ROMTOR TECHNICS SRL, headquartered in bld. Lacul Tei, Nr. 71, sector 2, Bucuresti, registered at the Trade Register Office under the number J23 / 1167/2015, CUI: 14665373, email: [email protected], phone number 021.233.1849 (hereinafter referred to as the "Company" Operator ") is a personal data operator.
This policy has the role of informing the data subjects about the conditions under which personal data are processed by the Company. This policy is valid for all the specific activities of the company realized through the website www.romtor.ro.
The use of the services offered by the company can only be made after the knowledge of these policies.
The platform is not intended for minors and can not be used by them.
For the purposes of this Convention (as well as in the annexes and other related documents), the terms shall have the meanings specified below:
"Contract" - the contract concluded between the Parties and its annexes;
"Personal data of the Beneficiary / legal representative / representative" - all personal data, regardless of their form or environment, which are: i) provided either by the Beneficiary or by the legal or conventional representative of the Beneficiary; ii) or written by, or verbally, the insurer of a repair vehicle or another insurer directly involved or by the public institutions / authorities (police stations, prosecutors' offices, courts, etc.);
"Services" - services provided by the Provider in accordance with the subject of the Contract;
"Supervisory Authority" means an independent public authority set up by a Member State having the personal data protection supervisory function of the EU in whose jurisdiction it is based and processing the personal data of the Provider as an operator, or the person empowered by the Provider;
"Processing" means any operation or set of operations performed on personal data or on personal data sets with or without the use of automated means such as: collecting, recording, organizing, structuring, storing, adapting or modifying , extraction, consultation, use, disclosure by transmission, dissemination or otherwise making, alignment or combination, restriction, erasure or destruction;
"Operator" - legal person, as in this situation The physical provider who, alone or with others, determines the purposes and means of processing personal data;
"Operator" means the natural or legal person, public authority, agency or other body processing personal data on behalf of the operator;
"Consent" of the person concerned - means any manifestation of free, specific, informed and unambiguous will of the person concerned by which he or she accepts, through a statement or unequivocal action, that the personal data concerning him either processed;
"Violation of personal data security" means a security breach that accidentally or unlawfully carries on unauthorized destruction, loss, modification or disclosure of personal data transmitted, stored or otherwise processed; or to unauthorized access to them;
"Consent" of the intended person (the Beneficiary) means any manifestation of free, specific, informed and unambiguous will of the person concerned by which he or she accepts, through a statement or unequivocal action, personal data look to be processed.
"Regulation" means Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC.
Since we value the confidentiality of your information, the Operator undertakes to comply with the provisions of this policy as well as with the provisions of the Regulation and the rules laid down in national law regarding the processing of personal data, security and confidentiality.
Subject, duration, nature, purpose, type of personal data
Subject of processing
Data processing of people who post ads for real estate sales on web pages managed by the company or contact details of people who advertise such ads on other pages of ads and taken over by the Company.
The processing of your personal data will take place: during the period when the sale of the property of your posted announcement has not been completed yet and / or you have an active account on the Platform and / or until you request that we do not process it the data contained in your ad, but no more than 3 years from the date of the processing start by receiving the ad or retrieving it from third-party pubs.
Nature of processing
The processing of personal data is based on the performance of our specific activities, based on our contractual relationship or legitimate interest.
Purpose of processing
Providing a specific activity to provide users with a platform for publicizing sales offers / Informing you of the status of the announcement / Enhancing your experience on our Platform / Providing you with a secure and secure platform
The legal basis of the processing
Execution of the contract;
The type of personal data
People who use the Platform for posting ads or people whose ads are picked up on similar public platforms
Name and / or first name,
operating system version, unique identifiers.
The place where you post the announcement by identifying the Internet Protocol (IP) of the device used.
user sessions, store preferences for language selection, and give you relevant ads by using cookies.
(possibly) financial data that may include the bank account and details of the payment card (issuing bank, card validity, card holder, etc.).
