Like any economic activity, our Company processes a series of personal data belonging to its clients and collaborators.

In accordance with national and European legal provisions, the processing of personal data must comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter the "GDPR Regulation" – as well as other national or European acts issued for its implementation.

Our Company complies with the provisions on the protection of personal data, aiming to provide you with all the necessary information regarding how we process this data: collection, use, transfer and protection, when you browse the Website, create your Account, place an order or contact Us.

Please also consult the Cookie Policy and the Terms and Conditions of ONE DRONE SOLUTIONS S.R.L., accessible through the Website and applicable to all interactions with Us.

Chapter I – General Provisions

1.1. Meaning of certain terms

1.1.1. The terms written with capital letters used below have the meaning provided in the Terms and Conditions of ONE DRONE SOLUTIONS S.R.L., unless otherwise evident from context.

1.2. About the Company and contact details

1.2.1. The Website is owned by ONE DRONE SOLUTIONS S.R.L., a limited liability company organized and operating under Romanian law, registered with the Trade Register under no. J2024016581003, with registered office in Suceava County, Herla Village, Slatina Commune, No. 324, room 1, tax identification number RO50440091, bank account RO58 INGB 0000 9999 1622 5445 opened at ING, share capital: 200 RON, with the following contact details: email: [email protected] phone:  +40 742 301 892.

1.2.2. Under the GDPR Regulation, when processing your personal data, We act as a controller, and you are the data subject.

1.2.3. You may contact us at any time at the contact details listed above for additional information regarding the processing of your data.

Chapter II – Categories of Data Processed. Purposes of Processing. Storage Duration. Data Recipients. Data Security

2.1. Categories of data processed and the purposes of processing

2.1.1. We process identification data, account data and contact data, including: name, billing and delivery address, email address, telephone number, username, login credentials, orders placed and reviews provided, in order to conclude and execute the distance contracts, register your Account (if you choose to create one), process orders and contact you regarding them. We also process some of this data in order to fulfill our legal obligations regarding accounting and record-keeping, and, if you have given your consent, for marketing purposes.

2.1.2. We also process payment-related data, including information on payments made by bank account or card, in order to monitor the execution of the distance contract, verify the completion of payment or refund amounts in the event of withdrawal from the contract. We process part of this data in order to fulfill our legal obligations regarding accounting and record-keeping.

2.1.3. Through the Website, we process technical data, such as: IP address, browser type and version, location and time zone settings, the way you use the Website and similar information, in order to ensure the security of the Website, provide you with an optimal browsing experience and understand the way you interact with it. For details regarding this processing, please consult our Cookie Policy.

2.1.4. In some cases, we process marketing data, including your preferences regarding the receipt of commercial materials by email or phone, contact preferences and the reviews you leave. Some marketing data is collected through the cookies used on the Website. Please consult our Cookie Policy for further details.

2.1.5. We do not process genetic data, biometric data, health data, data referring to criminal convictions, or data concerning religious belief, philosophical conviction, trade union membership, racial or ethnic origin, political opinions, sexual life or sexual orientation.

2.1.6. We process the data based on your consent, on compliance with our legal obligations, on the conclusion and execution of the contract, as well as on the legitimate interests of the Company, including the conduct of its business, client identification, implementation of the marketing strategy and analysis of Website traffic.

2.1.7. We process identification data, account data, contact data and payment data in order to conclude and execute the distance contracts, register your Account and manage your relationship with Us. We collect this data directly from you, based on your agreement expressed at the time of its transmission; it is necessary for the conclusion and execution of the contract. Failure to provide this data may make it impossible to conclude or execute the contract.

We also process this data in order to fulfill our legal obligations, including tax and accounting requirements, archiving and similar duties.

Additionally, with your express consent, we may process this data for the implementation of the Company's marketing strategy, such as presenting the Company's offers, publishing reviews and similar activities.

2.1.8. We process technical data in order to provide you with an optimal Website browsing experience, to ensure the security of the Website and the protection of data, and to understand the way you interact with it and your preferences. Some technical data is processed for marketing purposes. As a rule, we process this data based on your agreement, however in some cases we may process it based on the legitimate interests of the Company, such as the security and protection data processed in order to defend against cyber attacks and similar threats.

2.1.9. We process marketing data in order to develop and implement the Company's commercial policy and to transmit commercial communications and product offers to you and contact you regarding them. We collect and use this data based on your consent.

2.2. Data storage duration

2.2.1. As a rule, except as noted below, we retain the collected data for the period during which your Account is registered. Following the closure of the Account, the data will be retained only for the time necessary to fulfill the purposes for which it was collected, and no more than 5 years from the closure, except in cases where longer legal retention periods apply pursuant to legal obligations (such as the archiving of financial-accounting documents, for which the legal retention period is 10 years from the end of the financial year in which the documents were prepared).

