Terms and conditions

Welcome to https://efstore.ro/

We know that the processing of personal data is a very serious subject, therefore, this procedure describes in detail each flow within the organization, in which personal data of customers, partners, potential customers or platform visitors are processed.

The biggest challenge is to secure this data against unauthorized processing, without the consent of the data subject and only for the purposes for which the consent was obtained.

MULTIPLEC GOLD S.R.L., undertakes major efforts to keep your information and preferences safe. We know how important it is for you to feel safe when you are online, that is why we assure you of the confidentiality of your data, considering that at this moment you are on an encrypted connection (SSL) through which the information transmitted is encrypted and is processed by us only with your consent. Remember, at any time during our collaboration, you can express your option regarding the processing of your personal data.

We are absolutely aware of the fact that GDPR only provides a modernized legal framework, of compliance, based on responsibility for the protection of personal data.

The processing of your data is necessary to provide you with the services you request. In this regard, we take several security measures to protect you in the online environment. One of the measures taken by us to ensure transparency and proportionality towards you. is to eliminate unnecessary collection of personal data and minimize the data we collect. Therefore, we only request the information we need and store it to improve your experience.

Please read the terms and conditions carefully before using this site to place an order.

TERMS AND CONDITIONS OF USE

The website https://efstore.ro/ is the property of MULTIPLEC GOLD S.R.L. , headquartered in Pitesti, Bld. Fratii Golesti, No. 27, CUI 25918560, No. Reg. Com. J03/2120/2020, hereinafter referred to as MULTIPLEC GOLD S.R.L..

Accessing, visiting, using or purchasing the products / services / packages presented on the website https://efstore.ro/ implies acceptance of the terms and conditions listed below.

MULTIPLEC GOLD S.R.L. reserves the right to refuse to collaborate with clients who display inappropriate behavior and language (aggressive, licentious, etc.) or who have a history of bad debts.

MULTIPLEC GOLD S.R.L. reserves the right not to honor the delivery of products or services whose price is incorrect and does not fit into the company’s price list. In this case, the client will be contacted and will have the option to confirm the order at the correct price or to refuse it.

MULTIPLEC GOLD S.R.L. reserves the right to make changes and updates to these terms and conditions, as well as to the offer, without prior notice and without specifying the reasons; also, MULTIPLEC GOLD S.R.L. reserves the right to correct any omissions or errors in display that may occur due to typing errors, inaccuracies or errors in software products, without prior notice. These errors do not oblige MULTIPLEC GOLD S.R.L. to any action.

HOW THE COLLABORATION WORKS

Delivery is made within the mutually agreed term, in accordance with the provisions and clauses of the concluded contract (in the case of collaboration or service contracts) or respecting the terms and conditions agreed upon in the initial discussions, prior to the firm order from the user.

MULTIPLEC GOLD S.R.L. is not the beneficiary of the transportation costs in the case of deliveries.

The content and design of the website https://efstore.ro/ are the property of MULTIPLEC GOLD S.R.L. and are protected under the Copyright Law and the laws regarding intellectual and industrial property rights. You may not reproduce the materials displayed on the website without having a written permission from MULTIPLEC GOLD S.R.L.. The use without the written consent of MULTIPLEC GOLD S.R.L. of any elements on the website is punishable under the laws in force. The personal data of the buyers may be transmitted to the authorities in law following a request in accordance with the laws in force, in order to carry out any verification of commercial transactions or any other verifications justified under the law.

The service contract concluded between MULTIPLEC GOLD S.R.L. and its Customers gives the Customers the right to copy and/or print portions of the website content (manuals and tutorials) only for personal use, without commercial intent.

MULTIPLEC GOLD S.R.L. may, without any further notice or formality and without this requiring an explanation of its attitude, suspend or terminate your access to the content of the site or to part of this content.

MULTIPLEC GOLD S.R.L. assumes no liability, under any circumstances, for any damage, caused directly or indirectly, suffered as a result of the use or interruption of use or the lack of regularity of the information and services provided on this site. MULTIPLEC GOLD S.R.L. does not guarantee the accuracy, correctness or current nature of the information provided.

ORDERS AND REQUESTS FOR PRICE QUOTATIONS

Orders or requests for price quotes can only be placed using the contact form on this site. The user is obliged to provide accurate and as specific data as possible regarding the desired project. MULTIPLEC GOLD S.R.L. cannot be held liable in any way for any inconvenience caused by the user providing incorrect or incomplete information.

If MULTIPLEC GOLD S.R.L. considers a request or order to be incomplete or incorrect, it may request additional details from the user using the e-mail address or contract telephone number provided by the user or may delete the request without any notice to the user.

DISPUTE RESOLUTION METHOD

Disputes can be resolved amicably or through the competent courts or through mediators. The European Commission has implemented an online dispute resolution platform.

NOTIFICATIONS AND ANNOUNCEMENTS

MULTIPLEC GOLD S.R.L. reserves the right to send notifications regarding the services offered as well as announcements from third parties, when these may be of benefit to users.

FINAL PROVISIONS

All users of this site are subject to these terms and conditions, so accessing it implies acceptance and compliance with the Terms and Conditions set forth in this document.

