GDPR Privacy Policy

THOT NUTRITION – GDPR Privacy Policy

Last updated: March 7, 2022

Thot Nutrition SRL (“Thot Nutrition” “we”, “us” or “our”) values your privacy. In this Privacy Notice (“Notice”), we describe the personal data that we collect from and about you on our websites, including www.thotnutrition.com and our other sites on which we post this Notice (collectively, the “website”) whenever the processing of that personal data is governed by the GDPR. For the purposes of this Notice, personal data means any information relating to an identified or identifiable person. Thot Nutrition is the controller of any personal data collected from you on our website or elsewhere for the purpose of conducting or developing our business with you.

Summary

We collect personal data from you when you visit our website and from third party sources, such as social networks. Principally, we collect and process your personal data to provide you products and services that you request. We also collect and process your personal data to send you marketing communications. In some cases, we will use your personal data together with information (including personal data) collected from your device and from third parties to predict the products and services that most interest you. All your personal information will be transferred and processed in Romania, where we are located. In all cases, you have certain rights to control your personal data; you can read more about those rights by clicking here.

Collection of Information

We collect personal data and other information directly from you and about you when you visit our website, use the services on our website, or otherwise contact us.

We collect Device Information using the following technologies:

– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit https://thotnutrition.com/privacy-policy-cookie-policy/.

– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

– “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information”.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

Personal Data We Collect Directly from You: We collect personal data directly from you for instance when you:

• sign up for an account with us.
• request information from us (including subscriptions and downloads).
• subscribe to our newsletters.
• purchase a product from us.
• participate in our forums, blogs, or similar community platforms.
• use social media embedded on our website or otherwise interact with our website.

The type of information that we collect from you depends on your interaction with our website, and will include: your e-mail address, name, marital status, home or work address or telephone number. If you email us (or contact us otherwise), we may retain a record of such email (or other) communication (including attachments), including your email address, name, content of your email and our response. If you make a purchase from us, we also will collect your payment information (e.g., credit card information, billing name and address) to process the transaction. You also may choose to provide us with demographic information, such as your ZIP code, gender, preferences, interests, and favorites.

Personal data requested on a form is required to fulfill your request or perform our contractual obligations to you. If you do not provide such personal data, we will be unable to respond to your request or perform our obligations to you.

Information We Collect Automatically: We, and our third-party service providers, also automatically collect and record personal data and information about your use of our website through cookies, web beacons, and other tracking technologies, including: your:

• IP address.
• browser type.
• domain names.
• access date and times.
• purchase history.
• operating system.
• referring website addresses.
• information from third parties.

We use this information primarily to maintain quality of the service, and to understand how you use our website. We also may use this information to generate general statistics regarding use of this Website. We may combine this information with other information that we collect about you. We also collect information when you view content on or otherwise interact with our website, even if you have not created an account. For more detailed information about the various tracking technologies, we use and how they work, please see below.

Information We Collect from Social Networking Sites and other Third Parties: If you choose to log into our services through Social Networking Sites (such as Facebook Connect), we will request your permission to collect from that Social Networking Site the following information about you: your e-mail address, name, profile picture, cover photo, friends, gender, networks (e.g., school), age range, language, country, and other information that you have chosen to make public. Please note that where you chose to provide social networks with your personal data and information, these third-party social networks, not we, control how they use and share your information. We may append this information to other information that we collect about you. If you “like” us on a Social Networking Site, we also may collect your email address. If you want to disconnect social media links, please contact us as indicated in Contact. You should consult the networks’ respective privacy policies for information about their practices.

User Generated Content

We invite you to participate in our forums. If you choose to post a comment, your username, city, and any other information that you choose to post will be visible to all visitors to the website. We are not responsible for the privacy of any information that you choose to post to our website, including in our blogs and forums, or for the accuracy of any information contained in those postings. Any information that you disclose becomes public information. We cannot prevent such information from being used in a manner that may violate this Notice, the law, or your personal privacy. You may contact us at any time at office@thotnutrition.com if you wish to remove or rectify the information you provided.

