Πολιτική απορρήτου

Last updated: November 20, 2024

This Privacy Policy explains how Nova Crest Corporation SRL, trading as Software Sail (“we”, “us”, or “our”), collects, uses, stores, and protects personal data when you visit https://softwaresail.com (the “Site”), contact us, or purchase products and services through the Site.

This Privacy Policy applies only to this Site and to the services provided through it. It does not apply to third-party websites, platforms, or services that may be linked from our Site.

1. Data Controller

The data controller for the processing of personal data described in this Privacy Policy is:

Nova Crest Corporation SRL
Trading as: Software Sail
VAT number for intra-Community operations: RO50321406
CUI: 50112043
Registered office: Municipiul Timişoara, Strada VASILE ALECSANDRI, Nr. 3, Etaj 2, Ap. 8, Judet Timiș, 300078, Romania
E-mail: info@softwaresail.com

If you would like to exercise your privacy rights or request deletion of your personal data, you may contact us at: info@softwaresail.com

2. Categories of Personal Data We Collect

Depending on how you use the Site, we may collect and process the following categories of personal data:

a) Identity and contact data

This may include:

• first name and last name;
• billing and/or delivery address;
• e-mail address;
• telephone number;
• company name, where applicable.

b) Order and transaction data

This may include:

• products purchased;
• order number;
• transaction details;
• payment status;
• invoicing information;
• customer communications relating to an order.

c) Payment-related data

If you purchase through the Site, payment-related information may be processed depending on the payment method selected.

For card payments, digital wallets, or similar methods, payment data are generally processed directly by the third-party payment provider selected at checkout. We do not intentionally store full payment card numbers.

For bank transfer payments, we may process the information necessary to identify and reconcile the payment, such as the payer name, payment reference, amount, and transfer confirmation details.

d) Technical and browsing data

When you browse the Site, certain technical data may be collected automatically, such as:

• IP address;
• browser type and version;
• device information;
• operating system;
• date and time of access;
• referring pages;
• pages viewed and actions taken on the Site;
• server and diagnostic logs.

e) Marketing and communication data

If you subscribe to our newsletter or marketing communications, we may process:

• your e-mail address;
• your subscription status;
• your communication preferences;
• interaction data relating to newsletters or promotional e-mails.

f) Customer support data

If you contact us, we may process the contents of your message, attachments, and any information you choose to provide in connection with your inquiry or support request.

We do not intentionally request or require special categories of personal data as defined under applicable data protection law.

3. How We Collect Personal Data

We collect personal data:

• directly from you when you place an order, fill in forms, create an account, subscribe to communications, or contact us;
• automatically when you browse the Site through technical logs and similar technologies necessary for the operation, security, and maintenance of the Site;
• from service providers involved in payment processing, website hosting, order handling, analytics, and communications;
• from third-party platforms where this is necessary to provide the requested service or process a transaction.

4. Purposes of Processing and Legal Bases

We process personal data for the following purposes:

a) To provide our products and services

We use personal data to process orders, deliver purchased products, manage transactions, and provide customer support.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

b) To communicate with you

We use personal data to respond to your questions, requests, complaints, or service-related communications.

Legal basis: performance of a contract, legitimate interests, and/or compliance with legal obligations, depending on the nature of the communication.

c) To manage payments and prevent fraud

We use personal data to manage payments, verify transactions, prevent abuse, and protect the Site and our business operations.

Legal basis: performance of a contract, compliance with legal obligations, and legitimate interests in preventing fraud and securing our business.

d) To comply with legal and regulatory obligations

We may process personal data where necessary for accounting, tax, record-keeping, consumer protection, legal claims, or regulatory compliance.

Legal basis: compliance with legal obligations.

e) To improve the Site, monitor performance, and maintain security

We use browsing and technical data to operate the Site, fix errors, monitor performance, protect against malicious activity, and improve user experience.

Legal basis: legitimate interests in operating, securing, and improving the Site.

f) To send marketing communications

If you subscribe to our newsletter or otherwise consent to receive marketing messages, we may use your data to send updates, offers, and promotions.

Legal basis: your consent.

You may withdraw your consent at any time by using the unsubscribe link in our e-mails or by contacting us at info@softwaresail.com.

5. Who We Share Personal Data With

We may share personal data with the following categories of recipients where necessary:

• payment providers and financial service providers involved in processing payments;
• website hosting, infrastructure, security, and technical support providers;
• e-commerce, order management, and website operation providers;
• e-mail, communication, and customer support providers;
• analytics and marketing service providers;
• professional advisers such as accountants, auditors, lawyers, or consultants;
• competent public authorities, regulators, courts, law enforcement bodies, or tax authorities where disclosure is required by law or necessary to protect our rights.

Where used for newsletter and marketing communications, personal data may also be processed through Klaviyo.

We do not sell personal data to third parties.

6. International Data Transfers

Some of our service providers may process personal data outside Romania, outside the European Economic Area (“EEA”), and/or outside the United Kingdom.

Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer is made in accordance with applicable data protection law. Depending on the destination and provider, this may include:

• a European Commission adequacy decision;
• Standard Contractual Clauses;
• the UK International Data Transfer Addendum or other UK-approved transfer mechanisms, where relevant;
• or another lawful transfer mechanism available under applicable law.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including for legal, accounting, tax, dispute-resolution, and record-keeping purposes.

As a general rule:

• order, transaction, and invoice data are retained for the period required by applicable accounting and tax laws;
• customer support communications are retained for as long as necessary to manage the request and any related follow-up;
• marketing data are retained until you unsubscribe or withdraw consent, unless a longer retention period is required by law;
• technical and log data are retained for as long as reasonably necessary for security, troubleshooting, and performance monitoring.

Where retention periods cannot be fixed in advance, we determine them based on the nature of the data, the purpose of processing, legal requirements, and our legitimate business needs.

8. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

However, no internet transmission or storage system can be guaranteed to be completely secure. For this reason, while we take reasonable steps to protect your data, we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent at any time, where processing is based on consent;
• request data portability where applicable;
• lodge a complaint with a competent supervisory authority.

To exercise your rights, please contact us at: info@softwaresail.com

We may request reasonable information to verify your identity before responding to your request.

10. Complaints

If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

For our Romanian establishment, the competent supervisory authority is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Website: dataprotection.ro

You may also contact the supervisory authority in your country of residence, work, or the place of the alleged infringement, where applicable under law.

11. Third-Party Websites

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices, policies, or content of third-party websites. We encourage you to review their privacy notices before providing any personal data to them.

12. Children’s Privacy

The Site is not directed to children, and we do not knowingly collect personal data from children in breach of applicable law.

If you believe that a child has provided us with personal data unlawfully, please contact us and we will take appropriate steps.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.

The updated version will be posted on this page with the revised “Last updated” date. Your continued use of the Site after any change becomes effective means that you acknowledge the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or would like to exercise your rights, please contact us at:

Nova Crest Corporation SRL
Trading as: Software Sail
VAT number for intra-Community operations: RO50321406
CUI: 50112043
Registered office: Municipiul Timişoara, Strada VASILE ALECSANDRI, Nr. 3, Etaj 2, Ap. 8, Judet Timiș, 300078, Romania
E-mail: info@softwaresail.com