Privacy Policy
Introduction
This policy applies to our websites, app, products, or services that refer to this policy or that do not have a separate privacy policy (collectively referred to as our “Services”).
The purpose of this Privacy Policy is to provide a better understanding of the following:
- information we collect;
- how we use that information;
- how this information is shared;
- your rights;
- other useful information related to privacy and security.
We hope you will take the time to read this policy. It is important that you visit us frequently for updates to this policy. If we make changes that we consider important, we will notify you by sending a notification and/or contact you using other methods, such as email.
Who is the data controller?
The data controller is the ADREM group headquartered in Bucharest, Iancu de Hunedoara Street, Sector 1.
Who is the Data Protection Officer?
Within the ADREM – Controller group, the contact details of the DCP Manager are:
|
Data Protection Officer |
Phone: 0722469369 Email: pr**************@***em.ro |
Information We Collect
Information you provide to us
We collect information about you as a Controller or as a processor of other controllers for whom we provide services. This information may include, but is not limited to: First and last name, CNP, Domicile, telephone number, email address and any other details that are necessary for the performance of the contracts assumed by you in direct relation to us or other controllers who have empowered us to process your data.
We may also collect information from you if you request customer information or support, or if we are required by law to do so.
Additional information collected
We may also collect the following information:
- your name, contact details and message if you wish to contact us;
- pages visited and content viewed, links and buttons accessed, URLs visited before and after using our service. For more information about cookies and how to manage them, please see our Cookie Policy;
- information from third-party databases, in order to comply with our legal obligations.
Third-party and public sources
Not all personal information we hold about you will always come directly from you. We may also collect information from third parties, such as our partners, service providers and public websites and other public authorities for the purpose of complying with our legal obligations.
We process personal information for the following purposes related to services and business activities:
Legal and regulatory obligations:
We may be required to use and retain personal information for legal and compliance purposes, such as preventing, detecting, or investigating crime or fraud. We may also use personal information to meet our internal and external audit requirements, for information security purposes, and as we deem necessary or appropriate: (a) under applicable law, which may include laws outside your country of residence, and (b) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and governmental authorities, which may include such authorities outside your country of residence.
Contractual obligations
We use personal information, such as your name, email address, telephone number, to verify your identity, and to perform contractual obligations that we have directly towards you or in relation to other entities that are in turn in legal relationships with you. The above processing is necessary for us to provide your services under the terms and conditions. We may also use personal information to enforce our terms and conditions.
Other purposes:
We may be required to use and retain personal information to prevent loss and to protect our own or other people’s rights, privacy, safety or property in accordance with our legitimate interests.
How this information is shared
Within the ADREM Group
ADREM may use and share the information you provide and other information it holds about you, for the following purposes:
Legal and regulatory obligations.
For the purpose for which it has been empowered by other operators with whom you have legal relations.
For the purpose of fulfilling the contractual obligations agreed together for cases where there is a contract concluded in this regard.
Third-Party Service Providers and Our Partners
The ADREM Group may mandate third parties to process your personal information, to provide services and/or to compile statistics for research purposes as well as for other purposes provided for by law. As part of our agreements, we may share your information with other entities located abroad, mainly to access IT services and cloud.
Third parties for legal reasons
We will share personal information where we believe it is necessary, such as:
To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence;
To protect our rights and the rights of victims of vehicle accidents.
Your rights
Pursuant to EU Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as a data subject, you have a number of rights, which are detailed below. Some of these apply only in specific situations and are qualified in certain respects by derogations in data protection legislation. We will inform you in our response to your request if we rely on any such derogations.
Access to personal data:
You have the right to request a copy of the personal information we hold about you. If you wish to make such a request, please see the Contact section for information on how to contact us. In the request you send us, you must include information appropriate to identify yourself and any other relevant data that will reasonably assist us in fulfilling your request. Your request will be processed as soon as possible.
Correction of personal data:
You can ask us to rectify or correct any personal data that we process about you that is incorrect.
Right to withdraw consent:
If we rely on your consent to process your personal data, you have the right to withdraw that consent. The withdrawal is made by a written request from you, at the email address: pr**************@***em.ro
Right to erasure:
You can ask us to delete your personal data when there is no good reason for continuing the processing. This right applies only if the exercise of it does not conflict with the fulfillment of legal obligations or with the legitimate interest in the preservation of disputed rights. The request for erasure is made by filling in the form available at www.adrem.ro/ or by sending an email to pr**************@***em.ro
Right to data portability:
This right allows you to obtain your personal data, which you have provided to us with your consent or which were necessary for us to perform our legal duties, in a format that allows you to transfer that personal data to another organisation. You have the right to ask us to transfer your personal data directly to the other organisation, if technically feasible.
Right to restrict the processing of personal data:
In certain situations, you have the right to ask us to suspend the processing of your personal data. When we suspend the processing of your personal data, we will still be permitted to store your personal data, but any further processing of this information will require your consent, subject to certain exceptions.
The right to object to the processing of personal data:
You have the right to object to our use of your personal data that is being processed. However, we may continue to process your personal data, despite your objection, where there are compelling legitimate or legal grounds to do so, or where we need to process your personal data in connection with any legal claim.
Rights related to automated decision-making and profiling:
You have the right not to be subject to a decision that is based solely on automated processing (without human involvement), where that decision produces a legal effect or otherwise significantly affects you. This right means that you can ask us to involve one of our employees or representatives in the decision-making process. We are pleased that we do not make automated decisions of this kind.
Other information
Retention of personal data
We retain personal data for as long as we reasonably need it for lawful purposes. Please note that in certain situations, we may be required to retain your information indefinitely. We will take all necessary steps to ensure that the confidentiality of your information is maintained for the period it is retained.
Security of personal data
We recognise that online security and data protection is an area of vital importance to all our customers, so it is important to us that you trust the security of your personal data before registering an account. We are committed to using security measures to protect your information from access by unauthorised persons and to prevent accidental or unlawful processing, disclosure, destruction, loss, alteration and damage.
Our approach focuses on risk prevention. To help us in this regard, we use pseudonymization and encryption whenever possible to reduce the impact of any possible accidents. As the security of certain communications via the internet is not fully ensured, we cannot guarantee the security of the information you disclose using the internet connection.
You accept the inherent security implications when using the internet, and ADREM Group will not accept any liability for any direct, consequential, incidental, indirect or punitive loss or damage arising from such a situation.
For any requests related to your personal information or any of the above rights, please contact us in one of the following ways:
E-mail: pr**************@***em.ro
Phone: 0722469369
By mail: Bucharest, Iancu de Hunedoara Street, Sector 1