FARMA NEST S.R.L. (în continuare „Compania”) este o persoană juridică română, cu sediul în Municipiul București, Sector 1, strada Argentina, Nr 25, parter
The Company's main activity is the wholesale trade of pharmaceutical products (CAEN Code 4646).
The Company's identification data are as follows:
Unique Registration Code : 47667117
Trade Register registration number: J40/3287/2023
Legal representative: Mihnea Ciotaru
The Company respects the data subject's right to privacy and will therefore always act in compliance with the rules in force regarding the protection of personal data (including, but not limited to, the General Data Protection Regulation and Law No 190/2018 on measures implementing Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - "General Data Protection Regulation").
This Privacy and Personal Data Processing Policy contains information on how the personal data of data subjects are collected, used and processed by the Company and, where applicable, transferred to third parties.
The Privacy and Personal Data Processing Policy applies to the processing and/or transfer of personal data of the User (as defined in point A), members, contractual partners, service providers and their representatives.
By accessing and using the www.farmanest.ro website, as well as the services provided directly or indirectly by the Company or its contractual partners, you acknowledge and accept the following terms and conditions of processing and transfer of your personal data by the Company.
Please read this policy carefully, as through this policy we aim to provide you with information about the personal data we collect from you or that you make available to us and how it will be processed by us (the Company).
A. General definitions
În sensul prezentului document, precum și al oricăror altor acorduri, documente sau comunicări în legătură cu accesarea, utilizarea, promovarea etc. a serviciilor prestate de FARMA NEST S.R.L., termenii și expresiile de mai jos au următoarele semnificații:
Website-ul – site-ul web www.farmanest.ro, deținut și administrat de FARMA NEST S.R.L.
Compania – FARMA NEST S.R.L. persoană juridică română, cu sediul în Municipiul București, Sector 1, strada Argentina, Nr 25, parter, ce acționează în calitate de persoană împuternicită de Operator cu privire la colectarea și prelucrarea datelor cu caracter personal
Personal data - any information relating to an identified or identifiable natural person. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;
Processing - any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Operator - the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Person processor - the natural or legal person, public authority, agency or other body processing personal data on behalf of the controller.
Person concerned - can be only an identified or identifiable natural person, directly or indirectly, in particular by reference to elements such as a name, an identification number (e.g. CNP), location data, an online identifier, or to one or more specific elements which, corroborated or not, lead to the identification of that person.
User - any natural person whose data is collected, retained or processed, including, but not limited to, individuals who access the Website, as well as the pages linked to it and/or administered by the Company or the Company's contractual partners. Any user is a data subject (including any user of electronic platforms owned or operated by the Company) as defined in this Privacy and Data Protection Policy.
Partner - any natural or legal person who, in collaboration with the Company, carries out research and development activities, improvement of therapeutic protocols, ensuring high pharmaceutical product standards, production, distribution and marketing of pharmaceutical products, including but not limited to research partnerships, international manufacturers, national and international distributors, partner pharmacies, etc..
B. Object and basis of processing of personal data
- Obiectul prelucrării datelor cu caracter personal
This personal data privacy policy covers the data of our customers, business associates/partners/collaborators, other contact persons, as well as their representatives, current or prospective employees and applies to information collected through our website, farmanest.ro, as well as all other personal data collected through e-mail or other off-line contacts. This privacy policy describes:
- the categories of personal data we collect and process;
- the purposes for which we collect and use your personal data;
- the duration of the processing of these data;
- your rights as a User and how to exercise them;
- recipients to whom we may disclose personal data;
- contact and questions.
We inform you that the personal data collection process is carried out in compliance with the principles of lawfulness, transparency and fairness, in two specific ways:
- when you browse the farmanest.ro website, the browser from which you visited us and the IP address of your computer are provided;
- by filling in forms or when sending e-mails, including in the process of placing orders or requests for quotation for our products or when you request information about them.
FARMA NEST S.R.L. colectează datele dumneavoastră cu caracter personal pentru realizarea obiectului de activitate al societății respectiv comerț cu ridicata al produselor farmaceutice. (dacă este cazul, va fi completat și cu alte activități principale desfășurate).
- Grounds for processing personal data
For the purposes of this Privacy and Personal Data Protection Policy, personal data is processed by the Company pursuant to applicable law (including, but not limited to, Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), Law no. 677 of November 21, 2001 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and Directive (EU) 2016/680 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of the prevention, detection, investigation or prosecution of criminal offenses or the execution of criminal penalties, and on the free movement of such data and repealing Council Framework Decision 2008/977/JHA).