The legal and / or conventional representative (s) of the clients
Identification data (name, first name, function);
Contacts (home, phone number, e-mail address)
Categories of targeted people
Owners of motor vehicles / policyholders, injured parties and / or their legal or contractual representatives
From whom do we collect the data
From the target person when data is provided directly, for example when posting an ad on the Platform when creating an account;
From public sources: When we take on the Platform publicity posted on other platforms;
From third parties such as Google when we receive information about the use of our Platform.
Sensitive personal data
Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sexual life, sexual orientation, political opinions, trade union membership, health information, and genetic and biometric data. We do not collect any information about beliefs, life or sexual orientation, political opinions, trade unions, health information, genetic or biometric data, or crime.
According to our tax and accounting legislation, we may be required to collect sensitive data such as CNN, such as bank account and bank card (including issuing bank, card validity, card user). The processing of these data can only be done if we are bound by a statutory provision
The legal basis for the use of personal data
The provider will process personal data in order to:
the fulfillment of the obligations arising from the Contract - contractual obligation, according to the provisions of art. 6 par. (1) lit. b) of the Regulation.
when there is a legal or statutory obligation, in accordance with the provisions of art. 6 par. (1) lit. c) of the Regulation.
when there is a legitimate interest of the Company, in accordance with the provisions of art. 6 par. (1) lit. f), this legitimate interest being unable to prevail over your legitimate interests.
When I have obtained your consent to provide advertising by e-mail or sms, other than messages that you have a direct interest in.
The processing of these data, in terms of frequency and modality, is:
At the time of posting an ad on our Platform;
At the time of receiving a public ad from other third-party platforms;
At the time of creating a user account on our Plato;
At the moment we end a contract;
If necessary in our legitimate interests (or those of a third party) and your fundamental interests and rights do not go beyond those interests.
If we have to respect a legal or statutory obligation.
When we send you information by sms or email.
When we receive information about your visits and interaction with the services provided by other entities when you visit the services of other suppliers that include advertisements, cookies, or similar technologies.
In view of the above policy, it is clear that we do not generally process sensitive personal data, as are expressly required in the Regulation.
By creating an account on the Platform, we believe it is your legitimate interest to receive periodic information from the Company through sms or email about any ads that might be of interest to you. If at any time you believe that your legitimate interest has changed you no longer wish to receive periodic information, you always have the option of expressing the option not to receive those messages anymore.
Also, regarding the sending of communications to you by email or text message, you have the right to have the option not to receive information from us at any time by sending an email to us at the e- mail [email protected]
We will obtain your express consent before distributing your personal data to any third party or for sending messages for marketing purposes and outside of your legitimate interest.
You can ask us or ask third parties not to send any marketing messages anytime by sending us an email at [email protected] at any time or by activating the unsubscribing feature from the message content.
Change of purpose
The provider will only use personal data for the purpose in which it was obtained, unless it is reasonably necessary to use it for another purpose and the reason is compatible with the original purpose. If you want to know more about how the processing for the new purpose is compatible with the original purpose, please send us an email at [email protected]
If we need to use your personal data for purposes that are unrelated to the purpose for which we have collected the data, we will notify you and explain your legal reasons for processing.
We may process your personal data without the consent or information of the Beneficiary, the legal or conventional representative, if this is necessary and / or permitted in accordance with the law.
DIVULGING YOUR DATA WITH PERSONAL CHARACTER
We may share or disclose your personal data to the third parties listed below:
Real estate agencies, but only data that you have publicly made on our Platform or on other specialized platforms.
Service providers providing IT and system administration services.
Professional consultants including lawyers, auditors, accountants, and insurers who provide consulting services for not doing our business.
Tax and Customs Administration, regulatory bodies and other authorities based in Romania that require reporting of processing activities under certain circumstances (eg police stations, prosecutor's offices, courts, etc.).
We ask all third parties to whom we transfer the data to respect the security of your personal data and process them in accordance with the law. We will allow these third parties to process your personal data for the purposes specified and in accordance with the legal provisions only if we receive assurances regarding the legality and compliance of the processing of personal data.
We do not transfer your personal data outside of the European Economic Area (EEA).
SECURITY OF DATA
The provider has implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed, altered or disclosed unauthorized. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a commercial need to know that data. They will process your personal data on our instructions and are subject to the confidentiality obligation.
