Article 1 – CAMPAIGN ORGANIZER
1.1 The promotional campaign "Xerox Genuine Supplies Loyalty Program" ("Promotional Campaign" or "Campaign") is organized by Xerox Romania, a company established and operating under Romanian law, with registered office in Bucharest, Dimitrie Pompeiu Boulevard 5-7, Hermes Business Campus, Bucharest 020335, registered at the Trade Register under no. J40/3577/1998, VAT number RO 10453114, hereinafter referred to as the "Organizer" or "Xerox."
Article 2 – CAMPAIGN REGULATIONS
2.1 The Campaign will be conducted in accordance with the provisions of this regulation ("Regulation"), which is binding for all participants who agree to take part in the Campaign described below.
2.2 The Organizer reserves the right to amend or supplement the Regulation during the Campaign, including the right to shorten, extend, suspend, or terminate the Campaign. Any changes or additions to this Regulation will be communicated at least 24 hours before they take effect, using the same communication channels as those used for the initial announcement of the Regulation.
2.3 At its sole discretion, the Organizer may promote the Campaign to inform the public, including through advertising and/or informational materials. Any information contained in such materials will be interpreted in accordance with this Regulation, which shall prevail.
Article 3 – SCOPE AND DURATION OF THE CAMPAIGN
3.1 The Campaign is organized and conducted exclusively online, via the Genuine Rewards eShop platform, RewardsEshop.com ("Platform"). The Platform is owned by Create Direct SRL ("Platform Operator").
3.2 The Campaign period is from June 1, 2025, to December 31, 2025 ("Campaign Period"). Participants may redeem their accumulated points until January 31, 2026.
Article 4 – PRODUCTS ELIGIBLE FOR THE CAMPAIGN
4.1 The eligible products for the Campaign are original Xerox consumables marketed by the Organizer ("Xerox Products").
Article 5 – ELIGIBILITY TO PARTICIPATE
5.1 The Campaign is addressed to resellers – legal entities that sell Xerox Products, hereinafter collectively referred to as "Participants."
5.2 Participants must simultaneously meet the following conditions:
- be legal entities duly registered in the participant’s country;
purchase Xerox Products from authorized distributors.
5.3 Each Participant will provide the contact details of their authorized representative entitled to operate the Platform (including full name, email address, and phone number), which will be used for Participant authentication within the Campaign.
5.4 Employees of the Organizer and their family members are not eligible to participate.
5.5 By participating in the Campaign, Participants confirm their full knowledge and acceptance of the provisions of this Regulation, which must be complied with.
5.6 Participants also confirm their knowledge and acceptance of the Platform's Terms and Conditions, available at RewardsEshop.com. The Platform Operator reserves the right to update these Terms and Conditions periodically.
Article 6 – CAMPAIGN MECHANISM
6.1 The Platform Operator will create a user account for each Participant, based on the provided contact details. The Participant will receive an email with login credentials and must confirm the activation of the account by following the instructions.
6.2 The Participant shall designate an authorized person to use the Platform on their behalf, including for redeeming points. The Participant is responsible for keeping this information up to date and for the security of the account. Neither the Organizer nor the Platform Operator can be held liable for unauthorized access or account compromise due to the conduct of the Participant or their representative.
6.3 Monthly purchase data of Xerox consumables will be collected by the Organizer from authorized distributors. Based on this data, the Platform will automatically calculate the points to be allocated to the Participant.
6.4 Participants will receive 10 USD worth of points for every 500 USD spent monthly, up to a maximum of 30 USD per month. The value of points will be expressed in the local currency, according to the applicable exchange rate.
6.5 The points balance and transaction history will be updated monthly in the Participant’s account. Each update will be communicated via email.
6.6 Points can be used at any time during the Campaign to purchase vouchers from local suppliers directly via the Platform.
6.7 Points can be accumulated until December 31, 2025. They must be redeemed by January 31, 2026. After this date, unused points will be automatically deleted.
