Data privacy policy
Since the entry into force of the European Regulation 2016/679 on the protection and processing of personal data and the free movement of such data (GDPR), website visitors have the right to be specifically and up-to-date informed about all data collected about them, the purpose of collection and where and to whom this data is transferred.
The company Castrol guarantees that your personal data is processed in accordance with the GDPR and that our rules are compiled in accordance with Regulation (EU) 2016/679.
Data protection notice
Castrol (hereinafter referred to as "Castrol" or "We" or "we") appreciate your visit to our website (also known as "Internet Offers") and your interest in our company and products.
Castrol respects your privacy
Protection of privacy during the processing of personal data, as well as the security of all business data is an important aspect of our business. We maintain the confidentiality of personal data collected during your visit to our online offers and process them only in accordance with legal regulations.
Data protection and data security are included in our corporate policy.
Operator
Castrol is the operator responsible for processing your data; exceptions are highlighted in this data protection notice.
Our contact details are Castrol, +40 021 30 30 500 5 Halelor Street, 3rd floor, Bucharest, 030118, Romania, castrol.com
Collection, processing and use of personal data
Categories of processed data
The following categories of data are processed:
• Communication data (e.g. name, surname, phone, email, address, IP address)
• Main contractual data (e.g. contractual relationship, contractual interest or product interest)
• Transaction data
Basic framework of the rulebook
Personal data is any data relating to an identified or identifiable person and includes, for example, names, addresses, telephone numbers, email addresses, main contractual data, contractual payment data, which are an expression of a person's identity.
We collect, process and use personal data (including IP addresses) only when there is a legal basis for doing so, a legitimate interest, for the performance of a contract or in the event that you have given your consent to the processing or use of personal data in this regard, for example, by explicit acceptance at the time of registration or authentication.
We process personal data respecting the principle of legality, fairness and transparency that we collect for specific, explicit and legitimate purposes and are still not processed in a way that is inconsistent with those purposes; suitable for the purpose for which they were collected, accurate and for a period that does not exceed the period necessary to fulfill the purposes for which the data are processed;
Purpose of data processing and legal basis
We and the service providers we employ process personal data for the following purposes: using the online platform Castrol Partner Plus, within the loyalty program of the same name located at sr.castrolpartnerclub.com, in order to win prizes found on that platform.
Cookie files
Every time you use the Internet, your browser transmits certain data that we store in so-called cookies.
We keep files for a short period of 13 months to determine interference and for security reasons (for example, to clarify attempted attacks) and then delete them. Cookies that need to be managed as evidence are exempt from the deletion rules until the incident is fully resolved and may, depending on the case, be submitted to investigative authorities.
The saved files are also used for analysis purposes (with or without the full IP address). See the Web Analytics module.
In particular, the following information is stored in file stores:
- IP address (Internet Protocol address) of the terminal used to access Internet offers;
- Internet address of the website from which the Internet offer is accessed (so-called source URL or target URL);
- The name of the service provider used to access the Internet;
- Name of files or data accessed;
- Date and time, as well as duration of recovery;
- Amount of transferred data;
- Operating system and information about the Internet browser used, including installed plugins (eg Flash Player);
- http status code (for example, "Request failed" or "File not found").
Children
This online offer does not apply to children under 18 years of age.
Data transfer
Transfer of data to other operators
Personal data is transferred to other operators generally only when it is necessary for the performance of a contract, if we or a third party have a legitimate interest in the transfer or if you have given your consent in connection with the transfer. Details of the legal basis can be found in the section Purpose of processing and legal basis. Third parties may be other companies from the Castrol group. When data is transferred to third parties based on legitimate interest, this is explained in this Data Protection Privacy Policy.
In addition, data may be transferred to other operators when we have to do so in accordance with applicable legal regulations or administrative or legal orders.
Service providers (general description)
We have outsourced service providers such as sales and marketing services, contract management, payments, scheduling, data hosting and helplines. We have carefully selected these service providers and regularly evaluate them, especially regarding the effective management and protection of stored data. All service providers are obliged to ensure confidentiality and comply with legal provisions. Service providers may also be other companies from the Castrol group.
