S.C. Meal Plan S.R.L., the operator of the BABAYAGA.RO Website, considers ensuring the right to the protection of personal data as a fundamental commitment, therefore your data will be processed in full accordance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as with any other legislation applicable on the territory of Romania. Since one of the essential principles of this legal framework is transparency, through this document we inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services, including through our website (BABAYAGA.RO).
We reserve the right to update and modify this Privacy Policy periodically to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will display the modified version of the Privacy Policy on our website, which is why we ask you to periodically check the content of this Privacy Policy.
BABAYAGA.RO – is the trade name of S.C. CAGEDO S.R.L., a Romanian legal entity, with its registered office in Bucharest, Cărăbușului Street, No. 37, with a business location in B-dul Iuliu Maniu, No. 7, Parcela no. 84-85, Bucharest, sector 6, registered with the Trade Register Office under no. J40/5502/1998, Unique Fiscal Registration Code no. RO10656828, having an account opened at GARANTI BANK with IBAN RO19UGBI0000122011312RON, Tel. 0760.660.958, E-mail: contact@babayaga.ro. (hereinafter “BABAYAGA.RO” or “we”). For the purposes of the data protection legislation, we are the controller when we process your personal data.
As we are always open to hearing your opinions, as well as providing you with any additional information you may need regarding the processing of your data, please contact us at the e-mail address contact@babayaga.ro or by post or courier at Str. Cărăbușului, No. 37, Bucharest.
In general, your personal data is collected directly from you, so you have control over the type of information you provide to us. This is how we receive information from you. as follows:
When you create a BABAYAGA.RO account, you send us: your email address, your name and surname. Within your personal page (My Account) on the BABAYAGA.RO platform, you have the possibility to add additional information: phone number, billing and delivery addresses, alternative email address, etc. When you place an order, you provide us with information such as: the desired product, your name and surname, delivery address, billing details, payment method, phone number, etc.
We may also collect and subsequently process certain information regarding your behavior while visiting our website, in order to personalize your online experience and provide you with offers tailored to your profile. We invite you to learn more details in this regard by consulting the section regarding the purposes of processing below.
On our website, we may store and collect information in cookies and similar technologies, according to the Cookies Policy.
We do not collect or otherwise process sensitive data, included in the General Data Protection Regulation in special categories of personal data. We also do not wish to collect or process data of minors who have not reached the age of 16.
a) If you are a Buyer, to provide the services for your benefit. The processing of your data for these purposes is necessary for the processing and execution of an order or a contract between BABAYAGA.RO and you. Also, certain processing subsumed under these purposes is imposed by tax and accounting legislation. This purpose includes: 1) Creating and managing the account within the BABAYAGA.RO platform; 2) Processing orders, shipping and invoicing them; 3) Resolving cancellations or problems of any nature relating to an order; 4) Return of products in accordance with legal provisions; 5) Refund of the value of the products in accordance with legal provisions;
b) If you are a Visitor of the Site, we will process your personal data that you provide directly in the context of using the Site, such as the data you provide within the contact section.
contact / questions / complaints, to the extent that you contact us in this way. Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
To improve BABAYAGA.RO services, for the purpose of carrying out various analyses, reports on the functioning of the Site, creating profiles of consumer preferences, mainly in order to improve the experience offered on the Site. We base these activities on the legitimate interest of BABAYAGA.RO to permanently improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
For marketing activities, namely for the transmission, via means of distance communication (e-mail, sms), of commercial communications regarding the products and services offered by BABAYAGA.RO, via the Site. The basis for the processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent to the processing of your data for this purpose by completing and checking the appropriate box in the contact form available on the Site. To withdraw your consent at any time, you can expressly request this, by:
– Changing the settings in your customer account;
– Accessing the unsubscribe link displayed in the messages you receive from us; or by
– Contacting BABAYAGA.RO using the contact details described above.
In any situation where we use information about you for our legitimate interest in promoting and developing our commercial activity, we take care and take all necessary measures so that your fundamental rights and freedoms are not affected. However, you can ask us at any time, by the means described above, to stop the processing of your personal data for marketing purposes, and we will follow up on your request.
To resolve complaints, claims and to monitor traffic and improve your experience offered on the Site.
The basis for processing your data for this purpose is based on the legitimate interest of BABAYAGA.RO to ensure the proper functioning of the Site, as well as to permanently improve the experience of Site visitors, including by resolving various comments, questions or complaints. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.
To defend our legitimate interests
There may be situations in which we will use or transmit information to protect our rights and commercial activity. These may include:
– Measures to protect the website and users of the BABAYAGA.RO platform against cyber attacks:
– Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;
The basis for processing your data for this purpose is our legitimate interest to defend our commercial activity. Also, in certain cases we base our processing on legal provisions such as the obligation to ensure the security of goods and values provided for by the applicable legislation in this matter.
How long we process and store your personal data
As a general rule, we will store your personal data as long as you have an account on the BABAYAGA.RO platform. You can ask us to delete certain information or close your account at any time and we will comply with these requests, subject to the retention of certain information including after the account is closed, in situations where applicable legislation or our legitimate interests require it.
