PIATRAONLINE PRIVACY POLICY
Your privacy is important to us. This Privacy Policy explains how S.C. ROCK STAR CONSTRUCT S.R.L., ("PIATRAONLINE", "Company") manages and treats your personal data when you register or visit our website, https://www.piatraonline.com ("website"); enter into a relationship with us to use services that our company offers ("services"); apply for a position with our company; provide goods or services to us or act as a representative, employee or any kind of agent of a company providing goods or services to us; process your data on the instructions of or as a result of the actions of third parties.
1. Purpose of this Policy
2. Who we are and what we do
3. How to contact us
4. What personal data we collect
5. How we use personal data
6. Legal basis for processing personal data
7. With whom we share personal data
8. Use of cookies
9. Processors, independent operators and associated operators
10. Where we transfer personal data
11. How long we keep personal data
12. Privacy and security of personal data
13. Right of access and other rights
14. Changes to the Privacy Policy
1. Purpose of this policy
This Privacy Policy ("Privacy Policy", "Policy") explains our approach to any personal data we collect from you or have obtained about you from a third party and the purposes for which we process your personal data. It also indicates the rights you have regarding the processing of your personal data.
This Privacy Policy is intended to assist you in making informed decisions when using our website and services, to understand how your personal data may be processed by us as a result of providing services or when you request to work at or with our company. Please take some time to read and understand it.
2. Who we are and what we do
We are S.C. ROCK STAR CONSTRUCT S.R.L., ("PIATRAONLINE", "the Company"), with registered office in Bucharest, Aleea Teisani nr. 137a, sector 1, CUI 22680005, J40/20648/2007, legally represented by administrator Mariana Constantinescu Brădescu .
PIATRAONLINE is the first online natural stone shop and the largest in Romania. For over 15 years, the company has been selecting and importing the best natural stone from all over the world, in order to offer all design lovers or interior design specialists the possibility to turn their vision into reality.
3. How to contact us
If you have any questions about this privacy policy or wish to exercise your rights with regard to the protection of your personal data, you can email us at dataprotection@piatraonline.ro.
4. What personal data we collect
We may collect personal data from you in the course of our business, including through your use of our website, when you contact us or request information from us, when you engage our services, or as a result of your relationship with one or more of our staff members or our customers.
Both, our website and our services are intended for persons over 18 years of age, so we do not intend to collect and process data from persons under this age through our website.
In order to carry out our business, we or third parties providing services to us process personal data that helps us to:
• Verifying your identity
• providing our products and services
• improving, developing and marketing new services and products
• the performance of our contracts with you.
• dealing with requests made by you on the site or in connection with our work
• investigating or settling claims or disputes
• compliance with any applicable law, court order, judicial act or requirement of an authority
• protecting the rights, property or safety of us or third parties, including staff, customers or users of the site
• recruitment purposes
• business administration and compliance
• making marketing communications and use in other cases where required or permitted by law
a) If you are a visitor to the site:
We process information obtained through cookie files, such as site display preferences, consent to data processing through cookies and to our Terms and Conditions, or information that cannot be used to uniquely identify you.
All information about the cookies used on our website can be found in Cookie Policy.
