This Privacy Policy applies to the services offered through the PlanFrame.com and PlanFrame.net platforms, as well as the PlanFrame.com, PlanFrame.net applications for iOS and Android if available, all owned by S.C. Micro Route Technology S.R.L.
S.C. Micro Route Technology S.R.L., headquartered in Suceava, Romania, Viitorului Street, No. 7, ("Operator", "Company", "Provider", "we", "our company", PlanFrame"), informs you that, in the context of processing and delivering your orders, using the website, managing communications and/or requests transmitted/received by email and/or phone and/or through the contact section (as detailed in this document), it may process:
In accordance with Law 365/2002 regarding electronic commerce in Romania, amended by Law 121/2006, Article 7 regarding "Validity, legal effects and proof of electronic contracts" states: (1) Contracts concluded electronically are recognized as valid and have legal effects similar to traditional contracts, as long as they meet the validity criteria provided by law. (2) Prior agreement of the parties is not required to validate a contract made through electronic means.
personal data of representatives, contact persons, employees, and/or collaborators of legal entity clients/potential clients;
personal data of clients and/or potential clients of individual users;
personal data of clients and/or potential clients of individual users;
personal data regarding website visitors.
Through this policy, we aim to provide clarity and transparency regarding the types of information we collect, the purposes for which it is used, and the ways in which we ensure the protection of personal data when interacting with our website, mobile applications, or any of the services offered. We treat the confidentiality of your data with the utmost seriousness and are committed to protecting the privacy of our users, making constant efforts to ensure the security of the collected information.
The terms "services", "PlanFrame services", "solutions", or "PlanFrame solutions" refer to the set of solutions offered through the PlanFrame.com, PlanFrame.net platform and the PlanFrame applications, available for iOS and Android, as described on our website (www.PlanFrame.com) / (www.PlanFrame.net).
We are committed to being as clear and open as possible about the methods by which we collect and process personal information, highlighting our firm commitment to protecting your confidentiality.
The processing of personal data belonging to the data subjects mentioned above, for the purposes detailed in Section II of this document, will be carried out by the Company in accordance with applicable local legislation and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), as well as any other applicable European or local regulations adopted or that may be adopted in the context of the GDPR.
If, in the context of any of the activities mentioned in this notice, your personal data are processed and you have any questions regarding how the Company processes your personal data for the purposes detailed in Section II, please contact us at the following contact details:
Email: dataprotection@microroute.eu;
Phone: +40371782082;
Address: Strada Viitorului, Nr. 7, Suceava, Romania.
I. How do we collect your personal data?
The Company collects and processes your personal data, which you as a user provide directly, including data related to customers and employees, which may be included in any written correspondence (via the Company's email addresses and/or through the contact form on the website and/or through the testimonial section), or through phone calls (if such email correspondence and/or phone call includes personal data).
Please note that Your personal data will not be subject to automated decision-making, including profiling.
By "you", "user", or "your account" we refer to any account registered on the PlanFrame.com and PlanFrame.net platforms.
A "user's client" represents any individual or legal entity added by the user in the "Clients" section or to whom an invoice, contract, or offer is issued by the user.
An "employee of the user" represents any individual or legal entity added by the user in the "Employees" section or to whom the user assigns tasks, issues specific documents such as employment contracts, evaluation sheets, or any other documents associated with the employment or collaboration relationship.
II. Purpose of processing. Categories of processed personal data. Legal basis for processing
In the context of interactions with the Provider, you may be the data subject regarding your personal data that we process. Minors under 18 years of age cannot provide personal data to the Company without the consent of parents or legal representatives.
In the course of day-to-day activities, we may process your personal data as follows:
1. Users of the PlanFrame.com and PlanFrame.net platforms
1.1 Processing purposes
The Company may process your personal data detailed in point 1.2. below, for the following purposes:
(i) initiating the necessary steps to conclude a contract (for example, when creating an account on the website) and/or to perform and/or execute the contract concluded between the Company and you (including for issuing invoices for subscription purchases and/or delivering purchased goods); and/or
(ii) communicating regarding any request and/or any aspect related to the contract concluded with you (including any complaints and/or requests and/or communications made in the context of contract execution) and/or for which steps are taken to be concluded;
(iii) sending commercial communications (which may be relevant to you), only to the extent that you consent to this.
