Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:

* the right to information, respectively the right to receive details regarding the processing activities carried out by the bloomy.ro, according to what is described in this document;
* the right to access data, respectively the right to obtain confirmation from the [website owner] regarding the processing of personal data, as well as details regarding processing activities such as the way in which the data are processed, the purpose for which it is done processing, recipients or categories of data recipients, etc.;
* the right to rectification, respectively the right to obtain the correction, without justified delay, by the [website owner] of inaccurate/unjustified personal data, as well as the completion of incomplete data; The correction/completion will be communicated to each recipient to whom the data were sent, unless this proves impossible or involves disproportionate efforts.
* the right to delete the data, without undue delay, (“the right to be forgotten”), if one of the following reasons applies:
– they are no longer necessary to fulfill the purposes for which they were collected or processed;
– if consent is withdrawn and there is no other legal basis for processing;
– if the data subject objects to the processing and there are no legitimate reasons to prevail;
– if the personal data were processed illegally;
– if personal data must be deleted to comply with a legal obligation;
– personal data were collected in connection with the provision of information society services according to Union law or internal law under which the operator is subject.

It is possible that, following the data deletion request, bloomy.ro will anonymize these data (thus depriving them of their personal character) and continue processing them for statistical purposes under these conditions;

* the right to restrict processing to the extent that:
– the person disputes the accuracy of the data, for a period that allows us to verify the correctness of the data;
– the processing is illegal, and the data subject opposes the deletion of personal data, requesting instead the restriction of their use;
– the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or
– the data subject objected to the processing (other than those for direct marketing), for the time interval in which it is checked whether the legitimate rights of the operator prevail over those of the data subject.
* the right to data portability, namely (i) the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as (ii) the right to have this data transmitted by to [the website owner] to another data operator, to the extent that the conditions provided by law are met;
* the right to opposition – regarding processing activities can be exercised by submitting a request as indicated below;
– at any time, for reasons related to the particular situation in which the data subject finds himself, that the data concerning him be processed on the basis of the legitimate interest of the [website owner] or on the basis of the public interest, except in cases where [the owner website] can demonstrate that it has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the persons concerned or that the purpose is to establish, exercise or defend a right in court;
– at any time, free of charge and without any justification, that the data concerning her be processed for direct marketing purposes.
* the right not to be subject to an automated individual decision, i.e. the right not to be the subject of a decision taken solely on the basis of automated processing activities, including the creation of profiles, which produce legal effects that concern the data subject or affect him in a similar way to a significant extent;
* the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider necessary.