Privacy Policy

Protection and Processing of Personal Data

MKOR processes your personal data in accordance with the provisions outlined below.

1. Categories of Personal Data

For the purposes described in Section II below, we process the personal data you provide through our website, hereinafter referred to as “Personal Data,” which includes but is not limited to:

• Personal information: Name, surname, date of birth, phone number (mobile/landline), email address, home address, bank account, workplace, income, or any other personal information explicitly provided by you.
• Order details: Information about placed orders, types of ordered products or services, payment details, and transaction data (hereinafter referred to as “Order Data”).
• Communication data: Content of messages sent to MKOR, subject lines, and any attached documents.
• Website usage information: Data regarding your activity on our website, such as the date and time of access, IP address, public device ID, and other similar information (hereinafter referred to as “Monitoring Data”).

MKOR collects your personal data through various means, such as directly via the website, email, social media, or other communication channels. Additionally, we may gather traffic reports from hosting services, social media plugins, or external partners, ensuring all data collected is used solely to improve your experience and never shared with third parties without explicit consent.

2. Purposes of Data Processing

We process your personal data to the extent permitted or required by applicable legislation for the following purposes:

1. To provide goods and services offered by MKOR, including activities specific to this purpose, such as enabling optimal use of the website and obtaining statistical information to improve MKOR’s services (hereinafter referred to as “Purposes related to service provision and website functionality”).
2. To securely manage MKOR’s IT systems and prevent fraudulent activities (hereinafter referred to as “Purposes related to security and fraud prevention”).
3. To enable clients to provide feedback, suggestions, and complaints about MKOR’s services (hereinafter referred to as “Purposes related to client feedback and suggestions”).
4. To generate and provide MKOR clients with statistical data or to collect such data for internal research purposes or based on client requests (hereinafter referred to as “Purposes related to client statistics”).
5. To allow suppliers to share opinions and feedback regarding MKOR’s activities or propose new collaboration ideas or offers to MKOR (hereinafter referred to as “Purposes related to suppliers”).
6. To contact and manage contractual agreements with potential MKOR partners (hereinafter referred to as “Purposes related to partnerships”).
7. To carry out marketing activities (hereinafter referred to as “Purposes related to marketing”).
   These activities may include:
   1. Using your personal data to send you updates about our products and services when you engage with MKOR online or offline. You can unsubscribe from these marketing communications at any time, quickly and easily, by clicking the unsubscribe link included in every newsletter or communication from MKOR.
   2. Based on the information you provide, personalized offers may be displayed to you on our site (including on social media platforms). These may include offers you can directly benefit from via the site, third-party offers on products, surveys, services, or promotions that we believe might interest you.
   3. When participating in other promotional activities (e.g., raffles, contests), we may ask you to provide relevant information necessary to administer these promotions or to award prizes.

We will use your personal data as provided to MKOR, solely for the purposes outlined in this Privacy Policy.

3. Legal Basis for Processing Your Personal Data

In general, processing your personal data is necessary for carrying out specific activities related to the purposes of processing.

You may be required to provide your personal data as part of this process. While some data is mandatory, other situations may involve optional information. If you do not provide the mandatory data requested, the process may be delayed or rendered impossible.

To process your personal data, MKOR relies on the following legal grounds:

1. 1. Consent: We may rely on your explicit consent to use your personal information for specific purposes, such as direct marketing. Consent serves as the legal basis for collecting, processing, and using your personal data to the extent permitted by applicable law. You may withdraw your consent at any time by contacting us via the details provided at the end of this Privacy Policy.
   2. Contract Performance: Processing is necessary for executing or preparing a contract to which you are a party. This includes fulfilling obligations related to contracts between you and MKOR (e.g., contracts with collaborators, customers, or suppliers). For example, if you use our services to participate in an online study, we may use your personal data to complete and manage the study in accordance with our contract. Similarly, processing may be required before entering into potential contracts with third-party partners at your request.
   3. Legitimate Interests: We may process your data for legitimate business interests, such as offering personalized content, improving website functionality, and ensuring site security. These legitimate interests also include administrative purposes and fraud detection.

Personal Data Processing Table

4. Data Transfers, Recipients, and Legal Basis for Such Transfers

4.1. Recipients

We may transfer your personal data to other companies or collaborators within the limits of applicable legislation and MKOR’s legitimate interests to facilitate internal communication and administration or for marketing purposes.