Providing your personal data for the purposes mentioned in (i) and (ii) is not a legal obligation, however, it may be necessary to initiate the necessary steps to conclude a contract and/or execute the contract and/or for the Company to be able to address your request and/or communication regarding the contract. If you do not provide us with this data, we will not be able to properly conclude and/or execute the contract concluded with you, and/or respond to your request/communication regarding the contract.
Regarding the purpose set out in point (iii) of this Section, you are not under a legal or contractual obligation to provide personal data, and these are processed by the Company based on your consent. However, if you do not wish to provide us with your personal data for processing for the purpose set out in point (iii) above (i.e., for sending commercial communications), we will not be able to send you commercial communications about similar products and/or services and/or other commercial communications that may be relevant to you.
Furthermore, even if you have given your consent to the processing of your personal data for the purpose set out in point (iii) of this Section, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
1.2 Categories of processed personal data
For the purposes mentioned above, the Company may process the following categories of personal data:
(i) name and surname; and/or
(ii) email address; and/or
(iii) phone number; and/or
(iv) password
(v) company data
(vi) any other personal data that may be included in the electronic communication transmitted.
1.3 Legal basis for processing
The Company may process the personal data mentioned in point 1.2. above on the following legal bases:
(i) art. 6 (1) lit. b) of the GDPR, regarding the purposes set out in points (i) – (ii) of Art. 1.1. of this Section, respectively for the performance of a contract to which you are a party (including for managing any complaints and/or requests and/or communications made in the context of contract execution) or for taking steps at your request prior to entering into a contract (for example, when creating an account on the website);
(ii) art. 6 (1) lit. a) of the GDPR, namely your consent, for the purpose set out in point (iii) of Art. 1.1. of this Section, in the context of sending commercial communications.
We use this email address to communicate with you. The name will be used for display on the receipts issued or in the activities section, so the processing and use of this information is essential for you to benefit from the services you have opted for and to issue invoices and receipts as you have configured them. Additionally, the user may add other personal data in invoices or other documents issued, which cannot be anticipated by the Provider.
All personal data entered into your account belongs to you, and PlanFrame only uses this data to provide you with the services for which you created an account on the PlanFrame platform, as detailed in Chapter IX. (Processing of personal data according to GDPR, from Terms and conditions.)
2. Customer Data of PlanFrame.com and PlanFrame.net Platform Users
2.1 Processing purposes
The User may process your personal data detailed in point 2.2. below, for the following purposes:
(i) initiating the necessary steps for providing services for which the user has created an account on the PlanFrame platform and/or performing and/or executing the contract concluded between the "User" and the "Client" (including for issuing invoices, pro forma invoices, contracts, etc., and/or delivering purchased goods); and/or
(ii) communicating regarding any request and/or any aspect related to the contract concluded between the "User" and the "Client" (including any complaints and/or requests and/or communications made in the context of contract execution) and/or for which steps are taken to be concluded;
Providing your personal data for the purposes mentioned in (i) and (ii) is not a legal obligation, however, it may be necessary to initiate the necessary steps for providing services for which a user has created an account on the PlanFrame platform.
A user can store both individual and legal entity clients in PlanFrame.
2.2 Categories of processed personal data
For the purposes mentioned above, the Company may process the following categories of personal data:
(i) name and surname; and/or
(i) personal identification number; and/or
(i) ID card/passport number and series; and/or
(i) email address; and/or
(i) billing address; and/or
(ii) delivery/installation address; and/or
(iii) phone number; and/or
(v) company data
(vi) any other personal data that may be included in the electronic communication transmitted.
