Processing of personal data

Starting from May 25, 2018 Regulation 679/27-Apr-2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as „GDPR”) is applied in all states of the European Union.

The purpose of this Information regarding the processing of personal data is to inform you about how we understand to regulate and integrate the GDPR policy at the level of our company and is an integral part of the Contract for the supply of products and/or the provision of services concluded with ROMAUDIOVIDEO.

The operator (the one who processes your data)

SC ROMAUDIOVIDEO S.R.L.

Headquarters: Sos. Heroes no. 154, Moara Vlăsiai, Ilfov

Order number in the Trade Register: J23/713/2012

Unique identification code: RO1572736

Purposes of processing

The processing of your personal data as a data subject is carried out for the following purposes:

for the provision of products and services purchased or ordered from Romaudiovideo;
to be contacted and respond to you in relation to the products and services you use or expect to use from Romaudiovideo;
to keep in touch with you and provide you with necessary information through our websites;
for marketing communications. We will only carry out these communications if we have the consent of the person concerned.

Who are the data subjects and the legal basis of the processing

Customers or potential customers whose data we will use to prepare offers, conclude and execute the contract and to provide the services requested by them. In this case, we will base the processing on the need to conclude and/or execute a contract, but also on compliance with the legislation in force;

Employees of our contractual partners (companies that are our business partners). We process the following data for the employees of our partners: name, surname, function/position, employer, phone number, e-mail address, mailing address to maintain the contractual relationship with the companies they represent and to be able to collaborate. In this case, we will base our processing on our legitimate interests to be able to execute the contracts we have concluded with other companies, on the necessity of concluding and/or executing a contract but also on compliance with the legislation in force;

Individuals with whom we do business. In order to carry out business relations with various authorized natural persons, it is necessary to process certain information, namely: name, surname, e-mail address, telephone number, mailing address. In this case, the legal basis of the processing is the conclusion / execution of a contract and compliance with a legal obligation.

Apply for a position that Romaudiovideo has available. To carry out the recruitment process, we collect the following data: the data included in the CV that you send us. As a rule, these are: surname, first name, contact details (phone number and e-mail address), professional experience, proof of studies and other documents that we may request from you. Also during the interview we will process personal data relating to the candidate, such as: his/her professional preferences, details of experience and education not included in his/her CV, a candidate’s salary expectations. As part of the hiring process, we may request additional documents (such as transcripts, diplomas, certificates, authorizations, professional qualifications, etc.), which will also contain personal data. In these cases, we will base the processing of your data on the conclusion / execution of the employment contract;

Visitors to the premises where we have video surveillance cameras installed, to ensure the security of our employees, other people in those rooms and our assets. Therefore, we will process images (video recordings) of all visitors. In all cases, we have indicated the locations of these cameras with icons, as required by law. The processing of data for this purpose is based on our legitimate interest in ensuring the security of people and objects on our premises.

Visitors to our sites

In this case, we may use the data of these categories of data subjects for the following purposes:

Improving the user experience on our websites. To be able to take into account the preferences that users have expressed in previous browsing sessions, to adapt our website to the device that the user uses. We process data such as: IP address; cookie identifiers; other online identifiers; unique device identifier (universally unique ID – UUID); the date and time of accessing the website; visit history; the device from which you access the website; Internet browser type and browser language; information about where our website is accessed from. The basis of the processing will be our legitimate interest in providing our users with a pleasant browsing experience on our websites;
Knowing the opinions of people who communicate with us through social networks. When someone posts a comment under one of our social media posts, and clicks the Like button or reshares our post, or sends us a message on one of our accounts, we will process the following data about that person: username, profile photo , the action taken – like / other reaction or the content of the comment.

Data transfer

Currently, in order to fulfill the above-mentioned purposes, it is possible for ROMAUDIOVIDEO to transfer certain categories of personal data outside of Romania, to EU countries: Germany, the United Kingdom of Great Britain, Spain, Italy, as well as outside the EU to the United States of America. For transfers outside the EU, ROMAUDIOVIDEO will base its transfer of personal data on the basis of standard contractual clauses adopted at the level of the European Commission or other guarantees recognized by law.

