Privacy Policy for Personal Data

1. When does it apply?
2. What is the purpose of this policy?
3. What constitutes personal data?
4. For what purposes do we collect them?
a. CONTRACTUAL Purposes
b. FUNCTIONAL Purposes
c. MARKETING Purposes
5. How do we collect them?
6. What rights do you have?
a. Right ofaccess
b. Right tomodify and delete
c. Right torestrict processing
d. Right todata portability (export)
e. Right not tobe subject to automated decisions
f. Right tofile a complaint
7. Who do we disclose the data to?
8. How do we ensure data security?
9. What are the retention periods?
10. How do we handle requests from minors?
11. What do we do in case of security incidents?
12. What records do we keep?

1. When does it apply?
The privacy policy applies to the personal data of those who wish to become, are, or have been One88 customers, owned by SAKAMI REAL ESTATE SRL, including data collected, used, or disclosed while using the www.one88.ro website. This policy is valid from June 1, 2023.2.
2. What is the purpose?
When you use our website, you entrust us with some of your personal data. We understand this and appreciate it. In everything we do, we strive to protect them and provide you with as much control as possible. The privacy policy will help you understand what personal data we collect about you, how we use your personal data, and what options you have regarding their use. We are committed to maintaining the accuracy, confidentiality, and security of your personal data. To be in line with legislative changes and/or practical realities, we reserve the right to adjust this policy at any time, with changes becoming mandatory from the date of publication on the website.
3. What constitutes personal data?
We want to make it clear what "personal data" means. Personal data are pieces of information about an identified or identifiable person. Examples of such data include name, first name, address, phone number, email, identity card information, personal identification number (CNP), bank information, cookies, computer IP address, mobile device IDs, information from your web browser (such as browser type and language), and actions you take on our website, etc.
4. For what purposes do we collect them?
Personal data are collected for the effective conduct of commercial relationships, providing you with the best services (fast deliveries, electronic payments, etc.), continuously improving the functionality of our website, or bringing relevant advertisements and promotions to your attention. We limit the personal data we collect to what is relevant for their specific processing. We do not process your personal data in ways that are incompatible with the purposes for which the information was collected or subsequently authorized by you. Contractual Purposes (mandatory) – for initiating the contract process and conducting effective commercial relationships. Data (name, first name, phone, email, etc.)may be collected to respond to your inquiries about our products and services, organize the processing and effective delivery of your bookings, and more.These data are collected through dedicated forms on the website, such as contact, request an offer, online ordering, request consultancy, and "my account" sections. These data are referred to as "contractual data." Without them, we cannot process your order or provide our services through our website.Functional Purposes (optional) – for a better experience using the website. We may collect data (name, first name, phone, email, etc.) directly to ensure a better website experience. These data are referred to as "functional data."Indirect data that can be used to create a better-structured website may also be collected (e.g., Google Analytics reports, etc.). These data help us understand visitor navigation patterns, browsing volume, and other relevant information to improve the website and provide you with the best browsing experience. Marketing Purposes (optional) – for a better-structured website, relevant advertising, and social media information. We collect personal data, such as direct data (name, first name, phone, email, etc.) or indirect data (cookies, computer IP address, location, mobile device IDs, etc.). Cookies are data files sent from a website to a browser to record user information for various purposes. We use cookies and similar technologies. For more information, consult the cookie policy on our website. The data can be used to display tailored ads based on your interests or previously viewed products.
5. How do we collect them, and how do you manage your consent?
When you interact with our website, we offer you the option to grant and withdraw your consent for the use of your data at any time. We provide visitors to the website and customers who provide personal data with the means to choose how we use this data. Consent for the processing of personal data can be requested when launching a form or at any other purpose involving consent, by accessing a general control panel (cumulative or individual, for each category of data or individual purpose) or by other technical means created for this purpose. You will have the opportunity to explicitly give consent for the purposes for which personal data will be used and to manage it afterward, in accordance with current regulations.
