The European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data (“the Regulation”) is applicable on 25 May 2018. Its main aim is to increase the level of protection of personal data and create a climate of trust that will allow each person to control their own data.Therefore, we believe that it is a good time to inform you how we protect your personal data and how we qualify the Regulation. The next data protection notice is designed to inform you about the processing your personal data and your rights. Regarding this processing under the General Data Protection (“GDPR”) and local legislation in force.
We, EXPERT CONNECTION SRL, based in Spl. Independence 319 Sector 6, Bucharest, we represent the operator in accordance with GDPR and, therefore, we are responsible for processing the data described below. For questions or requests regarding data processing, please contact us at the contact details you can find below. The collection of these data is done only with your consent. Your refusal determines the impossibility of the operator (EXPERT CONNECTION SRL) to conclude the service / sales contract for the products, to send the information or the products ordered, the latter missing one of the essential conditions , respectively the identity of the parties.
c) Personal data
EXPERT CONNECTION SRL processes the following personal data: First name and surname, home address and e-mail address; ID card details, CNP, phone number; Communications you or us direct to us by letters, emails, SMS, chat services, calls and social networks.
Information on Processing
a) Types of data processing
“Processing” means any operation or set of operations performed on personal data or on personal data sets with or without the use of automated means such as collecting, recording, organizing, structuring, storing, adapting or modifying, extracting, consulting, using, transmitting, disseminating or making available in any other way, alignment or combination, restriction, erasure or destruction.
b) Principles of processing personal data
EXPERT CONNECTION SRL undertakes to comply with the principles of personal data protection (hereinafter referred to as the “Principles”) set out in the GDPR to ensure that all data are: • Processed correctly, legally and transparently; Collecting for specified, explicit and legitimate purposes; Relevant, relevant and limited in relation to the purposes for which they are processed; Proper and up to date; Stored in a form that does not allow identification of the data subjects longer than necessary for the purpose of the processing; Processed in accordance with the rights of the data subject, in a way that ensures adequate processing security so that the data is complete, confidential and available.
c) Purpose and basis of data processing
Register users. We will process the personal data collected through the enrollment form on the www.expertconnection.ro website where you create an account or subscribe to a newsletter for better and easier administration. This processing is based on Article 6, paragraph 1, point b) of the GDPR. Customers’ analysis and profiling. We give your prior consent to use your personal communications data to you: We use your data to manage our relationship with you as a client and to improve your services and experience with us; We can provide you with our information by email. This processing is legitimately based on Article 6, paragraph 1, sentence 1 (a) GDPR. You can unsubscribe from this kind of information. You have the right not to consent or to oppose direct commercial or direct marketing activities, including the creation of a profile for such activities. Your personal data is to be deleted by a written request to firstname.lastname@example.org. Improving and developing services: Analyzing how you use our services helps us understand you better and shows us what we can improve. For example, we analyze your purchase history data to provide you with information or advice on how best to use our services. Such processing is legitimately based on Article 6 1 lit. a) from the GDPR. The fulfillment of legal obligations. Personal data may be processed for the purpose of fulfilling legal obligations. We use your payment information for accounting, billing, and for detecting and / or preventing any fraudulent activity. Such processing legitimately falsifies Article 6 1 lit. c) from the GDPR.
d) Data beneficiaries
No other transfers of personal data will be made to other recipients, unless we have this obligation by law.
e) Mandatory / Voluntary Data Providing and Time of Preservation
The provision of the following data is required to be able to conclude the contract with you / your registration or to contact you for the above purposes: First and last name, home address, telephone and e-mail addressThe provision of other data is optional and these data are not are a legal or contractual requirement or a requirement to enter into a contract. If you do not provide this personal information, this will have no other consequences on you. Children at least 16 years of age can give their consent.
f) Data storage period
EXPERT CONNECTION SRL stores your personal data for as long as processing is required and until you ask us to delete it. We will respond to these requests, subject to the preservation of certain information, including later, in situations where applicable law or legitimate interests impose it. When we no longer need your personal data, we will delete or destroy it safely. We will also consider whether and how we can minimize in time the amount of personal data we use and whether we can ensure the anonymity of your personal data so that it is no longer associated with you or identify you, use that information without notifying you later.
Security of processing
EXPERT CONNECTION SRL has adopted technical and organizational data processing measures updated in accordance with the GDPR requirements to protect your personal data against any unauthorized access, improper use or transmission, unauthorized modification, accidental destruction or loss . All our employees and collaborators and any third parties acting on behalf and on behalf of EXPERT CONNECTION SRL are under the obligation to respect the confidentiality of your information and the GDPR requirements, in accordance with the provisions of this Policy. We ensure that our contractual partners who have access to the data with personal data that we process, we impose contractual obligations in accordance with legal provisions and that we verify compliance with the obligations they have assumed. They will process our personal data on behalf of us only in accordance with the instructions received from it and only complying with security and confidentiality requirements within the required limits.
Processing personal data in parenthood
Some of the personal data processed by us may be transferred to third parties and express your consent to do so and in situations where there is a legal obligation for EXPERT CONNECTION SRL to do so.
Due to possible changes in legislation, a change to these data protection notices may become necessary. In this case, we will inform you of such changes. To the extent that the changes affect a processing that is based on your consent, we will require a new consent if necessary. By ticking your acceptance box, you agree to your personal data processing for the purposes outlined above, meaning that we will also use your personal information to provide our information by email, SMS, letter, telephone or fax.