the website, or in any other way resulting from the use of the www.designradar.com website.

If you use your Facebook or Google account to create a user account on the website, GC INDOOR S.R.L. will process the following public profile data displayed by the respective applications: username and e-mail address.

If you choose to create a user account only before finalizing the order of a product available on the site, you will be asked for your e-mail address based on which an account will be created automatically.

If you do not finalize the order, the e-mail address and other data provided will not be stored by GC INDOOR S.R.L., and the created account will be deleted automatically.

COLLECTION OF PERSONAL DATA

GC INDOOR collects personal data from its users in three ways:

1. directly from the user;
2. traffic data, from the user's browser;
3. through cookies.

Personal data collected directly.

When you access www.designradar.com or when you create an account or place an order, we may ask for your name, first name, and/or e-mail address, as well as other data necessary for contracting, delivery, or invoicing.

This data is kept for a period of 3 years from the termination of the contract (this being the general statute of limitations). Data from invoices is kept for 10 years (where there is a fiscal legal obligation). If you do not provide us with this data, we will be unable to fulfill your order.

When you access support services, we may ask for an e-mail address or phone number. We reserve the right to record any communication made for the support services of the www.designradar.com services for the purpose of improving our services. We will inform you before starting the communication that it might be recorded.

This data is used, for example, for the purpose of contacting you to resolve a complaint/request of yours. We may request other data that may constitute personal data only to the extent that it is necessary for these purposes.

Traffic data

When you visit a website, regardless of the device used, you disclose certain information about yourself, such as your IP address, the time of your visit, the place from where you entered our sites, pages visited. GC INDOOR, like other operators, records this information for a determined period of time. GC INDOOR uses external traffic analysis services, such as [Google Analytics].

This data is used exclusively by GC INDOOR to improve our website and services, but also to ensure the security of our website:

– data provided voluntarily by customers when placing an order (name, first name, delivery address, phone number) which we use to process the order and to be able to deliver the product to the customer via courier. In case of return, we also use the IBAN code (return form);

– browsing data (IPs), which is recorded automatically when a user visits the site and is used for the purpose of collecting anonymous statistical information regarding the use of the site, to be able to observe its correct functioning in full security;

– cookies – per session and fixed.

The purpose of collecting your data is exclusively to respond efficiently and promptly to your request, in all stages of the acquisition procedure: verifying the correctness of the data entered by you in the order form, verifying your order, issuing the invoice for the products ordered by you. As well as to be able to contact you in case there are clarifications needed regarding the finalization of your order.

In general, we receive information from you as follows:

• When you create an account on www.designradar.com, you send us your e-mail address (and if you wish, other data from the category of those mentioned above);
• When you place an order, you provide us with information such as the desired product, delivery address, billing details, payment method, phone number, etc.;
• When you write to us with your proposals or make a complaint through the form on the site: name and first name; e-mail address.

In the situation where we also offer you the possibility to register on our site through your [Facebook] or [Google] account. If you opt for one of these variants, you will be directed to a page managed by [Facebook Inc / Google LLC], where they will inform you about the transfer of your data to GC INDOOR. You can consult the privacy policies of [Facebook] and [Google], respectively, using the following links:

[https://www.facebook.com/about/privacy]

[https://policies.google.com/privacy]

We may also collect and subsequently process certain information regarding your behavior during your visit to our website, to personalize your online experience and provide you with offers tailored to your profile. We invite you to find out more details in this regard by consulting the section regarding the purposes of processing below.

On our website, we may store and collect information in cookies and similar technologies, according to the Cookies Policy.

MINORS' PRIVACY

This site is not intended for minors under 18 years of age. As such, we do not knowingly process Personal Data of minors under 18. If you are under 18 and have accessed our page, please do not register on the Site, do not send us any kind of information about yourself, and contact your parents/guardians. In case we become aware that we have collected, without the consent of the legal representative required according to legal provisions, Personal Data belonging to a minor under 18 years of age, we will delete that information, unless we have a legal obligation not to delete that data, in which case we will act according to the legal obligation. If you believe that we might hold information from or about a minor under 18 years of age, please contact us using the details above.