In view of the purposes set out below, the legal basis under which we process your personal data is for the performance of a contract to which you are a party or in the course of steps relating to the conclusion of a contract. For example, if you use our services to make an online request or order, we will use your personal data to fulfill our obligation to complete and administer that request or order, based on the contract we have/will enter into with you.
- Purpose of processing
We will use these data exclusively for contractual purposes, for the transmission of commercial and technical information, offers, confirmations, financial statements in connection with contractual relations (overdue invoices, debits), including for completing data on the shipment of products/goods indicated on invoices issued by the Company, etc. In concrete terms, the purposes of processing are:
- requests for proposals/orders: we use your personal data to complete and administer your requests/orders;
- customer service: we use your personal data to provide you with customer service, to resolve and respond in a timely manner to your queries, complaints or requests, depending on the communication channel through which you contact us;
- other communications: there will be situations where we will be in touch by e-mail, post, phone or SMS, depending on the contact details you provide. There could be a number of reasons for these communications: to respond to certain requests, to notify you of a possible collaboration/scheduled meeting, etc.;
- Legal reasons: in certain situations we may need to use the personal data provided to settle legal disputes or complaints, to the extent required by law.
We inform you that if we use automated means to process personal data that produce legal effects or substantially affect you, we will also implement appropriate measures to protect your rights and freedoms, including the right to obtain human intervention.
The personal data of the employees will be processed for the communication of general, technical, specific and other information related to the products made available to them by the Company for the administration of treatments to patients, for the transmission of offers, promotional flayers, advertising and marketing materials related to the Company's products, as well as for the promotion of the Company's image through online platforms (websites, blog, Facebook, LinkedIn, etc.).
Personal data made available to the Company by the User may be provided by the Company to third parties for processing for purposes determined by them. In this case, these third parties will have the status of personal data controller within the meaning of the regulations in force. These transfers may include: transfers to the competent authorities in the context of possible legal proceedings, judicial investigations, transfers in order to provide information at the request of governmental authorities, or transfers to comply with other legal or contractual obligations.
The information the Company collects and how it is processed depends on the information provided to the Company by Users, as well as how Users manage their privacy preferences.
By filling in personal data in the forms made available by the Company, either on the website www.farmanest.ro or on the Partners' websites, Users declare that they unconditionally accept that their personal data will be included in the Company's database and give their express and unequivocal consent to the storage, use and processing of all such personal data by the Company without territorial limitation, under the conditions of the applicable legislation.
- Categories of personal data processed
Compania va colecta și prelucra următoarele categorii de date cu caracter personal puse la dispoziție de către Utilizator:
- individuals associated with contractual partners - legal entities and their representatives, personal data related to commercial aspects and criteria, namely: name and surname, including for persons delegated to carry out certain activities (pick-up of goods/products, transportation, etc.), identity card number and serial number, registration number of the means of transport, telephone number, position within the company, company postal address, e-mail address and telephone number, fixed and/or mobile, fax;
- individual customers who purchase the company's products (name and surname, e-mail address, delivery address of the ordered products, telephone number, bank account data, transaction history);
- collaborating physicians/pharmacists (name, surname, contact address - e-mail, telephone, data on training and professional experience, as well as, under the conditions of the GDPR Regulation, facial images, photographs of anatomical body parts for promotional/marketing purposes);
– datele candidaţilor sau ale persoanelor care transmit CV-uri prin intermediul website-ului Companiei (încărcarea documentului în secţiunea special destinată), e-mail-urilor publice ale Companiei sau prin orice alte mijloace – platforme precum LinkedIn, eJobs, BestJobs, Facebook etc.* (nume, prenume, adresă de domiciliu/reşedinţă, cetăţenie, naţionalitate, data şi locul naşterii, sex, stare civilă, telefon, e-mail, profil LinkedIn/Facebook, educaţie şi formare profesională, studii, experienţa/activitate profesională, arie/domeniu ocupaţional, specializări, calificări, aptitudini şi competenţe personale şi profesionale, funcţia/postul ocupat, funcţia/postul vizat, denumire şi date de identificare ale societăţii/companiei/instituţiei angajatoare, afilieri, diplome, distincţii, premii, referinţe, recomandări, certificate, atestate, adeverinţe, cursuri, proiecte, conferinţe/congrese, simpozioane, protocoale, workshop-uri, activitate publicistică, activitate didactică, precum și, în condițiile Regulamentului GDPR, imagini faciale, fotografii ale părților anatomice ale corpului).
