1. Legal basis

General Data Protection Regulation (EU) No. 2016/679, Law No. 190/2018 on the implementation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Law No. 287/2009 on the Civil Code, Law No. 8/1996 on copyright and related rights.

2. Operator’s identity

SC Carp Management & Consulting SRL, with its registered office in Bucharest, Ramnicu Valcea Street, No. 14, Ap. 25, Bucharest County, registered with the National Trade Register Office under No. J40/9159/2017, VAT / CUI RO 37751899, telephone 0740510304, email andreea.carp@cmconsult.ro.

3. Processed personal data

The Operator collects, stores, and processes the following personal data about you: (i) name, surname, home and/or residence address, personal identification number (CNP), identity card/identification document series and number, email, telephone, fax.

4. Method and purpose of processing personal data

The personal data provided in point 3 (i) are processed in order to obtain your consent regarding the capture and processing of your image and voice through photos and/or audio-video recordings – point 3 (ii), for archiving the consent, and for exercising rights and legitimate interests arising from the use of images and/or audio-video recordings for the purposes indicated below.

The personal data provided in point 3 (i) regarding telephone, fax, email, and address are processed for communication purposes with you, including the transmission of collaboration offers, marketing, or periodic information (newsletter) regarding our activities.

5. Duration

The personal data provided in point 3 are kept for the duration necessary for the execution of contractual and commercial relationships, etc., as well as for an additional period of  2 years.

We review the collected data annually, analyzing the extent to which their retention is necessary for the mentioned purposes, your legitimate interests, or the fulfillment of legal obligations by the Operator. Data that is no longer necessary will be deleted.

6. Disclosure of your personal data to other recipients

The Operator discloses your personal data to public entities/authorities (ISU, ANAF, Police, Courts, Public Prosecutor’s Office, City Hall, Local Council, County Council, Ministries, etc.) and other institutions that may claim access to such information under the conditions of the law.

7. Your rights

Right to information – you can request information regarding the processing activities of your personal data, the identity of the Operator and its representative, or information regarding the recipients of your data;

Right to Rectification – You can rectify inaccurate personal data or complete it.

Right to Erasure – You can obtain the erasure of data if their processing was not legal or in other cases provided by law.

Right to Restriction of Processing – You can request the restriction of processing if you contest the accuracy of the data or in other cases provided by law.

Right to Object – You can object, in particular, to the processing of data based on the legitimate interests of the Controller.

Right to Data Portability – Under certain conditions, you can receive the personal data you have provided us in a format that can be automatically read, or you can request that such data be transmitted to another controller.

Right to Lodge a Complaint and to Address Judicial Courts – You can lodge a complaint regarding the processing of personal data with the National Supervisory Authority for Personal Data Processing and/or address judicial courts to enforce your rights.

Right to Withdraw Consent – In cases where processing is based on your consent, you can withdraw it at any time. The withdrawal of consent will only have effects for the future, and the processing carried out prior to withdrawal will remain valid.

Right not to be subject to Automated Decision-Making or Profiling – You can request and obtain human intervention regarding such processing or express your own point of view regarding this type of processing.

8. Exercising your rights

To exercise these rights, you can submit a written request, dated and signed, using the following contact details:

Responsible Person:

Email:

Fax:

Mailing Address:

9. Other useful information

We respect the legal provisions regarding the protection of personal data and implement technical and organizational measures to protect all operations directly or indirectly related to personal data, preventing unauthorized or illegal processing, as well as accidental or unlawful loss or destruction.

We do not use personal data for automated processing or profiling. We never make automated decisions about you. We use technical means to store data securely. We do not process data for secondary purposes that are incompatible with the purposes for which they were collected.