Data retention periods
We generally store your data for as long as necessary to provide our online offers and related services as long as we have a legitimate interest in storing them (for example, we may still have a legitimate interest in marketing by mail when performing a contract). In all other cases, we delete your personal data, except for those that we have to store in order to fulfill a legal obligation (for example, we are obliged to keep documents such as contracts and invoices for a certain time, as a result of the previous period, according to the fiscal code).
Use of cookies
General information
Cookies are small text files that are stored on your computer when you visit an online offer. If you access the same Internet offer a second time, your browser transmits the content of the cookie to the corresponding service provider and thus enables re-identification of the terminal. Reading cookies enables us to optimally configure our internet offers for you and makes it easier for you to use them.
Disabling and deleting cookies
When you visit our websites, you will be asked in a separate window if you agree to the use of cookies on our site or if you want to disable them in the settings.
If you choose to block cookies, your browser has a blocking option. This cookie is solely for the purpose of assigning your complaint. Disabling cookies may disable certain functions of our websites. Please note that for technical reasons, a blocking cookie can only be set for the browser that was used to set it. If you delete cookies or use another browser or terminal, you must block them again.
The settings do not apply to cookies set by other visitors during visits to third-party websites.
Your browser allows you to delete all cookies at any time. To do this, see your browser settings. However, this may cause certain functions to be unavailable.
In addition, you can manage cookies or disable third-party cookies on the website:
http://www.youronlinechoices.com/uk/your-ad-choices.
As we do not manage this website, we are not responsible and cannot influence its content and availability.
Overview of the cookies we use
In this chapter you can find an overview of the cookies we use.
Necessary cookies
Certain cookies are necessary for the secure provision of our online offers. This category includes, for example:
Cookies that identify or authenticate our users;
Cookies that temporarily store certain data entered by the user (for example, the contents of the shopping cart or online form);
Cookies that store certain user settings (for example, searches or language settings);
Cookies that store data to ensure smooth playback of video or audio content.
Analytical cookies
We use analytical cookies to record the behavior (for example, access to notifications, performed searches) of our users and to evaluate from a statistical point of view.
Advertising cookies
Cookies are also used for advertising purposes. With the help of such cookies, profiles of user behavior (eg access to banner ads, visits to subpages, performed searches) are created, which we use to display personalized ads or offers in accordance with your interests ("interest-based advertising").
Conversion cookies
Our conversion tracking partners place a cookie on your computer ("conversion cookie") if you came to our website through that partner's ad. These cookies generally expire after 30 days. If you visit certain pages that we maintain and the cookie has not yet expired, we and our respective conversion tracking partner have insight that a specific user accessed an ad and was directed to our page. The data collected through the conversion cookie is used to create conversion statistics and determine the total number of users who accessed the ad and were directed to the conversion tracking page.
Tracking cookies in collaboration with social network plugins
Certain pages of our Internet offers integrate the content and services of other service providers (e.g. Facebook, Twitter), which in turn may use cookies and active components. Castrol cannot influence the processing of personal data by these suppliers. Learn more about social plugins in the "Social plugins" chapter.
Users have the right to request the deletion of personal data collected through cookies. To delete this data, follow these steps:
Managing cookies in your browser: Disabling and refusing to accept cookies may make it more difficult to visit our site, which may result in limiting its functionality. All modern browsers offer the option to change cookie settings. These settings are usually found in your browser's "options" or "settings" menu. To understand these settings, the following links may be useful; you can also use the "help" option in your browser for more details:
Cookie settings in Chrome: Google Chrome
Cookie settings in Firefox: Mozilla Firefox
Cookie settings in Edge: Microsoft Edge
How to change consent settings?
Users can change their consent settings at any time during their session on the castrolpartnerclub.com site by clicking the ""Cookie Settings"" button in the footer section of the site.
Web analysis
We need statistical information about the use of our online offers in order to design them so that they are easier to use, and to carry out large-scale measurements and market research.
In this sense, we use the web analytics tools described in this chapter.
User profiles created using tools that use analytical cookies or analysis of stored files do not contain personal data. These tools either don't use IP addresses at all or immediately limit them to data collection.
The tools provide processed data only to processors subject to our directives and not for our purposes.