- first and last name in case of natural persons, identification data of legal entities (name, CUI), e-mail, telephone, useful information (keywords/phrases, meta description, reasons why the company was contacted, website, data on how the company was found online);
- data about when the User visited the www.farmanest.ro website or the websites of the Company's Partners;
- data about the pages visited on the website www.farmanest.ro, as well as about the pages visited on the websites of the Company's Contractual Partners;
- data about the time spent by the User on the www.farmanest.ro website or the websites of the Company's Contractual Partners;
- data about the device/terminal used to access the www.farmanest.ro website or the websites of the Company's Contractual Partners;
- the name of the domain or domain host from which the User has connected to the website;
- authentication and access data to social media accounts, email accounts or different platforms belonging to basic or end customers;
- messages with data sent via contact forms and e-mail;
- data about the IP address of the User who accessed the www.farmanest.ro website or the websites of the Company's Contractual Partners;
- data about the functioning and the object of activity of the Company's Partners, data about the profile of their ideal clients, contact data.
* This list is not exhaustive. The Company reserves the right to expand or restrict the list of platforms used, with appropriate updates to this Privacy Policy.
The website www.farmanest.ro contains testimonials of physicians/pharmacists identified/identifiable by first name, last name, institution and facial image, individual or group.
The www.farmanest.ro website collects personal data through the following sections:
- Newsletter subscription (name and e-mail address required);
- Contact (full name, city, phone, e-mail, message);
- Careers (full name, city, phone, e-mail, field of interest, CV);
– Partners.
C. Collection, processing, storage and transfer of personal data
a) Collection and processing of personal data
All personal data indicated in point "B. 4. Categories of personal data processed", except where expressly provided otherwise, may be collected and processed both manually and automatically, through applications integrated in the website and provided by third parties.
For this purpose, the Company uses the following methods to collect personal data:
- Forms (Contact/Career etc.)
Personal data collected through Contact_forms and Career_forms made available on the Company's website or other such forms made available on other platforms used and administered by the Company, including but not limited to the "Contact" and "Careers" sections, are directly communicated by the User. Thus, the categories of data that will be collected and processed by filling in the forms vary depending on the data that the User intends to make available to the Company.
- Newsletters/marketing direct
In the framework of the newsletter or direct marketing service, the Company will collect and process data relating to the visits made by the User to the website www.farmanest.ro or to the websites of the Company's Contractual Partners, the pages visited on these websites, the time spent on the website, the device used, the IP address, etc.
Data relating to the User's e-mail address will also be processed for the purpose of sending e-mails containing information about offers that may be of interest to the User.
At the same time, data will be collected and processed on the opening of the forwarded e-mails and the time the forwarded e-mail was kept open.
These e-mails will be communicated only with the User's consent. The User has the right to withdraw his/her consent to the transmission of these e-mails at any time.
In collecting and processing personal data through forms, the Company may use the services of third parties.
- Other third-party services
For the fulfillment of the purposes indicated above as well as the Company's contractual and legal obligations, in the collection and processing of the User's personal data, the Company may also use the services of other third parties, including, but not limited to:
3.1.Google LLC, based in Mountain View, California, USA: https://policies.google.com/technologies/cookies?hl=ro;
3.2.Facebook Inc., based in Menlo Park, California, USA: https://ro-ro.facebook.com/policies/cookies/;
3.3. Facebook Ireland Ltd., based in 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irlanda: https://help.instagram.com/1896641480634370?ref=ig;
3.4.YouTube, based in San Bruno, California, USA: https://policies.google.com/technologies/cookies?hl=ro;
3.5.Alliance Healthcare Romania, based in Str. Amilcar C. Săndulescu nr. 7, Sector 6, Bucharest, Romania: https://www.alliance-healthcare.ro/cookie-uri;
3.6.BIOEEL Distribuţie Farmaceutică, cu sediul în Str. Bega, nr. 5, Târgu Mureş, Judeţ Mureş, România: https://www.bioeel.ro/pdf/DMC-01-02-007%20Politica%20date%20caracter%20personal%2003.2019.pdf;
3.7.EUROPHARM Distribution, based in Şoseaua Viilor nr.14, Sector 5, Bucharest, Romania: http://www.eph.ro/ro/cookies;
3.8.FARMEXIM, based in Str. Malul Roşu, nr. 4, Comuna Baloteşti, Judeţ Ilfov, Romania: https://www.farmexim.ro/cookies-345.html;
3.9.FILDAS TRADING S.R.L., based in Str. Banat nr. 2, Piteşti, Judeţ Arges, Romania: https://www.fildas.ro/politica-de-confidentialitate/;
3.10.MEDIPLUS EXIM, established in Str. Ciobanului nr. 133, Comuna Mogoşoaia, Judeţ Ilfov, Romania: http://www.mediplus.ro/ro/index.aspx;
