Politică privind prelucrarea datelor cu caracter personal
Respect for your privacy is one of our fundamental commitments, and therefore, we pay the utmost attention to processing your personal data in accordance with applicable legislation.
VERDAPARK SRL, headquartered at 22-24 AVRAM IANCU STR., Cluj-Napoca, Cluj, tax identification code 38221866, registered with the Trade Register Office under no. J2017005622122 (“VERDAPARK SRL”, “we”), processes your personal data (“Personal Data”) as a data controller. The purpose of this privacy notice (“Policy”) is to detail how VERDAPARK SRL processes your Personal Data.
1. PERSONAL DATA PROCESSED, PURPOSES OF PROCESSING, AND LEGAL BASES
A. Other Processing
a. Litigious Matters
Personal data processed: first and last name, home address, and any other information necessary within the dispute.
| Purpose of Processing | Legal Basis |
|---|---|
| Defense of legitimate rights and interests, and submission of any claims before judicial bodies or any other public authorities | Details: The company's legitimate interest in defending its rights or legitimate interests, or supporting claims resulting from or closely related to the conclusion or performance of the contract, or exercising the right of defense in the event of litigious proceedings initiated against the company. |
b. Communication with Users
Personal data processed: first and last name, email address, phone number, and any other information contained within the communications.
| Purpose of Processing | Legal Basis |
|---|---|
| Communication with users regarding services offered by the company | Execution of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR),Performance of a task carried out in the public interest or in the exercise of official authority vested in the Company (Art. 6(1)(e) GDPR),Consent of the data subject (Art. 6(1)(a) GDPR) |
2. PROVISION OF PERSONAL DATA
You may refuse to provide certain Personal Data, but in such cases, you may be unable to benefit from specific services related to the relationship described in this Policy.
3. ABOUT LEGAL BASES
The legal basis for processing varies depending on the specific situation and the Personal Data being processed.
Where we process your Personal Data on the basis of consent, we will request your free, informed, specific, and unambiguous consent for that specific processing. By expressing your consent, you agree that we may collect, use, disclose, process, and transfer your Personal Data in accordance with this Policy.
4. SOURCE OF PERSONAL DATA
The source of Personal Data is: the online user.
5. AUTOMATED PROCESSING OF PERSONAL DATA
Your Personal Data will not be processed to generate decisions based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you, as provided under Art. 22(1) of the GDPR.
6. PROCESSING DURATION
The processing duration of Personal Data varies depending on the specific processing operation:
| Operation | Duration |
|---|---|
| Litigious matters | The duration necessary to resolve the dispute |
| Communication with users | The duration of the account's existence or the time needed to resolve the request/issue, but no longer than 3 years (in the absence of an account) |
In certain circumstances, we may retain Personal Data for longer periods of time to maintain an accurate record of your dealings with us in the event of any complaints, or if we reasonably believe there is a prospect of litigation.
7. TRANSFER OF PERSONAL DATA
We may transfer Personal Data, to the extent necessary, to the following categories of recipients: state authorities, IT service providers, security service providers, accounting service providers.
These recipients may be located within the European Union and/or the European Economic Area, as well as outside of them, including in countries that are not recognized as providing an adequate level of protection. In such cases, the transfer of Personal Data is carried out only if adequate safeguards exist in accordance with applicable law (such as Standard Contractual Clauses issued by the European Commission). You may request a list of recipients in third countries, as well as a copy of the agreed provisions that ensure an adequate level of Personal Data protection.
8. SECURITY OF PERSONAL DATA
The security of your Personal Data is important to us. Therefore, your Personal Data will be processed by applying reasonable technical and organizational measures to protect it, such as limiting access to Personal Data, encryption or anonymization of Personal Data, and storage on secure media. However, despite our best efforts, we cannot always guarantee the absolute effectiveness of the security measures implemented, and therefore, we cannot guarantee the security of Personal Data at all times.
9. RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
Right of access: You have the right to obtain confirmation from us that your Personal Data is being processed by us, as well as information regarding the specifics of the processing, such as: purpose, categories of Personal Data processed, recipients, retention period, source, whether we transfer it abroad and how we protect it, your rights, and the right to lodge a complaint with a supervisory authority.
Right to rectification: You may request the rectification of your Personal Data, provided that applicable legal requirements are met. Following notification of any errors, we will promptly correct your Personal Data.
Right to erasure (“right to be forgotten”): In certain cases, you may request the deletion of your Personal Data, such as when: (i) it is no longer necessary for the purposes for which it was collected and processed; (ii) you have withdrawn your consent for processing and we have no other legal grounds to process it; (iii) Personal Data is processed unlawfully; (iv) you exercise a legal right to object. We are not obligated to comply with your deletion request if the processing of Personal Data is necessary for compliance with a legal obligation, or for the establishment, exercise, or defense of legal claims. Other circumstances also exist where we are not required to comply with this deletion request.
Right to restriction of processing: You may request that we restrict the processing of your Personal Data in the following situations: (i) if you contest the accuracy of the Personal Data, for a period enabling us to verify its accuracy; (ii) if the processing is unlawful and you oppose the erasure of the Personal Data, requesting restriction instead; (iii) if we no longer need the Personal Data for processing, but you require it for legal claims; (iv) if you have objected to processing, pending verification whether our legitimate grounds override yours. We may continue to use Personal Data following a restriction request if: (i) we have your consent; (ii) to establish, exercise, or defend legal claims; or (iii) to protect the rights of another natural or legal person.
Right to data portability: To the extent that Personal Data is processed based on your consent or for the performance of a contract and the processing is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller. This right shall not adversely affect the rights and freedoms of others.
Right to object: In certain situations, such as when we process your Personal Data based on a legitimate interest, you have the right to object to the processing of your Personal Data by us. In the event of an unjustified objection, VERDAPARK SRL is entitled to continue processing the Personal Data. You may also object at any time to the processing of your Personal Data for direct marketing purposes.
Withdrawal of consent: To the extent that we process your Personal Data based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Automated individual decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply if the decision: (i) is necessary for entering into or performing a contract between you and us; (ii) is authorized by law providing suitable safeguards for your rights and freedoms; or (iii) is based on your explicit consent.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) regarding any violation of your rights concerning the processing of your Personal Data. Contact details for ANSPDCP: 28-30 B-dul G-ral. Gheorghe Magheru, Sector 1, postal code 010336 Bucharest, Romania; email: [email protected].
To exercise the rights mentioned above, please contact us at: [email protected].
10. CONTACT
If you have any questions or concerns regarding this Policy or its implementation, you can contact us via email at: [email protected].