GDPR policy

Pursuant to provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46/EC, also known as GDPR (General Data Protection Regulation), BILANCIA EXIM is required to manage safely and only for the purposes specified below, the personal data you provide to us about you, a member of your family or another person.

BILANCIA EXIM undertakes to keep the confidentiality of personal data provided by you through the website www.bilancia.ro.

Definitions:

• ANSPDCP = National Supervisory Authority for Personal Data Processing;
• "personal data" means any information concerning an identified or identifiable natural person ("the person concerned"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as name, identification number, location data, online identifier, or to one or more specific elements, specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity;
• "processing" means any operation or set of operations performed on personal data or on sets of personal data, with or without the use of automated means, such as collection, registration, organisation, structuring, storage, adjustment or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction;
• “restriction of processing” means marking stored personal data in order to limit their future processing;
• “data controller” means the natural or legal person, public authority, agency or other body which, alone or together with others, determines the purposes and means of processing personal data; where the purposes and means of processing are determined by Union or national law, the data controller or the specific criteria for its designation may be laid down in the Union or national law;
• “person empowered by the controller” means the natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;
• “recipient” means the natural or legal person, public authority, agency or other body to which personal data are disclosed, whether or not it is a third party. However, public authorities to which personal data may be communicated in the context of a particular investigation in accordance with Union or national law shall not be considered recipients; the processing of such data by the relevant public authorities complies with the applicable data protection rules, in accordance with the purposes of the processing;
• “consent” of the data subject means any expression of the free, specific, informed and unambiguous will of the data subject by which the data subject accepts, by a statement or by an unequivocal action, that the personal data concerning him / her be processed.

Site users' rights

BILANCIA, as personal data controller, has implemented technical and organizational measures to ensure respect for the rights of websites’ users (data subjects according to GDPR), namely:

• The right of access means the right of the data subject to obtain confirmation from the controller that the controller processes / does not processes the personal data concerning him or her and, if so, access to the relevant data and information on how the data are processed.
• The right to data portability refers to the right to receive personal data in a structured, commonly used and automatically readable format and the right for such data to be directly transmitted to another controller, if technically feasible.
• The right to object means the right of the data subject to object to the processing of personal data where processing is necessary for the performance of a task which serves a public interest or when it concerns a legitimate interest of the controller. Where the processing of personal data is aimed at direct marketing, the data subject has the right to object to processing at any time.
• The right to rectification refers to the correction, without undue delay, of inaccurate personal data stored. The correction must be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate (provable) efforts.
• The right to delete data ("the right to be forgotten") means the right of the data subject to request that his/her personal data be deleted, without undue delay, if one of the following reasons applies: they are no longer necessary for the purposes for which they were collected or processed; the data subject withdraws his/her consent and there is no other legal basis for processing; the data subject opposes processing and there are no legitimate reasons to prevail; personal data have been illegally processed; personal data must be deleted for compliance with a legal obligation; personal data have been collected in connection with the provision of information society services.
• The right to restrict processing may be exercised if the data subject disputes the accuracy of the data, for a period which allows verification of data correctness; if data processing is illegal, and the person opposes the deletion of personal data, instead requesting to restrict them; if the controller no longer needs personal data for the purpose of processing, but the personal data are asked by the data subject to the controller for the finding, exercise or defence of a right in court; if the data subject has opposed the processing for the period during which it is verified that the legitimate rights of the controller prevail over those of the relevant data subject.

The collection and processing of personal data obtained through the website www.bilancia.ro are carried out pursuant to provisions of Regulation No. 679/2016. For any information or requests based on the right of data subjects according to GDPR, please contact  BILANCIA  at the e-mail address: email@bilancia.ro.

Purposes and legal grounds of processing. Categories of personal data collected and processed by BILANCIA

By filling in any form provided on the website managed by Bilancia  you expressly consent to the collection and processing of personal data by BILANCIA, both manually and automatically, in order to be contacted by  BILANCIA  about your request, in accordance with the provisions of Regulation No. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – GDPR.