b) If you are a visitor to the site and you contact us using the contact form on the site or the chat/Whatup service:
• first and last name
• contact details (email address and phone number)
• information you choose to provide us with via the "Message" field in the contact form
c) If you create a user account on our website
• first and last name
• contact details (email address and phone number)
• password
• if you connect with Facebook - name, email, profile picture
• if you sign in with Google - name, email, language preferences and profile picture
• order history
• billing address
d) If you place an order on our website:
• user account data
• order summary
• price
• method of payment
• delivery address
• additional details such as preferred delivery interval, option for insurance for fitting
• details about scheduling a showroom visit
e) If you pay for your order through our website
• first and last name
• sum
• Transaction ID
f) If you place an order through channels other than the website (showroom, email, etc.):
• first and last name
• contact details (email address and phone number)
• order summary
• price
• method of payment
• billing address
• delivery address
• additional details such as preferred delivery interval, option for insurance for fitting
g) If you return an ordered product and we have to refund the price
• first and last name
• contact details (email address and phone number)
• returned product
• refund amount
• bank account details
h) If you publish comments on the product presentation page or blog
• first and last name
• email
• topic
• comment
i) For customers and potential customers we may also process other categories of data, such as:
● content requests
● data necessary for complaint handling, including a complaint identifier
● data on marketing preferences
● data provided for the purpose of entering competitions, sweepstakes or events
● data contained in audio/video recordings or photographs taken as part of or in connection with the provision of our company's services (such as recordings of telephone calls, CCTV footage or online conferences)
● data present in photographs or recordings from or for events
● any other personal information about you or other third parties that you may provide to us in connection with receiving our services
j) If you are acting as an individual contributor or representative, employee or any kind of agent of a company that is our Customer or that provides goods or services to us
In the course of our dealings with other legal entities, personal data such as personal data relating to staff, managers, agents, collaborators, consultants and the like of our suppliers or customers or their Authorised Persons may be transmitted to us. The data processed about you in this context is usually:
● first and last name
● contact details (email address and phone number)
● identification data of the legal person represented
● your position and/or relationship with the legal person
● any identification data in a power of attorney granted by the legal person
● activity details (appointments etc)
● data necessary for complaint handling, including a complaint identifier
●data contained in audio/video recordings or photographs taken as part of or in connection with the provision of our company's services (such as recordings of telephone calls, CCTV footage or online conferences)
● data present in photographs or recordings from or for events
● special categories of personal data that you provide to us for the purpose of participating in meetings and events, such as dietary preferences, which may reveal information about your health or religious beliefs, or other data that may reveal your health status, in the context of restrictions imposed by law on the conduct of events, if applicable
● any other personal information about you or other third parties that you may provide to us in connection with our services
k) If you are an individual contributor who helps us promote our products and/or run our events (such as architect, designer, builder, speaker, influencer, etc):
• first and last name
• pseudonym
• contact details (email address and phone number)
• function/quality
• company represented
• biography, awards
• details of your work with us (event scheduling, filming, interviews, etc.)
• information on areas of expertise
• details contained in the content of promotional materials
• testimonial content, reviews, interviews
• data contained in audio/video recordings or photographs taken as part of or in connection with the provision of our company's services (such as recordings of telephone calls, CCTV footage or online conferences)
• special categories of personal data that you provide to us for the purpose of participating in meetings and events, such as dietary preferences, which may reveal information about your health or religious beliefs, or other data that may reveal your health status, in the context of restrictions imposed by law on the conduct of events, if applicable
• any other personal information about you or other third parties that you may provide to us in connection with our business
l) If you interact with us via social media
• name, first name
• social networks and online platforms profile data (user, photo, biography)
• social media post content, reviews, ratings, location data
m) If you are a potential candidate:
PIATRAONLINE collects information from and about candidates in relation to available employment or collaboration opportunities. This information may include all types of data contained in resumes, identification documents, photographs, academic records, courses or certifications earned, work history, employment and references, and the like.
PIATRAONLINE uses your personal data to match your skills, experience and education with the specific jobs offered. This information is passed on to hiring managers and people involved in the recruitment process to decide whether to invite you for an interview. PIATRAONLINE may collect additional data from you if you are invited to the interview stage (or equivalent) and afterwards.
In connection with our recruitment activities, we may also collect special categories of personal data from candidates in respect of whom we have an employment law obligation to do so, if the information is relevant to their future working environment at PIATRAONLINE or the future offer of employment-related benefits or with the individual's explicit consent. For example, we may need to collect information about a candidate's disability in order to provide a suitable working environment for that candidate if they are recruited.
PIATRAONLINE may collect personal data about candidates from the following sources:
- directly from you - for example, the information you provide when you apply for a position directly, through our website or using our contact details, or are a student, intern or trainee in our company
- from recruitment agencies - for example, when a recruitment agency refers you as a potential candidate
- through publicly available online sources - for example, if you have a published online professional profile relevant to the type of job (e.g. on your current employer's website, a recruitment platform or a social network such as LinkedIn)
- by recommendation - for example, through a reference from a former employee/employer or a person who recommended you
n) If we process your data on the instructions or as a result of the actions of third parties
If you are an individual whose personal data is processed by us as a result of providing services to our customers or as a result of the actions of third parties, we may process a variety of different personal data depending on the services provided.
