NOTICE OF PERSONAL DATA PROCESSING
(CUSTOMERS)
SC EXPERTAROM FOOD INGREDIENTS SRL, having its registered office in Sibiu, Sibiu County, Alba Iulia Road no. 150, registered with the Trade Register Office under no. J 32/284/1995, Fiscal Registration Code (C.I.F) RO 7308203, represented by the GENERAL DIRECTOR, Mr. CIOCA ADRIAN, collects and processes personal data, in accordance with the provisions of the Regulation (EU) on data protection (2016/679).
PURPOSE AND RULES OF DATA PROCESSING
The personal data processed are: name / surname; email address; phone number; delivery address, account, user’s public IP, browser type, operating system type, cookies
The data subject is: a natural person whose personal data mentioned above are the object of processing and who may be the client’s representative or any other natural persons within the client’s organization whose personal data are provided by the client to the undersigned.
These data are processed for purposes determined by the activity of SC EXPERTAROM FOOD INGREDIENTS SRL (trade with raw materials / finished products for the food industry).
| Personal Data | Purpose of Processing | Basis of Processing | Recipients of Processed Data |
|---|---|---|---|
| Name/Surname; Address; Email; Phone Number; Delivery Address, Account | For the conclusion and execution of sales-purchase agreements of products/services by our company, including pre-contractual steps, customer account creation; delivery and invoicing of products/services; payment | Contract | Sales/Invoicing/Couriers Department; Management; Bank; Other companies in the group |
| – | In order to fulfill a legal obligation of the undersigned | Legal | Accounting Department/Authorities/Auditors |
| – | Implementation of commercial policies; promotion of legal actions; auditing financial situations, site protection measures, other purposes subsumed to the object of activity of the company | Legitimate interest | Marketing/Digitization – Technology and Transformation Department; Lawyer; Executor; Auditors; Site maintenance providers/development |
| – | Informing about current/new products/services/personalized commercial communications; granting loyalty benefits and for the continuous improvement of the quality of services and products offered; promotion of the activity of the undersigned in the online/written media; participation in fairs/seminars | Consent (you always have the possibility to withdraw your consent based on a notification sent to the undersigned) | Marketing/Digitization-Technology and Transformation Department; Management |
| User’s Public IP, Browser Type, Operating System Type | Custom page layout | Legitimate interest | IT Department |
| Cookies | Automatic data processing | Standard contractual clauses – Google/Facebook US-EU data privacy | Google/Facebook |
The company declares that it will only operate with those data that are necessary for achieving this specific purpose of processing and are processed only during the performance of the contracts, respectively until the expiration of all contractual obligations, after which they are archived for the duration of the general prescription term.
The data are obtained directly from you – contractual partners and are processed both physically and electronically.
The processing of data for other purposes than those shown above will be done only with your consent. The company maintains physical, technical and organizational security measures to protect personal data against destruction, loss, alteration, disclosure, restriction or accidental, illegal or unauthorized access, regardless of where they are processed.
People working on behalf of SC EXPERTAROM FOOD INGREDIENTS SRL personal data have confidentiality clauses provided in the employment contract / job description and process data in accordance with internal procedures regarding data processing.
DATA TRANSFER
The company will transfer personal data outside the European Union or the European Economic Area.
The legal basis for the transfer is the EU-US Privacy Shield or, if the company is not registered in this, the Standard Contractual Clauses Google / Facebook.
The company will exercise due diligence in selecting third-party service providers and will require these providers to maintain adequate technical and organizational security measures to protect your personal data and to process them in accordance with applicable legal provisions.
RIGHTS OF THE DATA SUBJECT
The Regulation confers several rights on the persons whose personal data are processed:
the right of access to personal data concerning you; the right to rectify data when they are inaccurate or incomplete; the right to delete data in certain circumstances e.g. when they are no longer necessary in relation to the purposes mentioned above the right to restrict processing in certain circumstances e.g. when you dispute the accuracy of the data, for the period that allows us to verify the accuracy of those data; the right to object to processing in certain circumstances when it concerns a public interest or a legitimate interest of the operator; the right to withdraw your consent for the processing of data to which you have previously consented; the right to be notified, in case of data security breaches, by the operator; the right to data portability in the sense of transferring your personal data to another personal data operator designated by you. You also have the right to file a complaint with the Supervisory Authority).
To exercise your rights, you can address with a written, dated and signed request to the company’s headquarters in Sibiu, Sibiu County, Alba Iulia Road no. 150, or to the Data Protection Officer – Mrs. lawyer Simona Jeflea – at the email address: dpo@expertarom.com.
