Information regarding the processing of personal data

We inform you that DARIUSPOPADEV SRL, CUI 49925891, no. reg. com. J1/394/2024 (hereinafter " operator" ) processes your personal data (hereinafter " user" ) in accordance with the provisions of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter " RGPD") .

In the following lines we present the processing purposes and for each individual purpose we show what types of personal data are processed, the basis of the processing, the recipients of the data and the duration of storage. And in the second part of this information, we present your rights regarding data processing.

The purpose of contacting the user

The personal data completed in the contact form on the operator's website (hereinafter "the form" ) are processed for the main purpose of contacting the user regarding the request expressed. If the user does not provide sufficient data for this purpose, contacting him by the operator will not be possible.

Categories of processed data and legal basis

The personal data processed are: first name, last name, phone number, email address, description of the services requested.

These data are processed based on the user's consent expressed when filling out the form - according to art. 6 para. (1) lit. a) GDPR.

Recipients of processed personal data

The collected data will be stored on Netlify, a third-party operator, which complies with and applies the GDPR, according to its own declaration in this regard.

Employees, collaborators of the operator can also have access to the collected data. The operator ensures compliance with the RGPD provisions by these persons as well.

Duration of data storage

The data obtained are stored as long as necessary for the purposes mentioned above or according to the terms provided by law, but in no case longer than 5 years from the date of their collection, after which they are deleted, except in the case where according to the law and /or at the request of a public body, it is necessary to store them for a longer period.

Marketing purposes

If the user gives his consent, the personal data filled in the form is also processed for the purposes of targeted advertising through Meta Platforms . The collected data is correlated with the existing information on the platforms operated by Meta Platforms in order to address personalized advertising content to the user.

If the user does not consent to the processing of data for advertising purposes, his data will not be processed for this purpose, without other consequences influenced by this choice.

Categories of processed data and legal basis

The personal data processed are: first name, last name, phone number and email address.

These data are processed on the basis of the user's consent expressly expressed in this regard when filling out the form - according to art. 6 para. (1) lit. a) GDPR.

Recipients of processed personal data

The data collected for marketing purposes is processed using the Conversions API tool provided by Meta Platforms, a third-party operator, which complies with and applies GDPR, according to its own declaration in this regard.

Duration of storage and method of data processing

Meta Platforms processes personal data only to match contact information with user IDs. Once the matching process is complete, personal data is deleted. More details on the processing of personal data communicated to Meta Platforms can be found here .

User rights

The right to information and access to data

The user has the right of access to the collected data and to the following information regarding the processing of his personal data:

  • the purposes of the processing;
  • the duration of data storage or, if this duration cannot be determined, the criteria for determining the duration;
  • the categories of personal data that are processed and the origin of this data;
  • recipients or categories of recipients to whom the data is disclosed, if applicable;
  • the existence of the right to request the operator access, rectification or deletion of personal data or the restriction of the processing of personal data relating to the user or the right to oppose the processing;
  • the existence of the right to data portability;
  • the right to file a complaint with the National Authority for Supervision and Protection of Personal Data;
  • if there is an automated decision-making process including the creation of profiles and, as the case may be, pertinent information regarding the logic used and regarding the importance and expected consequences of such processing for the user;
  • if the personal data is transferred to a third country or an international organization, and that in this case the user has the right to be informed about the appropriate guarantees regarding the transfer;
  • whether the provision of personal data represents a legal or contractual obligation or an obligation necessary for the conclusion of a contract, as well as whether the user is obliged to provide this personal data and what are the possible consequences of non-compliance with this obligation.

Information is provided free of charge.

The operator provides a copy of the personal data that is the subject of processing. For any other copies requested by the user, the operator may charge a reasonable fee based on administrative costs. If the user submits the request electronically, and unless the user requests another format, the information is provided in a currently used electronic format.

The right to data rectification

The user has the right to request the rectification, updating or completion of inaccurate personal data concerning him without undue delay.

The operator undertakes to communicate to each recipient to whom personal data has been disclosed any rectification of personal data, unless this proves impossible or involves disproportionate efforts. The operator informs the user about the respective recipients if the user so requests.

