The same level of quality that we set for the characteristics of our products and services, also applies to the way we handle your data. We aim to establish and maintain the basis for a trusting business relationship with our customers and interested parties. Massiv Forest Products S.R.L. will therefore process and use your data carefully, for the intended purpose, and in accordance with the statutory provisions on data protection. The confidentiality and integrity of your personal data is our highest priority.
Massiv Forest Products S.R.L. has implemented numerous technical and organizational measures to ensure that your personal data are processed with the highest level of protection.
In this privacy policy, we provide information on how we process your personal data, what we do with it, for what purposes, and on what legal basis this is done, and what rights and claims you are entitled to.
Name and address of the person responsible for the handling of the data
The responsible person within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other stipulations of the data protection nature is:
Massiv Forest Products S.R.L.
1, Lunca Grofului Street
327055 Buchin
Romania
Tel.: +40 255 516 850
E-mail: info@massiv.ro
Persons concerned may contact the data manager directly if they have any questions relating to data protection and the processing of their personal data.
When does Massiv Forest Products S.R.L. collect and process personal data?
Some of the ways in which we collect and process your personal data include the following cases:
- If you contact us directly, e.g. via the contact forms on our website, by email, or by telephone, and you are, for example, interested in our products or services or have another request.
- When you purchase products from us (e.g., hardwood products).
- When you request information about our services (e.g., sending brochures or price lists).
- When you respond to our direct marketing activities (e.g., when you fill out a response card at a trade show or participate in a contest).
- When you send your application documents to us.
What personal data can be collected?
When you contact us or when you use our services, we collect the following categories of personal data, including:
- Contact information: Name, address, telephone number, e-mail address.
- Other personal data such as: Information provided by you regarding date of birth, education, employment situation, employer, or account information.
- Contract data: Customer number, contract number, services ordered.
- Creditworthiness and identity data: Data to establish your identity, e.g. ID cards, and also information on transactions, any payments not made to us.
- Website usage and communications: information about how you use our website using cookies and other tracking technologies.
Data processing in connection with the distribution of our products and the provision of our services
Nature and purpose of processing:
Massiv Forest Products S.R.L. collects, processes, and uses personal data in the framework of the distribution of products, as well as the provision of services. The following categories of data are processed:
- Personal data: (last name, first name, address, e-mail address, bank details, etc.).
- Contract data: (customer number, contract number)
- Identity data
Massiv Forest Products S.R.L. will use your personal data to contact you for the purpose of fulfilling a contract (sale of products, provision of services) or to process a request you have made (e.g. a request for a quotation). We contact you without prior consent about any aspect regarding the execution of the contract or the handling of a request, e.g. in writing, by telephone, by messenger services, by e-mail, depending on the contact details you have provided.
Legal basis:
Data processing in connection with the sale of our products and the provision of services is carried out on the basis of the fulfillment of a contract, or implementation of pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).
Recipients:
Recipients of the data may be technical service providers acting as order processors.
Storage period:
We will only retain your data for as long as it is necessary for the respective servicing purposes for which we collect your data. As soon as the last specific purpose for which we process your data has been fulfilled, the data will be automatically deleted or stored in a format that does not allow any direct personal identification.
- Use to fulfill a contract: To fulfill contractual obligations, data collected from you may be retained for as long as the contract is in effect and, depending on the nature and scope of the contract, up to 6 or 10 years after that, to comply with legal retention requirements and to resolve any inquiries or claims after the contract expires. In addition, there are contracts for the supply of products and services that require longer retention periods, see also “Use for Claims Review” below.
- Use for Claims Review: Data that we believe will be necessary to investigate, defend against, or bring criminal prosecutions or claims against you, us, or third parties may be retained by us for as long as such proceedings might be brought.
Processing optional data:
You only need to provide us with the data that is required to enter into and execute a contract with us or that we are legally obligated to collect. Normally, we will not be able to conclude a contract with you without this data. The provision of optional data is voluntary.
Data processing for applications and during the application process
Nature and purpose of the processing:
Massiv Forest Products S.R.L. collects, processes, and uses data from applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant sends us corresponding application documents electronically, for example by e-mail. The following categories of data are processed as part of these activities:
- Contact information: Name, address, telephone number, e-mail address.
- Other personal data such as: Information provided by you on your date of birth, education, employment situation, or employer.
Legal basis:
Implementation of pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).
Storage period:
We will only retain your data for as long as it is necessary for the respective servicing purposes for which we collect your data. As soon as the last specific purpose for which we process your data has been fulfilled, the data will be automatically deleted or stored in a format that does not allow any direct personal identification.
- Once Massiv Forest Products S.R.L. concludes an employment contract with an applicant, the provided data will be stored for the purpose of processing the employment relationship in compliance with the statutory requirements.