2.3 Legal basis for processing
The Company may process the personal data mentioned in point 2.2. above on the following legal bases:
(i) art. 6 (1) lit. b) of the GDPR, regarding the purposes set out in points (i) – (ii) of Art. 2.1. of this Section, respectively for the performance of a contract to which you are a party (including for managing any complaints and/or requests and/or communications made in the context of contract execution) or for taking steps at your request prior to entering into a contract (for example, when creating an account on the website);
(ii) art. 6 (1) lit. a) of the GDPR, namely your consent, for the purpose set out in point (iii) of Art. 2.1. of this Section, in the context of sending commercial communications.
All this data belongs to you, as detailed in Chapter X (Processing of personal data according to GDPR, from Terms and conditions), and PlanFrame only uses it to provide you with the services for which you created a PlanFrame account, such as issuing invoices, contracts, offers, projects, tasks, or other services according to your PlanFrame subscription plan.
3. Employee Data of PlanFrame.com and PlanFrame.net Platform Users
3.1 Processing purposes
The Company may process your personal data detailed in point 3.2. below, for the following purposes:
(i). initiating the necessary steps for providing services for which the employees of the user have created an account on the PlanFrame platform for the preparation of attendance logs and tasks assigned to them.
(ii). communicating regarding any request and/or any aspect between the "employee" and the "employer".
3.2 Categories of processed personal data
For the purposes mentioned above, the Company may process the following categories of personal data:
(i) name and surname; and/or
(ii) personal identification number; and/or
(iii) ID card/passport number and series; and/or
(iv) email address; and/or
(v) billing address; and/or
(vi) delivery/installation address; and/or
(vii) phone number; and/or
(viii) any other personal data that may be included in the electronic communication transmitted.
3.3 Legal basis for processing
The Company may process the personal data mentioned in point 3.2. above on the following legal basis:
(i) art. 6 (1) lit. b) of the GDPR, regarding the purposes set out in points (i) – (ii) of Art. 3.1. of this Section, respectively for the preparation of attendance logs and tasks assigned to them.;
Similarly to the personal data of your clients, the personal data of your employees belongs to you, and PlanFrame only uses this data to provide you with the services for which you created an account on the PlanFrame.com and PlanFrame.net platform, as detailed in Chapter IX (Processing of personal data according to GDPR, from Terms and conditions).
4. Representatives, Contacts, Employees, and/or Collaborators of Legal Entity Clients/Potential Clients
4.1 Processing purposes
The Company may process your personal data detailed in point 4.2. below, for the following purposes:
(i). initiating the necessary steps for concluding a contract and/or performing and/or executing a contract concluded between the Company and the entity you represent (including for the purpose of issuing the invoice for the purchase made and/or delivering the purchased goods); and/or
(ii). communicating regarding any request and/or any aspect related to the contract concluded with the entity you represent (including any complaints and/or requests and/or communications made in the context of the contract) and/or for which efforts are made to be concluded; and/or
(iii). transmitting commercial communications (which may be relevant for the entity you represent), only to the extent that you express your consent in this regard.
Providing your personal data for the purposes mentioned in (i) and (ii) is not a legal obligation, however, it may be necessary to initiate the necessary steps for concluding a contract and/or performing the contract and/or for the Company to be able to address your request/communication regarding the contract. To the extent that you do not provide us with this data, we will not be able to properly conclude and/or perform the contract concluded with the entity you represent and/or respond to your request/communication regarding the contract.
Regarding the purpose set forth in point (iii) of this Section, you have no legal or contractual obligation to provide personal data, these being processed by the Company based on your consent. However, if you do not wish to provide us with your personal data for processing for the purpose set forth in point (iii) above (i.e., for the transmission of commercial communications), we will not be able to send you commercial communications about similar products and services and/or other commercial communications that may be relevant to the entity you represent.
Furthermore, even if you have given your consent to the processing of your personal data for the purpose set forth in point (iii) of this Section, you have the right to withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent before its withdrawal.
