(Last Updated: April 23, 2024)

Definitions

  • Administrator – Responsible for managing, setting up, updating and enforcing rules regarding the use of online services on the website.
  • Personal data – information about a natural person identified or identifiable through one or more identifiable by one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity, including including the device’s IP address, internet identifier and information collected through cookies and other similar technology.
  • Policy – this Privacy Policy.
  • The General Data Protection Regulation (the GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
  • Service – the website operated by the Administrator at eu
  • User – any natural person visiting the Service or using one or services or functionalities described in the Policy.Processing of Personal Data in connection with use of the Website In connection with the User’s use of the Website, the Administrator collects data to the extent necessary to provide the individual services offered. Below are detailed principles and purposes of processing of Personal Data collected during use of the Website by the User.

 

This privacy statement applies to any form of processing of personal data by hexing.ro

With the following, hexing.ro would like to inform you about which personal data hexing.ro processes, how and for what purpose it is used, and what rights data subjects are entitled to. All data is processed in compliance with the relevant legal regulations on data protection and data security. 

 

  1. INTRODUCTION
  2. DETAILS OF DATA PROCESSING AND REGULATIONS RELATED TO GDPR
  3. DISCLOSURE OR SHARING OF PERSONAL INFORMATION
  4. RETENTION
  5. COOKIES
  6. YOUR RIGHTS
  7. Transfers of Personal Data outside the EEA
  8. MINORS
  9. SECURITY MEASURES
  10. CHANGES TO THIS PRIVACY POLICY
  11. HOW TO CONTACT US

1.INTRODUCTION 

We at hexing.ro (collectively “hexing.ro”, the “Platform” or “we”) recognize the importance of privacy and confidentiality of personal information. hexing.ro is a business to business (“B2B”) platform which connects and facilitates sales and purchases of products and/or services between suppliers (“Sellers”) and buyers (“Buyers”). Collectively, the Sellers and Buyers shall be referred to as the “Users”.

This hexing.ro Privacy Policy (“Privacy Policy”) sets out how we collect, process and disclose information in connection with the operation of the Users  (“you”) including personal information about the visitors and, representatives and employees of the Users.

This Privacy Policy does not apply to the extent we process personal information in the role of a processor or service provider on behalf of other companies.

If you have any questions or concerns about the use of your personal information, then please contact us using the contact details provided at section 11. HOW TO CONTACT US of this Privacy Policy.

 

2.DETAILS OF DATA PROCESSING

Below you will find an overview of what kind of personal information we process about you and for which purposes we collect this personal information.

If you need us to provide you with our services or fulfil a contract with you, or because we are required to do so by law, but do not provide us with your personal information, we may be unable to provide our services or fulfil our contractual obligations to you.

Purpose

Account administration. We   use your information to verify your eligibility to register as a Platform   user in accordance with our Terms of Use; and set up/administer user accounts, such as providing log-in IDs and developing a Platform profile

Data categories:

Contact information

Account information

Business information

Social media account information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (b) GDPR – establishment, performance, or termination of the contract with you

Art. 6 (1) (f) GDPR – our legitimate interest in the security, stability, and usability of our Platform

Purchase and delivery of products and services. We use your information to take and   handle orders, deliver products and services on the Platform, process   payment, provide logistics and warehousing services via the Platform,   facilitate customs clearance declarations/applications via the Platform and   provide Users with customer service support, such as responding to queries,   feedback, and managing claims and/or disputes

Data categories:

Contact information

Account information

Business information

Transaction information

Payment information

Communication information

User-generated content

Device information

Online activity information

Location information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (b) GDPR – establishment, performance, or termination of the contract with you

Communicate with you. We   use your personal information to facilitate communication between Users and   us, and between the Buyers and Sellers via the Platform, for the purpose of   processing transactions and settlement between the Buyers and Sellers made   over the Platform, assessing fund withdrawal requests from Sellers and   improving the services and products of the Platform

Data categories:

Contact information

Account information

Transaction information

Payment information

Device information

Location information

Communication information

Online activity information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (b) GDPR – establishment, performance, or termination of the contract with you