The processing of personal data means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, archiving, deletion, destruction, etc.

1. PURPOSES AND LEGAL BASES OF PROCESSING
2. If you are a customer of the site, GC INDOOR S.R.L. processes your personal data as follows:

- for the performance of the contractual relationship between you and GC INDOOR S.R.L., respectively for taking over, validating, shipping, and invoicing the order placed on the site, informing you about the status of the order, organizing the return of ordered products, etc.

Legal basis: The processing of your data for this purpose is based on the contract concluded between you and GC INDOOR S.R.L., defined in the Terms and Conditions. The provision of your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of carrying out the contractual relationships between you and GC INDOOR S.R.L.

- for the fulfillment of legal obligations incumbent on GC INDOOR S.R.L. in the context of services provided through the site, including obligations in fiscal matters, as well as in matters of archiving.

Legal basis: The processing of your data for this purpose is necessary based on legal obligations. The provision of your data for this purpose is necessary. Refusal to provide data may result in the impossibility for GC INDOOR S.R.L. to comply with the legal obligations incumbent upon it and therefore in the impossibility to offer you services through the site.

- for marketing activities, respectively for the transmission, through distance communication means (e-mail and/or SMS) of commercial communications regarding products and services offered by GC INDOOR S.R.L., through the site.

Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for the processing of data for this purpose by checking the appropriate box at the time of account creation, or after account creation, in the ["Account Details"] section.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/SMS containing commercial communications. In addition, you can unsubscribe by accessing the ["Account Details"] section.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

- for the purpose of carrying out various analyses, reports regarding the functioning of the site, creating consumption preference profiles, mainly in order to improve the experience offered on the site.

Legal basis: The processing of your data for this purpose is based on the legitimate interest of GC INDOOR S.R.L. to permanently improve the customer experience on the site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.

1. If you are a visitor of the site, the website owner processes your personal data as follows:

- for marketing activities, respectively for the transmission, through distance communication means (e-mail, SMS), of commercial communications regarding products and services offered by the website owner, through the site.

Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for the processing of data for this purpose by completing and checking the appropriate box in the newsletter subscription form available on the site.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/SMS containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

- for resolving complaints, grievances, and to monitor traffic and improve your experience offered on the site.

Legal basis: The processing of your data for this purpose is based on the legitimate interest of the website owner to ensure the correct functioning of the site, as well as to permanently improve the experience of site visitors, including by resolving various comments, questions, or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.

RECIPIENTS OF PERSONAL DATA

For the fulfillment of the purposes mentioned above, the company may transmit the data of Customers, where strictly necessary, to the following categories of third parties:

• regulatory authorities and legal authorities
• contractual partners (e.g., company agents, auditors, consultants, etc.), some of whom also have the capacity of persons empowered by the controller to process personal data.

These contractual partners carry out their commercial activity in Romania as well, and your personal data may be provided to them to be used within the limits of the obligations they have assumed towards the company. The personal data that we disclose to the persons empowered by us to process it is limited to the minimum necessary personal data for the realization of the respective services and, at the same time, we request them not to use personal data for any other purpose.

We make every effort to ensure that all entities we work with store your personal data under safe and secure conditions. Also, some of them are in turn operators that carry out their commercial activity in Romania, such as payment service providers in the capacity of agents.

Some of them are third parties who do not have the role of processing personal data, but may have access to it in order to fulfill their obligations or in their interaction with the company, such as technical maintenance companies, financial auditors, or legal service providers.

The personal data mentioned above may be made available or transmitted to third parties in the following situations: (i) public authorities, auditors, or institutions with components in control activities regarding the services, activities, or assets of the company, which request the company to provide information, based on the legal obligations incumbent on the company; (ii) for the fulfillment of a legal requirement, including those related to the provision of services, or for the protection of the rights and assets of our company or other entities or persons, such as courts of law; (iii) third-party acquirers, to the extent that the company's activity would be (totally or partially) transferred, and the personal data of the data subjects would be part of the assets representing the object of the transaction. Also, for the purpose of processing regulated above, we may provide your personal data to companies that are part of the GC INDOOR S.R.L group, companies that will be subject to the company's instructions regarding the processing of your personal data. For more information, visit: https://www.designradar.com.