6.8 Points are non-transferable, cannot be converted into cash, and may only be used for products and services listed on the Platform.
Article 7 – VOUCHER DELIVERY
7.1 Vouchers ordered will be delivered electronically, via the Platform, directly to the authorized Participant.
7.2 The Platform Operator is responsible for voucher delivery and handling any complaints related to delivery.
7.3 The Organizer will provide support to Participants in resolving any difficulties but is not responsible for delivery delays or issues.
Article 8 – FINAL PROVISIONS
8.1 This Regulation is available free of charge on the Platform throughout the duration of the Campaign.
8.2 By participating in the Campaign, Participants agree to all provisions of this Regulation, as well as the Platform rules.
8.3 The Organizer reserves the right to exclude from the Campaign any Participant who does not comply with the provisions of this Regulation or the Platform rules.
Article 9 – PROCESSING AND PROTECTION OF PERSONAL DATA
9.1 By participating in this Campaign, natural persons who register personal data as representatives of Participants understand that the data provided to the Organizer will be included in the Organizer's and Platform Operator’s databases in order to ensure access to the Platform, participation in the Campaign, processing of orders, and delivery of products ordered through the Platform.
9.2 Detailed information regarding how the Organizer processes personal data as an independent data controller is provided in Annex 1 of this Regulation. The Participant’s representative signing this Regulation declares that a copy of the information notice mentioned in Annex 1 has been provided to the user designated to access and use the Platform.
Article 10 – LIMITATION OF LIABILITY
10.1 The Organizer reserves the right to take any measures deemed necessary in case of attempted fraud of the Campaign and/or Platform, abuse, or any other attempts that could affect the image of the Organizer and/or Campaign, including the removal of the Participant. The Organizer will notify the Participant of any such decision.
10.2 The Organizer is not responsible for the proper functioning of the Platform, its content, availability, or the quality or content of goods and/or services ordered by Participants via the Platform.
10.3 The Organizer shall not be liable for:
- any damages suffered by the Participant related to products ordered via the Platform;
- compliance or defects of the ordered products;
- impossibility or delays in the delivery of ordered products;
- Participants’ inability to take possession of the ordered products for reasons beyond the Organizer’s control;
errors in data provided by the Participant, including those causing failure to contact the Participant.
10.4 The Organizer is not liable for any direct or indirect damages resulting from the Participant’s involvement in the Campaign.
10.5 The Participant is responsible for fulfilling all tax obligations under applicable law concerning goods/services ordered and delivered under the Campaign. The Campaign is exclusively intended for legal entities and/or professionals acting within their professional capacity.
Article 11 – FORCE MAJEURE
11.1 The Campaign may end prematurely due to force majeure.
11.2 Force majeure events mean external, unforeseeable, absolutely insurmountable, and inevitable events.
11.3 Examples of force majeure include, but are not limited to: strikes, official decisions by authorities, communication network failures, cyberattacks, internet connection loss, computer viruses, and any other circumstances beyond the Organizer’s control that prevent the Campaign from being conducted.
Article 12 – DISPUTES, CLAIMS, AND COMPLAINTS
12.1 Any disputes arising between the Organizer and Participants will be resolved amicably, and if not possible, disputes will be submitted to the competent courts in Romania.
12.2 If persons are identified as having fraudulently influenced or facilitated access to benefits, the Organizer reserves the right to take legal action against them.
12.3 Participants may submit complaints or claims related to the Campaign by email to ROM.Reception@xerox.com until and including February 15, 2026. Complaints submitted after this date will not be considered.
ANNEX No. 1 to the Official Rules of the “Xerox Genuine Supplies Loyalty Program” Campaign
Information Regarding the Processing of Personal Data
- Data Controller
For the purpose of carrying out the Campaign, the personal data of participants will be processed by Xerox Romania, with its registered office at Bulevardul Dimitrie Pompeiu 5–7, Hermes Business Campus, Bucharest 020335, having the unique registration code 10453114 (hereinafter referred to as the "Controller").