Below you can find information about what each tool offers and how you can opt out of data collection and processing by that tool.
Please note that for tools that use cookies to block functions, the blocking affects the device or browser and therefore applies to the terminal or browser that was used at the time. If you use multiple terminals or browsers, you must perform the lock on each device and in each browser.
You can generally avoid the creation of user profiles by disabling the use of cookies; to do this, see the section Disabling and deleting cookies.
WebTrends is provided by WebTrends Inc., 851 SW 6th Ave., Suite 1600, Portland, Oregon 97206, USA.
You can opt out of data collection or processing using the opt-out option by clicking on the link below: https://ondemand.webtrends.com/support/optout.asp.
Social media plugins
In our internet offers, we use so-called social plugins from various social networks; they are described individually in this chapter.
During the use of plugins, your browser establishes a direct connection with the servers of that social network. In this way, that provider receives the information that your browser has accessed from our website, even if you do not have a user account with that provider or are not currently logged into your account. Saved files (including IP addresses) are in this case directly transmitted via your browser to that provider and may be stored there. The provider or its servers may be located outside the EU or EEA (for example, in the United States).
Plugins are individual digital extensions provided by social networks. For this reason, we cannot influence the extent of data collected and stored by them.
The purpose and scope of the continued collection, processing and use of data on the social network, as well as your rights and privacy settings, can be found in the data protection notice of the social network in question.
If you do not want social networks to receive and, if necessary, store or use data, you must not use those plugins.
Facebook plugins
Facebook at www.facebook.com is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and at www.facebook.de by Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland ("Facebook"). An overview of Facebook plugins and their appearance can be found here: http://developers.facebook.com/plugins; information about data protection on Facebook can be found here: http://www.facebook.com/policy.php.
External links
Our Internet offer may contain links to websites of third parties - suppliers that are not affiliated with us. From the moment you access a given link, we no longer have any influence on the collection, processing and use of personal data transmitted by accessing the link to a third party (such as the IP address or URL of the website on which the link is located), as we cannot monitor the behavior of third parties. We assume no responsibility for the processing of such personal data by third parties.
Security
Our employees and companies that provide services on our behalf are required to ensure the confidentiality of data and comply with applicable data protection laws.
We take all necessary technical and organizational measures to ensure an appropriate level of security and protect your data that we manage, in particular against the risk of destruction, manipulation, loss, illegal or unintentional modification or unauthorized disclosure or access. Security measures are constantly being improved, in line with the advancement of technology.
User rights - Art. 12-23 of the General Data Protection Regulation
To exercise your rights, please use the details provided in the Contact section. In this case, check whether it is possible to clearly identify the person.
Right to information and access:
You have the right to receive confirmation from us about the processing or non-processing of personal data, as well as to access that data.
Right to correction and deletion:
You have the right to correct inaccurate personal data relating to you without undue delay. Considering the purpose of the processing, you have the right to fill in incomplete personal data, with the possibility of providing an additional statement.
This does not apply to data required for invoicing and accounting or subject to a legal retention period. If access to such data is not required, its processing is restricted (see below).
Processing restriction:
You have the right to request - provided that the legal requirements are met - the restriction of the processing of your data.
Right to object
For reasons related to your situation, you have the right to object to the processing of personal data in accordance with Article 6 paragraph 1 point (e) or (f) or Article 6 paragraph 1 of the Data Protection Regulation, including the creation of a profile based on those provisions. We will no longer process personal data if we do not demonstrate compliance with legal requirements in order to provide evidentiary grounds for further processing, beyond your interests, rights and freedoms or for the establishment, enforcement or defense.
Opting out of direct marketing:
You can refuse the processing of personal data for direct marketing purposes at any time.
The right to obtain from the controller the deletion of personal data concerning you without undue delay, and the controller has the obligation to delete personal data without undue delay if there is one of the following reasons
(a) the personal data are no longer required for the purposes for which they were collected or processed;
(b) the subject withdraws the consent on the basis of which the processing is carried out in accordance with Article 6, paragraph 1, point (a) or Article 9, paragraph 2, point (a) and there is no other legal basis for the processing;
(c) the subject refuses data processing in accordance with Article 21 paragraph 1 and there are no legitimate reasons that prevail in connection with the processing or the data subject objects to processing in accordance with Article 21 paragraph 2;
(d) personal data has been unlawfully processed;
(e) the personal data must be deleted in order to fulfill a legal obligation of the processing controller under Union legislation or national law to which the processing controller is subject;
(f) personal data were collected in connection with the provision of information society services from Article 8, paragraph 1.