Transmission of your personal data
In order to fulfill the purposes of processing, we may transmit or provide access to certain of your personal data. the following categories of recipients:
– Partners, third parties or entities that support BABAYAGA.RO in carrying out its activities through the Site (e.g. courier companies, IT service providers, Site administration services, etc.),
– Payment / banking service providers;
– Marketing / telemarketing service providers;
– Market research service providers;
– Other companies with whom we can develop joint programs to offer our goods and services on the market.
If we are legally obliged to do so or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
We ensure that access to your data by third parties that are private legal entities is carried out in accordance with with the legal provisions regarding data protection and confidentiality of information, based on contracts concluded with them.
Transfer of your personal data
We store and process your personal data on the territory of Romania. However, it is possible that we transfer some of your personal data to entities located in the European Union. We will always take measures to ensure that any international transfer of personal data is carefully managed in order to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments. You can contact us at any time, using the contact details set out above, to find out more information about the countries to which we transfer your data.
Security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures in accordance with the rules. Transmission of your data personal data is processed using state-of-the-art encryption algorithms and stored on secure servers, while ensuring data redundancy.
To make payments, we use the services of the payment processor VIVAWALLET.com (https://www.vivawallet.com/ro_ro). Any information regarding payments is encrypted. However, the transmission of information over the Internet, in general, or through other public networks, is not completely secure, and there is a risk that the data may be seen and used by unauthorized third parties. We are not responsible for such vulnerabilities of systems that are not under our control.
Your rights
The General Data Protection Regulation recognizes a series of rights in relation to your personal data. You can request access to your data, correction of any errors in our files and/or you can object to the processing of your personal data. You may also exercise your right to complain to the competent supervisory authority or to go to court. Where applicable, you may also benefit from the right to request the erasure of your personal data, the right to restrict the processing of your data and the right to data portability.
In order to exercise your rights, you can contact us using the contact details set out above. Please note the following if you wish to exercise these rights:
Identity. The confidentiality of all records containing personal data is important. For this reason, please send us your requests regarding such records using the email address associated with your BABAYAGA.RO account.
Fees. We will not charge you a fee to exercise any right regarding your personal data, unless your request for access to information is unfounded, repetitive or excessive, in which case we will charge a reasonable amount in such circumstances. We will inform you of any fees applied before resolving your request.
Response time. We aim to respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made multiple requests, in which case we will respond within a maximum of two months.
Third party rights. We do not have to comply with a request if it would adversely affect the rights and freedoms of other data subjects.
Under the conditions provided for by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:
The right to information, namely the right to receive details regarding the processing activities carried out by BABAYAGA.RO, as described in this document;
The right to access data, namely the right to obtain confirmation from BABAYAGA.RO regarding the processing of personal data, as well as details regarding processing activities such as the manner in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc.;
The right to rectification, namely the right to obtain the correction, without justified delay, by BABAYAGA.RO of inaccurate/unjustified personal data, as well as the completion of incomplete data; The rectification/completion will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate efforts.
The right to delete data, without unjustified delay, (“right to be forgotten”), if one of the following reasons applies:
– they are no longer necessary for the purposes for which they were collected or processed;
– if consent is withdrawn and there is no other legal basis for the processing;
– if the data subject objects to the processing and there are no overriding legitimate reasons;
– if the personal data have been processed unlawfully;
– if the personal data must be erased for compliance with a legal obligation;
– the personal data were collected in connection with the provision of information society services in accordance with Union law or national law to which the controller is subject. It is possible that, following the request for erasure of the data, BABAYAGA.RO may anonymize these data (thus depriving them of their personal character) and continue processing them for statistical purposes under these conditions;
– the right to restriction of processing to the extent that:
– the person contests the accuracy of the data, for a period that allows us to verify the accuracy of the data;
– the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
– the controller no longer needs the personal data for the purposes of the processing, but the data subject requests them for the establishment, exercise or defence of legal claims; or
– the data subject has objected to the processing (other than direct marketing), for the period during which it is verified whether the legitimate rights of the controller override those of the data subject.
– the right to data portability, namely (i) the right to receive the personal data in a structured, commonly used and machine-readable format, and (ii) the right to have these data transmitted by the website owner to another data controller, provided that the conditions laid down by law are met;
– the right to object – in relation to processing activities, this can be exercised by submitting a request as indicated below;
– at any time, for reasons related to the particular situation of the data subject, that the data concerning him/her be processed on the basis of the legitimate interest of BABAYAGA.RO or on the basis of the public interest, except in cases where BABAYAGA.RO can demonstrate that it has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the data subjects or that the purpose is to establish, exercise or defend a right in court;
– at any time, free of charge and without any justification, that the data concerning him/her be processed for direct marketing purposes
– the right not to be subject to an automated individual decision, namely the right not to be subject to a decision taken solely on the basis of automated processing activities, including the creation of profiles, which produces legal effects concerning the data subject or similarly affects him/her to a significant extent;
– the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent that you consider necessary. The contact details of the data protection supervisory authority are as follows: National Authority for the Supervision of Personal Data Processing, B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania; Telephone: +40.318.059.211 or +40.318.059.212; E-mail: anspdcp@dataprotection.ro
Without affecting your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will make all necessary efforts to resolve any issue amicably.
For any further questions regarding the way in which personal data is processed and to exercise your rights mentioned above, please contact the email address: contact@babayaga.ro and the contact addresses indicated above.
This Site uses cookies. For more information on how these files are used, please access the following link: Cookies Policy.