SC VIXFLO INVEST SRL guarantees the security and confidentiality of the data hosted and transmitted through its computer system. This information can be used by SC VIXFLO INVEST SRL to send the user order confirmation, various special offers, promotions, etc. only based on the consent of the person concerned.
The provision of personal data to SC VIXFLO INVEST SRL does not imply obligation on the part of users, and they can refuse to provide this data in any circumstances and can request their deletion from the database free of charge
SC VIXFLO INVEST SRL, owner of the online platform, does not intervene directly or indirectly on the databases where customer information is stored.
In order to make possible the invoicing, shipping and delivery of the orders placed, the user must agree that SC VIXFLO INVEST SRL collects and processes the entered data, according to the requirements of Law no. 679/2016 (GDPR).
According to the requirements of Law no. 679/2016 (GDPR) for the protection of individuals regarding the processing of personal data, and the protection of private life in the electronic communications sector, SC VIXFLO INVEST SRL has the obligation to manage the provided personal data in safe conditions and only for the specified purposes.
In this sense, SC VIXFLO INVEST SRL has developed a series of technical and organizational measures to prevent risks that may arise in the processing of personal data.
The processing of personal data within the organization is conditioned by a series of technical and organizational measures in order to secure them.
These measures have the role of protecting information at the level of the organization against security incidents.
At the level of the organization, the following security measures were taken to reduce risks:
Technical measures:
The SSL certificate - has the role of securing the exchange of information over the Internet. It encrypts the information before it circulates through the Internet. Encrypted information can only be decrypted by the server to which it is addressed. This guarantees that the information sent to a website/online platform will not be stolen, intercepted, processed.
Information about bank cards, passwords and in general any information that you want to remain private is secured by this certificate.
The SSL certificate of the SC VIXFLO INVEST SRL online platform is also used to secure e-mail correspondence, in such a way that the personal data of clients circulate in a secure environment and regulated by a series of security measures that ensure the confidentiality of information.
Automatic back-up – set at a time interval to guarantee the information and for all clients to be sure that the information and preferences provided by them do not disappear and are not destroyed, lost or incorrect in the event of a server error.
Anti-spam and antivirus filters that prevent the infiltration of malicious content or viruses that can process data in an unauthorized way or that can transmit them to other entities or people who have not obtained the consent of the person concerned.
Securing modules and scripts that communicate within the platform. The operation of the elements involved in the client-server, server-client interaction is constantly checked.
Checking and optimizing the modules in order to keep them up-to-date to prevent vulnerabilities. This measure prevents the identification of global vulnerabilities in the used platforms, 0-day vulnerabilities that can intercept the exchange of data and implicitly personal data in the interactions of the client with the platform or of the person in charge of the process with the client and the platform.
Classification of types of access by the person in charge of the process - administration groups, the possibility to add or delete certain rights on a user with full access - personalization of access according to need.
Password protection of the device from which the person in charge of the process performs the data processing, in order to prevent unauthorized intervention.
Firewall - software program and hardware component installed in the location of the servers of the company that offers the hosting of the online platform, are intended to protect the server and the network equipment, against computer attacks, unauthorized intrusion attempts, the installation of malicious software applications that can endanger data with personal character of platform users. The firewall blocks the access of unauthorized persons to the information stored on the equipment connected to the Internet.

Access to data processing systems in which personal data is processed is only possible after the authorized person has been successfully identified and authenticated (e.g. with username and password or chip/PIN card), using security measures the best performers. In case of lack of authorization, access is denied.
All access attempts, both successful and rejected, are recorded (user ID, computer, IP address used) and archived in a format according to audit rules for 3 months. In order to detect improper use, the server performs repeated, random checks;
Access is blocked after repeated incorrect authentication attempts.
Constant checking of platform vulnerabilities, which could allow the extraction of personal information and data. The hosting has security measures and solutions that repeatedly scan the processed files and the data flow that circulates inside the platform;
Combating the risks of security breaches by taking precautionary measures from a technical and organizational point of view by securing the platform and constantly updating it with stable versions.