- If no employment contract is concluded between Massiv Forest Products S.R.L. and the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
- Unless an employment contract is concluded between Massiv Forest Products S.R.L. and the applicant and the application is kept on record, the legal basis for storing the data will the consent of the applicant (Art. 6 para. 1 lit. a DSGVO). In this case, the data will be stored until revoked. The consent can be revoked at any time with effect for the future.
Processing of optional data:
You only need to provide us with the data that is required to enter into and execute a contract with us or that we are legally obligated to collect. Normally, we will not be able to conclude a contract with you without this data. The provision of optional data is voluntary.
Data processing in case of automated decision making
Massiv Forest Products S.R.L. does not perform automated decision making or profiling, unless specifically indicated.
Data processing when using our website
We are pleased that you are visiting our website and would like to point out that when you visit our website, data is also processed without any personal identification. If a concerned person wishes to make use of special services via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.
SSL encryption
The website of Massiv Forest Products S.R.L. uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in the URL of your browser. With SSL encryption activated, the data you send to us can generally not be read by third parties.
Server log files
The provider of the Massiv Forest Products S.R.L. website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Browser type/ browser version
- Operating system used
- Source URL
- IP address in anonymized form
- Time of the server request
- Amount of data sent in bytes
This data cannot be assigned to specific persons. A combination of this data with other data sources is not possible. This information is needed to (1) correctly deliver the content of our website, (2) optimize the content of our website, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of cyber-attacks. This anonymously collected data and information is used statistically on the one hand and evaluated on the other hand with the aim of increasing the level of data protection in our company. The anonymous data of the server log files are stored separately from any personal data provided by a concerned person.
Cookies
Nature and purpose of the processing:
Cookies” may be used when you use our website, provided that you allow us to do so by setting your browser or by giving your consent the first time you visit our website. Cookies are text files that are transferred from a website server to your hard drive. Through this, we automatically receive certain data such as IP address, browser used, operating system, and your connection to the Internet.
Cookies cannot be used to run programs or deliver viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our web pages. The purpose of cookies is to improve the user experience on our website. For example, the user of an Internet site that uses cookies does not have to re-enter his or her access data each time he or she visits the site, because this is handled by the Internet site and the cookie stored on the user’s computer system. Of course, you can generally also view our website without cookies.
Legal basis:
The use of cookies requires the consent of the user (Art. 6 para. 1 lit. a DSGVO).
Storage period:
The storage period of cookies depends on your browser settings. You can delete individual cookies or the entire cookie inventory via your browser settings. Internet browsers are regularly set to accept cookies. Generally, you can deactivate the use of cookies at any time via your browser settings and thus permanently object to the setting of cookies. Please use the help functions of your Internet browser to learn how to change these settings and delete cookies or block their storage in advance.
Please note that individual functions of our website may not work if cookies are disabled.
Processing of voluntary data:
The processing of cookies is voluntary. However, please note that our website may not be fully usable if you reject cookies.
Consent:
Your consent is given by activating the cookies in the cookie banner. You hereby declare your consent to the data processing outlined.
Revocation of consent:
Consent can be revoked at any time with effect in the future. However, if the storage of cookies is not desired, you can prevent this by revoking it here .
Also, you can prevent the storage of cookies by selecting the appropriate settings on your browser.
Contact possibility via the website
Nature and purpose of the processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This helps to match the request and the subsequent response process. The specification of further data is optional.
Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art 6 (1) lit. f DSGVO). In providing the contact form, we enable you to contact us in an uncomplicated manner.
If you contact us to request a quote, the processing of the data entered in the contact form is carried out for the implementation of pre-contractual measures (Art 6 (1) lit. b DSGVO).
Recipients:
Recipients of the data are, if applicable, order processors.
Storage period:
Data will be deleted no later than 6 months after processing the request. In case of a contractual relationship, we are subject to the legal retention periods according to the German Commercial Code (HGB) and will delete your data after this period has expired.
Processing of optional data:
You only need to provide those data that are required for the adequate processing of your request. This includes name and e-mail address. Without this data, we will generally not be able to conclude a contract with you. The provision of optional data is voluntary.
Use of Google Analytics
Nature and purpose of the processing:
Massiv Forest Products S.R.L. has integrated components on this website that use Google Analytics, a web analysis tool from Google Ireland Limited (hereinafter: “Google”).