The Controller’s contact details for questions or for exercising the rights of data subjects regarding their personal data are: Xerox Romania, Bulevardul Dimitrie Pompeiu 5–7, Hermes Business Campus, email: ROM.Reception@xerox.com, attention: Data Protection Officer.
Additionally, data will be processed by CREATE DIRECT SRL, located at Str. Siriului 42–46, Sector 1, Bucharest, unique registration code RO 16678558, acting as a Processor on behalf of the Controller (hereinafter referred to as the “Processor”).
- Categories of Personal Data Processed
Within the Campaign, the Controller will process the following categories of personal data from participants:
(i) Full name
(ii) Email address
(iii) Mobile phone number
- Purpose of Processing
Personal data will be processed for the purpose of conducting the Campaign, sending notifications related to campaign participation, statistical reporting, and prize delivery.
- Legal Basis for Processing
The data will be processed based on the participant’s consent and/or the legitimate interest of the Controller, as expressed through the participant’s acceptance of the Official Rules and its annexes.
- Recipients of Personal Data
Personal data collected in the context of the Campaign will be disclosed, where applicable, only for the execution of the activities described in these Rules, to the Controller’s authorized Processor (Create Direct SRL), the prize supplier, and public authorities where required by applicable law.
- Data Retention Period
Personal data of non-winning participants will be stored for 12 months after the end of the Campaign.
Data of winners will be stored in accordance with applicable financial and accounting laws, i.e., for 10 years from the end of the financial year in which the prize tax was paid.
Personal data of non-winners will be destroyed within 60 days of the end of the Campaign and will not be used for any purpose.
Upon expiration of the retention period, the Controller will delete or destroy the personal data and will require the Processor(s) to do the same.
- Rights of Data Subjects
In order to ensure fair and transparent processing, the Controller informs participants of the following rights under applicable data protection laws:
(i) The right to withdraw consent at any time when processing is based on consent, without affecting the lawfulness of processing prior to withdrawal
(ii) The right to request access to personal data
(iii) The right to request correction of personal data
(iv) The right to request deletion of personal data
(v) The right to restrict processing
(vi) The right to object to processing, as provided by law
(vii) The right to data portability
(viii) The right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing
Participants may exercise these rights by submitting a written request to the Controller at Bulevardul Dimitrie Pompeiu 5–7, Hermes Business Campus, or by email to ROM.Reception@xerox.com.
- Protection of Personal Data Belonging to Minors
As participation in the Campaign is restricted to individuals aged 18 and over at the start of the Campaign, no data belonging to individuals under the age of 18 will be processed.
If the Controller or Processor becomes aware that they have received personal data of a minor, that data will be immediately deleted or destroyed.
If a parent or legal guardian notifies the Controller about the processing of a minor’s personal data, the Controller will promptly delete or destroy such data from all systems.
- Security of Personal Data
The Controller is committed to implementing appropriate technical and organizational measures to ensure an adequate level of security for personal data processed during the Campaign.
The Controller will also require the Processor to follow the same obligations.
The level of security will be assessed based on the risks presented by the processing, particularly accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
- Amendments to this Privacy Information
The Controller reserves the right to amend this Annex at any time during the Campaign, but only if more effective data protection measures are identified and without affecting the rights and freedoms of data subjects.
Any such changes will be published on the website of the Controller and/or the Campaign and communicated to participants through the same channels as the initial Rules.
- Other Provisions
If participants disclose personal data of third parties in the course of the Campaign, they confirm that they have informed those individuals about how their personal data will be processed and that the data will be used for the purpose of running the Campaign, and that they have obtained those individuals’ consent.
Participants are required to inform those individuals about the contents of this section.
The personal data of Campaign participants will be processed in accordance with applicable data protection legislation, in particular Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data.