When you provide us with your personal data, BILANCIA EXIM may use it for the following declared purposes, unless otherwise specified:

-        to ensure that the website is relevant to your needs;

-        to confirm the services you have purchased in the online system and provide you with additional information about these services (working hours, etc.);

-        to send offers, advertising and marketing messages;

-        information about promotions by mail and telephone, SMS, or other means of communication regarding the products of BILANCIA EXIM or partner companies;

Any information provided by you will be considered and will represent your express consent that your personal data will be used by BILANCIA EXIM in accordance with the purposes set out herein.

If you do not agree that your data is processed, you have the right and freedom not to fill out the available forms and not to access the website.

When filling out the forms available on the website,  BILANCIA will collect personal data, providing information on the purpose of collecting each personal data that is requested.

BILANCIA may also receive and record, on its servers, information relating to the IP address and cookie information of the requested site.  You have the option to set your Internet browser so that it rejects certain cookies. In this case, however, there will be a negative impact on your navigation. on  BILANCIA websites.

For users subscribed to newsletter, who do not wish to receive any more information on the e-mail address, it is necessary to send an e-mail to the address: mail@bilancia.ro and your data will be deleted from our database for the newsletter.

Use of statistical and anonymous data

BILANCIA EXIM. may use statistical data or anonymous data resulting from processing for the following purposes:

- making reports/analyses;

- making information for own purposes;

- publishing, promoting, offering the services offered by BILANCIA EXIM.

Protection of personal data. Data retention period

BILANCIA will not disclose the personal data collected through BILANCIA websites, except for authorized employees and contractors/partners who have the status of authorized persons and require to process them on behalf of BILANCIA or to provide services available to the BILANCIA website, or where the obligation to disclose is a legal obligation of BILANCIA or its employees / contractors / partners.  

BILANCIA has implemented the necessary organizational and security measures to protect against unauthorized access, use, alteration or destruction of personal data according to GDPR provisions.

BILANCIA, together with its collaborators, has assumed responsibility for implementing appropriate technical and organizational measures regarding the protection of the confidentiality and security of personal data.

At the same time, BILANCIA  grants access to personal data, authorized employees and contractors / partners (empowered persons), only in accordance with the stated purpose of data collection. All employees, collaborators and service providers of BILANCIA, who come into contact with personal data, must act in accordance with the principles of privacy and personal data security policies and procedures by signing statements and confidentiality agreements regarding such data.

The personal data of users of BILANCIA websites are retained for a period of between 3 and 10 years (depending on the purpose of collecting personal data), users being informed each time they provide their personal data about the exact retention period.

Changes to the privacy policy

If you consider that a change in the privacy rules is necessary, BILANCIA will publish those changes on this page, in order to inform you about the types of data that are collected and how they are used.

If you have any questions regarding the privacy policy, please write to us by e-mail at:  mail@bilancia.ro

Information on the National Authority for the Supervision of Personal Data Processing (ANSPDCP)

If you consider that your rights under Regulation No. 679/2016 have been breached, you may address ANSPDCP by filing a complaint.

The contact details of ANSPDCP are as follows:

1. IDENTIFICATION OF THE CLIENT / PARTNER :

In my personal name, as Client/Partner (buyer, tenant, beneficiary, bailee, depositor, broker, etc.), in the commercial relationship with BILANCIA EXIM SRL, as Data Controller, by this document, being informed by the Data Controller of my rights regarding data protection (right to be informed, right of access, right to object, right to restrict data processing, right to be forgotten, right to data portability),

I hereby declare that I agree and freely and expressly consent that BILANCIA EXIM SRL may process my personal data in the following terms and conditions:

2. DATA CONTROLLER IDENTIFICATION:

BILANCIA EXIM SRL, headquartered in Corbeanca commune, Petresti village, 46 Balantei street, Ilfov County, registered with ORC Ilfov under No. J23/2223/2010, CUI RO 3968479,

GDPR policy within BILANCIA EXIM SRL also available on https://www.bilancia.ro

3. PROCESSED PERSONAL DATA

- last name, first name,

- home address,

- Personal identification code (CNP), identification and issuance data of the identity card, passport, driving licence, telephone number and e-mail address,

- bank account, IBAN code

4. METHOD AND PURPOSE OF PERSONAL DATA PROCESSING

The method of processing is hard-copy and electronic storage (as appropriate).