Google Analytics collects, collates, and evaluates data on the behavior of visitors to websites. Google uses “cookies” for this purpose, which are stored on your computer and enable an analysis of how you use our website. Massiv Forest Products S.R.L. collects, among other things, data about the site from which a concerned person has accessed a website, which sub-pages of the website have been accessed, or how often and for how long a sub-page has been viewed. The purpose of the processing is to analyze the flow of visitors to our website. Massiv Forest Products S.R.L. uses the data and information obtained, for instance, to evaluate the activities of this website and to compile online reports. The information about your use of this website is transmitted to a Google server in the USA and stored there. Massiv Forest Products S.R.L. uses a procedure that shortens and anonymizes the IP address of the Internet connection of the person concerned if access to our website is from a member state of the European Union or from another state party to the Agreement on the European Economic Area. On behalf of Massiv Forest Products S.R.L., Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The purpose of the data processing is to evaluate the use of the website and to compile reports on website activities. Additional related services are provided based on the use of the website and the internet. For more information, please refer to Google’s privacy policy, which can be reached via: https://policies.google.com/privacy?hl=de.
Legal basis:
The processing of the data is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).
Recipient:
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. However, processing in America cannot be ruled out, thus processing of personal data also takes place in a third country outside the EU. An adequate level of protection results from the application of standard data protection clauses according to Art 46 para 2 lit. c and d DSGVO.
Storage period:
Data is deleted as soon as it is no longer required for our recorded purposes.
Processing of optional data:
The processing of data in connection with Google Analytics is voluntary.
Consent:
Your consent is given by activating the cookies in the cookie banner. You hereby declare your consent to the data processing described.
Revocation of consent:
Consent can be revoked at any time with effect in the future. However, if the storage of cookies is not desired, you can prevent this by revoking it .
Also, you can prevent the storage of cookies by selecting the appropriate settings on your browser.
You can also prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.
Profiling:
With the help of the tracking tool Google Analytics, the behavior of visitors to the website can be evaluated and interests can be analyzed. For this purpose, we create a pseudonymous user profile.
Use of Yoast SEO
Nature and purpose of the processing:
This website uses plugins from Yoast SEO. This is an offer from Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands, Tel: +31 (0)24 82 00 337 (Chamber of Commerce / KvK: 55404367, VAT Number: NL851692540B01).
This plugin takes care of the complete technical optimization of our websites for search engines. It also assists with content development.
Legal basis:
The legal basis for the integration of Yoast SEO and the associated data transfer to Yoast BV is your consent granted by agreeing to the storage of cookies (Art. 6 para. 1 lit. a DSGVO).
Recipient:
The recipient of the data is Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands, Tel: +31 (0)24 82 00 337 (Chamber of Commerce / KvK: 55404367, VAT Number: NL851692540B01). For more information, please refer to Yoast BV’s privacy policy, which can be found at https://yoast.com/privacy-policy/.
Storage period:
These cookies expire after 30 days and are not used for personal identification.
Processing of optional data:
The processing of data in connection with Yoast SEO is voluntary.
Revocation of consent:
Consent can be revoked at any time with effect in the future. However, if the transmission of information to Yoast BV is not desired, you can prevent this by revoking here .
Use of Google Web Fonts
Nature and purpose of the processing:
This website uses Google Web Fonts for uniform font display. When you visit our site, your browser loads the required web fonts into your browser cache, with the purpose of displaying texts and fonts properly.
To do this, the browser you are using must connect to Google’s servers, which tells Google that this website has been accessed via your IP address. However, Massiv Forest Products S.R.L., as well as Google, do not receive any information in this context enabling users to be identified personally. If your browser does not support web fonts, a standard font will be used by your computer. For more information, please refer to Google’s privacy policy, which can be found at: https://policies.google.com/privacy?hl=de.
Legal basis:
The legal basis for the integration of Google WebFonts and the associated data transfer to Google is your consent given by agreeing to the storage of cookies (Art. 6 para. 1 lit. a DSGVO).
Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. However, processing in America cannot be ruled out, thus processing of personal data also takes place in a third country outside the EU. An adequate level of protection results from the application of standard data protection clauses according to Art 46 para 2 lit. c and d DSGVO.
Storage period:
These cookies lose their validity after 30 days and are not used for personal identification.
Processing of voluntary data:
The processing of data in connection with Google Web Fonts is voluntary.
Withdrawal of consent:
You can revoke your consent at any time with effect in the future. If you do not wish to have Google Web Fonts displayed, you can decline the setting of the cookie required for this – for example, via browser settings, whereby the automatic setting of cookies is generally deactivated.
Use and application of Google reCAPTCHA
Nature and purpose of the processing:
This website uses “Google reCAPTCHA” (hereinafter “reCAPTCHA”). Massiv Forest Products S.R.L. uses reCAPTCHA to check whether the data input on our website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes and evaluates the behavior of the website visitor based on various characteristics. This process begins automatically as soon as the website visitor enters our website. In this context, various information is evaluated (e.g. IP address, length of stay on the website), mouse movements made by the user, or entries made with the keyboard. The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not specifically informed that an analysis is taking place. No personal data is read or stored from data entry fields of the respective form. For more information on Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use under the following links:
https://policies.google.com/privacy?hl=de and
https://policies.google.com/terms?hl=de.
