Privacy Policy of TRYAMM Trading Consulting SRL in Compliance with GDPR Regulations on Personal Data Processing and Security

TRYAMM Trading Consulting S.R.L, through this Privacy Policy, internal operating procedures, as well as public communication tools such as the websites TRYAMM.ro, shop.tryamm.ro, through the TRYAMM newsletter or any other form of communication with individuals and legal entities with whom it is in dialogue/collaboration, guarantees the protection of personal data as defined by REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (hereinafter referred to as the Regulation) in full compliance with all rules imposed by this Regulation. All information obtained directly or indirectly will be considered and treated as confidential and will be protected by TRYAMM through the equipment used, working procedures, and implemented solutions. The internal procedures as well as the Privacy Policy of TRYAMM are created in light of the requirements imposed by the GDPR Regulation. Before requesting your consent regarding the processing of personal data and for your consent to be expressed in full awareness, we ask you to carefully read the information related to GDPR, your rights, and the possibilities of exercising them, presented below.

INFORMATION Regarding the Processing of Personal Data (GDPR)

Starting from May 25, 2018, Regulation 2016/679/EU on the protection of individuals with regard to the processing of personal data and on the free movement of such data will be mandatory for all European Union states.

RULES AND PRINCIPLES imposed by the Regulation and respected by TRYAMM in the operation of processing personal data are as follows:

Processing is carried out lawfully, fairly, and transparently to the data subject ("lawfulness, fairness, and transparency");
Personal data are collected only for specified purposes in this Privacy Policy;
Personal data are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed ("data minimization");
In the event of an update of the data, all necessary measures are taken to ensure that personal data that is inaccurate, considering the purposes for which they are processed, are erased or rectified without delay ("accuracy");
Data are kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
Data are processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by implementing appropriate technical or organizational measures ("integrity and confidentiality").
SOURCES OF DATA: This data is in our database under one of the following circumstances:

They were obtained directly as a result of previous correspondences;
Because you are a partner/client/supplier of our company;
They were selected from a public database to which you have subscribed;
They have been made public by you through public advertisements in a business directory;
They were provided by you on www.TRYAMM.ro in order to contact you;
They were obtained during a meeting or a business event.
CATEGORIES OF PERSONAL DATA COLLECTED: The following information is obtained through automated means when visiting the website, using cookies and pixel tags, which are standard tools in the internet industry.

PURPOSES of collecting, storing, and processing personal data: We process your personal data provided by accessing the site for the purpose of presenting offers whose acceptance could lead to the conclusion of contractual relationships. We also process your personal data for marketing purposes, which includes transmitting your personal data to our contractual partners, who will in turn process your data for the same purposes, under the same conditions, and with full compliance with the rules imposed by GDPR.

Application of Principles of Personal Data Processing by TRYAMM:

Personal data are processed by TRYAMM in good faith and in accordance with the current legal provisions.

Personal data are collected by TRYAMM for well-defined, explicit, and legitimate purposes, and subsequent processing will not be incompatible with these purposes.

Personal data are adequate, relevant, and not excessive in relation to the purposes for which they are collected and subsequently processed.

TRYAMM has taken appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, unauthorized access, or any other form of illegal processing, as well as with regard to the deletion or rectification of inaccurate or incomplete data from the perspective of the purpose for which they are collected and subsequently processed. It is possible that certain data may be stored on servers in the USA, a country with which the EU has an agreement regarding the processing of personal data.

DATA PROCESSING DURATION: The storage and processing of personal data are carried out only for the legitimate purposes mentioned above, until the express withdrawal of consent, through a request via email to gdpr.TRYAMM@aficio.ro with the subject "Withdrawal of consent for processing personal data". However, you have the possibility to review, modify, or request the deletion of data before the expiration of the processing period by sending a message to the Data Protection Officer at gdpr.TRYAMM@aficio.ro with your request, even if you initially consented to the processing of your data.

RIGHTS OF INDIVIDUALS WHOSE PERSONAL DATA ARE PROCESSED: We inform you of the rights of individuals whose personal data are processed as provided by the Regulation:

Right to information – signifies the right of the data subject and the obligation of the controller to provide each person with essential information regarding the contact details of the Data Protection Officer, the purpose of processing, recipients or categories of recipients, storage period, data subject's rights (access, restriction, deletion, withdrawal, consent, data portability, and objection), the right to file a complaint, potential consequences of not providing data, and the existence of an automated decision-making process.
Right of access – means that you have the right to obtain confirmation or denial from the Data Protection Officer whether we process your personal data or not, and if so, you have access to that data and information on how the data are processed upon your explicit request, as well as any additional information regarding the processed data. The right of access includes the possibility of obtaining a copy of the personal data being processed.
Right to rectification – refers to the correction, without undue delay, of inaccurate personal data or the completion of such data. According to Article 16 of the Regulation: "Right to rectification" - "The data subject shall have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement."
Right to erasure ("right to be forgotten") – according to Article 17 of the Regulation, paragraph 1, the data subject has the right to obtain from the controller the erasure of personal data without undue delay, and the controllers are obliged to erase personal data if one of the following reasons exists: the data are no longer necessary for the purposes for which they were collected or processed; the data subject withdraws consent based on which the processing takes place; the data subject objects to processing under Article 21 paragraph (1) of the Regulation