Provide voice, image and camera services. When you use services that require   access to contents stored in and/or functions on your devices (including but   not limited to contacts in address book, photos, videos, microphone and/or   camera), we will use your photos, videos, contact information in your address   book, and other personal information to respond to your requests, provide the   requested services to you, and improve our services

Data categories:

Contact information

User-generated content

Communication information

Device information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (b) GDPR – establishment, performance, or termination of the contract with you

Art. 6 (1) (f) GDPR – our legitimate interest in improving our services based on the information obtained

Art. 6 (1) (a) GDPR – your consent

Recommendations and personalization. We   use your personal information to recommend features, products, and services   that might be of interest to you, identify your preferences, and personalize   your experience with the Platform. If you are a Buyer, we will share details   of the last viewed products on the Platform to enable Sellers, their   respective affiliates and/or their thirdparty services provider to contact   you with details of products and/or services that might interest you

Data categories:

Contact information

Business information

Transaction information

Online activity information

Marketing and advertising information

Location information

Contact information

Business information

Transaction information

Online activity information

Marketing and advertising information

Location information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (a) GDPR – your consent

Art. 6 (1) (f) GDPR – our legitimate interest in offering recommendations

Research and development. We   use your personal information to perform research or statistical analysis in   order to improve the content and layout of the Platform, and use your   personal information to improve the product offerings and services on   hexing.ro, including, for example, using anonymized data for machine   learning purposes

Data categories:

Contact information

Account information

Business information

Device information

Location information

Online activity information

User-generated content

Social media account information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (f) GDPR – our legitimate interest in improving the content and layout of the Platform

Comply with legal obligations. In   certain cases, we collect and use your personal information to comply with   laws. For instance, we use your information to verify your identity and   conducting security checks, KYC (know-your-customer) and antimoney   laundering due diligence in order to set up user accounts

Legal basis (where applicable).

Contact information

Account information

Business information

Communication information

Transaction information

Payment information

Online activity information

Legal basis (where applicable).

The data processing is based on the following legal bases:

Art. 6 (1) (c) GDPR – Compliance with legal obligations

If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time. We will advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). In some instances, you may be required to provide us with personal information for processing as described above, in order for us to be able to provide you all of our services, and for you to use all the features of our Platform.

For processing operations based on our legitimate interests, we have carried out a legitimate interest assessment to ensure that our interests are not prejudiced by your interests or fundamental rights and freedoms.

If you have questions about or need further information concerning the legal basis on which w collect and use your personal information, please contact us using the contact details provided under section 11. HOW TO CONTACT US below.

The categories of personal information described in the table above are detailed below:

 

Information you provide to us

If you are a representative or employee of any Buyer or Seller or a sole trader Buyer or Seller, subject to your use of the applicable functions and/or services on the Platform, we will ask you to provide:

 

  • contact information, such as contact/legal representative name, address, phone number of the company/the contact, email address of the company and the contact/legal representative, job title and department, ID information, phone bills of the contact/legal representative.
  • account information, such as your username and password, gender and your account settings.
  • business information, such as identity information, tax registration and/or related information about your business, such as your company name, registration number and date, company official website, business type and industry, corporate registration details and information about your business license, proof of business operation including lease agreement, property deed, utility bills and etc.
  • transaction information, such as transaction statements, billing/delivery address of the recipient of your order, payments and orders placed, and other details of the products you have supplied or purchased through the Platform.
  • payment information, such as bank account numbers, credit/debit card numbers, credit/debit card holders, expiration dates and security code and tracking information from cheques or money orders, bank statement and account opening page.
  • From time to time, we may also collect information about the existing and prospective Users, during or in connection with trade shows, industry events and/or other functions, including representative contact names, addresses, phone numbers, fax numbers and email addresses.

