Updated on 01.08.2023
Applicable from 01.08.2023
The GDPR defines personal data as: “any information regarding an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to its physical, physiological, genetic, psychological, economic, cultural or social identity“.
Danubius is committed to implementing the highest standards of confidentiality and transparency regarding the personal data it processes in its current activity. Protection and transparency regarding the processing of your personal data in our business is our priority.
1. What categories of personal data we process
Depending on the circumstances in which your personal data is transmitted to us, we may process the following categories of personal data:
- Information you provide to us as a result of sending a general request for information by filling in the contact form: name and surname, email address, phone number;
- Information you provide to us as a result of your request to subscribe to the newsletter, respectively email address;
- Information we observe about you in your use of the site: IP address, type of device by which you accessed the Site, time and duration of each session on the Site (in this sense we recommend you read the Cookies Policy).
- Information you provide us as a result of using the call center service (by calling the phone number dedicated to this line), respectively recording and storing the user's phone number, the date and time of the call, and the content of the call;
- Information you provide to us as a result of using the chat service, respectivelyinformatiile pe care the user provides during the conversation with our consultant, which may include: first and last name, email address, telephone, date of the conversation and any other information that users provide during the conversation
2. Purposes and bases of processing
a. Resolving your claims
We collect personal data relating to name and surname, email address, telephone number and position (if applicable) in order to maintain a correspondence with you. Thus, if you make a request, we will process your data in order to resolve it. In this context, if the situation presented by you for the request requires it, we will be able to transmit your contact data to other people, considering the object of your request.
The basis for processing your data in this context is your consent - art. 6 para. (1) lit. of the GDPR. If additional processing operations become necessary, the basis for processing may be the legitimate interest of Danubius - art. 6 para. (1) lit. f of the GDPR.
b. Subscribe to the newsletter through the Website
By subscribing to the newsletter, we collect personal data related to your email address in order to send you commercial offers related to the products and services offered by Danubius.
The basis for processing your data in this context is your consent - art. 6 para. (1) lit. of the GDPR.
You have the possibility at any time to opt out of receiving newsletters by sending a request to this effect to email@example.com.
c. Call center/chat service
Regarding the call center/chat service, the purpose of processing personal data, as identified, is to provide the service requested by the customer, to ensure the improvement of the services offered to customers, as well as the defense or exercise of a right in court.
The basis for the processing of these categories of data is represented by the User's efforts to conclude a contract (art. 6 para. (1) letter b of the GDPR) and the legitimate interest of Danubius regarding the improvement of the services offered to its customers.
3. How long we keep your personal data
As a general rule, the processing of personal data based on consent ceases when the consent is withdrawn, which is equivalent to the deletion of your data from our databases. You must bear in mind that the exercise of the right to withdraw the consent produces effects only for the future, which means that the processing prior to the exercise of the right remains valid.
In the case of processing based on legitimate interest, the term of storage of your data is 3 years from the date of the last contact with you. If a dispute arises between Danubius and you, your personal data will be stored in our systems until the final resolution of that dispute.
The personal data processed when using the call-center service will be stored for a maximum of 6 months from the date of use of the service by the user, and if necessary, for a period equal to the duration of the legal limitation period or until the final settlement of the dispute, for the defense of rights in court.
With regard to the chat service, the duration of storage is determined by the contrary manifestation of will of the user.
4. Recipients of your personal data
As the case may be, we may transmit or provide access to certain of your personal data (among those provided for in art. 2 letter a above) to institutions or public authorities that request the provision of personal data in order to fulfill their legal duties .
5. Links to social networks
Our web page contains HTML links to social media, making distribution on social media platforms easy.
For more information about the purposes of data processing and the further use of your personal data by the provider and its websites, as well as about your rights and possible settings in order to protect your privacy, please consult the information on protection of personal data of the respective service provider.
- Facebook: http://www.facebook.com/policy.php
- Instagram: https://help.instagram.com/
- You Tube: https://www.google.de/intl/de/policies/privacy/
- LinkedIn: https://www.linkedin.com/legal/impressum
6. Links to Other Websites
The processing of personal data that is carried out on other sites by means of accessing this Site will be governed by the personal data processing policies of those other sites.
Please carefully consult the personal data processing policies, respectively the terms and conditions of the respective sites.
7. To which countries we transfer your personal data
Currently, we store and process your personal data on the territory of Romania.
8. How we protect the security of your personal data
Ensuring the confidentiality of the personal data you transmit to us is an important concern for us. We have implemented technical and organizational measures to maintain the confidentiality and security of your personal data in accordance with our internal procedures regarding the storage, disclosure and access of personal data. Personal data may be stored on our personal data technology systems, those of our contractors or in hard copy.
Your personal data is stored on secure servers.
The information you provide through this website is transmitted and verified automatically, in encrypted form, using a TSL (Transport Layer Security) protocol. We do this to prevent misuse of data by third parties.
Regarding the other situations in which we process your personal data, we constantly take measures to increase the degree of training of employees in terms of compliance with data protection rules, Danubius employees being the subject of firm confidentiality commitments.
9. Your Rights
The GDPR established a series of rights of data subjects regarding the processing of their data by operators. In this context, you can request access to your data, correction of any mistakes in our files and/or you can object to the processing of your personal data in certain cases.
You can also exercise your right to file a complaint with the competent Supervisory Authority or go to court. If applicable, you can also benefit from the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.
In order to exercise your rights, you can contact us:
– by e-mail to the address: firstname.lastname@example.org
We take the privacy of all records containing personal data seriously. For this reason, please send us your requests regarding such records using the email address/identification data used by you in your relationship with us. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.
We will respond to any valid requests within a maximum of one month, unless this is particularly complicated or you have made multiple requests, in which case we will inform you within one month of the reasons for the delay and you will receive an answer from us within a maximum of two months. We may need to ask you for more information in order to qualify your request. This will help us act faster and shorten the response time to your request.
You can ask us:
· to confirm whether we are processing your personal data;
· to provide you with a copy of this data;
· provide you with other information about your personal data, such as what data we have, how we use it, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, how you can complaint, where we obtained your data, to the extent that the information has not already been provided to you by this notice.
You can ask us to correct or complete your inaccurate or incomplete personal data.
We may attempt to verify the accuracy of the data before rectifying it.
You can ask us to delete your personal data, but only if:
· they are no longer necessary for the purposes for which they were collected; or
· you have withdrawn your consent (where the data processing was based on consent) and there is no other legal basis for the processing; or exercise your right to object under art. 21 para. 1 or 2 of the GDPR; or they were processed illegally; or we have a legal obligation to do so.
Restriction of data processing
You can ask us to restrict the processing of your personal data, but only if:
· their accuracy is contested (see rectification section), to enable us to verify their accuracy; or
· the processing is illegal, but you do not want the data to be deleted; or
· they are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court; or
· you have exercised your right to object and checking whether our legitimate rights prevail is ongoing.
If the processing has been restricted, your personal data may, with the exception of storage, be processed only with the consent of the data subject or for the establishment, exercise or defense of a right in court or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a member state.
The right to file a complaint
To exercise your right to file a complaint, you can submit your request to the National Authority for the Supervision of Personal Data Processing, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro.