Privacy Policy

For GC INDOOR SRL, with headquarters in Bucharest, str. Tudor Arghezi no. 26, sc. A, et. 7, ap. 22, sector 2, identified with the unique identification code 43677240 and registration number in the Comet Register J40/1907/2021 (hereinafter referred to as "GC INDOOR" and/or "We") the confidentiality of your personal data is one of the main concerns. As the controller, GC INDOOR SRL wishes to inform you about the processing of your personal data in the context of the operation relating to the provision of GC INDOOR SRL services/products to customers, for the purposes specified below.

Since one of the essential principles of this legal framework is transparency, we have prepared this document through which we wish to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services, including through our website.

Personal data are processed in compliance with the provisions of European Regulation No. 679/2016 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "Regulation").

GC INDOOR SRL is the company that manages the domain www.designradar.com. Within the meaning of the data protection legislation, we are the controller when we process your personal data.

PERSONAL DATA THAT WE PROCESS

In general, we collect personal data directly from you, so you have control over the type of information you provide to us.

If you are a client/user of the website www.designradar.com, the website owner will process your personal data, such as (as applicable):

• Name and surname
• Phone number
• email address
• Billing address
• Delivery address
• Data regarding how you use the site

As well as any other categories of data that you provide directly in the context of creating a user account on our website, in the context of placing an order through the website or in any other way resulting from the use of the website www.designradar.com.

If you use your Facebook or Google account to create a user account on the site, GC INDOOR SRL will process the following public profile data displayed by the respective applications: username and email address.

If you choose to create a user account only before completing the order of a product available on the site, your email address will be requested, based on which an account will be automatically created.

If you do not complete the order, the email address and other data provided will not be stored by GC INDOOR SRL, and the account created will be automatically deleted.

COLLECTION OF PERSONAL DATA

GC INDOOR collects personal data from its users in three ways:

1. directly from the user;
2. traffic data from the user's browser;
3. through cookies.

Personal data collected directly.

When you access www.designradar.com or when you create an account or place an order, we may ask for your name, surname and/or email address, as well as other data necessary for contracting, delivery or invoicing.

This data is kept for a period of 3 years from the end of the contract (this being the general limitation period). Invoice data is kept for 10 years (where it is a legal fiscal obligation). If you do not provide us with this data, we will be unable to fulfill your order.

When you access the support services, we may ask you for an email address or telephone number. We reserve the right to record any communication made for the support services of the www.designradar.com services in order to improve our services. We will inform you before the communication begins that it may be recorded.

This data is used, for example, for the purpose of contacting you to resolve your complaint/request. We may also request other data that may constitute personal data only to the extent that it is necessary for these purposes.

Traffic data

When you visit a website, regardless of the device you use, you reveal certain information about yourself, such as your IP address, the time of your visit, the place from which you entered our sites, the pages visited. GC INDOOR, like other operators, records this information for a certain period of time. GC INDOOR uses external traffic analysis services, such as [Google Analytics].

This data is used exclusively by GC INDOOR to improve our site and services, but also to ensure the security of our site:

– data voluntarily provided by customers when placing the order (name, surname, delivery address, phone number) which we use to process the order and deliver the product to the customer by courier. In the case of a return, we also use the IBAN code (return form);

– browsing data (IPs), which are automatically recorded when a user visits the site and are used to collect anonymous statistical information regarding the use of the site, in order to be able to observe its correct functioning in complete security;

– cookies – per session and fixed.

The purpose of collecting your data is exclusively to respond efficiently and promptly to your request, at all stages of the purchase procedure: verifying the correctness of the data entered by you in the order form, verifying your order, issuing the invoice for products ordered by you. As well as to be able to contact you in the event that there are any uncertainties regarding the completion of your order.

In general, we receive information from you as follows:

• When you create an account on www.designradar.com, you send us your email address (and if you want other data from the category mentioned above);
• When you place an order, you provide us with information such as the desired product, delivery address, billing details, payment method, phone number, etc.;
• When you write us your suggestions or make a complaint through the form on the site: first and last name; email address.

