GDPR Compliance

Last updated: January 2025

Our Commitment to Data Protection

WoodIndustry.Market, operated by Ces Brands SRL (VAT No. RO 16517969), is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679.

As a company based in Romania, a member state of the European Union, we are fully subject to and compliant with GDPR requirements.

Data Controller Information

  • Company: Ces Brands SRL
  • Address: Str. Maria Rosetti Nr. 6, Bucharest, Romania
  • VAT Number: RO 16517969
  • Data Protection Contact: dan.radu@cesbrands.ro

Your Rights Under GDPR

The GDPR grants EU residents comprehensive rights over their personal data. Here's a detailed explanation of each right and how to exercise it:

Right of Access (Article 15)

You have the right to obtain confirmation whether we process your personal data and request a copy of that data. We will provide this free of charge within 30 days.

Right to Rectification (Article 16)

You can request correction of inaccurate personal data or completion of incomplete data we hold about you.

Right to Erasure / "Right to be Forgotten" (Article 17)

You can request deletion of your personal data in certain circumstances, including when the data is no longer necessary or you withdraw consent.

Right to Restriction of Processing (Article 18)

You can request that we limit the processing of your data while we verify its accuracy or assess a deletion request.

Right to Data Portability (Article 20)

You can receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object (Article 21)

You can object to processing based on legitimate interests, including profiling and direct marketing.

Right to Withdraw Consent (Article 7)

Where we rely on consent for processing, you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using one of the following methods:

  • Email: dan.radu@cesbrands.ro
  • Subject Line: GDPR Request - [Your Right]
  • Required Information: Your name, email address, and specific request

We will respond to all legitimate requests within 30 days. If your request is complex or we receive many requests, we may extend this by up to 60 days, but we will inform you within the first 30 days.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent (Article 6(1)(a)): When you submit inquiry forms or subscribe to communications
  • Contract (Article 6(1)(b)): To fulfill services you have requested
  • Legitimate Interest (Article 6(1)(f)): For business operations, fraud prevention, and improving our services
  • Legal Obligation (Article 6(1)(c)): To comply with applicable laws

Data Protection Measures

We implement appropriate technical and organizational measures including:

  • Encryption of data in transit (TLS/SSL)
  • Secure hosting infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection
  • Data processing agreements with third parties

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where applicable
  • Binding Corporate Rules where relevant

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the Romanian Data Protection Authority (ANSPDCP) within 72 hours
  • Notify affected individuals without undue delay if there is a high risk
  • Document all breaches and remedial actions taken

Supervisory Authority

You have the right to lodge a complaint with the Romanian Data Protection Authority:

  • Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
  • Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest
  • Phone: +40 318 059 211
  • Website: www.dataprotection.ro

Related Policies

Please also review our related policies:

Contact Us

For any GDPR-related questions or concerns:

  • Ces Brands SRL
  • Str. Maria Rosetti Nr. 6
  • Bucharest, Romania
  • VAT: RO 16517969
  • Email: dan.radu@cesbrands.ro