Cookies and Other Tracking Technologies

We and our service providers use cookies and other tracking mechanisms to track information about your use of our website. We or our service providers may combine this information with other personal data we collect about you.

• Cookies. We or our service providers may use cookies to track visitor activity on our website. A cookie is a text file that a website transfers to your computer’s hard drive for record-keeping purposes. We or our service providers may use cookies to track visitor activities on our website, such as the pages visited, and time spent on our website. Most browsers allow visitors to refuse cookies. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our website who disable cookies may not be able to browse certain areas of the website. We use both session and persistent cookies:
  
  
  • Session Cookies. Session cookies exist only during an online session. They disappear from your computer when you close your browser or turn off your computer. We use session cookies to allow our systems to uniquely identify you during a session or while you are logged in to the website. This allows us to process your online transactions and requests and verify your identity, after you have logged in, as you move through our website.
  • Persistent cookies. Persistent cookies remain on your computer after you have closed your browser or turned off your computer. We use persistent cookies to track aggregate and statistical information about visitor activity, which may be combined with other visitor information.
• Web beacons/clear GIFs. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies, which are embedded invisibly on web pages. We or our service providers may use clear GIFs (also known as web beacons, web bugs or pixel tags), in connection with our website to track the activities of visitors to our website, help us manage content, and compile statistics about usage of our website. We or our service providers may also use clear GIFs in HTML emails to our visitors, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.
• Flash LSO. We may also use Flash Local Storage Objects (“Flash LSOs”) to store your website preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete, or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs, or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel” and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel” and follow the instructions to review and, if you choose, to delete any specific Flash LSO.

Website Analytics

We use third-party service providers to evaluate the use of our website. These third-party service providers use automated devices and applications to evaluate use of our website and services. We or our service providers use these tools to help us improve our website, performance, and visitor experiences. These entities may use cookies and other tracking technologies, such as web beacons or Flash LSOs, to perform their services.

Do Not Track

Our Site does not respond to Do Not Track signals and we (either directly or through third-party service providers) may track your activities once you leave our website. You may however disable certain tracking as discussed in this Notice (e.g., by disabling cookies).

Interest-Based Tracking

We use third parties such as network advertisers to serve advertisements on our website and on third-party websites, or other media (e.g., social networking sites). Network advertisers are third parties that display advertisements based on your visits to our website and other websites you have visited. This enables us and these third parties to target advertisements to you for products and services in which you might be interested. Third party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party’s specific privacy policy, not this Notice. We may provide these third-party advertisers with information about your usage of our website and services, both personal data and non-personal data.

You may opt-out of many third-party ad networks. Opting out of one or more members or participating companies (many of which will be the same) only means that those members no longer will deliver targeted content or ads to you, but it does not mean you will no longer receive any targeted content or ads on our website or other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing. Also, if your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different computer, or change web browsers, your opt-out may no longer be effective. Additional information is available at the above links.

Third-Party Links

Our website may contain links to third-party websites. Any access to and use of such linked third-party websites is not governed by this Notice but instead is governed by the privacy policies of those third-party websites.

We encourage you to review the privacy statements of websites you choose to link to from this website so that you can understand how those other websites collect, use and share your information. We are not responsible for the privacy statements or other content on websites other than this website.

Reasons and Lawful Grounds for Use of Your Personal Data

Whenever we process your personal data, it is justified by a ‘lawful ground’. The lawful grounds and reasons why we process Personal Data are as follows:

Lawful ground – To perform a contract with you or take pre-contractual steps at your request:

• to provide our services to you.
• for order fulfillment purposes.
• to communicate with you, including via email, about your use of our services or administrative information, such as notifying you about changes in our terms or notice.
• to respond to your inquires and for other customer service purposes.
• to carry out our obligations and enforce our rights arising from contracts entered between you and Thot Nutrition, including for billing and payment collection.

