Confidentiality policy 

1. Data protection notification

CulinaryOn HANGAR SRL (hereinafter referred to as “Eventyon” or “We” or “us”) appreciates your visit to our websites and mobile applications (also known as “Online Offers”) and your interest in our company and products.


2. Eventyon respects your privacy

The protection of privacy during the processing of personal data, as well as the security of all business data is an important concern for us. We maintain the confidentiality of personal data collected during your visit to the Online Offers and process them only in accordance with legal regulations.


3. Contoller

Eventyon is the controller responsible for processing your data; the exceptions are highlighted in this data protection notice. Our contact details are as follows: Str. Pipera, no. 48, Hangar 5, Sector 2 Postal code: 020112, Bucharest - Romania CUI: RO37039727 and Reg. Trade: J40 / 1555/2017.


4. Collection, processing and use of personal data

4.1. Categories of processing data

The following categories of data are processed: • Communication data (eg name, phone, e-mail, address, IP address) • Main contractual data (eg contractual relations, contractual or product interest) • Customer history • Contract accounting and payment data • Planning and regulatory data • Transaction data • Provision of information (from third parties, for example, credit institutions or public registers).


4.2. Principles

Personal data represents all information relating to an identified or identifiable person and includes, for example, names, addresses, telephone numbers, e-mail addresses, main contractual data, contract accounting and payment data, which are an expression of the identity of a person. We only collect, process and use personal data (including IP addresses) when there is a legal basis for it or you have given your consent to the processing or use of personal data relating to this matter, for example, through registration.


4.3. Data processing objectives and legal bases

We and our service providers process personal data for the following purposes:


4.3.1 Providing these Offers online (Legal basis: justified interest on our part for direct marketing, insofar as this is in accordance with data protection law and competition law).

4.3.2 Determination of disturbances / disturbances and for security reasons. (Legal basis: fulfillment of legal obligations to ensure data security and justified interest in solving disruptions  and security of our offers).

4.3.3 Self-promotion and promotion by others, as well as market research and analysis within the scope of the legal permit (Legal basis: justified interest on our part for direct marketing, insofar as this occurs in accordance with data protection legislation and competition law).

4.3.4 Surveys for customers or about products made by mail (Legal basis: our justified interest in improving products / services). Note: If we instruct a market research institute to conduct surveys, this institute will only act on the basis of the task received and will comply with our directives.

4.3.5 Sending an e-mail or SMS / MMS newsletter, with the recipient's consent. (Legal basis: agreement).

4.3.6 Assuring and claiming our rights. (Legal basis: justified interest on our part in ensuring and claiming our rights).


4.4. Log files

Every time you use the internet, your browser transmits certain information that we store in the so-called log files. We save the log files only for a short time, to determine the disturbances and for security reasons (for example, to clarify the attack attempts) and then delete them. The log files to be managed as evidence are excluded from the deletion rule until the incident is fully resolved and may be forwarded, on a case-by-case basis, to the investigating authorities. Log files are also used for analysis purposes (with or without the full IP address). See the Web Analysis module. In particular, the following information is saved in the log files: - The IP address (internet protocol address) of the terminal which is used to access the online Offers; - The internet address of the website from which the online offer was accessed (so-called source URL or targeting URL); - The name of the service provider used to access the online Offer; - Name of accessed files or information; - Date and time, as well as the duration of recovery; - The amount of data transferred; - Operating system and information about the internet browser used, including installed add-ons (eg Flash Player); - http status code (for example, "Request failed" or "File not found").


4.5. Childrens

This online offer doesn’t apply to kids under 16 years old.

4.6. Data transfer

4.6.1. Data transfer to other controllers 

Personal data is transmitted to other controllers mainly only when necessary for the performance of a contract, if we or a third party has a legitimate interest in the transfer or if you have given your consent. Details on the legal basis can be found in the section Processing Objectives and Legal Basis (Article 4.3). Where data is transferred to a third party on the basis of a justified interest, this is explained in this data protection notice. In addition, data may be transferred to other controllers when we are required to do so in accordance with applicable legal regulations or administrative or legal orders.


4.6.2. Service providers (general)

We have hired external service providers for tasks such as sales and marketing services, contract management, payments, scheduling, data hosting and helplines. We have carefully chosen these service providers and regularly evaluate them, especially with regard to the efficient management and protection of saved data. All service providers are obliged to ensure confidentiality and to comply with legal provisions.