Legal basis:
The legal basis for the integration of Google reCAPTCHA and the associated data transfer to Google is our legitimate interest (Art. 6 para. 1 lit. f DSGVO).
Massiv Forest Products S.R.L. has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
Recipient:
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. However, processing in America cannot be ruled out, thus processing of personal data also takes place in a third country outside the EU. An adequate level of protection results from the application of standard data protection clauses according to Art 46 para 2 lit. c and d DSGVO.
Storage period:
The cookies set for the use of Google reCAPTCHA lose their validity after 30 days.
Processing of optional data:
The processing of data in connection with Google reCAPTCHA is voluntary. By preventing the execution of JavaScript or the setting of cookies in your browser settings, you can prevent the collection of data generated by the JavaScript or the cookie that relate to your use of the website (including your IP address), as well as the processing of this data by Google. Please note that this may restrict the functionality of our website.
Routine deletion and blocking of personal data
Massiv Forest Products S.R.L. processes and stores personal data of the concerned person only for the time necessary to achieve the purposes of the data collection, or where otherwise provided for by law or regulation made by the European Union legislator or other competent authority to which the responsible person is subject.
If the processing purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation Maker or another competent legislator expires, the personal data shall be routinely blocked or deleted in accordance with the statutory provisions.
Rights of the concerned persons
To exercise your concerned person rights and other concerns in connection with data protection, please contact the data controller or the data protection officer using the contact details provided. As a concerned person within the meaning of the GDPR, you have the following rights vis-à-vis the responsible person:
Right to information (Art. 15 DSGVO).
You can request information from us at any time about the data we hold about you. This information concerns, among other things, the categories of data we process, the purposes for which we process them, the origin of the data if we have not collected them directly from you, and, if applicable, the recipients to whom we have transmitted your data. You may receive a copy of your data from us free of charge. If you are interested in receiving further copies, we reserve the right to charge you for the additional copies.
Right to rectification (Art. 16 DSGVO).
You may request us to correct your data. We will take reasonable steps to keep the data we hold about you and continuously process accurate, complete, and up to date, based on the most recent information available to us.
Right to deletion (Art. 17 DSGVO).
You may request us to delete your data, provided that the legal
legal requirements are met. According to Art. 17 DSGVO, this may for instance be applicable if:
- The data is no longer necessary for the purposes for which it was collected or otherwise processed;
- You withdraw your consent which is the basis for the data processing and there is no other legal basis for the processing;
- You object to the processing of your data and there are no overriding legitimate grounds for the processing, or you object to the processing of data for direct marketing purposes;
- The data has been processed unlawfully;
- The processing is not necessary to ensure compliance with a legal obligation requiring us to process your data; especially with regard to legal retention periods; to assert, exercise, or defend legal claims.
Right to restriction of processing (Art. 18 DSGVO)
You may request us to restrict the processing of your data if:
- You contest the accuracy of the data for the period of time necessary for us to verify the accuracy of the data;
- The processing is unlawful and you object to the deletion of your data and request the restriction of its use instead;
- We no longer need your data, but you need it to assert, exercise, or defend legal claims;
- You object to the processing as long as our legitimate grounds do not yet outweigh yours.
Right to data portability (Art. 20 DSGVO)
We will transfer your data – insofar as this is technically possible – to another responsible person at your request. However, you only have this right if the data processing is based on your consent or is necessary to perform a contract. Instead of receiving a copy of your data, you can also ask us to transfer the data directly to another responsible person specified by you.
Right to object (Art. 21 DSGVO).
You may object to the processing of your data at any time on grounds relating to your particular situation, provided that the data processing is based on your consent or on our legitimate interests or those of a third party. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing, which override your interests, or if we need your data to assert, exercise, or defend legal claims.
Right to revoke the declaration of consent under data protection law (Art. 7 (3) DSGVO).
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Deadlines for the fulfillment of concerned person rights
We generally strive to comply with all requests within 30 days. This period may, however, be extended where appropriate for reasons relating to the specific concerned person’s right or the complexity of your request.
Restrictions on information to comply with concerned person rights
In certain situations, we may not be able to provide you with information about all of your data due to legal requirements. If we have to refuse your request for information in such a case, we will inform you at the same time about the reasons for the refusal.
Competent supervisory authority
Massiv Forest Products S.R.L. takes your concerns and rights very seriously. However, if you feel that we have not adequately addressed your complaints or concerns, you have the right to file a complaint with a competent data protection authority.
The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Phone: 07 11/61 55 41-0
Fax: 07 11/61 55 41-15