To ensure the protection of website users' personal data rights, we have implemented specific protective measures, taking into account Romanian legislation as well as the requirements established by Regulation (EU) 2016/679 – applicable throughout the European Union from May 25, 2018 (“Regulation”).

Personal data means any information by which you can be identified, especially through an identifier such as a name, identification number, location data, an online identifier, or one or more factors specific to your physical, physiological, genetic, mental, economic, cultural, or social identity.

Our company takes all necessary measures to ensure the protection of your personal data rights, and these conditions represent the notifyas established by Articles 13 or 14 of the Regulation, through which we explain why we collect your personal data, how we protect this data, and what your rights are regarding this data collection.

We encourage you to carefully read the document and to request any additional information or clarification you may consider necessary regarding the content of this notice.

1) General Considerations Regarding Your Personal Data

In accordance with Regulation (EU) 2016/679, OldRich® will securely manage and use the personal data provided by Users solely for the specified purposes. Through the Terms and Conditions, Users are informed that the personal data they provide will be processed for the purpose of optimally delivering services by OldRich® internet services, goods and services supply, advertising, marketing and promotion services, as well as statistical services.

OldRich® performs the following processing operations: collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, and, in some cases, transmission to third parties, based exclusively on a regulated commercial contract that ensures data security and confidentiality, as well as respect for the rights of users and the personal data of website Users, to manage, maintain, improve, and obtain information about the services offered, as well as to prevent errors and information leaks through its own IT network, violations of the law, or contractual terms.

The personal data to be collected may be used, including through automatic profiling (for those Users who have given their explicit consent), to highly personalize the services offered to Users through the website as well as for marketing purposes. Automatic profiling will not target data of minors, and their personal data will not be processed for this purpose.

Personal data will be provided by Users voluntarily when creating a valid account on the website or subscribing to a service available on the site, in order to benefit from the products and services offered. During registration, Users are asked to provide certain personal data, such as full name, gender, date of birth, email address, phone number, profession, habits/preferences/behavior, as well as other personal information.

The user is the sole responsible for all data provided at the time of creating the user account on the website. To confirm the data and the account, the User will be notified at the email address declared during account creation. This confirmation email aims to prevent fraudulent actions by users who use other people's email addresses to create fake accounts. If you receive such a message and you have not personally registered on the site, please send us an email at the address contact@oldrich.ro to delete the respective account within a maximum of 3 business days. The email will contain, in PDF format, the current version of this Contract.

The User's profile form contains fields that can be edited in case there is a need to modify or complete the data provided during account creation.

The user is not obligated to provide this data, these data are necessary for (i) recording the use of the website and (ii) optimally providing services through it, for notifying Users about promotional campaigns, for advertising purposes, personalised marketing and advertising actions, and for granting the User access to additional features. The User’s refusal to provide the requested data will result in non-participation in promotional activities organised through the website and exclusion from using additional features and services offered exclusively to Users with an account on this website.

The website may also be used if the User decides not to create a profile. by providing personal data, except as otherwise specified within Cookie Policy (an integral part of this Contract)

In accordance with Regulation (EU) 2016/679 and Law no. 677/2001, Users have the right to access and rectify their data, the right not to be subject to an individual decision, and the right to seek legal remedy. Additionally, Users have the right to object to the processing of their personal data and to request data deletion.

To exercise these rights, Users may submit a written request by email to the address contact@oldrich.ro with the subject line “Personal Data Request.”

The website commits not to send spam messages (commercial messages for which it does not have the User’s prior explicit consent) and to undertake all accessible technical measures to ensure the security and confidentiality of the User’s data.

The website reserves the right to terminate, without prior notice, the accounts and access of members who violate the Terms and Conditions, engage in proven fraudulent activities, defamation, or attacks on the security and confidentiality of information within the website or the operating company of the website.

2) Personal Data We Collect, Legal Grounds, and Purposes of Collection

Within the online communication relationship established between the website and the user, we collect and process your personal data. The collection and processing of this data are necessary to provide informational and promotional content to the user, following the voluntary submission of personal data by the user through the website by accessing one or more of the following sections: account creation, account update, newsletter subscription, online questionnaire completion, online form submission, to obtain personalized information or commercial benefits within campaigns promoted on the site.

The legal grounds for collecting personal data on the website may include the following:

  1. the data subject has given consent to the processing of personal data for one or more specific purposes
  2. processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
  3. processing is necessary for compliance with a legal obligation to which the controller is subject
  4. processing is necessary to protect the vital interests of the data subject or of another natural person
  5. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  6. processing is necessary for the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, especially where the data subject is a child.

Below, we provide a detailed overview of the personal data collected, along with the legal basis, purpose, and duration of their collection. Providing the data indicated below is not mandatory to browse the Website, except for those related to Cookies.

The indicated data are necessary only to provide specific services to the Users who submit them.

Personal Data we collect: 

First name, last name, email address, phone number, geographic location data, mailing address, social media profile links

Legal grounds for collecting this data: 1), 6)

Purposes of Collecting Personal Data: 

To provide access to content and respond to questions and requests submitted by the user online, and to send communications, offers, and benefits consisting of access to services and products

Method and Duration of Data Collection: 

Within a secure database, until the user explicitly requests deletion or up to 10 years after the user's last activity on the site. After 10 years, the data will be anonymised electronically.