4.6.3. Transfer to recipients outside EEA

We may also transfer personal data to recipients outside the EEA in so-called third countries. In such cases, before the transfer we ensure that the recipient of the data ensures an adequate level of data protection (for example, following a decision on the appropriateness of the European Commission on that country or the agreement with the recipient based on the so-called clauses EU model) or that you have agreed to the transfer. You have the right to receive an overview of third-country recipients and a copy of the specific agreed provisions that ensure an adequate level of data protection. Use the statements in the Contact section for this.


4.7. Data Retention periods

We mainly store your data for as long as is necessary to provide our online Offers and associated services as long as we have a justified interest in storing them (for example, we may still have a justified interest in mail marketing when performing a contract. ). In all other cases we delete your personal data, except for those that we need to store in order to fulfill legal obligations (for example, we are obliged to provide documents such as contracts and invoices for a certain period of time, as a result of the periods withholding tax according to the tax and commercial code).


5. Use of cookies

5.1. General

Cookies are small text files saved on your computer when you visit an online Offer. If you access this Online Offer another time, your browser transmits the content of the cookies to the respective provider and thus allows the re-identification of the terminal. Reading cookies allows us to optimally configure our online offers for you and makes it easier for you to use them.


5.2. Disabling and deleting cookies

When you visit our web pages you will be asked in a popup window if you agree to the use of cookies on our page or want to disable them from the settings. If you decide to block cookies, your browser has a blocking option. This cookie is exclusively for the purpose of allocating your objection. Disabling cookies may disable individual functions of our web pages. Please note that for technical reasons, a blocking cookie can only be set for the browser that was used to set it. If you delete cookies or use a different browser or terminal, you must block them again. Preferences do not apply to cookies that are set during your visits to third party websites by other providers. Your browser allows you to delete all cookies at any time. To do this, see the support features of your browser. However, this may cause some individual functions to be unavailable. In addition, you can manage and disable third-party cookies on the following website:

http://www.youronlinechoices.com/uk/your-ad-choices.

As we do not operate this website, we are not responsible and cannot influence its content and availability.


5.3. Overview of cookies used by us

In this section you can find an overview of the cookies we use.


5.3.1. Absolutely cookies 

Certain cookies are required in order to securely provide our online offers. This category includes, for example: - Cookies that identify or authenticate our users; - Cookies that temporarily  save certain information entered by the user; - Cookies that store certain user preferences (for example, searches or language settings); - Cookies that store data to ensure unobstructed playback of video or audio content.


5.3.2. Analytical cookies 

We use analytical cookies to record the usage behavior (for example, advertising banners accessed, searches performed) of our users and to evaluate it from a statistical point of view.


5.3.3. Publicity cookies

We also use cookies for advertising purposes. User behavior profiles created using such cookies (e.g., banner ads accessed, subpages visited, searches performed) are used by us to show you personalized ads or offers according to your interests ("interest-based advertising"). ).


6. Web analysis 

We need statistical information about the use of our online Offers in order to design them so that they are easier to use, to carry out large-scale measurements and market research. In this regard, we use the web analytics tools described in this section. User profiles created by these tools using analytics cookies or analyzing log files do not contain personal data. The tools either do not use IP addresses at all, or immediately restrict them to data collection. The tools provide processed data only to processors that are subject to our directives and not for our own purposes. Below you can find information about what each tool offers and how you can refuse to collect and process data through that tool. Please note that for tools that use blocking cookies, the blocking function affects a device or browser and is thus valid for the terminal or browser used at that time. If you use multiple terminals or browsers, you must perform the lock on each device and each browser. Otherwise, you can generally avoid the formation of user profiles by disabling the use of cookies; to do this, see the section Disabling and deleting cookies.


6.1. Google Analytics

Google Analytics

Google Analytics is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). We use Google Analytics with the additional feature provided by Google to anonymize IP addresses. Meanwhile, Google is already shortening IPs within the EU in most cases, but it does so only in exceptional cases in the United States, and in both regions it only saves the short form of IP addresses. You may refuse the collection or processing of your data using the following link to download and install a browser plugin:

 http://tools.google.com/dlpage/gaoptout?hl=en

7. Use of remarketing tools

In order to optimize our online marketing we use so-called remarketing technologies. It aims to create a more interesting online offer, customized according to your needs. For this, we use the tools presented below. Usage profiles created using advertising cookies or third-party advertising cookies, so-called web beacons (also called invisible graphics and pixels or counting pixels) or comparable technologies that are not combined with data personal character. The tools are used by providers to show our users of online offers or third-party ads based on interests and to control how often users see certain ads. The person responsible for processing the data associated with the instruments is the respective provider. The suppliers of the instruments may, where appropriate, transfer information to third parties for the reasons set out above. The tools either do not process users' IP addresses at all, or restrict them immediately after data collection. You can find information about a tool provider for each tool, as well as how you can refuse to collect data by that tool. Please note that for tools that use blocking cookies, the blocking function affects a device or browser and is thus valid for the terminal or browser used at that time. If you use multiple terminals or browsers, you must perform the lock on each device and each browser.