Right to erasure (right to be forgotten)

The user has the right to the deletion of personal data concerning him without undue delay for one of the following reasons:

  • the personal data are no longer necessary to fulfill the purposes for which they were collected or processed;
  • the user withdraws the consent on the basis of which the processing takes place and there is no other legal basis for the processing;
  • the user objects to the processing for reasons related to the particular situation in which he is and there are no legitimate reasons that prevail with regard to the processing or the user objects to the processing, when the processing of personal data is aimed at direct marketing;
  • personal data were processed illegally;
  • personal data must be deleted to comply with a legal obligation incumbent on the operator under Union law or the internal law to which the operator is subject;
  • personal data were collected in connection with the provision of information society services.

The operator undertakes to communicate to each recipient to whom personal data has been disclosed any deletion of personal data, unless this proves impossible or involves disproportionate efforts. The operator informs the user about the respective recipients if the user so requests.

The right to data restriction

The user has the right to obtain from the operator the restriction of processing in the following cases:

  • the user contests the accuracy of the data, for a period that allows the operator to verify the accuracy of the data;
  • the processing is illegal, and the user opposes the deletion of personal data, requesting instead the restriction of their use;
  • the operator no longer needs the personal data for the purpose of processing, but the user requests them for establishing, exercising or defending a right in court;
  • the user has opposed the processing, for the time interval in which it is checked whether the legitimate rights of the operator prevail over those of the data subject.

The operator undertakes to communicate to each recipient to whom the personal data was disclosed any rectification of the personal data or restriction of the processing carried out, unless this proves impossible or involves disproportionate efforts. the operator informs the user about the respective recipients if the user so requests.

The right to data portability

The user has the right to receive the personal data that he has provided to the operator in a structured, commonly used and machine-readable format.

The user has the right to request the transmission of his personal data directly from one data controller to another, when this is technically feasible.

Data portability does not automatically trigger the deletion of data from the operator's systems and does not affect the initial retention period applicable to data that has been transmitted.

The right to object to data processing

The user has the right to oppose at any time:

  • for well-founded and legitimate reasons related to his particular situation, that the data concerning him be the object of processing, except in cases where the operator proves that he has legitimate reasons that justify the processing and that prevail or that the purpose of the data processing is to establish, exercise or defend a law in court;
  • without any justification, that the data concerning him be processed for direct marketing purposes, on behalf of the operator or a third party, or be disclosed to third parties for such a purpose.

The right not to be subject to an automated individual decision-making process

The user has the right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects concerning the user or similarly affects him to a significant extent.

According to the Regulation, a person can be subjected to a decision-making process of the nature mentioned above, only in the following situations:

  • it is necessary for the conclusion or execution of a contract between the user and a data operator;
  • it is authorized by Union law or applicable domestic law; or
  • it is based on the explicit consent of the person concerned.

Right to withdraw consent

The user has the right to withdraw his consent at any time. Consent can be withdrawn by contacting the operator in this regard at the email address [email protected] .

Withdrawal of consent does not affect the legality of data processing carried out on the basis of consent before its withdrawal.

The right to address the authorities

The user has the right to address the National Supervisory Authority for the Processing of Personal Data for the defense of any rights guaranteed by the legal provisions on the protection of personal data, which he considers to have been violated.

Procedural aspects

In all situations in which the user wishes to exercise one of the rights provided for in point 3 of this information, the user will submit to the operator a written, dated and signed request or in electronic form, using the following contact details : Romania, Jud. Alba, Alba Iulia, Calea Motilor 125; [email protected]

If the user submits a request electronically, the information is provided electronically where possible, unless the user requests a different format.

The term in which the operator will communicate to the user the answer to his request is at most one month from the receipt of the request. This period can be extended by two months when necessary, taking into account the complexity and number of applications. The operator will inform the user about any such extension, within one month of receiving the request, presenting the reasons for the delay.

If requests from a user are manifestly unfounded or excessive, in particular due to their repetitive nature, the operator may:

  • or charge a reasonable fee taking into account administrative costs for providing the information or communication or for taking the requested action;
  • or refuse to comply with the request.

Minors

The operator's website is not intended for persons under the age of 18.

Date of last update of this privacy policy: 07/06/2024