TRANSFER OF PERSONAL DATA OUTSIDE THE COUNTRY

In the context of the operations described above, the personal data of Customers may be transferred outside the country to states within the European Union (“EU”) or the European Economic Area (“EEA”). Thus, we inform Customers, by these presents, that any transfer carried out by the company to an EU or EEA member state will comply with the legal provisions of the General Data Protection Regulation no. 2016/679 adopted by the European Parliament (“GDPR”).

Currently, we store and process your personal data on the territory of Romania.

However, from time to time, it is possible to transfer certain of your personal data to entities located outside Romania. These entities may be located in the European Union or outside the Union, including in countries for which the European Commission has not recognized an adequate level of personal data protection.

We will always take steps to ensure that any international transfer of personal data is handled carefully with the aim of protecting your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, by other safeguards, such as the standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for the protection of personal data transferred from within the EU to the United States of America.

You can contact us at any time, using the contact details set out above, to learn more about the countries to which we transfer your data, as well as the safeguards we have put in place regarding these transfers.

PROCESSING PERIOD

GC INDOOR S.R.L. will process your personal data for as long as is necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently in accordance with the legal obligations incumbent upon GC INDOOR S.R.L. (e.g., in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the end of the financial year in which they were drawn up).

In the situation where you are a customer and you exercise your option to delete your user account by pressing the ["delete account"] button in the ["Account Details"] section, GC INDOOR S.R.L. will interpret this action as your choice to unsubscribe from receiving commercial communications through which we keep you updated about the products and services offered through the site.

In this sense, if you choose to delete your user account, we will no longer send you emails and/or SMS messages of this kind.

However, we wish to inform you that deleting your account will not automatically result in the deletion of your personal data.

If you wish for your personal data to no longer be processed, or if you wish for your data to be deleted, you can exercise your rights detailed in point 6 below.

If you request the deletion of your account, but there is at least one active order on that account, the account deletion request can only be registered after the delivery of the products and the completion of the last active order.

If you withdraw your consent for data processing for marketing purposes, GC INDOOR S.R.L. will cease the processing of your personal data for this purpose, without, however, affecting the processing carried out by GC INDOOR S.R.L. based on the consent expressed by you before its withdrawal.

USER PERSONAL DATA AFTER PROCESSING CEASES

After the moment when the processing duration mentioned above expires and the company no longer has legal grounds or a legitimate interest regarding the processing of your personal data, the personal data will be deleted in accordance with the company's procedures, which may involve archiving, anonymization, or destruction.

SECURITY OF PERSONAL DATA PROCESSING

The company constantly evaluates and improves the security measures implemented to ensure the processing of personal data under safe and secure conditions.

Measures taken to ensure the security of personal data:

1. Users who have access to the personal information database can access the database only with their own account name and password. All users are required to maintain the confidentiality of the data they have access to, and upon each termination of their session in the database, they will close the session;
2. Users access personal data only for the fulfillment of their job duties;
3. Any operation involving the collection and/or modification of personal data by users is permanently recorded (the user, date, time, and type of modification are recorded); additionally, all logins and logouts of all users to the database are also recorded;
4. Printing of personal data is carried out only by users authorized for this operation and only for purposes required by the laws in force (invoices, shipping documents, commercial contracts).

The company's headquarters are equipped with an alarm system, and personal data are stored electronically in secure, password-protected files. Information on paper is kept in special files to which only company employees have access, who are under an obligation of confidentiality.

THE RIGHTS OF THE DATA SUBJECT REGARDING THE PROCESSING OF PERSONAL DATA

Rights of the data subject

You can ask us to:

• confirm whether we are processing your personal data;
• provide you with a copy of this data;
• provide you with other information about your personal data, such as the data we have, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it, what your rights are, how you can make a complaint, and where we obtained your data, to the extent that information has not already been provided to you through this notice.

Rectification

You can ask us to rectify or complete your inaccurate or incomplete personal data.

We may attempt to verify the accuracy of the data before rectifying it.