3.11.PHARMAFARM, based in Str. Principală nr. 1B/1, Corunca, Judeţ Mureş, Romania: http://www.pharmafarm.ro/confidentialitate/;
3.12.ESCULAP FARM, based in Bd. Moscovei nr. 7/4, Chisinau, Republic of Moldova: http://esculap.md/;
3.13.Aresus Pharma GmbH, based in Kastanienallee 46, Strausberg, Germany: https://www.aresus.de/en/aresus-pharma-2/;
3.14.Laboratori Farmaceutici Krymi S.P.A, based in Via L. Galvani 34, Monterotondo Scalo, Italy: https://laboratorikrymi.it/privacy-policy/;
3.15.PROGE FARM, based in Largo Donegani 4/A, Novara, Italy: https://www.iubenda.com/privacy-policy/72744200/cookie-policy?an=no&s_ck=false&newmarkup=yes;
3.16.Biofarma Group, based in Via Castelliere 2, Mereto di Tomba, Italy: https://www.biofarma.it/en/;
3.17.Inalme S.R.L., based in Via Cosmo Mollica Alagona 9/11, Zona Ind.le Catania, Catania, Italy: https://www.iubenda.com/privacy-policy/gdpr/60922925/cookie-policy.
*This list is not exhaustive and for information purposes only. The Company reserves the right to use the services of other third parties in order to fulfill the purposes indicated in the Privacy Policy and personal data processing.
4. Cookies
In order to fulfill the above-mentioned purposes, the Company uses cookies in its activity. Cookies are small files that are downloaded to your computer in order to improve your browsing experience on the Company's and Partners' websites.
Cookies are managed by web-servers. The lifetime of a cookie can vary significantly, depending on the purpose for which it is placed. Some cookies are used exclusively for a single session (session cookies) and are not retained once the User leaves the website and some cookies are retained and reused each time the User returns to that website (persistent cookies). However, cookies can be deleted by a User at any time.
The user can also prevent cookies from being set by adjusting the settings in their browser.
More details about how cookies work, as well as how to manage, disable and delete them can be found here: (link to Cookies Policy will be added).
b) Storage of personal data
Personal data made available to the Company is stored on servers/terminals belonging to the Company.
We will store your personal data only for the period of time necessary to achieve the processing purposes set out above, while complying with the legal requirements in force. If, after the expiry of this period, the Company establishes and documents that it has a legitimate interest or a legal obligation to further process your personal data for other purposes, you will be duly informed accordingly.
The user may at any time request the deletion of personal data stored by the company. Exceptions to this rule are those data that the Company is obliged to keep in order to fulfill contractual or legal obligations.
The User may also censor or limit the extent to which personal data is collected or processed.
Some data can be deleted immediately. Other data is automatically deleted or anonymized after a certain period of time, e.g. advertising data in server logs.
Other data is kept for longer periods of time when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention or financial record keeping.
c) Transfer of personal data
We undertake not to disclose any personal data about you to third parties without your express prior consent.
However, we will disclose personal data to entities or persons outside the Company if we believe, in good faith, that disclosing such personal data is reasonably necessary to:
- a) compliance with applicable laws, regulations, legal procedures or requests from public institutions/authorities;
- (b) the implementation of the Regulation and related legal provisions, including the investigation of possible breaches thereof;
- (c) detecting, preventing or otherwise combating fraud, security or technical problems;
- d) to protect against infringement of the rights, property or safety of the Company, you or the public, as required by law.
In order to fulfill the purposes indicated above, the Company may use the services of third parties, including, but not limited to, the persons indicated in paragraph C.3 (web-hosting services, Plug-in services, etc.).
To the extent necessary to fulfill their obligations, the User's personal data may also be transferred to these third parties. In this situation, the processing of the User's personal data by third parties will be carried out only within the limits of the instructions provided by the Company and in compliance with the legal provisions in force.
The Company may provide certain personal data to third parties for processing for purposes determined by them. In this case, these third parties will have the status of personal data controller within the meaning of the applicable regulations. These transfers may include: transfers to competent authorities in the context of possible legal proceedings, judicial inquiries, transfers to provide information at the request of governmental authorities, or transfers to comply with other legal obligations.
Third Party Privacy Policies will apply to these processing operations. These transfers will be made only in duly justified cases and without any charge: the Company will NOT sell personal data to third parties.
d) Other issues regarding the collection and processing of personal data by the Company
The User is solely responsible for the accuracy of the personal data provided to the Company.
