PRIVACY POLICY

1. Introduction

This Privacy Policy is intended to inform users of the Pharma Cloud platform (website, mobile applications and related subdomains) about how Pharma Cloud SRL collects, uses, stores and protects personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

By using the Pharma Cloud platform and/or by creating an account, users declare that they have read and accept this Policy.

2. Data controller

Data controller: Pharma Cloud SRL Registered office: Șoseaua Pantelimon 324, block D1, entrance A, floor 8, apartment 41 Tax ID (CUI): 52231652 GDPR contact email: office@pharmacloud.ro

3. Scope

This Policy applies to all users of the Pharma Cloud platform.

4. Categories of personal data processed

We may process the following categories of data: identification data, account data, platform usage data, technical data (IP, device, browser), feedback, reviews and data resulting from tracking.

5. Purposes and legal bases

Data is processed for the provision of services, account management, payments, marketing, promotion, statistical analysis, security and fraud prevention, on the basis of consent, performance of the contract, legal obligations and legitimate interest (art. 6 GDPR).

6. Marketing, communications and notifications

Pharma Cloud reserves the right to send: commercial and promotional communications; personalized in-app notifications and emails regarding events, offers or platform features, to users who: have created an account and have given their consent or fall within a justified legitimate interest.

Users can opt out of commercial communications at any time through the options available in their account or through the unsubscribe link in the emails.

7. Tracking and analytics technologies

The platform uses analytics and marketing technologies, including: Google Analytics 4, MailPoet, TikTok, Meta, Instagram, Hotjar.

These technologies allow user behavior to be analyzed (e.g., time spent on the site, actions taken), for statistical and marketing purposes.

Additional details are available in the Cookie Policy.

8. Data recipients

Data may be disclosed to IT, hosting, payment processor and analytics/marketing service providers, including outside the EEA, with appropriate GDPR safeguards.

Some data may be transferred outside the European Economic Area, exclusively in compliance with the safeguards provided for by the GDPR (standard contractual clauses, adequacy decisions, etc.).

9. Rights of data subjects

In accordance with the GDPR, users have the following rights:

the right of access (art. 15 GDPR); the right to rectification (art. 16 GDPR); the right to erasure (art. 17 GDPR); the right to restriction of processing (art. 18 GDPR); the right to data portability (art. 20 GDPR); the right to object (art. 21 GDPR); the right to withdraw consent (art. 7 para. (3) GDPR); the right to lodge a complaint with the ANSPDCP – the Romanian Data Protection Authority (art. 77 GDPR).

Requests can be sent to the email address: office@pharmacloud.ro

10. Retention period

Data is kept for as long as necessary for the purposes and legal obligations, after which it is deleted or anonymized.

11. Data security

Pharma Cloud implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or disclosure.

12. Changes

Pharma Cloud reserves the right to amend this Policy. Any change will be published on the platform and will take effect from the date of posting.