4.2 Categories of processed personal data
For the purposes mentioned above, the Company may process the following categories of personal data:
(i) name and surname; and/or
(ii) personal identification number; and/or
(iii) ID card/passport number and series; and/or
(iv) email address; and/or
(v) billing address; and/or
(vi) delivery/installation address; and/or
(vii) phone number; and/or
(viii) any other personal data that may be included in the electronic communication transmitted.
4.3 Legal basis for processing
The Company processes the personal data mentioned in point 4.2. above based on:
(i). art. 6 (1) lit. f) of the GDPR, regarding the purposes set out in points (i) – (ii) of Art. 4.1. of this Section, respectively for pursuing the legitimate interests of the Controller regarding (i) initiating the necessary steps for concluding a contract and/or performing and/or executing a contract concluded between the Company and the entity you represent and/or (ii) any request and/or any aspect related to the contract concluded with the entity you represent (including any complaints and/or requests and/or communications made in the context of the contract) and/or for which efforts are made to be concluded; and/or
(ii). art. 6 (1) lit. a) of the GDPR, namely your consent, for the purpose set forth in point (iii) of Art. 4.1. of this Section, in the context of transmitting commercial communications.
5. Third-Party Services
This section of our Privacy Policy addresses how your personal data is managed in the context of using third-party services, including online payment services, email delivery services, as well as cloud services provided by Amazon AWS, Microsoft Azure, Serverius, IONOS, Hostinger.
5.1 Online Payment Services
When you perform financial transactions through our platform, we use third-party online payment services to process payments. These services may include, but are not limited to, payment processors like Stripe, Paypal. These entities are responsible for securely handling your financial information, and we do not store credit card details or other sensitive financial information on our servers.
5.2 Email Delivery Services
We use third-party email service providers to communicate with you. These services help us manage our email campaigns, notifications, and other messages sent to our customers. Your contact information is processed by these providers for the efficient delivery of our communications.
5.3 Amazon AWS
We utilize Amazon Web Services (AWS) as part of our cloud infrastructure. AWS may store various types of data, including personal information, in accordance with strict security and confidentiality standards. AWS is responsible for protecting the data stored on its platform, ensuring the security and confidentiality of your information.
5.4 Microsoft Azure
Similar to AWS, we use Microsoft Azure to support our cloud infrastructure. Azure enables the storage and processing of data in a secure environment, adhering to privacy and security standards. Microsoft Azure implements technical and organizational measures to protect personal data against unauthorized or unlawful access.
5.5 IONOS
We use IONOS for certain hosting and data storage services. IONOS ensures the security of stored data by applying strict privacy and security protocols to prevent any unauthorized access or data loss.
5.6 Serverius
We use Serverius for certain hosting and data storage services. Serverius ensures the security of stored data by applying strict privacy and security protocols to prevent any unauthorized access or data loss.
5.7 Hostinger
We use Hostinger for certain hosting and data storage services. Hostinger ensures the security of stored data by applying strict privacy and security protocols to prevent any unauthorized access or data loss.
5.8 Our Commitment
We are committed to collaborating only with trusted partners who comply with data protection laws and are committed to protecting the confidentiality and integrity of your personal information. We ensure that these providers implement adequate security and confidentiality measures in accordance with industry standards and applicable regulations.
For more details on how your personal data is managed or to exercise your rights in accordance with applicable law, we encourage you to access the privacy policies of each mentioned third-party provider or to contact us directly.
6. Email Communication between Provider and User
6.1 Processing Purposes
The Company may process your personal data detailed in section 6.2. below, for the purpose of transmitting communications related to the administration of your account.
The Company may process your personal data detailed in section 6.3. below, for the purpose of transmitting newsletters/commercial communications that may be relevant to you.
6.2 Personal Data Processed
For the purpose mentioned above, the Company will process:
(i). your email address.