Personal Data we collect: 

Cookies, timestamps (date and time of access), browsing history on the site

Legal grounds for collecting this data: 

1), 6)

Purposes of Collecting Personal Data: 

For monitoring website traffic and access history, to establish content hierarchy, and to identify the most relevant content for the user.

Method and Duration of Data Collection:

Within a secure database, until the user explicitly requests deletion or up to 10 years after the user's last activity on the site. After 10 years, the data will be electronically anonymised.

3) How Your Personal Data is Stored: Location and Retention Period

We will store your personal data for a period that does not exceed the period necessary to fulfil the purposes for which the data are processed, and, in cases where we have a legal obligation to retain your personal data for a certain period, the retention period will be as prescribed by law. Depending on the specific situation, this period may vary and can range between 1 day and 10 years.

For a clear understanding of how your personal data will be stored, the location where your data will be kept, and the exact duration for which these data will be retained in our records or systems, please refer to the table above.

In order to guarantee the User's right to protection regarding the processing of personal data, we implement, for certain categories of data that are sensitive or likely to significantly affect rights, special technical and organisational measuresto protect these categories of personal data.

4) Users’ Rights Regarding Personal Data and Their Exercise

To ensure the highest possible level of data protection, users have a set of rights regulated by law, which we briefly outline below. For any additional details, please do not hesitate to contact the data protection officer within our Company using the following contact information: contact@oldrich.ro, Vințu de Jos, str. Lucian Blaga, nr. 16, județul Alba, telefon .

    • Right of Access

The User has the right to access their personal data that we process, as well as the right to obtain copies of such data. Upon the User's request, the first copy will be provided to them freeof charge, any additional copies you request may be subject to a fee corresponding to the effort required for extraction and formatting for transmission. The copy of your personal data can be provided either in electronic format or in physical form, depending on your request and the nature of the data requested. To request information about the personal data held on the site, as well as to request partial or total deletion of such data, you must submit a request via email to the following address: contact@oldrich.ro or send a letter by mail or courier to the registered office of OldRich®.

Additionally, the user has the right to obtain any relevant supplementary information (such as the purpose of processing personal data, categories of personal data collected, information regarding the processing and disclosure of these data, and any other similar information).

    • Right to Data Rectification

The User has the right to obtain the correction of any inaccuracies concerning their personal data processed by us. Additionally, the User has the right to obtain the completion of any incomplete personal data. All users are encouraged to contact the website at the following address: contact@oldrich.ro whenever they notice any inaccuracy regarding their personal data or that their personal data processed by OldRich® are incomplete.

    • Right to Data Deletion

The User has the right to request the deletion of personal data. This right is not absolute, meaning that the law imposes certain limitations on its exercise (“the right to be forgotten„).

    • Right to Restrict Data Processing

The User has the right to obtain the restriction of processing of their personal data that we collect and process, particularly if they contest the accuracy of the data, if the processing is unlawful, or if the processing is no longer necessary according to the law.

    • Right to Object

The User has the right to object to the processing of their personal data by us, especially when the processing is carried out for marketing purposes or due to reasons related to their particular situation. In such cases, their data must be anonymized as soon as possible upon receipt of the objection, and the anonymization must be confirmed to the User.

    • Right to Withdraw Consent

For personal data processed based on consent, the User has the right to withdraw their consent at any time, as easily as they initially gave it. However, withdrawing consent will not affect the lawfulness of data processing carried out before the withdrawal. The right to withdraw consent is not absolute, meaning there are cases where data will not be deleted following consent withdrawal (for example, when personal data is used to ensure the website complies with a legal obligation). The withdrawal of consent takes effect upon its registration, and the processing of the withdrawal will be completed within a maximum of 3 business days from registration.

    • Right to Lodge a Complaint with the Competent Authority

The User has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing regarding any matters related to the processing of personal data by our Company.

    • Procesul decizional automatizat, inclusiv crearea de profiluri și dreptul de a solicita ca deciziile bazate pe prelucrarea automată a datelor  sau care  afectează într-o măsură semnificativă să fie luate de persoane fizice, nu exclusiv de computere

Personal data are collected and processed through an automated decision-making process to personalize the information and commercial communications addressed to you. The automated decision-making process involving health data is based on your explicit consent.

Within these processes, your data are protected through special security measures such as data encryption and advanced server-level security of the database.

You have the right to request a change in the way your personal data are processed automatically by requesting a review of the automated process through human intervention. For this purpose, please contact us at the email address contact@oldrich.ro.

5) Exercise of Rights

To enable the user to exercise the rights specified above, to ask any questions regarding these rights, or to request clarifications about any provisions of this notice, please feel free to contact us at any time using the contact information provided.

How Requests or Complaints Can Be Submitted – Contact Person

To learn more about personal data, how data is collected, processed, and protected, or to request any clarifications regarding the information mentioned in these Terms and Conditions, any user may contact at any time the data protection officer within the company by sending an email to contact@oldrich.ro or by postal mail at Vințu de Jos, str. Lucian Blaga, nr. 16, județul Alba.