Lawful ground – Our legitimate interests:

• to provide you with news and newsletters, special offers, and marketing promotions, including via email.
• to contact you about products or information we think may interest you, and for other marketing, advertising, and promotional purposes.
• to serve you with personalized and tailored content on our website.
• to display interest-based advertising to you, to improve our advertising and measurement systems so we can show you relevant ads, and to measure the effectiveness and reach of ads and services.
• to engage with you if you log in through a Social Networking Site or “like” us, by posting to your wall.
• to better understand how visitors access and use our website and services, both on an aggregated and individualized basis; to respond to visitor desires and preferences; to track the success of our communications and marketing; and for other research and analytical purposes.
• to protect our employees, property, and operations or those of any of our affiliates.
• to protect our rights and interests, and/or that of our affiliates, and the rights and interests of other visitors to our website, as well as to enforce our Terms of Service.
• to pursue available remedies or limit the damages that we may sustain.
• to keep business records (such as tax and accounting).
• to comply with applicable Romanian legal obligations.
• to respond to requests from Romanian government authorities.
• to protect privacy, safety, or property.

When the lawful ground is our legitimate interests, those interests are to process website visitor data to conduct, develop and grow our business activities with customers, visitors and with others, and to improve our services and profitability, while limiting the use of personal data to those purposes that strictly support the conduct and development of our business as described in this Notice.

Lawful ground – When we are required to comply with other countries law:

• to keep business records.
• to respond to requests from public and government authorities.
• to protect privacy, safety, or property.

Information Sharing

We may share your Personal Information with third parties to help us use your Personal Information, as described above.

We may also use Google Analytics (GA) to help us understand how our customers use the website via aggregated, anonymized website traffic analysis. To track your session usage, Google drops a cookie with a randomly generated ClientID in your browser. This ID is anonymized and contains no identifiable information like email, phone number, name, etc. We use GA to track aggregated website behavior, such as what pages you looked at, for how long, and so on. This information is important to us for improving the user experience and determining site effectiveness.

You can read more about how Google uses your Personal Information here. You can also opt-out of Google Analytics here. If you would like to access what browsing information we have – or ask us to delete any GA data – please delete your GA cookies, reach out to us via office@thotnutrition.com, and/or install the Google Analytics Opt-Out Browser Add-On.

We may share your information, including your personal data, with the following entities and in the following situations:

• Affiliates. With our parent company, affiliates, or subsidiaries for research and marketing, including marketing our product as well as their own products and services, and other purposes consistent with this Notice.
• Partners. From time to time, we may offer promotions with other entities, and we may share your contact information with the other entity for the purpose of the joint promotion, with your consent where required.
• Service Providers. With companies that provide services to help us with our business activities such as shipping your order or offering customer service, performing website analytics, assisting us with marketing and advertising, and evaluating the success of our marketing/advertising campaigns. For example, we may share information (such as the number of daily visitors to a particular web page, or the size of an order placed on a certain date) with advertising partners and other third parties to assist us in determining relevant advertising.
• Unaffiliated Third Parties. We also may share your information with non-affiliated third parties, including for their own marketing purposes, with your consent where required.
• Business Transfers. If we are acquired by or merged with another company, if substantially all our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the information we have collected from you to the acquiring company.
• In Response to Legal Process. We also may disclose the information we collect from you to comply with the law, a judicial proceeding, court order or other legal process, such as in response to a subpoena.
• To Protect Us and Others. We also may disclose the information we collect from you where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of our Terms of Service.
• Aggregate and Anonymized Information. We may share aggregate or anonymized information about visitors with third parties for marketing, advertising, research, or similar purposes. For example, if we display advertisements on behalf of a third party, we may share aggregate demographic information with that third party about the visitors to whom we displayed the advertisements.
• Behavioral advertising. As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.