1. If your data is provided to us in the context of events
We may process your data on the instructions of our clients or partners in the context of organising or participating in events. The data we may process on such occasions are:
● first and last name
● contact details (email address and phone number)
● identification data of the represented company
● photographs or audio/video recordings
2) If your data is provided to us via social media
We may also process your data as a result of the actions of third parties when using social media, for example when you are tagged by a friend in a context related to our company. The data we may process on such occasions are:
● first and last name
● social networks and online platforms profile data (nickname, photo, biography)
● social media post content, posts reviews, ratings, location data
● photographs or audio/video recordings
If you are in a position to provide us with the personal data of other individuals, please inform them of this fact prior to disclosure and how the data is to be processed in accordance with this privacy policy.
If we ask you to provide any other personal data that has not been described above, the personal data we ask you to provide and the reasons why you are asked to provide it will be made clear to you at the time you are asked to provide that personal data.
o) Data processed by third parties
1. Data processed through social media plugins
Please be aware that by accessing our website, third parties may collect data about you as a result of integrating social media plugins, such as "Like" and "Share" buttons, even if you have not clicked on them or are not a member of those social media networks. Our company is not involved in any way in the data processing operations of the social networks, other than collection and transmission, which occurs automatically, without us having access to or control over the data collected by the social networks. For more information please refer to the privacy policies of the social networks whose plugins appear on our website (Facebook, Instagram, Pinterest, Twitter etc).
2. Data processed for payments made via the site
We use third party payment services to collect payments made through the site (e.g. www.mobilpay.ro). If you wish to make a payment through the Site, you will be directed to a web page that is hosted by the payment service provider (or a person authorized by it) and not by PIATRAONLINE. Any personal data you provide on the payment service provider's page, such as card number, CVV etc, will be collected by the payment service provider and not by PIATRAONLINE and will be subject to its privacy policy - https://www.mobilpay.ro/public/politica-de-confidientialitate. Our company has no control over and is not responsible for the use of information collected by payment service providers.
3. External links
Our website may contain links to third party websites. We provide these links only as a convenience, and our company does not control and is not responsible for the privacy practices or the content of such sites. The responsibility for how these third parties process your personal data rests entirely with them. Please review their privacy policy and terms of use before accessing these sites to ensure that your data is processed as you expect.
5. How we use personal data
I. To perform the services, deliver the products and deal with your requests.
We collect and store the personal data you submit to us during your use of the Site and/or our services to enable us:
• processing your orders and requests.
• the settlement of complaints, returns or any other issues relating to an application
• providing support services, including answering your questions about your orders or our services
Our website uses different user interfaces to allow you to request information about our services, including electronic contact forms, a telephone information service and a chat service. You may be asked for contact details in each case and other details of personal data that are relevant to your request. This information is used to enable us to respond to your requests. As for communications regarding your requests, we may send them to you by email or telephone, including by SMS.
What is our legal basis?
If you contact us on your own behalf, it is necessary for us to process your personal data in order to fulfil our obligations under a contract we may have with you. If you contact us as a representative of a company that is a potential client or customer, we process your data by virtue of our legal obligation to validly sign, i.e. execute, the contract with the legal entity you represent. Failure to provide this data automatically leads to the impossibility of concluding and/or executing the contract, i.e. the impossibility of settling your request.
II. Business administration and compliance
We may use your personal data for the following business administration and compliance activities:
● managing registration on the site;
● client account management
● improving the quality of service and contract maintenance activities
● sales analysis and monitoring
● running promotional campaigns and loyalty programmes
● in connection with potential business transactions, such as a merger, restructuring or sale
● fraud prevention
● protecting the rights, safety or property of the company or its employees, suppliers or others
● exercising legal rights, including but not limited to organising the recovery of debts and/or property of the company and carrying out judicial proceedings or extra-judicial formalities in connection with the performance of the Contract; settling any legal and/or judicial situations arising in connection with the performance of the Contract; settling disputes or claims
● compliance with legal obligations and requests from authorities, including the transmission/disclosure of personal data to public institutions or authorities, to the extent required by law
What is our legal basis?
When it comes to business administration activities, we process personal data because it is in our or a third party's legitimate interest to do so. In activities involving the exercise of legal rights, processing is necessary for the establishment, exercise or defence of legal claims. Where we use your personal data to comply with legal obligations, we do so precisely because it is our legal obligation to use your personal data for this purpose.
III. Marketing
We may carry out marketing and remarketing activities using your personal data. Our communications are intended to inform you about our or our partners' services, loyalty programs, promotional offers, events or other topics that may be of interest to you.