It is possible that in the course of its activities, the above-mentioned transfer states may change. In this case the list of transfer states mentioned above will be updated.

Data retention periods

Personal Data is processed only for the specified purposes and is kept only as long as necessary to fulfill the purposes for which the respective information is processed. As of the date of this document, personal data is kept for a period of:

with regard to customer data, the general rule is that it will be stored for a period of 10 years from the end of the financial year of the year in which the business relationship will end;

with regard to employee data, the general rule is that it will be stored for a period of 75 years from the date of employment;

in the case of databases managed for direct marketing purposes, the data will be processed as long as the individual maintains his consent to receive these communications, as well as subsequently for the period necessary to demonstrate compliance with legal requirements (e.g. the 3-year statute of limitations ).

Who will we disclose your data to?

As a rule, Romaudiovideo does not disclose the data it owns and processes, about all categories of data subjects, to other natural or legal persons. The cases in which Romaudiovideo customer data may be disclosed to other companies or individuals are those where other companies, individuals or legal entities act as authorized persons in the relationship with Romaudiovideo. In these cases, we will disclose the data for legitimate reasons related to the execution of a contract, the preparation of documentation necessary for the execution of the contract, the establishment, defense and exercise of our rights or interests.

The categories of recipients to whom we may disclose your data are:

our employees and collaborators in Romania;
third party companies or contractual partners;
state authorities (ANAF, criminal investigation bodies, etc.)

In all these cases Romaudiovideo will make all reasonable efforts to ensure that the recipients of the data process them in conditions of security and confidentiality, in accordance with the purpose for which they were transmitted to them and respecting the rights of the data subjects.

Your rights

As a data subject you have the following rights:

The right to information and access to personal data

The data subject has the right to request a copy of the personal data held by Romaudiovideo;

The right to rectify personal data

The data subject has the right to rectify the data if it is not correct.

The right to erasure

The data subject has the right to request the operator to delete without delay the personal data concerning him in the following cases:

the personal data are no longer necessary to fulfill the purposes for which they were collected or processed;
the data subject objects to the processing and there are no legitimate reasons that prevail with regard to the processing;
personal data were processed illegally;
personal data must be deleted to comply with the law;

ATTENTION: Data deletion will not be carried out if:

the data are necessary to fulfill a legal obligation;
for archival purposes in the public interest;
for establishing, exercising or defending a right in court.

The right to restrict the use of your personal data

If the data subject considers that the data that Romaudiovideo holds about him is incorrect or should not be processed, he will contact Romaudiovideo at the premises for a discussion about his rights. In certain circumstances, restriction of processing may be requested.

The right to object to the use of personal data

In certain circumstances, the data subject has the right to oppose the processing by Romaudiovideo of his personal data, including the processing of data for direct marketing purposes.

The right to data portability

The data subject has the right to request the personal data concerning him and which he has provided to Romaudiovideo in a structured and machine-readable format.

The right not to be subject to a decision based solely on automated processing

The data subject has the right to request and obtain the withdrawal/cancellation/reevaluation of any decision that produces legal effects regarding him/her, adopted exclusively on the basis of personal data processing.

The right to withdraw consent at any time

Withdrawal of consent can take place at any time and will have effects only for the future, the processing carried out prior to the withdrawal still remaining valid.

What can happen if a person does not want to disclose their data to us

In most cases, data subjects do not have the obligation to communicate their personal data.

However, your refusal to send us the personal data mentioned above leads to the impossibility of providing services/providing goods that are related to Romaudiovideo’s main activities.

Where you can go to exercise your rights and the response period.

The exercise of the above-mentioned rights will be based on a written request addressed to Romaudiovideo headquarters or by email to the address data-protection@audio.ro.

The response time for any request regarding your rights is 30 days. Except for situations where the request is complex or there is a large number of requests, when the term can be extended by another 60 days.

If you are not satisfied with the solution received, you can contact the National Authority for the Supervision of Personal Data Processing – contact details can be found at www.dataprotection.ro.

update

This Information may undergo content changes over time. Any new version will be announced and displayed on Romaudiovideo’s web page.