The purpose of data collection is: providing services according to the current offer/

Any person has the right to object, free of charge and without any justification, to the processing of their personal data for direct marketing purposes.

According to Romanian legislation, minors cannot conclude commercial contracts and their personal data are not processed without parental consent.

Failure to accept this convention or any provision thereof entails the obligation of the respective person to immediately cease accessing the site or using the service in any way, and continued access or visit to the site, use of the service in any way constitutes full acceptance of the convention and any provision thereof, including any subsequent modifications that may be made without restrictions by the provider, without any other formality being required.

MULTIPLEC GOLD S.R.L. guarantees the security and confidentiality of the data hosted and transmitted through its IT system. This information may be used by MULTIPLEC GOLD S.R.L. to send the user order confirmation, various special offers, promotions, etc. only based on the consent of the data subject.

Providing personal data to MULTIPLEC GOLD S.R.L. does not imply any obligation on the part of the users, and they may refuse to provide this data under any circumstances and may request its deletion from the database free of charge

MULTIPLEC GOLD S.R.L., owner of the and online platform, does not intervene directly or indirectly on the databases where customer information is stored.

In order to make the invoicing, shipping and delivery of the placed orders possible, the user must agree that MULTIPLEC GOLD S.R.L. collects and processes the entered data, according to the requirements of Law no. 679/2016 (GDPR).

According to the requirements of Law no. 679/2016 (GDPR) for the protection of individuals with regard to the processing of personal data, and the protection of privacy in the electronic communications sector, MULTIPLEC GOLD S.R.L. is obliged to manage the personal data provided in a secure manner and only for the specified purposes.

In this regard, MULTIPLEC GOLD S.R.L. has developed a series of technical and organizational measures to prevent risks that may arise in the processing of personal data.

The processing of personal data within the organization is conditioned by a series of technical and organizational measures in order to secure them.

These measures have the role of protecting information at the organization level against security incidents.

At the organizational level, the following security measures have been taken to reduce risks:

Technical measures:

– SSL certificate – is designed to secure the exchange of information over the Internet. It encrypts information before it travels over the Internet. Encrypted information can only be decrypted by the server to which it is addressed. This guarantees that information sent to a website/online platform will not be stolen, intercepted, or processed.

Information about bank cards, passwords and generally any information that you want to remain private is secured by this certificate.

The SSL certificate of the MULTIPLEC GOLD S.R.L. online platform is also used to secure email correspondence, so that customers’ personal data circulates in a secure environment and is regulated by a series of security measures that ensure the confidentiality of information.
Automatic back-up – set at a time interval to guarantee information and so that all clients can be sure that the information and preferences they provide do not disappear and are not destroyed, lost or incorrect in the event of a server error.
Anti-spam and antivirus filters that prevent the infiltration of malicious content or viruses that can process data in an unauthorized manner or transmit it to other entities or persons who have not obtained the consent of the data subject.
Protecting the content of the customer profile by introducing a more complex password generation rule. The customer is asked, when creating the account, for a password that meets a higher complexity criterion (alphanumeric + special characters);
Securing modules and scripts that communicate within the platform. The functioning of elements involved in client-server, server-client interaction is constantly verified.
Checking and optimizing modules to keep them up-to-date to prevent vulnerabilities. This measure prevents the identification of vulnerabilities at a global level in the platforms used, 0-day vulnerabilities that can intercept the exchange of data and implicitly personal data in the interactions of the client with the platform or of the process manager with the client and the platform.
Classification of access types by the process manager – administration groups, the ability to add or delete certain rights on a user with full access – personalization of access according to need.
Password protection of the device from which the process manager performs data processing, to prevent unauthorized intervention.
Firewall – software program and hardware component installed in the server location of the company hosting the online platform, designed to protect the server and network equipment against computer attacks, unauthorized intrusion attempts, installation of malicious software applications that may endanger the personal data of platform users. The firewall blocks unauthorized persons from accessing information stored on equipment connected to the Internet.
Access to data processing systems in which personal data are processed is only possible after the authorized person has been identified and successfully authenticated (e.g. with username and password or chip/PIN card), using the most advanced security measures. In case of lack of authorization, access is denied.
All access attempts, both successful and rejected, are recorded (user ID, computer, IP address used) and archived in an audit-compliant format for 3 months. In order to detect misuse, the server performs repeated, random checks;
Access is blocked after repeated incorrect authentication attempts.
Constantly checking the platform for vulnerabilities that could allow the extraction of personal information and data. The hosting has security measures and solutions that recurrently scan the processed files and the data flow that circulates within the platform;
Combating the risks of security breaches by taking technical and organizational precautions by securing the platform and constantly updating it with stable versions.
Password securing the equipment that has direct access to the order table and customer delivery/invoicing data to prevent unauthorized access and implicitly unauthorized processing by unauthorized persons.