11.1. Data transfer:
You have the right to receive the data you have provided to us in a common, structured format that can be read by software - if technically possible - to request the transfer of that data to a third party.
11.2. The right to submit a complaint to the supervisory authority:
You have the right to appeal to a supervisory authority. You can contact the competent supervisory authority at home or in your country or the supervisory authority responsible for our case. Check it out below:
Commissioner for Information of Public Importance and Personal Data Protection, is National Supervisory Authority for Personal Data Processing
Changes to the Data Protection Notice
We reserve the right to change security and data protection measures if necessary as a result of technological progress. In such cases, we will amend the Data Protection Notice accordingly. Therefore, please check the current version of the Data Protection Notice regularly as there may be changes.
Contact
If you want to contact us, you can find us at the address indicated in the "Operator" section.
If you have a suggestion or objection regarding the processing of your personal data, we recommend that you contact our data protection officer:
Date of entry into force: 01.04.2025
Data protection
Security and data protection
We look forward to your interest and participation in the loyalty program.
Castrol respects your privacy
The main priority for us is the protection of your personal environment during the processing of your data, as well as guaranteeing the protection of all your business data. We process your collected user data when you access and during your access to our websites, taking care of confidentiality and respecting legal regulations. Data protection and data security are an integral part of our company policy.
Collection and processing of data on users and companies
User data of the user such as the first and last name of the owner or administrator are stored on the platform when creating an account, taking into account the information received from the Castrol team. In addition, the following data about the company participating in the program will be stored and used:
Company name
Company address
Number of employees
VAT number
Business email address
Landline or mobile business phone number
Purchase details from suppliers you have selected for Castrol products participating in the loyalty program, to automatically earn points.
Use of user data of the user and the company
Castrol uses data to:
administration and functioning of the loyalty program, such as awarding points to participants
for internal statistical purposes
marketing campaigns
important information such as changes to terms and conditions, announcement of points expiration date
sending newsletters from which you can unsubscribe at any time
technical administration of the website
product surveys and marketing only to the extent necessary in each case.
Without your consent, we will not forward your user data to external third parties that are included in the program (eg through the Terms and Conditions of Use of the program).
As part of the operation of the loyalty program, the distributors from the the program will be informed about your participation.
Use of cookies
Cookies are small text files that are stored on your computer when you visit our website.
Cookies stored during the site visit session as well as analytical cookies are used for the loyalty program. You can refuse to accept cookies by using your browser settings. Please note that by disabling cookies, some website functions will no longer be available.
You can also delete cookies at any time if you wish. To delete cookies, consult the "Help" function of your browser.
Use of external links
Our website may contain links to third-party sites to which this data protection policy does not apply. Once you click on these links, we have no influence on the collection, storage, and processing of user data by third parties (such as the IP address or the URL on which the link is located), because they are no longer under our control. Castrol assumes no responsibility for the processing of this user data by third parties.
Data security
Castrol takes security measures to protect the data we manage against unauthorized change, loss, unauthorized access or disclosure. We are constantly working to improve our security measures in line with technological innovations.
Advertising policy:
The participant agrees that Castrol Lubricants, (hereinafter referred to as the "organizer") will inform him by e-mail, telephone, SMS, MMS, voicemail and/or mail about offers, new products, promotions, or contact him in connection with market research within the loyalty program, in the area of car oil products, service equipment and car repair services.
You can withdraw this consent at any time. Withdrawal of consent can be done by e-mail (castrolclub@ideologiq.com) or in writing to Castrol, 40 021 30 30 500, 5 Halelor Street, 3rd floor, Bucharest, 030118, Romania.
The participant agrees that the company Castrol informs him by e-mail in the future about offers, new products, promotions, or contacts him about market research within the loyalty program, in the area of car oil products, service equipment and car service services.