Privacy Policy

Who are we?

The company SONOS SRL, Sat Bradesti Com. Bradesti, Str. II. Rakoczi Ferenc, jud. Harghita, registered with the Trade Register Office under no. J19/310/2024, having CUI RO50284332.

What are personal data?

According to the GDPR, “personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more specific elements, specific to his physical, physiological, genetic, mental, economic, cultural, or social identity.

What does processing of personal data mean?

Processing means any operation or set of operations performed on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion, or destruction.

This note addresses, in the order below, the following aspects:

the categories of personal data we process
the purposes for which we process that personal data
the grounds that justify our processing
the persons to whom we disclose the data
the period for which we store the data
the consequences of refusing to provide us with personal data about you
your rights and information about exercising them;
our contact details

Categories of processed data, purposes, grounds

Improving your experience on our website

Purpose of processing

to be able to take into account the preferences you have expressed in previous browsing sessions
to adapt our website to the device you are using
to solve the problems you may encounter when accessing

Categories of processed data

your consent or our legitimate interest

The basis of processing

IP address
cookie identifiers
other online identifiers
unique device identifier (UUID)
date and time of accessing the website
visit history
web request
date and time of the request/date and time of accessing the website
the device from which you access the website
the type of Internet browser and the language of the browser
information about the events that occurred on your device (for example, errors)
information about the hardware settings of your device
information about where you are when you access our website

Knowing the opinions you communicate to us

This case refers to situations in which you post a comment under one of our posts on social networks, press the Like button, redistribute our post, or send us a message on one of our pages.

Purpose of processing

knowing your opinions

The basis of processing

your consent

Categories of processed data

your data that you have transmitted to us (username, profile picture, the action you have taken - like/other reaction or the content of your comment)

Marketing communication - newsletter

Purpose of processing

to send you communications and offers regarding our products, services, and promotions (on our initiative)

The basis of processing

your consent

Categories of processed data

first and last name
your contact details (email address)

Response to requests from authorities or processing data in other cases where the law obliges us

Purpose of processing

sometimes there is a legal obligation to communicate your data to certain authorities, to store your data for a certain period or to process your data in another way

The basis of processing

the legal obligation we have

Categories of processed data

your data requested by public authorities

Defending our rights and interests or those of other persons

Purpose of processing

ascertaining, exercising, or defending our rights or interests or those of other persons before the courts, bailiffs, notaries public, other public authorities, arbitration courts, mediators, or other public or private bodies that settle disputes, our lawyers, our consultants (such as auditors or experts or specialists) or other natural or legal persons, public or private, involved in those disputes

The basis of processing

fulfilling legal obligations that fall to us or our legitimate interests

Categories of processed data

first and last name
data from the identity document
your data requested by the entities mentioned above

Fraud prevention

Purpose of processing

we are interested in carrying out our activity in legal conditions, and for this reason, we can process your data (such as by transmitting this data to our consultants from various fields - auditors, lawyers, etc. or by consulting this data)

The basis of processing

our legitimate interests in preventing fraud and other illegalities in our activity or, as the case may be, our legal obligations to ensure the legality of our operations

Categories of processed data

first and last name
data from the identity document

To whom will we disclose personal data about you?

As a rule, we will not disclose your data to other natural or legal persons. We try to limit access to data to persons outside the company SONOS S.R.L. who process your personal data (ie, the company to which you have provided personal data about you). However, in certain cases, it may be necessary to disclose your data, according to the following.

We may disclose your data to other companies or individuals, such as: individuals or legal entities acting as authorized persons for us in various fields (such as document archiving, document destruction, or data storage, payment services, various services that we can outsource, such as in the field of human resources), other persons, courts, authorities. In these cases, we will disclose the data for legitimate reasons related to our activity, such as ensuring our ability to ensure document security, relieving our activity, ascertaining, defending, and exercising our rights or interests or those of another person. Also, as mentioned above, in certain cases, we may have a legal obligation to disclose data to public authorities or other natural or legal persons. In all these cases, we will ensure that the recipients of personal data about you process them in conditions of security and confidentiality, in accordance with the purpose for which we have transmitted them and respecting your rights.

Under what conditions could we transfer your data to third countries or international organizations

At this time, we do not transfer and do not intend to transfer your personal data or part of it to other companies, organizations, or persons from third countries or to international organizations. If it is necessary to transfer the data to any of the destinations above, we will inform you in advance about our decision, giving you the time you need to exercise your rights regarding the transfer of your data.

How long will we keep your data

We will keep your data until we reach the purpose of processing this data. This rule reflects the principle provided for in art. 5 al. 1 lit. e imposed by the Regulation and is closely related to the principles provided for in art. 5 al. 1 lit. c and d. Thus, by correctly establishing the retention period of the data, the processing of irrelevant, incorrect, or outdated data is avoided.

The retention period will also be established in relation to the legal basis of the processing. In cases where the processing is carried out for the purpose of fulfilling a legal obligation, the retention periods are in many situations provided by normative acts. In this sense, the payment statements will be kept for 50 years, the personnel files for 75 years, and the accounting documents between 5 and 10 years.

In the absence of express legal provisions, in certain cases, it is necessary for the processed data to be retained for a longer period, even after reaching the initial purpose. We refer in particular to the retention of data to protect the interests of the Company, the formulation of defenses in litigation files, for evidentiary purposes in the case of controls by the authorities. In these cases, the Company establishes a retention period of three years (the general prescription period).

What can happen if you do not provide us with the data

In most cases, you do not have an obligation to provide us with your personal data. However, if you do not provide us with the requested data, we will not be able, for example, to conclude or negotiate a contract with you, to sell you our products or to provide you with our services, to allow you access to all the options on our website, to respond to complaints or requests or to send you communications about our products, services, and promotions that may interest you.

The absence of an automated decision-making process

We do not make decisions based solely on the automated processing of your data (including profiling) that produce legal effects on you or that affect you in a similar way to a significant extent.

Your rights and how to exercise them

Your rights

The right of access to data

You have the right to obtain access to the data concerning you that we process or control or copies of them; you also have the right to obtain from us information about the nature, processing, and disclosure of this data.

The right to rectify data

You have the right to obtain the rectification of inaccuracies in the data concerning you that we process or control.

The right to erasure of data („right to be forgotten”)

You have the right to obtain from us the erasure of the data concerning you that we process or control.

The right to restrict data processing)

You have the right to restrict the processing of the data concerning you that we process or control.

The right to object

You have the right to object to the processing of the data concerning you by us or on our behalf.

The right to data portability

You have the right to obtain the transfer to another operator of the data concerning you that we process or control.

The right to withdraw consent

In cases where we process data concerning you on the basis of your consent, you have the right to withdraw your consent; you can do this at any time, at least as easily as you initially gave us your consent; withdrawing consent will not affect the legality of the processing of data concerning you that we have carried out before withdrawal.

The right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority for the processing of personal data regarding the processing of your data by us or on our behalf. In Romania, this authority is the National Authority for the Supervision of Personal Data Processing (ANSPDCP).

How can you exercise your rights?

To exercise one or more of these rights or to ask any questions about any of these rights or any provision of this information or any other aspects of the processing of data concerning you by us, please use the contact details in the OUR CONTACT DETAILS section below.

Our contact details

You can contact us using the data below.
Our contact details
Full name: SONOS S.R.L.
Headquarters address (correspondence address): No. 253. Sat Bradesti, Comuna Bradesti, Harghita 08:00-05:00 from Monday to Friday

Email address: office@sonostech.ro

Website: https://sonostech.ro/en