6. What rights do you have?
We make every effort to guarantee your rights in accordance with current legislation. You have the right to access your personal data. Consequently, if necessary, we provide you with access to the personal data we hold about you. You also have the option to choose whether you want to receive offers and promotions from us and to correct, modify, or     delete your information. We can limit or refuse access to personal data if the effort or cost of providing access is disproportionate to the risks to your privacy or if the rights of others, other than you, are violated. Other reasons for refusing or limiting access may include restrictions imposed by current legislation or similar justifiable issues. You have the right to modify and delete your personal data, especially incomplete or inaccurate data. We take reasonable measures to ensure that the personal data we process is viable     for the intended use, accurate, complete, and up-to-date. In this regard, we rely on you to update and correct personal data as necessary for the purposes for which they were collected or subsequently authorized by you. Requests for access, modification, or deletion of information will be processed within 30 days. You have the right to restrict processing, object to the processing of your personal data, and request rectification,     updating, or deletion of data in accordance with the law. This right can be exercised at any time, free of charge and without justification, except for data for which processing is a legal obligation. You have the right to request the portability (export) of personal data. We may limit or refuse the portability of personal data if the effort or cost of providing access is disproportionate to the benefits in the respective case. You have the right not to be subject to automated individual decisions. You have the right to file a complaint with the     National Authority for the Supervision of Personal Data Processing (A.N.S.P.D.C.P.), as well as to seek justice, in accordance with applicable legal provisions.
7. Who do we disclose your data to, and where do we transfer them? We collaborate with authorized electronic payment processors and internet companies such asGoogle and Facebook, among others, to provide you with the best website experience. We may share your personal data with service providers contracted for order processing and delivery (such as payment processors, etc.), to improve the user experience on the website (e.g., Google Analytics, etc.), or for marketing, advertising, and publicity services (Google, Facebook, Mailchimp, etc.), as well as for other purposes, including accounting services, legal services, consulting, affiliates, business partners, etc. Disclosure of data is based on the fact that the necessary services cannot be provided by us. We make every effort to have a commitment of confidentiality from them, guaranteeing that this data is kept securely and provided in accordance with current legislation. In case our hosting service providers, newsletter sending, or other similar services are transferred outside the European Economic Area(EEA), efforts are made to ensure adequate protection measures. We may disclose your personal data due to legal requirements, legal proceedings, litigation, and/or requests from public and governmental authorities in your country of residence or outside it. We may also disclose personal information about you if we determine that disclosure is reasonably necessary to ensure compliance with our terms and conditions or to protect our operations or users. Relevant information can also be found in announcements related to specific data processing activities. Additionally, we may transfer personal data in the event of an audit or in the event of a total or partial sale or transfer of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, dissolution, or liquidation).
8. How do we ensure data security?
The security of your data is important to us, and we make every effort to protect it. We take reasonable and appropriate measures to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction, taking into account the nature of such data. We take all necessary internal measures to identify and ensure information security, regularly verifying and adapting measures to the state of the art.Our company uses well-known service providers in the market (e.g., hosting services, software development services, marketing solutions, etc.) to achieve this goal.
9. What are the retention periods?
We store information in accordance with legal requirements and as long as you agree. Personal data storage is done for the periods specified by current legislation, for the purpose of maintaining records related to activities, protecting rights in court, exercising other rights under the law and contracts concluded, and complying with any archiving requirements in accordance with legal provisions. Personal data necessary to benefit from the functionalities of our website and promotional activities are stored for an indefinite period, until you delete your account.
10. How do we handle requests from minors?
We do not provide services to and do not deliver goods to minors except incases expressly provided by law. Our company does not process personal data of minors under the age of 16 in its data processing activities. We do not conduct direct marketing promotional activities to minors. Anyone who provides us with personal data guarantees that they are of legal age and fully capable. If, however, personal data processing for an individual who is not of legal age occurs, we will cease processing this data once we become aware of this fact. Any processing of personal data of minors is carried out in accordance with legal requirements and in strictly determined cases. Minors who have reached the age of 14 can purchase services, request and receive communications from our company only with the consent of their representative or legal guardian, in accordance with the law.
11. What do we do in case of security incidents?
Informing you and the authorities is the first step. Remediating the situation is our priority. In case of a breach of personal data, we will notify the competent data protection authorities within 72 hours, depending on the level of risk to the customer or website visitor. Affected customers or website visitors will also be notified of the breach. We will take all necessary measures to remedy the situations that arise in order to protect your rights.
12. What records do we keep?
We keep records to demonstrate compliance with this policy. We will keep relevant records about:
The purpose of processing personal data
Categories of data subjects and personal data processed
Whenever possible, the anticipated retention periods for different categories of personal data
A general description of the security measures used to protect personal data
The exercise of your rights.