To this end, we may send you different types of messages, such as email/SMS/telephone/mobile push/webpush/etc, containing general and thematic information, information about products similar or complementary to those you have purchased, about offers or promotions or about which you have shown interest, as well as other commercial communications, such as about market research and opinion polls, and we may display personalized recommendations on the website.
In order to provide you with information of interest to you, we may use data about your shopping behaviour (e.g. services or products viewed, added to cart or purchased) to create a profile for you. In most cases, we base our marketing communications and remarketing activities on your prior consent.
You can change your mind and withdraw your consent to marketing at any time by:
• accessing the unsubscribe link displayed in the messages you receive from us
• sending an email to dataprotection@piatraonline.ro
You can withdraw your consent to remarketing by clicking on the links below:
• for Google: https://support.google.com/ads/answer/2662922?hl=en
• for Facebook: https://www.facebook.com/ads/website_custom_audiences/
• by managing preferences using the cookie displayed on the site
In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business, such as when we ask your opinion about working with us, inform you about a product similar to one you have purchased from us or contacted us about in the past. In any situation where we process data about you for a legitimate interest of ours, we take all necessary steps to ensure that your fundamental rights and freedoms are not affected. However, you may at any time request us by the means described above to stop processing your personal data for marketing purposes.
We may use your personal data to send you important information about the site, products, services, our contract, this Privacy Policy or any other policies, agreements or transactions relevant to your use of our site, products and/or services. This information may be important to your use of the site and/or services and is not direct marketing, but is a means to manage our contractual relationship with you or the company you represent and/or to comply with a legal obligation.
We may, as part of our promotional activities, redistribute your posts that relate to our company or events.
What is our legal basis?
It is in our legitimate interest to promote our services to use personal data for marketing purposes. You have the right to object at any time to the processing of your personal data for direct marketing purposes and your personal data will no longer be processed for this purpose.
Whenever necessary, in accordance with applicable law, we will ask for your consent before processing your personal data for direct marketing purposes. In this case, you will be able to withdraw your consent to processing for marketing purposes at any time, in which case you will no longer receive any marketing communications from us.
IV. Analysis
We use cookies to provide you with a personalised browsing and site experience. By using this information, we measure the effectiveness of our content and how visitors use our site and services. While the information collected through cookies helps us learn which pages of the site are most attractive to visitors, they do not have the ability to uniquely identify you.
Please see our Cookie Policy for more information.
What is our legal basis?
We use your personal data collected through cookies if you have given your consent, so that we can ensure that we provide the best experience for you.
You have the right to withdraw your consent at any time via the cookie administration module that you can access through our website, without affecting the lawfulness of the processing carried out on the basis of consent prior to the withdrawal of consent;
V. Recruitment
We use your personal data to assess your suitability for any position for which you may apply within PIATRAONLINE, including employee, apprentice, volunteer, contributor positions, as well as any administrative or service-providing position, whether such application was received online, on paper or as an in-person application.
What is our legal basis?
Where we use your personal data as part of the recruitment process, it is in connection with the fact that it is in our legitimate interest to review your application to assess your suitability for any position for which you may apply within PIATRAONLINE.
Where we use your personal data in the process of hiring or completing a collaboration, it is in connection with the fact that we are taking steps at your request to conclude a contract we may have with you. Failure to provide this information automatically makes it impossible to conclude and/or perform the contract.
In connection with our recruitment activities, we may also process special categories of personal data from candidates when:
● processing is necessary for the purposes of fulfilling our specific employment obligations (e.g. health data)
●
the processing relates to personal data which are manifestly made public by you . (e.g. sexual orientation, philosophical or religious beliefs)
We may process data relating to criminal convictions and offences where the processing is authorised by Union law or national law providing adequate safeguards for the rights and freedoms of data subjects.
VI. Profiling and automated decision-making
We may use your personal data to create profiles for the purposes of our remarketing campaigns. In doing so, we may collect and process information about your behaviour while visiting our website in order to personalise your online experience and provide you with information tailored to your profile. We always ensure that these processing operations are carried out with respect for your rights and freedoms and that decisions taken on the basis of these operations do not have legal effects on you and do not affect you in a similar way to a significant extent.
If you have given us consent to remarketing and subsequently wish to exercise your right to opt-out, you may opt-out of remarketing as set out in paragraph 5, section III of this Privacy Policy.
What is our legal basis?
Where we use your personal data in our remarketing activities, we do so with your consent.
