TERMOPLAST - Terms and Conditions

Personal Data Processing Policy

Terms and Conditions

1. GENERAL PROVISIONS

S.C. TERMOPLAST S.R.L. is a personal data controller and exercises this capacity in accordance with Regulation (EU) 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR) and Law no. 190/2018 on the implementation measures of the GDPR.

1.1 Definitions

1."personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

2."processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

3."controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

4."processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

5."recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

6.”personal data breach” means the natural person whose personal data are being processed.

7."consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

8."personal data breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;

9."concerned supervisory authority" means a supervisory authority which is concerned by the processing of personal data because:
(a)the controller or processor is established on the territory of the Member State of that supervisory authority;
(b)data subjects residing in the Member State of that supervisory authority are substantially affected or are likely to be substantially affected by the processing; or
(c)a complaint has been lodged with that supervisory authority;

This personal data processing policy explains how S.C.TERMOPLAST S.R.L. processes the personal data of the data subject, how it is carried out, for what purposes and who the recipient is.

S.C. TERMOPLAST S.R.L. undertakes to respect the confidentiality of your personal data. We will treat all data provided by you as confidential and process only the information permitted by applicable law.

This personal data processing policy describes the organization's policies and practices regarding the collection and use of your personal data and confirms your privacy rights.

Information confidentiality is a permanent responsibility, and therefore we will update this personal data processing policy promptly as we adopt new personal data practices or policies. Regarding processing based on consent (as described below), we will notify you of any changes and request your additional consent.

2. LEGISLATIVE CONTEXT

According to the requirements of Regulation (EU) 679/2016, we have the obligation to securely manage and only for the specified purposes, the personal data you provide in accordance with the provisions of GDPR.

For more details regarding the content of this legal norm, please access:

REGULATION no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)

3. PROTECTION OF PERSONAL DATA

At S.C. TERMOPLAST S.R.L., the obligations established by the applicable legislation regarding the protection of personal data have been implemented, and you can contact the organization regarding all issues related to the processing of your data and exercising your rights according to the applicable legal provisions, especially if you have any questions or concerns about how we process your personal data. The email address where you can contact us is: office@termoplast.ro

4. PROCESSING OF PERSONAL DATA

4.1. Personal data processed:

• We may process the following types of personal data:

- Any information relating to an identified or identifiable natural person such as: Name, Personal Identification Number (CNP), ID Card/Passport Number and Series, Address, Date and Place of Birth, Nationality/Citizenship, Health-related Data, Dependent Identification Data, Marital Status, Education/Qualifications, Financial Details, Phone Number, Email Address, Signature, Image, Location Data.

- Information about your computer and your visits and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, duration of visit, page views, and website navigation paths);

- Information contained in or related to any communication you send to us through this website (including correspondence with us, the content of the communication, and data associated with the communication);

- Any other personal data you choose to send to us.

4.2. Purposes of processing personal data

The personal data transmitted through this website and the personal data we have collected from you, third parties, or from public sources will be used for the purposes specified in this Personal Data Processing Policy. Depending on the relationships we have or wish to have with you, we may use your personal data to carry out a task serving the purpose of our organization, including: providing products and services, human resources activities, commerce, marketing, archiving, collaborations, and other activities required by applicable law.

5. LEGALITY OF PROCESSING PERSONAL DATA

Processing is legal, in accordance with the provisions of art. 6 of Regulation no. 679/2016, only if and to the extent that at least one of the following conditions applies:
– the data subject has given consent to the processing of their personal data for one or more specific purposes;
– processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
– processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
– processing is necessary for compliance with a legal obligation to which the controller is subject;
– processing is necessary to protect the vital interests of the data subject or of another natural person;

6. DISCLOSURE AND TRANSFER OF PERSONAL DATA

S.C. TERMOPLAST S.R.L. strives to apply adequate safeguards to protect the confidentiality and security of your personal data, to use them only in accordance with your relationship with our company and with the practices described in this Personal Data Processing Policy.

To the extent permitted by applicable data protection laws, we may disclose your personal data to partners, auditors, agencies, state institutions, supervisory authorities, or other external service providers to fulfill our contractual obligations. We will clearly indicate to you each data recipient if known at the initiation of the processing.

We may also disclose your personal data:
– to the extent that we are required to do so by law;
– in connection with any ongoing or prospective legal proceedings;
– to establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention).