In the event that we also offer you the possibility to register on our site through your [Facebook] or [Google] account. If you opt for one of these options, you will be directed to a page managed by [Facebook Inc / Google LLC], where they will inform you about the transfer of your data to GC INDOOR. You can consult the privacy policies of [Facebook] and [Google], respectively, using the following links:

[https://www.facebook.com/about/privacy]

[https://policies.google.com/privacy]

We may also collect and subsequently process certain information regarding your behavior while visiting our site, in order to personalize your online experience and provide you with offers tailored to your profile. We invite you to find out more details in this regard by consulting the section regarding the purposes of processing below.

On our website we may store and collect information in cookies and similar technologies, according to the Cookies Policy.

PRIVACY OF MINORS

This site is not intended for minors under the age of 18. As such, we do not knowingly process Personal Data of minors under the age of 18. If you are under the age of 18 and have accessed our page, please do not register on the Site, do not send us any information about yourself and contact your parents/guardians. If we become aware that we have collected, without the consent of the legal representative required by law, Personal Data belonging to a minor under the age of 18, we will delete that information, unless we are legally obligated not to delete that data, in which case we will act in accordance with the legal obligation. If you believe that we may have information from or about a minor under the age of 18, please contact us at the details above.

Processing of personal data means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or modification, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise making available, alignment or combination, blocking, archiving, erasure, destruction, etc.

1. PURPOSES AND GROUNDS OF PROCESSING
2. If you are a customer of the site, GC INDOOR SRL processes your personal data as follows:

- for the development of the contractual relationship between you and GC INDOOR SRL, respectively for the taking over, validation, shipping and invoicing of the order placed on the site, informing you about the status of the order, organizing the return of ordered products, etc.

Grounds: The processing of your data for this purpose is based on the contract concluded between you and GC INDOOR SRL, defined in the Terms and Conditions. The provision of your personal data is necessary for the execution of this contract. Refusal to provide the data may result in the impossibility of carrying out the contractual relations between you and GC INDOOR SRL.

- to fulfill the legal obligations of GC INDOOR SRL in the context of the services provided through the site, including fiscal obligations, as well as archiving obligations.

Grounds: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusal to provide data may result in the inability of GC INDOOR SRL to comply with its legal obligations and therefore the inability to provide you with services through the site.

- for marketing activities, respectively for the transmission, via remote communication means (e-mail and/or SMS), of commercial communications regarding the products and services offered by GC INDOOR SRL, via the site.

Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by checking the corresponding box at the time of account creation, or subsequently, in the ["Account Details"] section.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications. In addition, you can unsubscribe by accessing the ["Account Details"] section.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have any negative consequences for you.

- for the purpose of carrying out various analyses, reports on the functioning of the site, creating profiles of consumer preferences, mainly in order to improve the experience offered on the site.

Grounds: The processing of your data for this purpose is based on the legitimate interest of GC INDOOR SRL to permanently improve the customer experience on the site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.

1. If you are a visitor to the site, the site owner processes your personal data as follows:

- for marketing activities, respectively for the transmission, via remote communication means (e-mail, SMS), of commercial communications regarding the products and services offered by the site owner, via the site.

Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by completing and checking the corresponding box in the newsletter subscription form available on the site.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have any negative consequences for you.

- to resolve complaints, grievances and to monitor traffic and improve your experience on the site.

Grounds: The processing of your data for this purpose is based on the legitimate interest of the website owner to ensure the proper functioning of the website, as well as to permanently improve the experience of website visitors, including by resolving various comments, questions or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have any negative consequences for you.

RECIPIENTS OF PERSONAL DATA

To fulfill the purposes mentioned above, the company may transmit Customer data, where strictly necessary, to the following categories of third parties:

• regulatory and legal authorities
• contractual partners (e.g. company agents, auditors, consultants, etc.), some also having the status of persons empowered by the operator to process personal data.

These contractual partners also carry out their commercial activity in Romania, and your personal data may be provided to them for use within the limits of the obligations they have assumed towards the company. The personal data that we disclose to the persons empowered by us to process them are limited to the minimum necessary personal data in order to perform the respective services and, at the same time, we request them not to use the personal data for any other purpose.

We make every effort to ensure that all entities we work with store your personal data safely and securely. Some of them are also operators who also carry out their commercial activity in Romania, such as payment service providers as agents.

Some of them are third parties who do not have the role of processing personal data, but may have access to them in order to fulfill their obligations or in their interaction with the company, such as technical maintenance companies, financial auditors or legal service providers.