6. WHAT IS THE LEGAL BASIS ON WHICH WE PROCESS YOUR DATA. PERSONAL DATA
We process your personal data:
● to perform our obligations under any contract we may have with you.
● when it is in our legitimate interest or the legitimate interest of a third party to use personal data in order to ensure that we provide the services in the best possible way
● when it is our legal obligation to use your personal data to comply with applicable legal regulations.
● when you gave us consent
It is possible to process special categories of data when:
● processing is necessary for the purposes of fulfilling our specific employment obligations (e.g. health data)
● processing is necessary for the establishment, exercise or defence of legal claims
● the processing relates to personal data that are manifestly made public by you (e.g. data on dietary preferences, which may indicate data about your health or religious beliefs or sexual orientation)
● you have given us explicit consent to process this personal data for one or more specific purposes
● processing is necessary for reasons of public interest in the field of public health
We may process data relating to criminal convictions and offences where the processing is authorised by Union law or national law providing adequate safeguards for the rights and freedoms of data subjects.
7. With whom we share your personal data
PIATRAONLINE may share personal data with various categories of third parties as necessary:
• third parties involved in the services we offer to clients, such as payment processors, banking service providers, potential partners and suppliers in the organisation of events, loyalty campaigns or promotional offers, marketing agencies, pr, advertising, advertising production, event organisation
• internet and telephony providers, IT systems and software, cloud and hosting, IT support, document and information storage, confidential waste disposal, document and business review or management platforms and/or providers, document processing and translation, secretarial, auditing, training
• our professional advisers, such as lawyers, valuers, tax consultants and accountants or other experts;
• HR and payroll companies and platforms, security firms and building management bodies, delegates, mail providers or couriers
• third party service providers who assist us in the operation and interpretation of the data obtained in online promotion campaigns or manage the newsletter service
• potential buyers of our business or parts of our business
• public or regulatory authorities, tax authorities
Please note that this list is not exhaustive and there may be other instances where we need to share personal data with other parties in order to provide services as efficiently as possible or to protect the rights, safety, property of our company or its employees, suppliers or others, to respond to complaints or to prevent fraud and illegal activities.
8. Use of cookies
Our site uses cookies in order to analyze traffic trends and preferences of our users or to be able to send you advertising messages through remarketing techniques (for example, you may see our banner ads on other sites that provide advertising space after you have visited our site.
Cookies are generally text files, modules or similar technologies that your computer, tablet or mobile phone browser may store when you visit our website. Files of this type have fixed retention times and remain passive, do not contain malware and do not access information on your hard drive. These types of files can only be accessed by the webserver that placed them.
By using this information, we can measure the effectiveness of our content and how visitors use our website and services. This allows us to find out which pages of our site are most attractive to our visitors and which parts of our site are most interesting.
This website uses Google AdWords and Facebook remarketing service to advertise on third party websites to visitors who have previously visited our website. This may mean that we advertise to previous visitors who have not completed an action on our website, such as using the contact form to make a request. This could be in the form of an advertisement on the Google search results page, on a site in the Google Display network or somewhere on Facebook. Third-party vendors, including Google, Facebook, Tik Tok, Instagram (without limiting ourselves to these), use cookies to serve ads based on a user's previous visits to the site www.piatraonline.ro. All data collected will be used in accordance with our privacy policy as well as Google and Facebook privacy policies.
Thus, through cookies and action tags that we and our partners use on this website (through advertising servers, content servers, website analytics agents, etc.), we may have access to anonymous information about you:
- IP address
- the country and server to which your computer is connected
- the operating system, browser type and computer type you use
- setting java or cookies
- your purchasing preferences and behaviour on this website (pages you visited, searches you performed and products you viewed and purchased, date and time of visit or order, number of visits and orders, number of visits per browsing session and per server type, url addresses you came from, domain names and web pages you browse), hobbies and lifestyle, groups you are affiliated with
- demographic information and information about the area code associated with your server
- applications and plug-ins, as well as any terms used in searching our website
- the website address that led you to our website
We collect this information in a manner that does not personally identify you. However, we and/or our partners may at some point associate this information with your identity if you have a user account. We may also collect and further process certain information about your behavior while visiting our website in order to personalize your online experience and provide you with offers tailored to your profile.
Please consult Cookie Policy to learn all about the cookies we use, their purpose and duration, and how you can exercise your preferences.
9 . Processors, independent operators and associated operators
Your privacy is important to us, which is why the transmission of personal data to processors, independent operators and associated operators is only carried out under a confidentiality undertaking from the recipients, guaranteeing that this data is kept secure and that this information is managed in accordance with applicable legislation and policies. In any case, in each case we will only transmit to the recipients the information strictly necessary to achieve the purpose in question.
We may appoint sub-contractors as necessary to carry out our business. We carry out due diligence and put in place the necessary contractual documentation in relation to any sub-contractors to ensure that they process personal data appropriately and in accordance with legal and regulatory obligations.
Further, we may appoint independent personal data processors where necessary for the conduct of the business (for example, but without limitation, accountants, lawyers, recruitment agencies or other third party experts), while complying with legal and regulatory obligations in relation to personal data, including, but not limited to, the implementation of appropriate safeguards.
We may also share this information, in accordance with applicable law, with associated data controllers, such as affiliated or partner entities.
We and the independent and associated data controllers with whom we work set out our mutual rights and obligations in an "Independent/Associated Data Processor Personal Data Processing Agreement" ("Agreement") to which we are a Party. The Agreement adequately reflects our roles and relationship as independent controllers/associates to you. As a general rule, the essence of this Agreement is as follows:
• the parties are independent/associated data controllers, independently/jointly determining the purposes and means of processing personal data.
• the data is processed for the primary purpose of carrying out the business and handling requests, but also for the prevention of fraud, the settlement of disputes or complaints, the protection of the rights, safety, property of the company - operator or its employees, suppliers or the like, for compliance with legal obligations and requests from authorities or for marketing (secondary purposes).
• each independent/partner controller is solely responsible for ensuring that the personal data under their control are processed lawfully.
• each independent operator/associate will respond to requests from data subjects addressed to it. if the data subjects' requests relate to data or processing operations for which the other associated controller is responsible, the data subject's request will be forwarded to the latter for processing and the data subject will be notified of this fact.
• each independent/partner controller is solely responsible for ensuring that information on the processing of personal data is provided to the data subjects whose data it originally holds.
• regardless of the terms of the agreement, the data subject may exercise his or her rights under gdpr in relation to and in relation to each of the operators.
10. Where do we transfer personal data?
In order to provide the services or for other processing purposes listed here, and in particular if an element of foreignness is involved, it may be necessary to transfer your personal data to locations outside the European Economic Area. In any case, before transferring personal data to another jurisdiction, we will ensure that there is a decision on the adequacy of the level of protection or that the controller or processor in that jurisdiction provides adequate safeguards or one of the following exceptions applies:
● you have explicitly agreed to the proposed transfer after having been informed of the possible risks that such transfers may entail;
● the transfer is necessary for the performance of a contract between you and us or for the enforcement of pre-contractual measures taken at your request;
● the transfer is necessary for the conclusion of a contract or the performance of a contract concluded in your interest between us and another natural or legal person;
● the transfer is necessary for important reasons of public interest;
● the transfer is necessary for the establishment, exercise or defence of legal claims;
● the transfer is necessary for the protection of your vital interests or those of others, when the data subject lacks the physical or legal capacity to consent.
● the transfer is made from a register which is intended to provide information to the public and which is open to public inspection
11. How long we keep your personal data
We keep the personal data we collect from and about you for as long as necessary to fulfil the purpose for which we collected it and for the purposes of meeting any legal, accounting or reporting requirements (Over an extended period of time, with no specific time frame).
Data kept includes and is not limited to:
• we keep your data relating to an order, of the last return, until the termination of the legal obligation or our legitimate interest
• data required for issuing invoices
• data associated with the user account
• the data we use for marketing purposes will be processed until you unsubscribe from the newsletter service or exercise your right to object
In the event that we do not provide you with an exact time period for the processing of your personal data, we rely on the following principles:
• we only process information for as long as we need it for the activities mentioned in this policy
• we always respect the deadlines imposed by legal provisions
• we assess security risks in the context of the use and storage of your data
If it reasonably appears that the data is no longer needed, we may destroy it immediately, without any notice or liability (for example, in the case of candidates who have not been selected for a PIATRAONLINE position, their CVs will not be retained).
12. Privacy and security of your personal data
We implement appropriate technical, physical and organisational measures that are reasonably designed to protect personal data against destruction, loss, alteration, unauthorised disclosure or access and other unlawful forms of processing. Access to personal data is limited to authorised recipients on a need-to-know basis. We maintain a comprehensive information security program commensurate with the risks associated with processing. The programme is continuously adapted to mitigate operational risks and protect personal data, taking into account accepted practices in the field. We also use enhanced security measures when processing any special categories of personal data.
