This policy is drafted in accordance with European regulation 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data (“the Regulation”), which aims to increase the level of protection of personal data and to create a climate of trust that allows each person to control their own personal data.
Consent – of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action (excluding inaction, so that it cannot be interpreted as consent), signifies agreement to the processing of personal data relating to him or her.
Personal data – means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processor/Operator – means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Data subject – represents any natural person whose personal data are processed within Casa de II’ activity development.
Person empowered by the Processor – means any individual or legal entity, public authority, agency or any other body which process personal data on behalf of the processor.
Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as: collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
II. Principles of processing
- The processing of personal data is performed in strict compliance with the legal provisions;
- The collection of personal data is performed solely for the specified, explicit and legitimate purposes, and the data will not be processed in a manner incompatible with those purposes;
- The collection of personal data will be limited to the information required for the purpose of the processing;
- Personal data will be accurate and, if necessary, updated;
- Incorrect data is erased or corrected without delay;
- Personal data will not be distributed/transferred/disclosed to third parties unless it is required for the purpose of providing services under agreements.
- Data subject has the right to request access to its personal data, rectification and erasure, impediment or restriction of data processing, and the right to portability of data;
- The processing of personal data can be also done on the basis of the content granted before the processing in respect with the use of the image for marketing purpose;
III. The purpose of collecting and processing personal data
Casa de ii srl collects and processes exclusively the personal data necessary for the conclusion and execution of the contracts, for the purposes of communication and marketing, for the settlement of the disputes and for the recovery of the possible debts, both amicably and where necessary by appealing to the court of law.
IV. The most common data and purposes of processing
Personal data collected and processed by Casa de II are related mainly to identification and contact information, such as: name, surname, phone number, series, number and validity of the identity card/passport, personal numeric number, domicile address, e0mai address, bank details.
Also, by means of our website, the following login an access data is collected and processed: email location data, username and password, IP address, device used for visiting the website, other online identifiers, etc.;
For marketing purposes, only with the prior consent of the data subject are collected and processed: photographs/images and videos.
The personal data collected and processed by Casa de ii srl are generally provided directly by the clients/collaborators.
V. Disclosure of data
The personal data collected and processed by Casa de ii srl may be disclose to the following third parties:
- Collaborators of Casa de ii srl, such as: the PR agency, IT systems providers, courier companies;
- Authorities and public institutions, external consultants (accountants, lawyers, auditors).
VI. Data storage
Casa de ii srl will store the personal data for the minimum period required for the purposes set out in this policy or as per the contracts concluded.
Thus, Casa de ii srl will process the personal data throughout the contractual relationship, and subsequently for the legally prescribed periods.
VII. Rights of the data subject
Right to be informed, of access (the data subject has the right to obtain a conformation that personal data concerning him/her are being processed or not, and, if so, he/she has the right to access thee data). This right is not an absolute one and may be limited or refused, the reason for the refusal or limitation being communicated to the data subject.
Right of rectification (the data subject has the right to obtain, without undue delay, the rectification of inaccurate personal data concerning him/her).
The right to erasure – the data subject has the right to be forgotten in the cases where the data is no longer necessary for the fulfillment of the purposes, the consent has been withdrawn and there is no other basis for processing, the data subject opposes the processing and there are no legitimate reasons that prevail in terms of processing or personal data have been processed illegally. This right may be limited or refused, the reason for refusal or limitation being communicated to the data subject.
The right to restrict the processing – the data subject has the right to restrict the processing in the following situations: contestation of the accuracy of the date for a period that allows the processor to verify the accuracy of the date; processing is illegal and the data subject opposes the deletion of personal data, but instead request the restriction on their use; no personal data is required for processing, but the data subject request them to exercise or defend a right in court; the data subject opposed the processing, for the period of time to verify if the legitimate interest of the processor prevail over the rights of the person.
The right to oppose at any time to the data processing for direct marketing purposes, not to be subject to automated decisions making, including profiling – does not have this right if the decision: is required to conclude or execute a contract between the data subject and Casa de II; is authorized by EU and internal legislation which applies to Casa de ii srl and which also provides for appropriate measures to protect the legitimate rights, freedoms and interest of the data subject; is based on the explicit consent of the data subject.
Right to data portability – the data subject has the right to receive personal data concerning him/her that he/she has provided in a structured format, currently used and readable automatically and has the right to request to Casa de ii srl to transit this data to another processor without obstacles from Casa de II, if the following conditions are met cumulatively: processing is based on consent or contract and the processing is done by automated means, more precisely if this will be technically feasible.
Right to submit a complaint – the data subject may address a complaint if he/she is unsatisfied with the processing of his or her personal data or with the way it responds to its requests.
Right to submit a complaint with the Supervisory Authority – the data subject has the right to submit a complaint with the National Supervisory Authority for Personal Data Processing if he is unsatisfied with the processing of his personal data.
Name: National Supervisory Authority for Personal Data Processing
Adresa: 28-30 Gheorghe Magheru Blvd, 1st District, postal code 010336, Bucharest, Romania
Right to address to the court of law – the data subject has the right to appeal to the competent courts of law if such is unsatisfied with the processing of his or her personal data.
Casa de ii srl`s newsletters are transmitted with the fully assurance of confidentiality and security of information. The basis for the processing of the data for the purpose of sending the newsletter is the consent of the data subject, according the provisions of the European Regulation.
The consent to receive the newsletters can be withdrawn at any time, free of charge.
The reason for transmitting the newsletters to our clients and collaborators is to keep them informed about the services and campaigns we offer.
If you unsubscribe from Casa de ii srl`s newsletter, your subscriber profile data is delated. Consequently, you will not receive the newsletters anymore.
IX. The transfer of the personal data
The processing of personal data may impose, at a given time and under certain conditions, the transfer of such data to a destination within the European Union or the European Economic Area.
Prior to any transfer, Casa de ii srl will ensure that the personal data required to be transferred will be protected in accordance with the legal provisions.
In the situations where the transfer of personal data will take place in destinations outside the European Union and/or the European Economic Area and none of the following situation apply: granting the express content for the transfer, the transfer is necessary to conclude and/or execution of a contract, the transfer is necessary for the conclusion of a contract or the execution of a contract concluded n your interest, it is important for reasons of public interest necessary for the establishment, exercise or defense of a law necessary to protect your vital interest or other when you do not have the legal capacity to express your consent, the transfer is made from a register that in intended to provide information to the public, the transfer may either take place on the basis of appropriateness decisions issued by the Commission or if the State in which will be transferred the data provides adequate safeguards.
We reserve the right to make changes to our practices and policies at any time. Please check our website regularly to see any updates or changes to our confidentiality policy.
For any questions/observations/clarifications regarding the processing of personal data, please contact us at the following email address: firstname.lastname@example.org, phone: 0770728038