You are not under a legal or contractual obligation to provide us with your email address for the transmission of communications related to the administration of your account on www.PlanFrame.com and www.PlanFrame.net;
These are considered part of the PlanFrame Services (e.g., password recovery, subscription expiration, etc.), without which the use of PlanFrame becomes incomplete.
Your subscription to this is essential, without which the use of the service provided becomes improper. Therefore, although you have the right to request deletion, such action will result in the inability to continue using the service offered by PlanFrame.
6.3 Personal Data Processed
For the purpose mentioned above, the Company will process:
(i). your email address.
You are not under a legal or contractual obligation to provide us with your email address for the transmission of commercial communications, as it is processed by the Company based on your consent.
However, if you do not wish to provide us with your email address for processing it for the purpose mentioned above (i.e., for the transmission of commercial communications), we will not be able to send you commercial communications/newsletters that may be relevant to you.
Furthermore, even if you have given your consent to the processing of your personal data for the purpose in this Section, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
6.4 Legal Basis of Processing
The Company processes the personal data mentioned in section 6.2. above (i.e., your email address) based on art. 6 (1) lit. a) of the GDPR, namely your consent, for the purpose of transmitting newsletters/commercial communications that may be relevant to you.
7. Email Communication between User and Clients or Employees
7.1 Processing purposes
The Company may process your personal data detailed in section 7.2. below, for the purpose of transmitting communications related to the services offered through the PlanFrame platform.
7.2 Processed personal data
For the purpose mentioned above, the Company will process:
(i). your email address.
7.3 Legal basis for processing
In the PlanFrame platform, you can opt to send emails to your clients containing documents issued in the platform (invoices, proforma invoices, contracts, offers, etc.).
For transmission through the PlanFrame server, you agree to authorize the Provider to process the personal data mentioned in section 7.2. above (your email address) based on art. 6 (1) lit. a) of the GDPR, namely your consent, for the purpose of transmitting communications to your clients/employees, on your behalf.
8. Individuals Transmitting Requests and/or Complaints and/or Any Communications, by Phone and/or Email to the Operator's Address and/or Through the Contact Section on the Website
8.1 Processing Purposes
The Company may process your personal data detailed in section 8.2. below, for the purpose of managing and/or resolving requests and/or communications of any kind that you submit via email, through the contact section, and/or by phone, as well as to provide responses to these requests and/or communications.
Providing your personal data for this purpose is not a legal obligation, but it may be necessary for the Company to manage and/or resolve requests and/or communications of any kind that you submit via email, the contact section on the website, or by phone, as well as to provide responses to these requests and/or communications. If you do not provide this data, we will not be able to properly respond to your request/communication.
8.2 Categories of Processed Personal Data
For the purposes mentioned above, the Company may process the following categories of personal data:
(i) identification data: name and surname; and/or
(ii) contact details: email address, phone number, address; and/or
(iii) any other personal data that you may voluntarily and unsolicitedly communicate to us, as contained in the email/communication sent or that you may transmit to us by phone (for example, age, if your complaint concerns such an aspect).
8.3 Legal Basis for Processing
The Company processes the personal data mentioned in section 8.2. above based on art. 6 (1) lit. f) of the GDPR, namely for the purpose of pursuing the legitimate interests of the Operator regarding the analysis and/or resolution of any request and/or any type of communication transmitted by you in connection with the Operator's activity and/or products.
9. Users of Our Website
9.1 Processing Purposes
The Company may process your personal data detailed in section 9.2. below, for the purpose of monitoring traffic, for security purposes, as well as to improve the usability and functionality of our website.
9.2 Categories of Processed Personal Data
(i) IP address;
(ii) time and date of accessing the website.
(iii) location of accessing the website.
9.3 Legal Basis for Processing
The Company may process the personal data mentioned in section 9.2. above based on:
(i) art. 6 (1) lit. a) of the GDPR, namely based on your consent, if applicable;
(ii) art. 6 (1) lit. f) of the GDPR, namely for the purpose of pursuing the legitimate interests of the Operator.