7. YOUR RIGHTS

In connection with the processing of personal data and based on the provisions of Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, you may exercise any of the following rights:
– Right of access and information - you can request information about the processing activities of your personal data;
– Right to rectification - you can rectify inaccurate personal data or complete it;
– Right to erasure ("right to be forgotten") - you can obtain the erasure of data if their processing was not lawful or in other cases provided by law;
– Right to restriction of processing - you can request the restriction of processing in case you contest the accuracy of the data, as well as in other cases provided by law;
– Right to data portability - you can receive, under certain conditions, the personal data you provided to us, in a format that can be automatically read or you can request that the data be transmitted to another controller;
– Right to object - you can complain about the manner of processing personal data to the National Supervisory Authority for Personal Data Processing;
- Right to withdraw consent;
- Right not to be subject to a decision based solely on automated processing, including profiling:
- Right to judicial remedy

To exercise these rights, you can submit a written request, dated and signed. The request form for each right listed above can be found at the headquarters of S.C. TERMOPLAST S.R.L. or can be downloaded from the website https://termoplast.ro section - Personal Data Processing - Request Models for the exercise of data subject rights:
- REQUEST FOR EXERCISING THE RIGHT OF ACCESS
- REQUEST FOR EXERCISING THE RIGHT TO RECTIFICATION
- REQUEST FOR EXERCISING THE RIGHT TO ERASURE OF DATA (RIGHT TO BE FORGOTTEN)
- REQUEST FOR EXERCISING THE RIGHT TO RESTRICTION OF PROCESSING
- REQUEST FOR EXERCISING THE RIGHT TO DATA PORTABILITY
- REQUEST FOR EXERCISING THE RIGHT TO OBJECT

The request can be submitted to the headquarters of S.C. TERMOPLAST S.R.L., can be sent to the email address: office@termoplast.ro or can be sent by mail to the headquarters in ROMAN, str. ALEEA PLOPILOR. no. 01, NEAMȚ county.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.) as well as the right to an effective judicial remedy. Contact details of the National Supervisory Authority for Personal Data Processing:
- Bucharest, G-ral. Gheorghe Magheru Blvd. no. 28-30, sector 1, postal code 010336 Website: http://www.dataprotection.ro
Email address: anspdcp@dataprotection.ro
Phone:+40.318.059.211; +40.318.059.212, Fax: +40.318.059.602

ATTENTION! Please exercise your rights wisely and note that any abuse may result in liability.

8. RETENTION OF PERSONAL DATA

Your personal data is stored by S.C. TERMOPLAST S.R.L. on its own equipment. Personal data that we process based on your consent will be kept for the duration of its validity (or until consent is revoked), unless applicable legal requirements provide otherwise and this is necessary for the purpose of processing.

Without prejudice to other provisions of this section, we will retain information and documents (including electronic documents) containing personal data:
– to the extent that we are required to do so by law;
– where the information/documents are relevant to any ongoing or potential legal proceedings;
– to establish, exercise, or defend our legitimate rights (including providing information to others for the purpose of fraud prevention).

9. SECURITY OF PERSONAL DATA

To protect the confidentiality of data and personal information, we will maintain physical, technical, and administrative security measures.

We continuously update and test our security technology. We restrict access to your personal data only to those employees who need to know that information to provide you with benefits or services. Additionally, we train our employees on compliance with the rules of confidentiality, availability, and security of personal data.

If a personal data breach occurs, we will do everything to eliminate it and assess the level of risk associated with the breach in accordance with our personal data breach policy. If it is found that the breach may lead to physical, material, or immaterial harm to you (e.g., discredit, discrimination, identity theft, fraud, or financial loss), we will contact you without undue delay, unless the law provides otherwise. All our actions will be taken in full cooperation with the competent supervisory authority.

10. CHANGES TO THE PERSONAL DATA PROCESSING POLICY

We may update this information document from time to time by publishing a new version on this website.

Any changes to our data processing policy will be displayed on this page so that you are informed of our policies.

The provisions contained in this document supersede all previous announcements or statements regarding our personal data processing practices, terms, and conditions governing the use of this website.

11. THIRD-PARTY WEBSITES

This site may include hyperlinks and details about third-party websites. We have no control over and are not responsible for the privacy policies and practices of third parties.

12. COLLECTION AND STORAGE OF CERTAIN INFORMATION ON THE SITE

As is true for most websites, this site automatically collects certain information and stores it in log files. These include Internet Protocol (IP) addresses, the geographic location of the computer or device, browser type, operating system, and other information about visiting this site, such as pages viewed. This information is used to improve this website and, due to this constant improvement, to better serve our users. Your IP address may also be used to diagnose problems with our server, to administer this site, to analyze trends, to track a user's navigation on the site, and to collect demographic information to help us understand visitors' preferences and needs.

13. QUESTIONS, UNCERTAINTIES, COMPLAINTS

If you have any questions or uncertainties regarding data and personal information privacy or if you wish to exercise your rights or make a complaint about a possible breach of privacy rules, please contact us by sending an email to: office@termoplast.ro / dpo@icbc.com.ro