We transfer your data to third parties only if you have provided explicit prior consent, such as through a checkbox in online questionnaires or by clicking a link in an email or on our website. Transfers are made exclusively when necessary to facilitate cooperation or communication with MKOR partners.

MKOR and/or other entities may also transfer your data to regulatory agencies, courts, or government authorities, as required by law, under Art. 6(1)(c) GDPR. Data may also be shared with external consultants or service providers (e.g., lawyers, accountants, auditors) under Art. 6(1)(f) GDPR.

Service Providers: MKOR collaborates with service providers, signing contracts to fulfill operational needs such as IT services, customer relationship management, payment processing (e.g., banks, payment processors), shipping (e.g., couriers), marketing campaigns, and award distribution. Third-party providers must adhere to confidentiality agreements, ensuring data is only used for the purposes outlined in this Privacy Policy.

4.2. International Data Transfers

Your personal data may be transferred to countries outside the European Union or the European Economic Area if necessary. In such cases, MKOR ensures compliance with applicable privacy regulations. Identification data (e.g., name, email, phone, location) is transferred securely and processed to prevent unauthorized access. Such transfers occur only with your explicit consent or when legally mandated.

5. Retention Periods

Personal data processed for the purposes outlined in this privacy policy will be retained only as long as necessary, for the duration of your contact with MKOR and, where applicable, during any transitional periods (e.g., while responding to your request) or as required by legal obligations for archiving personal data.

If legal proceedings are initiated, your personal data may be retained until the conclusion of the action, including any applicable appeal periods, after which the data will be archived or deleted in compliance with applicable legislation.

In principle, we will retain your personal data for the period requested or permitted by applicable legislation. Afterward, your data will be deleted or anonymized, ensuring you can no longer be identified.

In all cases, personal data related to contracts, communications, and other documents may be subject to legal retention requirements of up to 10 years. All other personal data will be deleted within six months of your request to withdraw or delete your data unless required for research or for compliance with legal obligations (e.g., judicial rulings) or for fraud prevention, security, or legal disputes.

6. Security Procedures

In compliance with European data protection legislation, we use reasonable security procedures to prevent unauthorized access to and misuse of your personal data.

We employ systems and protocols designed to protect your data during transmission and storage, including technical and physical measures to safeguard access and usage. Your personal data is processed only for legitimate purposes and accessed exclusively by authorized personnel.

7. Your Rights

If you have given your consent for certain processing activities, you may withdraw it at any time with future effect. Withdrawing your consent will not affect the legality of processing based on your prior consent.

Under the conditions set by applicable legislation (GDPR), you have the following rights:

1. Right of Access: You have the right to request and obtain information about whether your personal data is being processed, and if so, to access that data. This includes details such as the purposes of processing, the categories of data processed, and the recipients or categories of recipients to whom your data has been disclosed.
2. Right to Obtain a Copy: You have the right to request a copy of your processed personal data. For additional copies, we may charge a reasonable fee based on administrative costs.
3. Right to Rectification: You have the right to request corrections to inaccurate personal data. Depending on the processing purposes, you may also have the right to complete incomplete data, including by providing a supplementary statement.
4. Right to Erasure (“Right to Be Forgotten”): You have the right to request the deletion of your personal data.
5. Right to Restriction: You can request a restriction on the processing of your personal data. In such cases, the data will be marked and processed only for certain purposes.
6. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit this data to another entity without hindrance.
7. Right to Object: You may object, at any time, to the processing of your personal data for reasons related to your specific situation. If you object, MKOR will no longer process your personal data unless there are compelling legitimate grounds for processing or for the establishment, exercise, or defense of legal claims.

You can exercise the above rights by submitting a written and signed request to MKOR at the postal address Str. Mărgelelor nr 2D, Bragadiru, Romania (attention: Data Protection Officer) or via email at [email protected].

In your request, you may specify if you prefer the information to be communicated to a specific address or through a secure correspondence service to ensure delivery is made only to you. Please note that we reserve the right to verify your identity to confirm the request originates from you.

MKOR will respond to your request within 30 days from the date of receipt, ensuring compliance with your expressed communication preferences.

Please consider that your rights may be subject to limitations under applicable national data protection laws. MKOR, as a data controller, remains your primary contact for exercising these rights.

You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing.

For any questions, please contact MKOR at [email protected] or at the postal address Str. Mărgelelor nr 2D, Bragadiru, Romania (attention: Data Protection Officer).

8. How Do We Process Children’s Data?

MKOR’s services are not designed for or directed at minors.