The personal data mentioned above may be made available or transmitted to third parties in the following situations: (i) public authorities, auditors or institutions involved in control activities regarding the services, activities or assets of the company, which request the company to provide information, based on the legal obligations incumbent on the company; (ii) to fulfill a legal requirement, including those related to the provision of services, or to protect the rights and assets of our company or other entities or persons, such as courts of law; (iii) third party acquirers, to the extent that the company's activity would be (totally or partially) transferred, and the personal data of the data subjects would be part of the assets representing the object of the transaction. Also, for the purpose of processing regulated above, we may provide your personal data to companies that are part of the GC INDOOR SRL group, companies that will be subject to the company's instructions regarding the processing of your personal data. For more information visit: https://www.designradar.com.

TRANSFER OF PERSONAL DATA OUTSIDE THE COUNTRY

In the context of the operations described above, the personal data of the Clients may be transferred outside the country to states of the European Union (“EU”) or the European Economic Area (“EEA”). Thus, we hereby inform the Clients that any transfer made by the company to a member state of the EU or EEA will comply with the legal provisions of the General Data Protection Regulation no. 2016/679 adopted by the European Parliament (“GDPR”).

Currently, we store and process your personal data on the territory of Romania.

However, from time to time, we may transfer certain of your personal data to entities located outside Romania. These entities may be located in the European Union or outside the Union, including in countries that the European Commission has not recognized as having an adequate level of protection for personal data.

We will always take steps to ensure that any international transfer of personal data is carefully managed in order to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, by other safeguards, such as standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for the protection of personal data transferred from within the EU to the United States of America.

You can contact us at any time, using the contact details set out above, to find out more information about the countries to which we transfer your data, as well as the safeguards we have put in place regarding these transfers.

PROCESSING PERIOD

GC INDOOR SRL will process your personal data as long as necessary to achieve the processing purposes mentioned above.

If you are a client, we will process your data for the entire duration of the contractual relationship and subsequently according to the legal obligations incumbent on GC INDOOR SRL (e.g.: – in the case of financial and accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year during which they were drawn up).

If you are a customer and you exercise the option to delete your user account, by clicking the ["delete account"] button in the ["Account Details"] section, GC INDOOR SRL will interpret this action as your option to unsubscribe from receiving commercial communications through which we keep you informed about the products and services offered through the site.

In this regard, if you choose to delete your user account, we will no longer send you emails and/or text messages of this kind.

However, we would like to inform you that deleting your account will not automatically delete your personal data.

If you wish to no longer have your personal data processed or if you wish to have your data deleted, you can exercise your rights detailed in point 6 below.

If you request account deletion, but there is at least one active order on that account, the account deletion request can only be registered after the products have been delivered and the last active order has been completed.

If you withdraw your consent for data processing for marketing purposes, GC INDOOR SRL will cease processing your personal data for this purpose, without affecting the processing carried out by GC INDOOR SRL based on the consent expressed by you before its withdrawal.

PERSONAL USER DATA AFTER PROCESSING CEASES

After the processing period mentioned above expires and the company no longer has legal grounds or a legitimate interest in processing your personal data, the personal data will be deleted in accordance with the company's procedures, which may involve archiving, anonymization, destruction.

SECURITY OF PERSONAL DATA PROCESSING

The company constantly evaluates and improves the security measures implemented in order to ensure the safe and secure processing of personal data.

Measures taken to ensure the security of personal data:

1. Users who have access to the personal information database may access the database only with their own account name and password. All users are required to maintain the confidentiality of the data to which they have access, and at each termination of their session in the database they will close the session;
2. Users access personal data only to perform their job duties;
3. Any operation of collecting and/or modifying personal data by users is permanently recorded (the user, date, time and type of modification are recorded); all logins and logouts of all users to the database are also recorded;
4. Printing of personal data is carried out only by users authorized for this operation and only for purposes required by the laws in force (invoices, shipping notes, commercial contracts).

The company's headquarters are equipped with an alarm system, and personal data is stored electronically in secure, password-protected files. Paper information is kept in special files, to which only company employees have access, who are bound by the obligation of confidentiality.

