Privacy Policy
This website is administered by European Lighting Manufacturer Romania SRL, headquartered in Codlea, Str. Câmpul Alb Nr. 50, Brașov County, registered with the Trade Register under no. J08/629/2002, RO14635763.
Privacy Policy
In accordance with Law no. 129/2018 on the protection of individuals regarding the processing of personal data and the free movement of such data, as amended and supplemented, and Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, ELM Romania SRL undertakes to manage the personal data provided by clients securely and strictly for the specified purposes. Personal data is collected for the purpose of informing clients and issuing the requested technical solutions.
All personal data is collected by ELM Romania SRL only when it has been voluntarily provided by the client.
According to Law no. 129/2018, the client has the right of access, the right to intervene on the data, the right not to be subject to an individual decision, and the right to address the courts. The client also has the right to object to the processing of personal data and to request its deletion. These rights may be exercised by sending a request to contact@klaris.ro.
Information losses caused by errors or possible security issues of the server hosting www.klaris.ro, or by actions of third parties, are not the responsibility of ELM Romania SRL.
Personal Data Protection
EU Regulation no. 679/2016 (GDPR) on data protection is mandatory throughout the European Union. Unlike directives, a regulation applies directly as law from the moment it enters into force and does not require national legislation for transposition.
Data confidentiality is an essential component of our business. Our data protection policy and practices focus on the proper, lawful collection, processing, and storage of personal information, while ensuring its confidentiality and integrity.
In compliance with Law no. 129/2018, Law no. 506/2004, and the General Data Protection Regulation (GDPR), ELM Romania SRL manages, in secure conditions, the personal data provided by visitors through this website.
We are committed to protecting the confidentiality of information collected through our website. We collect only the personal data voluntarily provided by visitors and only the minimum necessary to offer information about the solutions, services, and activities of ELM Romania SRL.
By completing the forms on the website, the visitor expressly consents that their personal data is added to the database of ELM Romania SRL and processed and used in the future by the company, in compliance with the applicable legal provisions.
The main data we collect:
Email address – used to send updates about our products and services.
First and last name – used to personalize our communications.
Phone number – used to contact you when necessary or when additional information is required.
Browser/IP/device/location data – used to understand how and from where our website is accessed, helping us improve usability.
Sharing of Personal Data
We do not share personal data collected through this website with third parties. The only entities that may request access to such data are public authorities legally entitled to do so.
Marketing Communications
With your consent, we may send marketing emails (newsletters) with updates on new products, services, or promotions.
You may unsubscribe at any time by:
clicking the unsubscribe link in any newsletter received.
All such requests will be processed within 48 hours.
Your Rights Under GDPR
Right to be informed (Art. 13–14 GDPR)
The data subject has the right to receive information directly from the controller regarding the controller’s identity or that of its representative, the purposes for which the personal data will be used, the recipients of the data, and other relevant details.
Right of access (Art. 15 GDPR)
The data subject has the right to obtain confirmation whether their personal data is being processed and access to the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipients, including those in third countries or international organizations;
(d) where possible, the envisaged retention period or the criteria used to determine this period;
(e) the existence of rights to rectification, erasure, restriction of processing, or objection;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data is not collected from the data subject, any available information on its source.
Right to rectification (Art. 16 GDPR)
The data subject has the right to obtain, without undue delay, the correction of inaccurate personal data. Considering the purposes of processing, the data subject also has the right to request the completion of incomplete personal data, including by providing an additional statement.
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
The data subject has the right to request the erasure of their personal data, and the controller is obligated to delete it without undue delay under the conditions specified in GDPR.
If the controller has made the data public, it must take reasonable steps—considering available technology and implementation costs—to inform other controllers processing the data about the erasure request.
This right includes exceptions such as:
(a) exercising the right to freedom of expression and information;
(b) compliance with a legal obligation;
(c) public interest in the area of public health;
(d) archiving, research, or statistical purposes where erasure would seriously impair objectives;
(e) establishing, exercising, or defending legal claims.
Right to restriction of processing (Art. 18 GDPR)
The data subject may request restriction of processing if:
(a) they contest the accuracy of the data (for the period needed for verification);
(b) the processing is unlawful, but they oppose erasure;
(c) the controller no longer needs the data, but the data subject requires it for legal claims;
(d) the data subject objects to processing pending verification of overriding legitimate grounds.
When processing is restricted, data may only be processed with the data subject’s consent, for legal claims, or for the protection of another person or important public interest.
Right to data portability (Art. 20 GDPR)
The data subject has the right to receive personal data in a structured, commonly used, machine-readable format and to transmit it to another controller. This applies when processing is based on consent, on a contract, or is carried out by automated means.
Right to object (Art. 21 GDPR)
The data subject may object at any time to the processing of their personal data on grounds related to their particular situation, including profiling. The controller must stop processing unless it proves compelling legitimate grounds that override the interests, rights, and freedoms of the data subject or for legal claims.
For direct marketing, the right to object is absolute, including profiling related to marketing.
Right not to be subject to automated decision-making (Art. 22 GDPR)
The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect them.
Exceptions apply if the decision:
(a) is necessary for entering into or performing a contract;
(b) is authorized by Union or national law with suitable safeguards;
(c) is based on the data subject’s explicit consent.
Legal Limitation
According to Art. 23(1)(e) of EU Regulation no. 679/2016, the rights of access, rectification, erasure, restriction of processing, and objection may only be exercised for personal data whose sole legal basis is the user’s consent. The company may limit these rights if exercising them would place the company in violation of mandatory legal obligations.
The company does not perform systematic profiling, nor are automated decisions made based on collected data in the sense of GDPR.