Data processing policy

This notification regarding data protection (hereinafter referred to as „Notification”) establishes the situations in which Policolor SA, with headquarters in Bd. Tudor Vladimirescu no. 29A, et. 6, sect. 5, AFI Tech Park 1 building, Bucharest (hereinafter referred to as the „Company” or „We”) may collect, use, retrieve in another way the personal data of our clients in accordance with Regulation no. 679 of April 27, 2016 regarding the protection of natural persons with regard to the processing of personal data (hereinafter referred to as „RGPD”).

PERSONAL DATA

1. As used in this notice:

„Customer” means a person who (a) has contacted us by any means to find out more about any products or services we provide or (b) or may have entered into a contract with us for the supply of any products or services; and

„Personal data” means information, whether true or not, about a customer or potential customer that can be identified or identifiable: (a) from this data; or (b) from those data and/or other information to which we have or may have access.

2. Depending on the nature of the interaction with us, some examples of personal data that we may collect from you, your name and identification information, contact information, such as e-mail address or telephone number, nationality, gender , date of birth, employment information and financial information, such as credit card numbers, debit card numbers or bank account information.

3. Other terms used in this notice have the meanings provided by the RGDP (if the context allows this).

COLLECTION, USE AND DESCRIPTION OF PERSONAL DATA

4. We collect personal data if (a) it is provided to us voluntarily by you directly or through a third party that has been authorized by you to disclose your personal data (your authorized representative) after (i) you (or your authorized representative) have been notified of the purposes for which the data are collected and (ii) you (or your authorized representative) have expressed your consent in writing to the collection and use of personal data for this purpose or ( b) the collection and use of personal data without consent is allowed or required by the RGDP or other incidental laws. The collection and use of your personal data will only be carried out after obtaining your consent, and they will not be used for other purposes, except in cases where this is permitted by law.

5. We may collect and use your personal data for any or all of the following purposes:
a) fulfilling obligations in the course of or in connection with the provision of our products and/or services requested by you;
b) identity verification c) the responsibility, treatment and processing of inquiries, requests, complaints and feedback from you;
d) managing the relationship with us;
e) processing payment or credit transactions;
f) sending marketing information about our products or services, including notification of our marketing events, initiatives and promotions, membership and reward schemes and other promotions;
g) compliance with any laws, regulations, codes of conduct practice, guidelines or applicable rules, or to assist law enforcement and investigations carried out by the government and / or regulatory authority;
h) any other purposes for which you provided the information;
i) any other commercial purposes related to or in connection with the above.

5.1. We do not use personal data for automated processing or to create profiles. We never make automated decisions about you. We use technical means for safe storage. We do not process data for secondary purposes incompatible with the purposes for which we collected them.

6. We may disclose your personal data:
a) if such disclosure is necessary to fulfill obligations in the course of or in connection with the provision of products or services requested by you; or
(b) third-party service providers, agents and other organizations with whom we have engaged to perform any of the functions listed in art. 5 above for us.

7. The purposes listed in the clauses above may continue to apply even where your relationship with us (for example, under a contract) has been terminated/ceased or modified in any way for a reasonable period of time (including, if applicable, a period to allow us to exercise our rights under any contract concluded with you).
Withdrawal of consent

8. You can withdraw consent, only for the future, ask us to stop using it and/or disclosing your personal data for any or all of the purposes listed above. The withdrawal of consent will be carried out by sending your request in writing, to the address in Bd. Tudor Vladimirescu no. 29A, et. 6, sect. 5, AFI Tech Park 1 building, Bucharest or by e-mail GDPR@policolor.ro

9. Upon receiving the request to withdraw the consent granted, it is possible to request the granting of time, without exceeding the term imposed by the RGDP (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for to inform you about the consequences of our adherence to them, including any legal consequences that may affect your rights and obligations. We will generally aim to process your request within ten (10) working days of receiving it.

10. While we respect the decision to withdraw consent, please note that, depending on the nature and purpose of your request, (example: honoring orders) we may not be able to continue to supply our products or offer you services and, in such circumstances, we will notify you before ending the processing of your request. If you decide to cancel the withdrawal of consent, please inform us in writing, as described in art. 8 above.

ACCESS AND CORRECTION OF PERSONAL DATA

11. If you wish to make a request to have access to a copy of the personal data we hold about or information about the ways in which we use or disclose your personal data, or (b) a correction request to update any personal data we we have them about yours, you can send us the request in writing to the address in Bd. Tudor Vladimirescu no. 29A, et. 6, sect. 5, AFI Tech Park 1 building, Bucharest or by e-mail GDPR@policolor.ro

PROTECTION OF PERSONAL DATA

12. To protect your personal data against unauthorized access, collection, use, disclosure, copying, modification, deletion or similar risks, we have introduced administrative procedures, physical and technical measures, such as up-to-date antivirus protection, encryption and the use of privacy filters to ensure the storage and transmission of personal data by us and the disclosure of personal data both internally and to our authorized third-party service providers and agents only on a need-to-know basis.

ACCURACITY OF PERSONAL DATA

13. In general, we rely on the personal data provided by you (or your authorized representative). To ensure that your personal data are current, complete and accurate, please inform us if there are any changes to your personal data by sending a written request to the address in Bd. Tudor Vladimirescu no. 29A, et. 6, sect. 5, AFI Tech Park 1 building, Bucharest or by e-mail at GDPR@policolor.ro

RETENTION OF PERSONAL DATA

14. We may retain your personal data for as long as necessary to fulfill the purpose for which it was collected, or as required or permitted by applicable law.

15. We will stop keeping your personal data or removing the means by which the data can be associated with you, as soon as it is reasonable to assume that this storage no longer serves the purpose for which the personal data was collected and the relevant legislation does not require their storage .

TRANSFER OF PERSONAL DATA OUTSIDE ROMANIA

16. We do not transfer personal data to other countries. In any case, if we do so, we will obtain your prior consent and we will ensure that your personal data will benefit from protection.

YOUR RIGHT

17. At any time, you can exercise the following rights: information, access, rectification, deletion, restriction of processing, portability, opposition, as well as the right not to be subject to an automatic decision (profiling). To exercise them, you can contact us at the e-mail address GDPR@policolor.ro or by sending an address to our headquarters in Bd. Tudor Vladimirescu no. . 29A, et. 6, sect. 5, AFI Tech Park 1 building, Bucharest

The right to information and access

At your request, we communicate to you each and every one of the information we have about you.

Right of rectification

You can ask us to modify and/or update your data or correct your data, if they are inaccurate.

Control rights for your data (restriction of processing, portability, opposition, as well as the right not to be subject to an automatic decision – profiling)

For the personal data that we hold about you, you can ask us for: deletion (total or partial, part of them), portability (we transfer them to any operator indicated by you where this is feasible from a technical point of view), restriction of processing, as well as the right not to be subject to an automatic decision – profiling.

We will take into account any requests or complaints we receive and we will send an answer in compliance with the deadlines provided by law. If you are not satisfied with our answer or consider that the processing is carried out in violation of the applicable legislation, you can file a complaint with the Romanian data supervisory authority, respectively the National Supervisory Authority for the Processing of Personal Data, based in Bd Gheorghe Magheru no. 28-30, Bucharest, Romania.