INFORMATION NOTE

on the processing of personal data carried out by
SUN LEADER RETRACTABLE PERGOLAS

SUN LEADER S.R.L., headquartered with Registered Address in: Brașov, str. Aleea Magnoliei nr. 16, bl. 101, sc. B, cam. 2, ap. 3, Brașov County, registered at the Trade Register Office attached to the Brașov Court under no. J08/32/2018, having C.U.I. RO 38662676, website: www.sunleader.co.uk , email: info@sunleader.ro , hereby informs you about the processing of your personal data and the rights you have in accordance with UK GDPR (Data Protection Act 2018) and the Privacy and Electronic Communications Regulations (PECR).

PRIVACY POLICY (UK GDPR COMPLIANT)

SUN LEADER S.R.L.
Registered Address: Aleea Magnoliei, no. 16, bl. 101, sc. B, ap. 3, Brașov, Romania
Company Registration Number: J08/32/2018
VAT Number: RO38662676
Email: info@sunleader.ro
Phone: +40 770 444 888
Website: www.sunleader.co.uk

UK Representative for Data Protection Matters:
Eugeniu Lisnic
Phone: +40 735 333 444
Email: info@sunleader.ro

Operations of this company and data processing are handled by SUN LEADER S.R.L. in Romania, in compliance with UK GDPR (Data Protection Act 2018) and the Privacy and Electronic Communications Regulations (PECR).

1. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

Providing Information and Services: Responding to inquiries, providing product information, and offering personalized solutions.
Contractual and Legal Obligations: Drafting and concluding contracts, processing payments, issuing invoices, and meeting regulatory requirements.
Marketing and Communications: Sending promotional content (only with explicit consent).
Website Analytics and Security: Improving user experience and ensuring site security.

Legal grounds for processing include:

Article 6(1)(a) UK GDPR: Consent for marketing communications.
Article 6(1)(b) UK GDPR: Processing necessary for contract performance.
Article 6(1)(c) UK GDPR: Compliance with legal obligations.
Article 6(1)(f) UK GDPR: Legitimate interests (e.g., security, fraud prevention).

Special categories of personal data (if applicable) are processed under Article 9(2)(a) UK GDPR (explicit consent).

2. Types of Personal Data We Process

Depending on user interaction, we may collect:

Basic Contact Information: Name, email, phone number, and address.
Transaction Data: Payment details, contract information.
Marketing Data: Preferences, feedback, and survey responses.
Website Usage Data: IP address, browser type, interaction history.

We only collect and process data necessary for the specified purposes.

3. Categories of Recipients of Personal Data

Your data may be shared with:

Service Providers: IT support, marketing agencies, logistics companies.
Regulatory Authorities: If required by law.
Payment Processors: To facilitate transactions securely.

Transfers outside the UK (e.g., to Romania) are safeguarded by Standard Contractual Clauses (SCCs) or other UK GDPR-compliant mechanisms.

4. Data Retention Period

We retain personal data for the following periods:

Inquiries & Marketing Data: Until consent is withdrawn or up to 2 years.
Contractual Data: Retained for the duration of the contract + 6 years (legal requirement).
Website Analytics: Data is anonymized after 12 months.

Once the retention period expires, data is securely deleted or anonymized.

5. Your Rights Under UK GDPR

As a UK user, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of personal data under specific circumstances.
Restriction: Limit processing in certain cases.
Data Portability: Request data in a structured format.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: Revoke consent at any time (for marketing communications).

To exercise these rights, contact our Data Protection Officer (DPO) at info@sunleader.ro.

If you believe your data rights have been violated, you can file a complaint with the UK Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Phone: +44 303 123 1113

6. Security Measures

We implement technical and organizational measures to protect personal data, including:

Encryption for secure data transmission.
Access controls to limit unauthorized access.
Regular audits to ensure compliance with data protection standards.

7. Updates to This Policy

We may update this policy periodically to reflect changes in UK law or company practices. Users are encouraged to review this policy regularly.

Last Updated: February 2025