Organizational measures:
Destruction of documents that are no longer needed (notes, erroneous invoices, etc.) using a document shredder at the disposal of the person in charge of the process;
Eliminating the risk generated by the human factor by prohibiting the processing of information outside the secure platform, with the exception of the preparation of transport notes in the platform of the courier company, which is also a secure environment;
Adoption of security measures without differentiating between types of clients (new/ existing/ potential);
The adoption of an internal policy for verifying the processes and the processing at the time of the delivery of the product or the receipt of information regarding an order or possible offer;
Avoiding differentiation between clients through mechanisms that can positively or negatively profile the targeted person. For this reason, we do not request personal data about sexual orientation, sexual interests, sex, religion, membership of movements or groups, etc. Customers are free to order and choose what they want. Through this measure, we consider that we respect the integrity of the person and avoid any trace of analysis/profiling based on these criteria.
SC VIXFLO INVEST SRL privacy policy update
Training the person in charge of the process regarding the need for notification in the event of a major security incident.
Training of the person in charge of the process regarding the management of situations that may arise during data processing within the platform (errors, usage errors).
Training the person in charge of the process regarding the use of the information they process and awareness of the nature of personal information;
Prohibition of processing data outside the platform by managing orders directly in the user interface of the platform, not being necessary to process data in other unsecured and vulnerable environments.
The person in charge of the process is regularly trained on:
- Data protection principles, including technical and organizational measures
– The requirement to maintain data secrecy and confidentiality regarding the organization's secrets and trade secrets, including the transactions carried out;
- Correct, careful use of data, data media and other documents;
– The secret of telecommunications;
– Other specific obligations regarding confidentiality, where necessary;
From the point of view of processing, within SC VIXFLO INVEST SRL, personal data are processed only for the purposes for which the consent of the persons concerned has been obtained, including for parallel purposes and for the conclusion of a contract or the delivery of a product to the client, requested by him .
Considering that this organization carries out its activity for the most part in the online environment, the processing of personal data of customers are transmitted online through the applications and the platform on which orders and requests for offers are requested. The data collected are minimized and are directly related to the purpose for which consent was obtained and are necessary to contact the customer in the case of a request for an offer or to deliver and make available the product/service ordered according to the requirements or its return.

SC VIXFLO INVEST SRL, a legal entity registered at the Trade Register (no. J09/306/2014, CUI 33211632) is a direct operator as well as an authorized operator. The purpose of processing personal data is the provision of products and services through the online platform as well as the parallel purposes of this activity: returning products, processing the information necessary for delivery, improving the experience for the user by retaining certain settings or preferences, after obtaining his consent, changes of price, product/service characteristics, stock changes, promotions, invoicing.
The categories of persons concerned are: current clients / potential clients or website visitors.
The ways in which data subjects are informed about their rights are:
Privacy policy;
On the web page in a dedicated section;
In the contact form on the website (external link to the document);
The exercise of the rights provided by law 679/2016 (GDPR) are entirely the responsibility of the operator who has the legal obligation to appoint a person responsible for the processing of personal data within the organization. This person will develop a set of technical and organizational measures to secure data processing and has the obligation to inform the operator about the nature of the processing processes, types of information and how these processes are carried out within the organization. The operator has the responsibility and obligation to ensure that these measures are implemented, that there is no risk of security breaches or information leaks, as well as compliance with the legislation in force regarding data processing and the rights of the persons concerned.
Through the online platform, the following personal data are processed:
name and surname
e-mail
phone
SC VIXFLO INVEST SRL does not process special data categories.
SC VIXFLO INVEST SRL does not transfer data abroad or to third parties
The processing of personal data is not related to other record systems. The actual activity of the company is to take orders initiated by customers through the online platform, to store and process them in order to invoice, ship and supply the ordered products.
The processing of the information entered by the client in the platform is processed and stored strictly in accordance with the purposes for which his consent was given:
Billing;
Delivery;
Withdrawal from a concluded contract (withdrawal can be made according to the law, taking into account the conditions under which this contract was initially concluded and the legal provisions initially agreed upon);
The purpose of data collection is to invoice orders, send correspondence and honor orders. Your refusal to provide the data determines the impossibility of placing your order on this site and its processing, according to the requirements, as well as the impossibility of fulfilling the purpose.
According to Law no. 679/2016 (GDPR), the user benefits from the right of access, the right to be forgotten, the right to carry the information and personal data, the right to intervene on the data, the right not to be subject to an individual decision and the right to addressed the justice. At the same time, he has the right to oppose the processing of personal data and can request the deletion of the data. To exercise these rights, the user can send a written, dated and signed request to the e-mail address protectiadatelor@scdesign.ro. Also, if some of the user data is incorrect, we ask that this be reported to us, so that we can make the necessary corrections.
+40 (733) 324 275
support@vixflo.ro
Str. Market, No. 5, Brăila, CP 810284