Data deletion

You can ask us to delete your personal data, but only in the case that:

• it is no longer necessary for the purposes for which it was collected; or
• you have withdrawn your consent (in cases where data processing was based on consent); or
• you exercise a legal right to object; or
• it has been processed illegally; or
• we are subject to a legal obligation to do so.

We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary:

• for compliance with a legal obligation; or
• for the establishment, exercise, or defense of legal claims.

There are certain other circumstances in which we are not obliged to comply with your request to delete data, although these two are the most likely circumstances in which we might refuse this request.

You must keep in mind that, before exercising this right (the deletion of your data), you should download and save from your account on the site all the documents that interest you. If you do not perform this step before exercising your right to deletion, you will lose all these documents, and GC INDOOR S.R.L. will be unable to provide them to you, as applicable, because the process of deleting the data, or your account, along with all associated data and documents, is an irreversible process.

Restriction of data processing

You can ask us to restrict the processing of your personal data, but only in the case that:

• its accuracy is contested (see the rectification section), to allow us to verify its accuracy; or
• the processing is illegal, but you do not want the data to be deleted; or
• it is no longer necessary for the purposes for which it was collected, but you need it to establish, exercise, or defend legal claims; or

you have exercised your right to object, and the verification of whether our rights prevail is in progress.

We can continue to use your personal data following a restriction request if:

• we have your consent; or
• to establish, exercise, or ensure the defense of legal claims; or
• to protect the rights of the Controller or of another natural or legal person.

Data portability: You can ask us to provide you with your personal data in a structured, commonly used, and machine-readable format, or you can request that it be "ported" directly to another data controller, but in each case only if:

• the processing is based on your consent or on the conclusion or execution of a contract with you;
• the processing is done by automated means.

Objection to the processing of personal data

You can object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest.

Also, you can object at any time to the processing of your data for direct marketing purposes (including profiling), without invoking any reason, in which case we will cease this processing as soon as possible.

Automated decision-making

You can ask not to be subject to a decision based solely on automated processing, but only when that decision:

• produces legal effects concerning you; or
• similarly affects you to a significant extent.

This right does not apply if the decision reached as a result of automated decision-making:

• is necessary for us to enter into or perform a contract with you;
• is authorized by law and there are adequate safeguards for your rights and freedoms; or
• is based on your explicit consent.

Complaints/Inquiries

You have the right to file a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the supervisory authority for data protection are as follows:

The National Supervisory Authority for Personal Data Processing

B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania

Phone: +40.318.059.211 or +40.318.059.212;

E-mail: anspdcp@dataprotection.ro

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact us at the email address: [*].

DISCLOSURE OF PERSONAL DATA

We do not rent/sell your personal data to third parties.

In addition to the controller, in certain situations, data may be accessible to third parties such as service providers, transport operators, hosting providers, IT companies, designated, if necessary, as processors by the Controller.

These are contractually obligated to maintain the confidentiality of the data and to use it exclusively for the purpose for which it was provided to them.

We might also disclose your personal data to central/local public authorities, in the following cases, listed by way of example:

– for site administration;

– in situations where this communication would be necessary for the awarding of prizes or other facilities to data subjects, obtained as a result of their participation in various promotional campaigns organized by GC INDOOR S.R.L. through the site;

– for maintaining, customizing, and improving the site and the services carried out through it;

– for performing data analysis, testing and research, monitoring usage and activity trends, developing security features, and authenticating users;

– for sending commercial marketing communications, under the conditions and limits provided by law;

when the disclosure of personal data is provided for by law, etc.

CHANGES TO THIS DECLARATION (POLICY) REGARDING PERSONAL DATA PROCESSING

We reserve the right to modify this privacy policy. In the case of major changes in the future, you will be notified via email (if possible) or by displaying a specific message on the site.

The exercise of the rights mentioned above can be done at any time. In order to exercise these rights, we recommend that you send us a notification in electronic format to the following address: contact@designradar.com or a written, dated, and signed notification to the address: Str Zagazului, no 21-25, Building A, Ground Floor, Design Radar Commercial Space
A.P.4, 014261, sector 1, Bucharest, Romania.

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact us at the email address: contact@designradar.com.

Last update: 14.05.2025