We have put in place procedures to deal with any suspicious personal data breach and will notify you and any competent regulatory authority about the violation when we are legally obliged to do so.
We can keep your data physically or electronically formatted. In some circumstances, we may anonymize your personal data (so that it is no longer associated with you) for research or statistical purposes, in which case we may use this information unlimited without informing you.
In addition to what is mentioned in this policy, in certain circumstances, the data subject has certain rights under the data protection laws of your personal data. These include:
Right of access
You can ask us:
to confirm that we process your personal data;
to give you a copy of that data;
to provide you with other information about your personal data, such as the data we have, why we use it, who we reveal to them, whether we transfer them abroad, and how we protect them, how long we keep them, what rights you have, complaint, where we took your data, and whether we did any automated decision-making or profile creation, as long as the information has not already been provided to you in this Policy.
Right of rectification
You may ask us to rectify inaccurate personal data. We may be looking to verify the accuracy of the data before correcting it.
The right to delete (the right to be forgotten)
You may ask us to delete your personal information, but only if:
are no longer necessary for the purposes for which they were collected; or
You have withdrawn your consent (when data processing was based on consent); or
as a result of a legitimate right to object (see "Objection" below); or
have been processed illegally; or
a legal obligation has to be respected, the subject of which is the Company.
We are not obliged to respond to your request to delete your personal data if processing of your personal data is required:
to comply with a legal obligation; or
for the establishment, exercise or defense of certain rights in justice;
There are several other circumstances in which we are not obliged to respond to your removal request, although these two are probably the most common circumstances in which we will decline your request.
You may ask us to restrict your personal data (that is, to store it without using it) only when:
their accuracy is being challenged (see Correction) to allow us to verify their accuracy; or
processing is illegal, but you do not want to delete it; or
are no longer necessary for the purposes for which they were collected, but we still need them to establish, exercise or defend their rights in court; or
you have exercised the right to object and the verification of compelling reasons is pending.
We may continue to use your personal data following a restriction request if:
we have your consent; or
to establish, exercise or defend rights in the courts; or
to protect the rights of another natural or legal person.
The right of portability
You may ask us to provide your personal data in a structured, commonly used, automatically processable format, or you may request it to be "ported" directly to another data operator, but in any case only when:
processing is based on your consent or the performance of a contract with you; and
processing is done by automatic means.
Right of opposition
You may object to any processing of your personal data based on our "legitimate interests" if you believe that your fundamental rights and freedoms have priority over our legitimate interests.
Once you have objected, we have the opportunity to show you that we have convincing legitimate interests that have priority over your rights and freedoms.
The right to make a complaint
You have the right to file a complaint with the National Supervisory Authority for Personal Data Processing. Please try to solve any problem by discussing at first instance with us, although you have the right to contact the supervisor at any time
The right to withdraw your consent
You have the right to withdraw your consent in the situation in which the Company processes personal data on its basis.
The person concerned will not pay a commission or any other charge to access your personal data (or to exercise any of the other rights). However, the Company may, as an operator, impose a reasonable fee if the claim is manifestly unfounded, repetitive or excessive. Alternatively, the Provider may refuse to respect the request received under these circumstances.
The company has the right to request certain information in order to be able to confirm the identity of the person who made the request and to safely secure the personal data (or to exercise any of the other rights). This is a security measure to ensure that personal data is not disclosed to people who are not entitled to receive them. We may contact you to ask for further information on your request to expedite our response.
The company will take the necessary care to respond to all legitimate requests within one month. Occasionally, it may take more than a month if the request of the provider is very complex or the person concerned has made several requests. In this case, the Provider will notify you and keep you informed.
Keep the bearings
The first point of contact for all matters arising from this Policy, including requests for the exercise of the rights of the subjects, is our Data Protection Officer. The Data Protection Officer can be contacted in the following ways:
By e-mail at [email protected]
By post to our address bld. Lacul Tei, Nr. 71, sector 2, Bucuresti.
If you have a complaint or are worried about the way we use your personal information, please contact us first and we will try to resolve the issue as soon as possible.