Ground and Purpose of processing:

- conclusion and execution of the Agreement (business relationship with the Data Controller),

- fulfilment of a legal obligation of the Data Controller;

- for the purpose of the legitimate interest of the Data Controller and/or a third party.

5. DURATION OF PROCESSING. THE RIGHT TO RESTRICT PROCESSING, THE RIGHT TO BE FORGOTTEN

I hereby agree that the Data Controller collects and processes my personal data mentioned above for the duration of the agreement / business relationship or for a duration of 10 years (whichever is longer), unless otherwise provided by law. After this period, I shall inform (in writing) the Data Controller whether the Data Controller can continue to keep and process my personal data or not, asking the Data Controller to act as consequence positively (to continue processing) / negatively (withdrawal of consent).

I shall also notify the Data controller if I decide to withdraw the consent to process personal data before expiry of the above mentioned duration.

I understand that the withdrawal of consent operates for the future, from the date of the written notification addressed to the Data controller and may be accompanied by the specific notification of being forgotten, if I decide that I will no longer purchase products and services from BILANCIA EXIM SRL or that I will no longer enter into other commercial relations with it.

If I fail to inform the Data Controller about the withdrawal of consent, I agree that the Data Controller continues processing my personal data until the information / notification is sent.

6. RECIPIENTS OF PERSONAL DATA. INTENT TO TRANSFER PERSONAL DATA

The recipients of personal data are:

(i) the DATA CONTROLLER

- for the execution and implementation of the Agreement (business relationship with the Data Controller),

- in order to fulfil a legal obligation of the Data controller,

- for the purpose of the legitimate interest of the data controller and/or a third party.

- for specific information / offers of new products / promotions, special offers / invitations to events organized by the company / services – via e-mail or courier or post office

I understand that I have the right to express or not my consent to the processing of personal data, including for marketing purposes, without negative consequences related to the deployment of the commercial relationship with the Data Controller. I also understand that even if I have expressed my consent, I can change this option at any time later, provided to appropriately notify the Data Controller.

(ii) PARTNERS OF DATA CONTROLLER

- directly involved in the conduct of the commercial relationship

- bodies and public authorities

- partners involved in the fulfilment of legal obligations and legitimate interest by the Data Controller

In this case, the Data Controller must notify its partners of my last decision on the processing of personal data.

I understand that the Data Controller does not intend to transfer my personal data to third parties other than those mentioned above and with which I have expressly agreed.

 7. OTHER RIGHTS OF THE CLIENT/PARTNER RELATED TO PERSONAL DATA

I have been informed by the Data Controller that I have the right:

a) to be informed of and to have access to my personal data processed by the Data Controller or transferred to the above mentioned Recipients;

b) to change, correct, update personal data;

c) to have deleted personal data from its record (the right to be forgotten), to withdraw consent for future processing;

d) the right to data portability;

e) the right to lodge complaints with the Romanian Personal Data Processing Supervisory Authority regarding the processing of my personal data.

* * *

I hereby confirm that I have carefully read this form and that I understand what personal data is being processed, for what purposes and to whom this data will be available.

I have been informed of my rights to the personal data processed, in particular the right to withdraw consent, the right of access to the processed data, the right to be forgotten.

I hereby sign this form being aware of its effects under the General Data Protection Regulation No. 679/2016. I hereby certify and confirm the data filled-in.