You can opt-out of targeted advertising by using the links below:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Transfers of Personal Data

We are located in Romania, and your personal data will be transferred to Romania to perform the terms of our agreement with you. Romania adopted European Commission approved standard contractual clauses and we will abide by both the data exporter and data obligations set forth in those clauses. When your personal data is transferred to our third-party service providers outside Romania, we will take steps to ensure that your personal data receives the same level of protection as if it remained within Romania, including by entering into data transfer agreements using the specific country approved standard contractual clauses, or by relying on certification schemes such as the EU – US Privacy Shield. You have a right to obtain details of the safeguards applied to your personal data when transferred to the US, including a copy of the standard contractual clauses that we have adopted, by contacting us at office@thotnutrition.com.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are not a Romanian resident, we note that we are processing your information to fulfill contracts we might have with you (for example if you make an order through the website), or otherwise to pursue our legitimate business interests listed above.

• Data retention – When you place an order through the website, we will maintain your Order Information for our records unless and until you ask us to delete this information.
• Right to Withdraw Consent – where we rely upon consent as the lawful ground for our processing, you have the right to withdraw your consent at any time. For example, if you wish to opt-out of receiving electronic marketing communications, you can change your settings in your account on the website, use the ‘unsubscribe’ link provided in our emails or otherwise contact us directly and we will stop sending you such communications.
• Right of Access, Rectification and Erasure – you have the right to request access to and obtain a copy of any of your personal data that we may hold, to request that we rectify any inaccurate data relating to you and to request the deletion of your personal data under certain circumstances. You can see and update most of this data yourself by accessing your account online, or also by contacting us directly at office@thotnutrition.com.
• Data Portability – where we are relying as the lawful ground for processing upon your consent, or the fact that the processing is necessary to perform a contract to which you are party or to take steps at your request prior to entering a contract, and the personal data is processed by automated means, you have the right to receive all such personal data which you have provided us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.
• Right to Restriction of Processing – you have the right to restrict our processing of your personal data (that is, allow only its storage) where:
  
  
  • you contest the accuracy of the personal data, until we have taken sufficient steps to correct or verify its accuracy.
  • where the processing is unlawful, but you do not want us to erase the personal data.
  • where we no longer need your personal data for the purposes of the processing, but you require such personal data for the establishment, exercise, or defense of legal claims.
  • where you have objected to processing justified on legitimate interest grounds (see below), pending verification as to whether we have compelling legitimate grounds to continue processing.

Where your personal data is subject to restriction, we will only process it with your consent or for the establishment, exercise, or defense of legal claims.

• Right to Lodge a Complaint – you also have the right to lodge a complaint with your supervisory authority should you consider that the processing of your personal data infringes applicable data protection law.

• Right to Object to Processing (Including Profiling) Based on Legitimate Interest Grounds – where we are relying upon legitimate interests to process personal data, you have the right to object to that processing. If you object, we must stop that processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or we need to process the personal data for the establishment, exercise, or defense of legal claims. Where we rely upon legitimate interest as a basis for processing, we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.
  • Right to object to direct marketing (including profiling) – you have the right to object to our use of your personal data (including profiling) for direct marketing purposes, such as when we use your personal data to invite you to our promotional events.

Please contact us at office@thotnutrition.com, if you wish to exercise any of your rights, or if you have any enquiries or complaints regarding the processing of your personal data.

Please note that certain services will not be available if you withdraw your consent, or otherwise delete or object to our processing of certain personal data.

Security

We have taken certain steps to help protect the information we collect about you from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Please note that no method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.

We encourage you to take steps to protect your information against unauthorized access to your account by, among other things, choosing a robust password that nobody else knows or can easily guess and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

Children

Our website is not designed for children under eighteen (18) years, and we do not knowingly collect their personal data. If we discover that a child under eighteen (18) has provided us with personal data, we will delete such information from our systems. If you are under the age of 18 years and you have provided personal data, please ask your parent(s) or guardian(s) to notify Thot Nutrition, and we will delete all such personal data.

Contact

If you have any questions about security on this website or wish to exercise your data subject rights, you can contact us at any time, free of charge at office@thotnutrition.com.

Notice of Privacy Statement Changes

We may update this Notice to reflect changes to our privacy practices. If we make any material changes, we will notify you by email (sent to the email address specified in your account) or post the updated Notice prominently on this website. We encourage you to periodically review this page for the latest information on our privacy practices.