7.1. Google AdSense

Google AdSense is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). You can find more information about this tool here. You can refuse the collection and processing of your data by this tool by accessing user references.


8. Newsletter

8.1. Newsletter with subscription option; right of withdrawal of the agreement

You can subscribe to newsletters about our online offers. For this, we use the so-called two-step subscription procedure, which means that we will send you a newsletter via email, mobile messenger (for example, WhatsApp), SMS or push notification only after you have explicitly confirmed the activation of the service. of the newsletter by accessing the link in the notification. If you no longer wish to receive newsletters at a later date, you may unsubscribe at any time by withdrawing your agreement. You can withdraw your consent for the email newsletters by accessing the link sent in that e-mail for the online Offers, as the case may be. This takes place within the administration settings. Alternatively, you can contact us using the contact details provided in the Contact section.

9. External links

Our online offerings may include links to third party websites - suppliers not associated with us. Once you access the link, we have no influence on the collection, processing and use of personal data transmitted by accessing the link to a third party (such as the IP address or URL of the site where the link is located), as we cannot, of course, monitor the behavior of third parties. We do not assume any responsibility for the processing of such personal data by third parties.


10. Security

Our employees and the companies that provide services on our behalf have an obligation to ensure confidentiality and to comply with applicable data protection legislation. We take all necessary technical and organizational measures to ensure an adequate level of security and to protect your data managed by us, in particular against the risks of destruction, manipulation, loss, unlawful or unintentional modification or unauthorized disclosure or access. Security measures are constantly being improved, in line with technological progress.


11. Users right

To exercise your rights, please use the details provided in the Contact section. In this case, make sure that there is a possibility to clearly identify the person.

Right to information and access:

You have the right to obtain our confirmation of the processing or non-processing of personal data and, if so, access to such data.

Right to correction and deletion:

You have the right to rectify your personal data incorrectly, without undue delay. Given the purpose of the processing, you have the right to complete incomplete personal data, including by providing an additional statement. This does not apply to data required for invoicing and accounting or which are subject to the legal retention period. If access to such data is not required, its processing is restricted (see below).

Restriction of processing:


You have the right to request - provided that the legal requirements are met - the restriction of the processing of your data.


Refusal to process data:

You have the right to refuse the processing of data by us at any time. We will no longer process personal data unless we prove compliance with the legal requirements to provide demonstrable reasons for further processing, beyond your interests, rights and freedoms or for the establishment, exercise or defense of legal action.


Refusal of direct marketing:

In addition, you may refuse to process personal data at any time for direct marketing purposes. Please note that for organizational reasons, there may be an overlap between your refusal and the use of that data in order to run the ongoing campaign.


Refusal to process data on the legal basis of "justified interest":

In addition, you have the right to refuse the processing of personal data at any time, provided that the legal basis of the justified interest is applicable. In this case, we will stop processing your personal data, unless we can demonstrate compelling legitimate reasons, as required by law, for the processing that prevails over your rights.


Withdrawal of agreement:

If you have given your consent to the processing of data, you have the right to withdraw your consent with immediate effect. The legality of the data processing before the revocation of the agreement remains unchanged.


11.1. Data portability:

You have the right to receive the data you have provided to us in a common, structured format, which can be read by software - if technically possible - to request the transfer of that data to a third party.





11.2. Right to lodge a complaint with the supervisory authority:


You have the right to lodge a complaint with a supervisory authority. You can contact the competent supervisory authority at your home or in your country or the supervisory authority responsible for our case. See below:

National Authority for the Supervision of Personal Data Processing

B-dul G-ral. Gheorghe Magheru 28-30

Sector 1, postal code 010336

Bucharest Romania

Phone: +40.318.059.211; +40,318,059,212

Fax: +40.318.059.220

E-mail: anspdcp@dataprotection.ro

Web: www.dataprotection.ro

12. Changes to the Data Protection Notice

We reserve the right to change our security and data protection measures if necessary as a result of technical progress. In such cases, we will amend the Data Protection Notice accordingly. Therefore, please follow the current version of the Data Protection Notice, as there may be changes.


13. Contact

If you want to contact us, you can find us at the address presented in the "Controller" section. For the exercise of your rights and for suggestions and complaints regarding the processing of your personal data, as well as for the withdrawal of the agreement, we recommend that you contact our data protection commissioner within the company at the following e-mail address: welcome@eventyon.ro.


14. Effective date: 19.10.2020