Introduction
Proper protection of personal data is an important objective of Prutul SA.
This policy aims to present Prutul SA’s approach as an Operator in the field of personal data and is addressed to individuals outside the organization with which Prutul SA comes into contact, including customers and visitors of the Prutul website, partners or potential contractual partners or contractual representatives/legal, employees of the partners or potential contractual partners (any, hereinafter referred to as “you”).
More specifically, this document aims to provide the following information:
(a) The identity and contact details of the Operator;
(b) The contact details of the data protection officer within Prutul SA;
(c) The purposes for which personal data are processed by Prutul SA, as well as the legal basis for the processing.
(d) Where the processing is carried out for the legitimate interests of Prutul SA, an indication of those purposes;
(e) The recipients or categories of recipients of personal data;
(f) Where applicable, the intention of the Operator to transfer personal data to a third country or an international organization;
(g) The period for which the personal data will be stored or the criteria used to determine that period;
(h) The existence of the right to request the Data Controller, the data subject’s access to personal data, their rectification or deletion or restriction of processing or the right to oppose the processing, as well as the right to data portability and the exceptions and limits of such rights.
The policy of Prutul SA takes into account the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC. The terminology used in this Policy has the meaning of this Regulation.
For additional information or questions, please use the contact details mentioned in Section 1.2 below.
In order to facilitate the interaction between Prutul SA and you regarding the field of personal data protection, Prutul SA has appointed a person who has responsibilities in the field of personal data protection (the person responsible for data protection at company level “DPO”).
The contact details of the DPO are as follows:
Prutul SA may process, depending on the situation:
(a) Personal data obtained from you;
(b) Personal data that were not obtained from you (but from third parties / sources).
The personal information that Prutul SA may process may thus include, depending on the situation:
(a) Contact information, such as your postal address, e-mail address and telephone number (s), your name, the company you work for, your position or position;
(b) Technical information, such as information generated as a result of cookies, when you access our website;
(c) Any other information regarding your person that you may provide or receive to us indirectly, even completely independent of the approach of Prutul SA, and which may also include special categories of data.
As indicated below, the vast majority of personal data processing performed by Prutul SA in relation to persons outside the company concern purposes based on legitimate interests.
These, as appropriate, include:
(a) The legitimate interest in providing quality goods and services to our customers;
(b) The legitimate interest in promoting the products, brand and reputation of Prutul SA;
(c) The legitimate interest in developing and implementing effective relationships with suppliers and other contractual partners;
(d) The legitimate interest in attracting and securing the necessary and qualified workforce to carry out the activities of Prutul SA;
(e) Other legitimate interests arising in connection with the projects pursued by Prutul SA and the developments it has to deal with in the context of its activities.
2.1. The purposes for which Prutul SA currently processes personal data are:
a) Processing of personal data for the purpose of carrying out the activity;
b) Processing of personal data for marketing purposes;
c) Processing of personal data for the purpose of verification, resolution of notifications and complaints sent to the addresses office@prutul.ro, client@prutul.ro or clientagro@prutul.ro;
d) Processing of personal data for recruitment purposes.
2.2. The basis for the processing of personal data for these purposes may be:
(i) The legitimate interest of Prutul SA or a third party;
(ii) The execution of a contract or the taking of steps at the request of the data subject before the establishment of a contract;
(iii) The legal obligation;
(iv) Consent.
2.3. Personal data processed for these purposes may, to the extent necessary, be in the categories mentioned in Section 1.3 above.
2.4. Possibility of transferring personal data to a third country. No transfer to countries outside the European Union is anticipated in connection with these purposes.
2.5. Your personal data may be stored for periods determined according to the following criteria: (i) the durations provided by specific legislation (such as labor law, accounting or National Archives law); (ii) the maximum periods during which issues of legal liability could be brought against Prutul SA or Prutul SA.
2.6. In relation to the above purposes, the obtaining by Prutul SA of personal data may be necessary for the establishment and execution of a relationship with you or with the entity you represent / within which you operate. The consequence of Prutul SA not obtaining personal data may be the impossibility to establish a relationship or the impossibility of adequately executing the agreed obligations.
2.7. The rights you have as a data subject, as well as the exceptions and limits to them are those mentioned in Section 3 below.
As a data subject, you have the rights under the applicable law, within the limits described therein and mentioned below:
If Prutul SA has well-founded doubts regarding the identity of the natural person submitting a request to exercise the rights, it may request the provision of additional information necessary to confirm the identity of the data subject.
This Policy is applicable as of May 25, 2018.