All our partners, employees, consultants, workers, processors and processors (i.e. those who process your personal data on our behalf for the purposes listed above), who have access to and are associated with the processing of personal data, are obliged to respect the confidentiality of this personal data and to guarantee the same level of protection as that provided by our foundation.
13. Right of access and other rights
Right of access
If you ask us, we will confirm whether we are processing your personal data and, if permitted by law, provide you with a copy of this personal data (together with certain other details). If you require additional copies, we may need to charge a reasonable fee based on administrative costs.
Right to rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to request its rectification. If you have the right to rectification and if we have shared your personal data with others, we will inform them of the rectification if possible. If you ask us, where it is possible and legal to do so, we will also tell you with whom we have shared your personal data so that you can contact them directly.
Right of erasure
You can ask us to delete or suppress certain personal data about you in specific situations provided for by law. If you have the right to erasure and if we have shared your personal data with others, we will inform them of the erasure where possible. If you ask us, where it is possible and legal to do so, we will tell you with whom we have shared your personal data so that you can contact them directly.
In accordance with the GDPR, we may not comply with a request to delete your personal data to the extent that the processing is necessary for the establishment, exercise or defence of our rights conferred by law or we have a legal obligation to process the data.
Your right to restrict processing
You can ask us to "block" or stop the processing of your personal data in certain circumstances, such as if you dispute the accuracy of this personal data or have objected . If you have a right to restriction and if we have shared your personal data with others, we will inform them of the restriction where we are able to do so. If you ask us, where it is possible and lawful to do so, we will also tell you with whom we have shared your personal data so that you can contact them directly.
Right to data portability
You have the right, in certain circumstances, to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and to re-use it elsewhere or to ask us to transfer it to a third party of your choice.
Please note that this right only applies to automated information for the use of which you have initially given us consent or where we have used the information to enter into a contract with you.
The right to oppose
You can ask us to stop processing your personal data and we will do so if:
● We rely on our legitimate interests or those of third parties to process personal data, unless we can demonstrate compelling legitimate grounds justifying the processing
● We process your personal data for direct marketing purposes.
In the context of our events or courses, photo/video content may be taken to help us promote our brand and services. It is not our intention to take content that highlights a specific person, our aim is simply to make the atmosphere of our activities known to the public. If, however, your person is identifiable in the photo/video material we disseminate and we have not asked for your consent, you have the right to object to the processing for reasons relating to your particular situation. In any case, in order to respect your right to privacy, before any photo and/or video session, we will give prior notice that photo/video content is to be taken.
PIATRAONLINE will never use your personal data to subject you to an automated individual decision that produces legal effects concerning you or similarly affects you to a significant extent. However, you may at any time object to profiling or automated decision making in our remarketing activities as per paragraph 5, section 3 - "Marketing" above.
Your right to withdraw your consent
If we rely on your consent as a legal basis for processing your personal data, you have the right to withdraw this consent at any time.
Your right to complain to the supervisory authority
If you are concerned about any aspect of our privacy practices, including our handling of your personal data, you can report it to the relevant supervisory authority (www.dataprotection.ro).
If you wish to exercise your rights as set out in this privacy policy, please contact us by sending an email to dataprotection@piatraonline.ro, noting that we may ask for your specific information to help us confirm your identity. This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it. We may also contact you to request additional information about your request to speed up our response.
14. CHANGES TO THIS PRIVACY POLICY
To ensure that you are always aware of how we use your personal data, we will update this Privacy Policy from time to time to reflect any changes in the use of your personal data. We may also make changes to comply with changes to applicable laws or regulatory requirements. Where possible, we will notify you by email of any significant changes. However, we recommend that you periodically review this privacy policy on our website to be informed of how we use your personal data.
Withdrawing Consent
If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to opt out from marketing messages that you receive from us. If you wish to withdraw your consent, please contact us using the information found at the bottom of this page.
Contact Us
To request a copy for your information, unsubscribe from our email list, request for your data to be deleted, or ask a question about your data privacy, we've made the process simple:
To contact us, please email office@piatraonline.ro
Write to us at:
Data Privacy Officer of Piatraonline
Aleea Teisani 137 A, 014034, Bucharest, Bucharest
