Hedera Gallery considers the protection of personal data a very important aspect. That is why we will dedicate all necessary efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as with any other applicable legislation in Romania.
As one of the key principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer and protect your personal data when you interact with us and our platform.
1. Who are we and how can you contact us?
Hedera Gallery is the commercial name under which the company Hashgraph Technologies SRL operates, a legal entity with its registered office in Romania, Prahova, Ploiesti, Cameliei street, No. 6, with serial number in the Trade Register J29 / 507/2022, unique registration code 45683140 (hereinafter “Hedera Gallery”, “us” or “the platform”). For the purposes of data protection legislation, we are the Operator when we process your personal data.
As we are always concerned to find out your views, as well as to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact us at: firstname.lastname@example.org.
2. What categories of personal data do we process?
All data collected by us is collected directly from you, therefore you have full control over the type of information provided to us. For example, we obtain your personal data in the following situations:
- When you create an account on our website, we will collect: name, surname and email address;
- In your personal account, you can provide additional information such as: twitter link and phone number;
- When you contact us by email, phone or chat, we will collect the minimum data necessary to provide you with the information you need.
We do not collect or process sensitive personal data as defined by the GDPR.
We do not intend to collect or process personal data belonging to persons under the age of 18.
3. What are the legal purposes and grounds of processing?
In general, we will use your personal data to provide services for your benefit, such as:
- Creating and managing the user account within our website;
- Order processing, including takeover, validation and invoicing;
- Solving any problems related to an order and purchased services;
- Reimbursement of the value of the services according to the legal provisions and out T&Cs;
- Providing support services.
The processing of your data for these purposes is in most cases necessary for concluding and executing a contract between Hedera Gallery and you. Certain processing subject to these purposes is also required by applicable law, including tax and accounting law.
There may be situations in which we use or transmit information of legitimate interest to protect our rights and business. These may include:
- Measures to protect the website and users of the Hedera Gallery platform against cyber-attacks;
- Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;
- Measures to manage various other risks.
4. How long do we keep your personal data?
As a general rule, we will process your personal data as long as is necessary to achieve the processing purposes mentioned above and we will store your data as long as you have an account on our website.
You may ask us to delete certain information or close your account at any time, and we will respond to such requests, subject to retention of certain information, including after closing your account, in cases where applicable law or our legitimate interests require it.
If you do not use the account created for more than 36 months, we reserve the right to close your account and delete your data, except those that we must keep in accordance with applicable law.
Hedera Gallery may delete your personal data when it considers that they are no longer necessary for the purposes for which they were collected. In any case, we will stop processing the data if there are no longer legal grounds for processing or you object to the processing and there are no legitimate and compelling reasons for the processing to prevail.
5. To whom do we transmit personal data?
Where applicable, we may transmit or provide access to certain personal data of yours to the following categories of recipients:
- Courier service providers;
- Payment / banking service providers;
- IT service providers.
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may disclose certain personal data to public authorities.
We ensure that access to your data by third parties under private law is made in accordance with the legal provisions on data protection and confidentiality of information, based on the contracts concluded with them.
6. Where do we transfer personal data?
We may transfer your personal data to countries that are part of the European Economic Area or to states that have been recognized by the European Commission as ensuring an adequate level of protection of personal data, if such transfer is necessary for processing in accordance with the permitted purposes described above.
In exceptional cases, if necessary for the purposes mentioned above, we may transfer your personal data to third countries which have not been recognized by the European Commission as providing an adequate level of protection.
We will ensure that these international transfers are made subject to appropriate safeguards (such as, in accordance with Standard Contract Terms approved by the European Commission) as required by the General Data Protection Regulation (EU) 2016/679 or by other applicable legal provisions.
7. Your rights
In accordance with Regulation (EU) 2016/679, you have the right to request access to, rectification, deletion or restriction of the processing of your personal data, the right to object to the processing within the limits and conditions provided by law, and the right to data portability. Also, if you choose to give your consent, you have the right to withdraw it at any time. In addition, you have the right to file complaints with the Romanian National Authority for the Supervision of Personal Data Processing.
For any further questions regarding the way in which personal data are processed and to exercise your rights mentioned above, please contact: email@example.com
According to the legislation in force regarding the placement of cookies, the user’s consent is not required for those strictly necessary.
The most recent update of this policy was made in July 2022. We reserve the right to periodically update and modify this policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will display the modified version of the policy on our website.