 

Information that we collect automatically

If you are a Buyer or Seller or prospective Buyer or Seller, we will automatically collect:

 

  • device information, such as the type of device you use, unique device identification numbers, IP addresses, browser type, browsing patterns, advertising identifiers and other types of identifiers. 
  • online activity information, such as page views and searches, information about content that has been viewed and/or downloaded, information about your activity on a page or screen, access times and duration of access, and other details of how you have interacted with our Platform.
  • location information, such as your general geographic location, and, with your permission, the approximate location data of your mobile device. Please note that for most mobile devices, you can manage or disable the use of precise location services for all applications in the settings menu of your mobile device.
  • communication information, such as posts and/or contents uploaded on the Platform, any comments on content you have uploaded to the Platform or on other Users’content on the Platform.
  • marketing and advertising information, such as your interests based on your use of the Platform and your purchases, responses to surveys, promotions you participate in, preferences in receiving marketing content from us, communication preferences, preferences for particular products or services and your subscription data.
  • user generated content, such asprofile photos, videos or audio recordings that you upload to the Platform as part of product reviews or by sharing content in socializing within the Platform.
  • other information, such asstatistical information about the Platform and visitors to the Platform including, browser software, operating system, software and hardware attributes, number of sessions and unique visitors.

 Some of this information may be collected using cookies and similar tracking technology, as explained further under our Cookies Policy.

 

Information that we receive from third parties

  • social media account information, such as social media username, profile picture and your login details where you choose to log into the Platform using social media accounts or when you interact with us through an external service or application. 
  • communication information, such as feedback and other communications with us (including when you interact with our subcontracted customer support agents), disputes/complaints from Sellers/Buyers on the Platform, copy of your correspondence if you contact us such as via our customer services department chat service, telephone or email (including in the case wherein those functions involved integration of services provided by thirdparty service providers) , chat information between you and other users via instant messaging services provided by DingTalk. 
  • third parties that are engaged by us to provide verification services, such as conducting applicable antimoney laundering, fraud and “Know Your Customer”checks on the Buyers and Sellers, conducting due diligence and verification on Users. This includes your name, email address, company details, and contact information.
  • information about your interactions with products and services offered by our group companies and affiliates.
  • If you choose to participate in reviewing or rating products and/or services on hexing.ro , we may receive personal information about you from third parties that work with us to conduct reviews into our services and/or rate us.  

 

3.DISCLOSURE OR SHARING OF PERSONAL INFORMATION

We may disclose (or provide access to) personal information to the following categories of recipients:

 

  • Other Platform Userswhere necessary in connection with the facilitation of purchases and communications made between you and the other Users.
  • Our group companies and affiliatesand/or their designated service providers that work with us to provide processing services such as software, tools, systems and messaging services for purposes described in this Privacy Policy.
  • Third party business partners and service providers engaged by us or working with us to assist us to provide services to you or who otherwise process personal information for purposes described in this Privacy Policy or notified to you when we collect your personal information. Categories of these partners or service providers include:

 

  • our business partnersthat offer supplementary services to those provided by us, such as partners that resell our products and services, to the extent you consent to such sharing (where required by applicable law);
  • marketing and advertising platforms, such as Google, Twitter, Facebook and Instagram, and providers of analytics services relating to Users’behaviour, in order to tailor the content you see when visiting our Platform. These platforms may combine information they collect on our Platform with data on their platforms and data they collect from other websites or through other sources in order to conduct targeted advertising. Some of this information may be collected using cookies and similar tracking technology, as explained further under the section COOKIES below. The processing activities of these third-party marketing platforms are governed by their own privacy policies, not this Privacy Policy;
  • due diligence and verification service providers, who collect and process personal information to perform due diligence and business verification services;
  • payment service providerswho collect and process personal information to assist with settling the payments for transactions or process withdrawal requests for Sellers. The activities of payment service providers may be governed by their own privacy policies, not this Privacy Policy;
  • credit risk assessment providersto conduct risk assessment on Sellers to determine whether a Seller can be permitted to make a fund withdrawal;
  • logistics partnersfor providing delivery services for Buyers, including return and exchange of products, and warehousing services for Sellers;
  • custom agents for customs clearances purposes;
  • cloud computing service providers to provide cloud storage services;
  • instant messaging service providersfor enabling communications between the Buyers and Sellers via the Platform;
  • software development kit (SDK) service providers to provide SDK services;
  • customer service providersto provide after-sale services; 
  • risk control service providersto assess the security of Users’ accounts and transaction risks; and
  • third party rating / reviewing service providersto carry out reviews of our services with Users who participate in reviewing or rating hexing.ro ’s products and/or services;  
  • External professional advisers, law enforcement agencies, insurers, government and regulators and other organizations where it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person, we may also disclose and transfer your personal information or as otherwise required or permitted by applicable laws.
  • Actual or potential business acquirers (and its agents and advisers)in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the acquirer that it must use your personal information only for the purposes disclosed in this Privacy Policy.