2.2.2. If you do not create an account, the data will be stored for the period necessary to fulfill the purposes for which it was collected, but no more than 5 years, except in cases where longer legal retention periods apply (such as the archiving of financial-accounting documents, for which the legal retention period is 10 years from the end of the financial year).

2.2.3. Technical data will be stored according to your preferences. For details, please consult our Cookie Policy.

2.2.4. Marketing data will be retained until you withdraw your consent or, in the absence of that event, until the purposes for which it was collected are fulfilled.

2.3. Data recipients

2.3.1. Like any business operation, we collaborate with various commercial partners in order to conduct our activities under optimal conditions.

2.3.2. In this context, we sometimes need to transmit the collected data to these commercial partners.

2.3.3. Specifically, we transmit the collected data to:

• a) the payment processors with whom we collaborate, in order to facilitate payments made via bank cards;
• b) the entities with whom we collaborate to maintain our accounting records, in compliance with the legal provisions;
• c) the transport companies with whom we collaborate, in order to deliver the Products to you;
• d) the companies with whom we collaborate for the maintenance of the Website;
• e) the companies with whom we collaborate for the implementation of our marketing strategy, where applicable.

2.3.4. We do not intend to transmit your data to countries outside the EU. However, we use Google services (Google Analytics) and Facebook in pursuit of our legitimate business interests, and we ask that you review their respective privacy policies.

2.4. Data security

2.4.1. We maintain the security of the data in accordance with industry standards, implementing technical, physical and organizational measures to prevent its destruction, alteration or unauthorized access.

2.4.2. We undertake the necessary technical measures to protect the security and confidentiality of the processed data, prohibiting any unauthorized access. The data is disclosed only to authorized persons or entities.

2.4.3. We ensure that our partners and the personnel who access the data process the information solely for the necessary purposes and maintain the confidentiality of the data.

2.4.4. In the event of security risks or incidents affecting the processed data, we will fulfill all the obligations provided by the GDPR Regulation and implement the necessary remedial measures. We will inform you in accordance with the requirements of the GDPR Regulation.

Chapter III – Your Rights

3.1. Exercising your rights

3.1.1. You may contact the Company at any time in order to exercise the rights described below, using any of our contact details.

3.2. The right of access to the processed personal data

3.2.1. You have the right to obtain confirmation regarding the personal data we process concerning you, as well as information about: a) the purposes of the processing; b) the categories of personal data processed; c) the categories of recipients; d) the storage duration; e) your rights to request the rectification or erasure of the data or the restriction of, or objection to, the processing; f) the right to lodge a complaint with ANSPDCP.

3.3. The right to rectification of the processed personal data

3.3.1. You may request the rectification or completion of any inaccurate personal data we hold regarding you.

3.4. The right to erasure of the processed personal data

3.4.1. You may request the erasure of the personal data we hold concerning you.

3.4.2. However, in certain situations we will not be able to honor such requests. For example, we cannot erase data when we have legal obligations to retain it for specified periods, such as tax and accounting requirements. Similarly, when the retention of the data is necessary for establishing, exercising or defending legal claims, we will not be able to comply with the request.

3.5. The right to restriction of data processing

3.5.1. You may obtain the restriction of the processing in the cases described in Article 18 of the GDPR Regulation.

3.6. The right to object to data processing

3.6.1. You have the right to object to the processing in the situations described by Article 21 of the GDPR Regulation.

3.7. The right to data portability

3.7.1. You have the right to receive the personal data you have provided to us, under the conditions described by Article 20 of the GDPR Regulation.

3.8. The right to withdraw consent for data processing

3.8.1. You may modify or withdraw your consent/agreement regarding the processing of your data at any time.

3.8.2. Please note that this may make it impossible for us to continue our commercial relations with you. Additionally, the withdrawal of consent may not affect the processing carried out prior to the withdrawal, nor result in the erasure of data where the Company has legal obligations or legitimate interests in its retention.

3.9. The right to lodge a complaint with the National Supervisory Authority

3.9.1. You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, with registered office at Gen. Gheorghe Magheru Boulevard, No. 28-30, Sector 1, 010336, Bucharest, Romania, website: https://www.dataprotection.ro/?page=contact&lang=ro.

3.9.2. Without prejudice to this right, should you have any unclear matters or concerns regarding the processing of your data by the Company, please contact us using the contact details provided, and we will clarify any such aspects.

Chapter IV – Other Aspects

4.1. We periodically review this Privacy Policy. Please consult it whenever necessary, and if any modifications adversely affect you, please inform us so we can discuss them.

4.2. Any questions regarding the processing of personal data by the Company may be directed to: [email protected] or by telephone at: +40 742 301 892.