Privacy Policy

This privacy policy applies to the site,operated by BOX2M ENGINEERING SRL.

All personal data processing activities carried out within or in connection with the site are following the provisions of Regulation (EU) 2016/679 on the protection of individuals concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) and Law no. 190/2018 on measures for the implementation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and the free movement of such data and repealing of Directive 95/46 / EC (General Data Protection Regulation). 

Terms and definitions
Personal data – any information about a natural person, identified or identifiable, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or to one or more specific elements, proper to his physical, physiological, genetic, mental, economic, cultural or social identity.

Processing – any operation or set of operations performed on personal data or personal data sets, with or without the use of automated means, such as the collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or publication otherwise provided, alignment or combination, restriction, erasure or destruction.

Consent– any manifestation of free will, specific, informed and unambiguous of the user by which he accepts, by an unequivocal statement or action, that the personal data concerning him be processed.

Cookie – An „Internet Cookie” (also known as a „browser cookie” or „HTTP cookie” or simply „cookie”) is a small file, consisting of letters and numbers, that will be stored on your computer, terminal mobile phone or other equipment of a user accessing the Internet. The cookie is installed by the request issued by a web server to a browser (eg Internet Explorer, Chrome) and is completely „passive” (does not contain software, viruses or spyware and can not access the information on the hard disk- the user). A cookie consists of 2 parts: the name and content or value of the cookie. Moreover, the lifespan of a cookie is determined; technically, only the web server that sent the cookie can access it again when a user returns to the website associated with that web server.

The operator’s privacy policy is based on the following principles:
1. The processing of personal data shall be carried out in a lawful, fair and transparent manner.
2. The collection of personal data is for specific, explicit and legitimate purposes, and will not be further processed in a manner incompatible with those purposes.
3. Personal data shall be adequate, relevant and limited to what is necessary concerning the purposes for which they are processed.
4. Personal data shall be rigorously accurate and shall be updated as necessary.
5. Personal data shall be kept in a form that permits identification only for the period necessary to fulfil the purposes for which the data are processed.
6. The processing shall be carried out in such a way as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by taking appropriate technical or organisational measures.

Legal basis for the processing of personal data
Personal data are processed based on the express, freely expressed, unequivocal consent of the user of the site, following the provisions of the legislation in force and under the conditions of this policy. May be the basis for processing: a contract, a request from the user before entering into a contract, the need to comply with a legal obligation, the interest legitimate right of the operator or a third party, the need to protect the vital interests of the user or another natural person, the performance of a task that serves a public interest.

The website processes personal data, as the case may be:
1. For the online identification of site visitors, through cookies, and the data storage period is mentioned in the Cookies Policy.
Regarding the personal data communicated by the data subject by e-mail to the storage period of these data is 3 years. 

User rights
The regulation confers on the user a series of rights, which we present briefly in the following:
1. The right to information and access to personal data, based on which confirmation can be obtained from us that we process or not to process personal data, having access to those data and information on the methods and purposes of their processing;
2. The right to rectification of data, which may be exercised to obtain, without undue delay, the rectification of inaccurate data or the completion of incomplete personal data;
3. The right to the deletion of data (the right to be „forgotten”), under which the deletion of personal data can be obtained, without undue delay, for one of the following reasons:
   3.1.. The data are no longer necessary for the purpose for which they were collected or processed;
    3.2. The user withdraws his consent and there is no other legal basis for the processing;
    3.3. The user opposes the processing and no legitimate reasons are prevailing regarding the processing;
   3.4.  Personal data have been processed illegally;
    3.5.  Personal data must be deleted to comply with a legal obligation;
   3.6.  Personal data have been collected in connection with the provision of information society services.
4. The right to restrict processing may be exercised in the following situations:
    4.1. When the accuracy of the data is contested, for a period that allows us to verify their correctness;
    4.2. The processing is illegal and the user opposes the deletion of the data, instead requesting the restriction of their processing;
    4.3. We no longer need personal data for processing, but the user requests them to establish, exercise or defend a right in court;
    4.4. When the user opposes the processing for reasons related to the particular situation in which he is, for the period in which it is verified whether in this case, the legitimate rights of the operator prevail.
5. The right to object, under which the user may object to the processing of personal data, including the creation of profiles, for reasons related to his particular situation, in cases where the processing is necessary for the performance of a task that serves a public interest or when it takes place for the legitimate interests pursued by us or a third party. In such cases the processing will be done only if it is justified by legitimate and compelling reasons, which prevail over the interests, rights and freedoms of the user, or when the purpose of the processing is to establish, exercise or defend a right in court. When the processing of personal data is for direct marketing, the user has the right to object at any time to the processing of data for this purpose, including the creation of profiles, insofar as it is related to direct marketing.
6..The right to data portability, which allows the user to receive personal data concerning him and which he has provided in a structured, commonly used and automatically readable format and to transmit this data to another operator, provided that the processing is based on consent or a contract and is carried out by automatic means.Under this right, personal data concerning the user may be transmitted directly from one operator to another where this is technically feasible.

Modification of the personal data processing policy
This policy for processing personal data may be updated as a result of changes in the relevant legislation in the field or changes in the structure and functions of the site www.box2m.comIf changes to the personal data processing policy are made, users will be notified by email and/or notifications within the application before the changes take effect.We encourage users to check this page regularly to be informed of the latest developments in our personal data processing practices.

How can you contact us?
For questions or questions regarding the processing of personal data, you can email

If you consider that your rights regarding the processing of personal data and SC have been violated, BOX2M ENGINEERING SRL did not handle the complaint properly, you can contact the supervisory authority for the processing of personal data. The National Authority for the Supervision of Personal Data Processing in Romania has its headquarters in Bucharest, bd.Gender. Gheorghe Magheru no. 28 – 30, sector 1, postal code 010336.