Privacy Policy
Introduction
This policy applies to our websites, application, products, or services that refer to this policy or that do not have a separate privacy policy (collectively referred to as our “Services”).
The purpose of this privacy policy is to provide a better understanding of the following aspects:
- the information we collect;
- how we use that information;
- how this information is shared;
- your rights;
- other useful concepts associated with privacy and security.
We hope you will take the time to read this policy. It is important to visit us frequently for updates to this policy. If we make changes that we consider important, we will notify you by sending a notification and/or contacting you using other methods, such as email.
Who is the data controller?
The data controller is the ADREM group, headquartered in Bucharest, Iancu de Hunedoara Street, Sector 1.
Who is the Data Protection Officer?
Within the ADREM group – the Data Controller, the DPO’s contact details are:
Data Protection Officer | Phone: 0722469369 Email: [email protected] |
Information we collect
Information you provide to us
We collect information about you as a Data Controller or as a processor for other controllers for whom we provide services. This information may include, but is not limited to: Name and surname, CNP (Personal Numeric Code), Domicile, phone number, email address, and any other details necessary for the execution of contracts you have directly with us or with other controllers who have authorized us to process your data.
We may also collect information from you if you request information or customer support, or if we are legally obliged to do so.
Additional information collected
We may also collect the following information:
- your name, contact details, and message if you wish to contact us;
- pages visited and content viewed, links and buttons accessed, URLs visited before and after using our service. For more information about cookies and how to manage them, please consult our Cookie Policy;
- information from third-party databases, for the purpose of complying with our legal obligations.
Third-party and public sources
Not all personal information we hold about you will always come directly from you. We may also collect information from third parties, such as our partners, service providers, and public websites and other public authorities for the purpose of complying with our legal obligations.
How we use this information
We process personal information for the following service-related and business activities:
Legal and regulatory obligations:
We may be required to use and retain personal information for legal and compliance purposes, such as preventing, detecting, or investigating a crime or fraud. We may also use personal information to fulfill our internal and external audit requirements, for information security purposes, and as we deem necessary or appropriate: (a) under applicable law, which may include laws outside your country of residence, and (b) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and governmental authorities, which may include such authorities outside your country of residence.
Contractual obligations
We use personal information, such as your name, email address, phone number, to verify your identity and to fulfill our contractual obligations directly with you or with other entities that, in turn, have legal relationships with you. The processing mentioned above is necessary for us to provide you with services according to the terms and conditions. We may also use personal information to enforce our terms and conditions.
Other purposes:
We may be required to use and retain personal information for loss prevention and to protect our own rights, privacy, safety, or property, or those of others, in accordance with our legitimate interests.
How this information is shared
Within the ADREM group
ADREM may use and share the information you provide and other information it holds about you, for the following purposes:
Legal and regulatory obligations.
For the purpose for which it has been authorized by other controllers with whom you have legal relationships.
For the purpose of fulfilling agreed contractual obligations where a contract has been concluded in this regard.
Third-party service providers and our partners
The ADREM Group may mandate third parties to process your personal information, to provide services and/or to compile statistics for research purposes as well as for other purposes provided for by law. As part of our agreements, we may share your information with other entities located abroad, mainly to access IT and cloud services.
Third parties for legal reasons
We will share personal information in situations where we deem it necessary, such as:
To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence;
To protect our rights and the rights of vehicle accident victims.
Your rights
Under EU Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as a data subject, you have a series of rights, which are detailed below. Some of these apply only in specific situations and are qualified in certain respects by derogations in data protection law. We will inform you in our response to your request if we rely on any such derogations.
Access to personal data:
You have the right to request a copy of the personal information we hold about you. If you wish to make such a request, please refer to the Contact section for information on how to reach us. In your request, you must include adequate information to identify yourself and any other relevant data that will reasonably help us fulfill your request. Your request will be processed as soon as possible.
Correction of personal data:
You can ask us to rectify or correct any personal data we process about you that is inaccurate.
Right to withdraw consent:
If we rely on your consent to process your personal data, you have the right to withdraw that consent. The withdrawal is made by a written request from you, to the email address: [email protected]
Right to erasure:
You can ask us to delete your personal data when there is no good reason for continuing the processing. This right applies only if the exercise of it does not conflict with the fulfillment of legal obligations or with the legitimate interest in the preservation of disputed rights. The request for deletion is made by filling in the form available at www.adrem.ro/ or by sending an email to [email protected].
Right to data portability:
This right allows you to obtain your personal data, which you have provided to us with your consent or which was necessary for us to fulfill our legal duties, in a format that allows you to transfer that personal data to another organization. You have the right to ask us to transfer your personal data directly to the other organization, if this is technically feasible.
Right to restrict processing of personal data:
In certain situations, you have the right to ask us to suspend the processing of your personal data. When we suspend the processing of your personal data, we will still be allowed to store your personal data, but any further processing of this information will require your consent, subject to certain derogations.
Right to object to the processing of personal data:
You have the right to object to our use of your personal data that is being processed. However, we may continue to process your personal data, despite your objection, when there are legitimate or legal grounds to do so or when we need to process your personal data in connection with any legal action.
Rights related to automated decision-making and profiling:
You have the right not to be subject to a decision based solely on automated processing (without human involvement), when that decision produces a legal effect or significantly affects you in another way. This right means that you can ask us to involve one of our employees or representatives in the decision-making process. We are pleased that we do not make automated decisions of this kind.
Other information
Retention of personal data
We retain personal data for as long as we reasonably need it for legal purposes. Please note that, in certain situations, we may be required to retain your information indefinitely. We will take all necessary measures to ensure the confidentiality of the information during its retention period.
Security of personal data
We recognize that online security and data protection is an area of vital importance to all our customers, so it is important for us that you trust the security of your personal data before registering an account. We are committed to using security measures to protect your information against unauthorized access and to prevent accidental or unlawful processing, disclosure, destruction, loss, alteration, and damage.
Our approach focuses on risk prevention. To assist us in this regard, we use pseudonymization and encryption whenever possible, to reduce the impact of any potential incidents. As the security of certain communications over the internet is not fully guaranteed, we cannot guarantee the security of the information you disclose using an internet connection.
You accept the inherent security implications when using the internet, and the ADREM group will not accept any liability for any direct, consequential, incidental, indirect, or punitive losses or damages arising from such a situation.
Other information
For any requests related to your personal information or any of the aforementioned rights, please contact us in one of the following ways:
Email: [email protected]
Phone: 0722469369
By mail: Bucharest, Iancu de Hunedoara Street, Sector 1