For more information, please refer to the Cookie Policy of the PlanFrame platform.
III. Recipients of Personal Data
We may transmit your personal data to:
(i) employees and contractors of the Company, who will have access to your personal data exclusively for the purpose of handling your request and/or complaint and/or communication and/or application, if applicable;
(ii) competent authorities and/or public institutions, within the limits of their attributions conferred by applicable legal provisions;
(iii) courier companies responsible for transporting the goods purchased from the Company.
For our clients within the European Union, we firmly emphasize that we will NOT transfer your personal data or special category data outside the European Union or the European Economic Area (EU/EEA). We are committed to fully comply with the applicable data protection legislation in the EU, ensuring that your information remains within this legal framework.
In contrast, for clients outside the EU/EEA, we may transfer your personal data or special category data outside the EU/EEA. This process will be conducted in accordance with the highest standards of security and confidentiality, ensuring that the transfer complies with international laws and relevant data protection treaties. We are committed to implementing appropriate measures to protect the confidentiality and integrity of your data in this global context.
IV. Updating and Deleting Data
The Operator aims to keep your personal data accurate and up-to-date. Therefore, we kindly request that you inform the Operator of any relevant changes to your personal data. To do so, you can send an email to: dataprotection@microroute.eu.
The Company processes personal data in accordance with the principles of GDPR, including the principle of data minimization and storage limitations.
In this regard, we will process personal data that:
(i) are adequate, relevant, and limited to the purposes for which they are processed; in this regard, the Company will only process the data provided by you that are necessary for the fulfillment of the purpose for which they are processed;
(ii) are retained for a period not exceeding the period necessary for the fulfillment of the purposes for which the data are processed; from this perspective, the Operator will delete, in accordance with the internal policies of the Company, all personal data that are no longer necessary for the purposes detailed above.
V. Your Rights as a Data Subject
In accordance with applicable legislation on the processing of personal data, you have the following rights regarding the processing of your personal data:
(i) Right of Access to Your Personal Data: You have the right to obtain from the Company confirmation as to whether or not personal data concerning you are being processed and, if so, to access that data and information regarding the processing operations (as detailed in this document).
(ii) Right to Rectification of Your Personal Data: You have the right to obtain from the Operator, without undue delay, the rectification of inaccurate personal data concerning you. Additionally, considering the purposes of the processing, you have the right to have incomplete personal data completed by providing the Company with a supplementary statement.
(iii) Right to Erasure of Your Personal Data: You have the right to obtain from the Company the erasure of personal data concerning you without undue delay, where one of the grounds provided in Article 17(1) of the GDPR applies. However, the Company may not delete your personal data if any of the exceptions provided in Article 17(3) of the GDPR apply.
(iv) Right to Restriction of Processing of Your Personal Data: You have the right to obtain from the Operator restriction of processing your personal data where one of the cases provided in Article 18 of the GDPR applies. If processing has been restricted pursuant to one of the cases provided in Article 18(1) of the GDPR, such personal data, except for storage, may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
(v) Right to Data Portability: In cases provided for in Article 20 of the GDPR, you have the right to receive the personal data concerning you, which you have provided to the Operator, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the Company.
(vi) Right to Object to the Processing of Your Personal Data: You have the right to object, on grounds relating to your particular situation, at any time, to (a) processing of personal data concerning you for the performance of a task carried out in the public interest (Article 6(1)(e)) or (b) processing necessary for the purposes of the legitimate interests pursued by the Operator or by a third party (Article 6(1)(f)), including profiling. The Operator shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
(vii) Right to Withdraw Consent at Any Time: Without affecting the lawfulness of processing based on consent before its withdrawal, you have the right to withdraw your consent at any time.
You may exercise the aforementioned rights by submitting a request to the following email address: dataprotection@microroute.eu.
Additionally, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing; the National Supervisory Authority for Personal Data Processing can be contacted at tel. +40.318.059.211/+40.318.059.212, email [email protected], or through the website www.dataprotection.ro.