Organizational measures:

Destruction of documents that are no longer needed (notes, erroneous invoices, etc.) using a document shredder at the disposal of the process manager;
Eliminating the risk generated by the human factor by prohibiting the processing of information outside the secure platform, except for the preparation of transport notes in the courier company’s platform, which is also a secure environment;
Adopting security measures without differentiating between types of customers (new/existing/potential);
Adopting an internal policy for verifying processes and processing when delivering the product or receiving information regarding an order or possible offer;
Avoiding differentiation between customers through mechanisms that can positively or negatively profile the person concerned. For this reason, we do not request personal data such as sexual orientation, sexual interests, gender, religion, membership in movements or groups, etc. Customers are free to order and choose what they want. By this measure, we consider that we respect the integrity of the person and avoid any trace of analysis/profiling based on these criteria.
Updating the privacy policy and the Terms and Conditions of MULTIPLEC GOLD S.R.L
Informing customers about the delivery, return and order processing procedure;
Training the process manager on the risks of processing personal data outside the online platform.
Training the process manager on the need to notify in the event of a major security incident.
Training the process manager on how to manage situations that may arise when processing data within the platform (errors, usage errors).
Training the process manager on the use of the information he processes and awareness of the nature of personal information;
Prohibiting data processing outside the platform by managing orders directly in the platform’s user interface, eliminating the need to process data in other unsecured and vulnerable environments.
The process manager is periodically trained on:
Data protection principles, including technical and organizational measures
The requirement to maintain data secrecy and confidentiality regarding organizational secrets and trade secrets, including transactions carried out;
Correct, careful use of data, data media and other documents;
The secret of telecommunications;
Other specific confidentiality obligations, where necessary;

From the point of view of processing, within MULTIPLEC GOLD S.R.L., personal data are processed only for the purposes for which the consent of the data subjects was obtained, including for parallel purposes and for the conclusion of a contract or the delivery of a product to the customer, requested by the customer.

Considering that this organization carries out its activity mostly in the online environment, the processing of personal data of customers is transmitted online through the applications and the platform on which orders and requests for quotations are requested. The data collected are minimized and are directly related to the purpose for which consent was obtained and are necessary to contact the customer in the event of a request for quotation or to deliver and make available the ordered product/service according to the requirements or its return.

MULTIPLEC GOLD S.R.L. legal entity registered with the Trade Register (J03/2120/2020, CUI 25918560) is the direct operator. The purpose of processing personal data is to provide products and services through the online platform as well as the parallel purposes of this activity: returning products, processing information necessary for delivery, improving the user experience by retaining certain settings or preferences, after obtaining his consent, price changes, product/service characteristics, stock changes, promotions, invoicing.

The categories of data subjects are: current customers / potential customers or website visitors.

The ways in which data subjects are informed of their rights are:

Privacy policy ;
Terms and conditions of use of the platform/online store;
On the web page in a dedicated section;
By email following registration on the platform, as well as if the client requests additional information, requests for quotations;
In the contact form on the website (the document will be attached);

The exercise of the rights provided for by law 679 / 2016 (GDPR) is entirely the responsibility of the operator who has the legal obligation to designate a person responsible for the processing of personal data within the organization. This person will develop a set of technical and organizational measures to secure data processing and has the obligation to inform the operator about the nature of the processing processes, types of information and the way in which these processes are carried out within the organization. The operator has the responsibility and obligation to ensure that these measures are implemented, that there is no risk of security breaches or information leaks as well as compliance with the legislation in force regarding data processing and the rights of the data subjects.

The following personal data are processed through the online platform:

name and surname
email
phone/ fax
adress

MULTIPLEC GOLD S.R.L. does not process special categories of data.

MULTIPLEC GOLD S.R.L. does not transfer data abroad or to third parties

The processing of personal data is not related to other record systems. The actual activity of the company is to take over orders initiated by customers through the online platform, to store and process them for the purpose of invoicing, shipping and supplying the ordered products.

The processing of information entered by the customer in the platform is processed and stored strictly in accordance with the purposes for which his consent was given:

Billing;
Delivery;
Withdrawal from a concluded contract (withdrawal can be made according to the law, taking into account the conditions under which this contract was initially concluded and the legal provisions initially agreed upon);

Scopul colectarii datelor este de a factura comenzile, de a trimite corespondenta si de a onora comenzile. Refuzul dumneavoastra de a furniza datele, determina imposibilitatea plasarii pe acest site a comenzii dvs. si prelucrarii ei, conform cerintelor, precum si imposibilitatea indeplinirii scopului.

Conform Legii nr. 679/2016 (GDPR), utilizatorul beneficiaza de dreptul de acces, dreptul de a fi uitat, dreptul de a porta informatiile si datele cu caracter personal, dreptul de interventie asupra datelor, dreptul de a nu fi supus unei decizii individuale si dreptul de a se adresa justitiei. Totodata, are dreptul de a se opune prelucrarii datelor personale si poate solicita stergerea datelor. Pentru exercitarea acestor drepturi, utilizatorul se poate adresa cu o cerere scrisa, datata si semnata la adresa de e-mail office@efstore.ro. De asemenea, daca unele din datele despre utilizatori sunt incorecte, avem rugamintea sa ne fie semnalat acest lucru, pentru a putea efectua corectiile necesare.

Follow us

CONTACT INFO

USEFUL