 

4.RETENTION

We retain your personal information as long as we have an ongoing legitimate business need to do so, for example to provide services or products to you, or as required or permitted by applicable laws, such as tax and accounting laws.

 

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. 

 

5.COOKIES 

To enable our systems to recognize your browser or device and to provide and improve our services, we or our authorized service providers may use cookies, beacons and/or other similar technologies (collectively, “Cookies”). For more information about the types of Cookies we use, why, and how you can control them, please read our Cookies Policy.

 

6.YOUR RIGHTS 

As a user of the Platform, you may have the following data protection rights, which you can exercise pursuant to applicable laws at any time by contacting us using the contact details provided under section 11. HOW TO CONTACT US below:

 

  • The right to access, correct, update or request deletionof your personal information. 
  • The right to object to processing of your personal information when it is based on our legitimate interests, and separately the right to object to direct marketing.
  • The right to ask us, in some situations, to restrict processing of your personal information or request portabilityof your personal information.
  • The right to opt-out of marketingcommunications we send you at any time. 
  • If we have collected and process your personal information with your consent, then you have the right towithdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
  • The right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.  

 

If you are aware of changes or inaccuracies in your information, you should inform us of such changes so that our records may be updated or corrected.

 

7.Transfer of Personal Data outside the EEA

 

We will store the personal information we collect from you through the Platform in the xxx. 

The level of protection of Personal Data outside the European Economic Area(EEA) differs from that provided by European law.  For this reason The Administrator transfers Personal Data outside the EEA only when necessary, and with ensuring an adequate degree of protection, primarily by: cooperating with processors of Personal Data in countries in countries in respect of which a relevant European Commission decision has been issued on the determination of an adequate level of protection for Personal Data; applying the standard contractual clauses issued by the European Commission European Commission; the application of binding corporate rules approved by the competent supervisory authority.

The Administrator shall always inform of the intention to transfer Personal Data outside the EEA at the stage of collection.  

8.MINORS

Our Platform is not directed to and we do not intend to, or knowingly, collect, or solicit personal information online from Users under the age of 18 ( “Minors”).

 

We do not intend to sell any of our products or services to Minors. If a Minor has provided us with personal information without parental or guardian consent, the parent or guardian should contact dataprivacy@hxgroup.com  to remove the information. 

 

9.SECURITY MEASURES

We implement appropriate technical and organisational measures to prevent unauthorized access to the Platform, to maintain data accuracy and to ensure the correct use of the information we hold. 

For registered Users of the Platform, some of your information can be viewed and edited through your account, which is protected by a password. It is your responsibility to keep your password secure and confidential. You must not divulge your password to anyone. Our personnel will never ask you for your password in an unsolicited phone call or in an unsolicited email. If you share a computer with others, you should not save your log-in information (e.g., user ID and password) on that shared computer. Remember to sign out of your account and close your browser window when you have finished your session.

 

No data transmission over the internet or any wireless network can be guaranteed to be perfectly secure. As a result, while we use appropriate technical and organizational measures to protect the information we hold for you, we cannot guarantee the security of any information you transmit to us and you do so at your own risk.

 

10.CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time including in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to notify you, consistent with the significance of the changes we make. We will obtain your consent if and when we materially change this Privacy Policy in a way that reduces the protection of your personal information collected in the past. Any changes to this Privacy Policy will be communicated by us posting an amended Privacy Policy on the Platform. Once posted on the Platform, the new Privacy Policy will be effective immediately. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice. 

 The current version of the Policy has been adopted and is effective as of 17.05.2024

11.HOW TO CONTACT US

If you have any requests, questions or concerns about our use of your personal information and this Privacy Policy, you can contact our Data Protection Officer at 

dataprivacy@hxgroup.com .