RIGHTS OF THE DATA SUBJECT WITH REGARD TO THE PROCESSING OF PERSONAL DATA

Rights of the data subject

You can ask us:

• to confirm whether we are processing your personal data;
• to provide you with a copy of this data;
• to provide you with other information about your personal data, such as the data we have, what we use it for, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can make a complaint, where we obtained your data, to the extent that the information has not already been provided to you through this information.

correction

You can ask us to rectify or complete your inaccurate or incomplete personal data.

We may attempt to verify the accuracy of the data before rectifying it.

Data deletion

You can ask us to delete your personal data, but only if:

• they are no longer necessary for the purposes for which they were collected; or
• you have withdrawn your consent (if the data processing was based on consent); or
• you exercise a legal right to object; or
• they have been processed illegally; or
• We have a legal obligation in this regard.

We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary:

• for compliance with a legal obligation; or
• for the establishment, exercise or defense of a right in court.

There are certain other circumstances in which we are not required to comply with your request to delete data, although these two are the most likely circumstances in which we would refuse this request.

You must keep in mind that, before exercising this right (deleting your data), you should download from your account. on the site and save all the documents that interest you. If you do not do this before exercising your right to delete, you will lose all these documents and GC INDOOR SRL will be unable to make them available to you, as the case may be, because the process of deleting data, respectively your account., with all the data and documents related to it, is an irreversible process.

Restriction of data processing

You can ask us to restrict the processing of personal data, but only if:

• their accuracy is contested (see rectification section), to allow us to verify their accuracy; or
• the processing is unlawful, but you do not want the data to be deleted; or
• they are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court; or

you have exercised your right to object, and verification of whether our rights prevail is ongoing.

We may continue to use your personal data following a restriction request if:

• we have your consent; or
• to establish, exercise or defend a right in court; or
• to protect the rights of the Operator or another natural or legal person.

Data Portability You can ask us to provide your personal data in a structured, commonly used and machine-readable format, or you can request that it be "ported" directly to another data controller, but in each case only if:

• the processing is based on your consent or on the conclusion or performance of a contract with you;
• the processing is done by automatic means.

Opposition to the processing of personal data

You may object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest.

You can also object at any time to the processing of your data for direct advertising purposes (including profiling), without giving any reason, in which case we will cease this processing as soon as possible.

Automated decision making

You may request not to be subject to a decision based solely on automated processing, but only when that decision:

• produces legal effects regarding you; or
• affects you in another similar way and to a significant extent.

This right does not apply if the decision reached as a result of automated decision-making:

• it is necessary for us to enter into or perform a contract with you;
• is authorized by law and there are adequate safeguards for your rights and freedoms; or
• is based on your explicit consent.

Complaints/Notifications

You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the supervisory authority for data protection are as follows:

National Supervisory Authority for Personal Data Processing

B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania

Phone: +40.318.059.211 or +40.318.059.212;

Email: anspdcp@dataprotection.ro

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact the email address: [*].

DISCLOSURE OF PERSONAL DATA

We do not rent/sell your personal data to third parties.

In addition to the operator, in certain situations, the data may be accessible to third parties such as service providers, transport operators, hosting providers, IT companies, appointed, if necessary, as persons authorized by the Operator.

They are contractually obligated to maintain the confidentiality of the data and to use it exclusively for the purpose for which it was provided.

We may also disclose your personal data to central/local public authorities, in the following exemplary cases:

– for site administration;

– in situations where this communication would be necessary for the awarding of prizes or other benefits to the data subjects, obtained as a result of their participation in various promotional campaigns organized by GC INDOOR SRL through the site;

– to maintain, personalize and improve the site and the services provided through it;

– to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users;

– for the transmission of commercial marketing communications, under the conditions and limits provided by law;

when the disclosure of personal data is required by law, etc.

CHANGES TO THIS STATEMENT (POLICY) REGARDING THE PROCESSING OF PERSONAL DATA

We reserve the right to change this privacy policy. In the event of major changes in the future, you will be notified by email (if possible) or by displaying a specific message on the site.

The exercise of the rights mentioned above can be done at any time. In order to exercise these rights, we recommend that you send us an electronic notification to the following address: contact@designradar.com or a written notification, dated and signed, to the address: Str Zagazului, no. 21-25, Block A, Ground Floor, Design Radar Commercial Space
AP4, 014261, sector 1, Bucharest, Romania.

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact the email address: contact@designradar.com.

Last update: 14.05.2025