The Company cannot be held liable for any damage caused by the intentional or culpable communication by the User of personal data that do not correspond to reality or that belong to another person.
Insofar as the law provides for the obligation to obtain the User's consent, certain operations may only be carried out on the basis of the User's consent.
With regard to the personal data collected, processed, stored or transferred by the Partners, the responsibility for these activities, as well as for informing and obtaining the consent of the User in this regard, lies exclusively and entirely with the Partner, the Company not being held liable for the manner in which the Partner intends to carry out the activities indicated above.
D. User Rights
b) the right to rectify data: you have the possibility to ask the Company to amend your personal data that is incorrect or, where appropriate, to complete/update data that is incomplete.
b) dreptul de rectificare a datelor: aveți posibilitatea să solicitați Societății să modifice datele dumneavoastră cu caracter personal incorecte ori, după caz, să completeze/actualizeze datele care sunt incomplete.
c) right to erasure: you have the possibility to request the Company to erase your personal data when: it is no longer necessary for the purposes for which it has collected and processes it; you have withdrawn your consent to the processing of your personal data in situations where consent was necessary and expressly given by you and the Company can no longer process it on other legal grounds; personal data is processed contrary to the law; personal data must be erased in accordance with the relevant legislation.
d) withdrawal of consent: you have the possibility to withdraw your consent to the processing of personal data processed on the basis of consent at any time.
e) the right to object: you may object at any time to processing for marketing purposes, including profiling carried out for this purpose, as well as to processing based on the legitimate interest of the Company for reasons relating to your specific situation.
f) restriction: you have the possibility to ask the Company to restrict the processing of your personal data if: you contest the accuracy of the personal data, for a period of time that allows the Company to verify the accuracy of the contested data; the processing is unlawful and you object to the erasure of the personal data, requesting instead the restriction of its use; the data is no longer necessary for processing by the Company, but you request it for legal action; if you object to the processing, for the time period during which it will be verified whether the legitimate rights of the Company as controller prevail over your rights as User.
g) dreptul la portabilitate: dacă Societatea prelucrează datele cu caracter personal prin mijloace automate, aveți posibilitatea de a solicita, în condițiile legii, să furnizeze datele dumneavoastră cu caracter personal într-o formă structurată, utilizată frecvent și care poate fi citită în mod automatizat. Dacă veți solicita acest lucru Societatea poate să transmită datele dumneavoastră cu caracter personal unei alte entități, dacă este posibil din punct de vedere tehnic și dacă această este o măsură proporțională în raport cu bugetul Societății.
h) the right not to be subject to a decision based solely on automated processing, including profiling;
i) the right to go to court: the right to a judicial remedy;
j) the right to lodge a complaint to the Supervisory Authority: you have the possibility to lodge a complaint to the Data Protection Supervisory Authority if you believe that your rights have been violated (the Authority in Romania being A.N.S.S.P.D.C.C.P.).
Attention! We remind you that these rights must be exercised in a reasonable manner, abuse of these rights may entail civil, administrative or criminal liability of the User!
If you wish to exercise one or more of the rights you have with regard to your personal data, you can contact us at office@farmanest.ro.
If you believe that your rights have not been respected or if you have any questions about the confidentiality of your personal data, you are advised to contact the Data Protection Officer at office@farmanest.ro.
Such an e-mail must be accompanied by all contact details of the User, as well as a means of verifying the User's identity (e.g. a copy of an identity card). However, the Company retains the right to reject such requests if they are considered abusive or made in violation of applicable legal provisions.
Your first request to exercise your rights is free of charge. However, we reserve the right to reject requests from you that are unreasonably repetitive, require an excessive technical effort on the part of the Society (for example, if you ask us to develop a new system or to substantially change an established practice of the Society) or which jeopardize the privacy of other individuals' personal data.
The National Supervisory Authority for Personal Data Processing can be contacted at anspdcp@dataprotection.ro, as well as by filling in the online form at https://www.dataprotection.ro/?page=Plangeri_pagina_principala.
E. Modificări şi actualizări ale politicii de confidențialitate
The Company reserves the right to modify and/or update this Privacy and Personal Data Protection Policy at any time, including, but not limited to, changes to adapt it to changes in the services offered or applicable legal rules. Any changes to this statement will take effect upon publication.
This Privacy and Data Protection Policy was last amended on November 27, 2020.
F. Contact
For any queries regarding the protection of the User's personal data, or regarding the exercise of the User's rights in this respect, the User may contact the Data Protection Officer by e-mail (office@farmanest.ro).