This is an informative translation. The Romanian version of this document is the legally binding one; if the two differ, the Romanian version prevails.
Preliminary information
The confidentiality, integrity and security of your personal data are the fundamental pillars when we implement the appropriate technical and organisational measures to ensure that your rights are respected.
This privacy policy (hereinafter the “Privacy Policy”) gives effect to the principle of transparency and describes the ways in which the operations of collecting, using, disseminating, storing and erasing your personal data are carried out by Veziv It Services SRL, with its registered office in Bucharest, Sector 4, Strada Vișana, Nr. 7, Bloc 36, Sc. B, Et. 8, Ap. 6, postcode 040392, J2020016603408, CUI: 43403201 (hereinafter “Veziv” or “we”), in its capacity as personal data controller, in connection with (i) access to and use of the website available at the URL https://www.veziv.ro/ (hereinafter the “website”), and in connection with (ii) the provision of our services through it and outside it (hereinafter the “Services”).
Description of the personal data we process, the purposes and the legal grounds for processing
Personal data used on the website
The operation of the website is ensured by means of computer systems and software modules which, in general, obtain certain personal data; this data is transmitted by default so that online communication protocols return optimal results in the use of the website.
This information is not collected in order to be associated with identified persons; however, by its nature, it may, through processing and combination with certain data stored by third parties, allow users to be identified. This information includes IP addresses, the time of the request, the method used to send the request to the server, the size of the file obtained in response, and other parameters relating to the user's operating system.
To the extent that this information leads to the identification of a user, the provisions of this Privacy Policy become applicable.
Purpose of the processing
We use this data only to obtain anonymous statistical information on the use of the website and to check that it is working correctly.
On the other hand, we process personal data in order to establish direct and accurate communication with those interested in the services we offer – a wide range of services in the IT field (building web pages, specialised software programs, advertising graphics, social media campaigns, website administration, etc.).
Legal ground for processing
- For the construction and functionality of the website, the legal ground for processing your data is the fulfilment of legal obligations relating to the security of our systems, in accordance with art. 6 para. (1), letter c) of EU Regulation 679/2016 and art. (3) of Law 506/2004;
- For the operation of the website, the legal ground for processing your personal data is the performance of a contract to which the data subject is a party or the taking of steps at the request of the data subject prior to entering into a contract, in accordance with art. 6 para. (1), letter b) of EU Regulation 679/2016;
- For providing the latest news about the products and services provided through our website, requesting additional information through the contact form and sending your suggestions, the legal ground for processing your personal data is met by obtaining, in advance, your explicit, informed and freely given consent, on the basis of art. 6, para. (1), letter a) and in compliance with the requirements on consent set out in art. 7 and 8 of EU Regulation 679/2016.
When you contact us and when we provide assistance
You can contact us in different ways: by e-mail, by phone or through the contact form. In this case, we may process the following personal data: surname, first name, e-mail, phone and any other information you voluntarily provide when you contact us. We recommend that you provide us only with the information we need in order to help you resolve your request.
We use this information to respond to your request, including providing information about our services.
When our specialists contact clients
In the course of providing our services we will use the e-mail address, phone number, surname, first name and/or the company you represent in order to notify you of matters related to the performance of the contract between us and you, for example matters relating to the use of the website, the communication of any changes to the offers, any technical problems, etc.
Commercial communications
You can subscribe to the newsletter, through which we collect your e-mail address, which is needed to communicate news about the services we offer.
You can opt out of receiving these messages by clicking the “unsubscribe” button in the body of the newsletter, at any time, without affecting contractual relations. Also, through the links on the website you can reach certain social media platforms:
- Facebook – https://www.facebook.com/veziv.ro
- Instagram – https://www.instagram.com/veziv_development/
- Tik Tok – https://www.tiktok.com/@veziv_development
where certain news about the services offered, events, etc. can be found, with respect for the confidentiality of the data of those who are present.
Provision of personal data
We take care to maintain compliance with the principle of data minimisation; however, you should be aware that you may refuse to provide certain personal data (indicated above) but, in such a case, you may not be able to benefit from certain services specific to the contractual relationship described in this Privacy Policy.
Automated processing of personal data
Your personal data will not be processed for the purpose of generating decisions based solely on automated processing which would produce legal effects concerning you or similarly significantly affect you.
Duration of processing
As a rule, we will process your Personal Data for as long as the website exists, unless you ask us to erase it.
We aim to review and update our database periodically (as a principle, every 12 months) so that we do not store data that is no longer necessary for the purposes for which it was collected.
In certain circumstances, we may keep personal data for longer periods of time, for example where we are required to do so in accordance with legal, regulatory, tax or accounting requirements.
We may also keep personal data for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or if we reasonably consider that there is a prospect of litigation relating to the processing of your personal data.
Transfer of personal data
We may transfer personal data, to the extent that this is necessary, but only on the basis of a confidentiality undertaking on their part, by which they guarantee that this data is kept securely and that this personal information is provided in accordance with the legislation in force, to the following categories of recipients:
- contractual partners;
- subcontractors;
- payment processors;
- companies providing IT services (server hosting services);
- marketing companies;
- public authorities, courts of law or arbitration, as well as authorities competent to investigate the commission of criminal offences.
These recipients may be located in the European Union and/or in the European Economic Area. Where recipients are located outside the European Union and the European Economic Area, including in countries that are not recognised as ensuring an adequate level of protection, the transfer of personal data is carried out only if there are appropriate safeguards, in accordance with the applicable law. To this end, we rely on several safeguards, such as the standard contractual clauses issued by the European Commission. You may obtain from us a list of recipients in third countries, as well as a copy of the agreed provisions ensuring an adequate level of protection of personal data. For any request in this regard, please contact us using the contact details given below.
Security of personal data
The security of your personal data is important to us. Therefore, your personal data will be processed by applying reasonable technical and organisational measures to protect personal data, such as limiting access to personal data, encrypting or anonymising personal data, and storing it on secure media. Nevertheless, despite the efforts made, we cannot always guarantee the effectiveness of the security measures implemented and, therefore, we cannot guarantee the security of personal data at all times.
Your rights regarding the processing of personal data
Your rights
In accordance with the applicable legislation, you have the following rights:
- Right of access: You have the right to obtain confirmation from us that your personal data is being processed by us, as well as information on the specifics of the processing, such as: the purpose, the categories of personal data processed, the recipients of the personal data, the period for which the personal data is kept, whether we transfer it abroad and how we protect it, your rights, the right to lodge a complaint with the supervisory authority, and where we obtained the personal data from.
- Right to rectification: You may request the rectification of your personal data, provided that the applicable legal requirements are met. In the event of errors, upon notification, we will correct your personal data immediately.
- Right to erasure: In certain cases, you may request the erasure of personal data where: (i) it is no longer necessary for the purposes for which we collected it and process it; (ii) you have withdrawn your consent to the processing of personal data and we can no longer process the personal data on other legal grounds; (iii) the personal data is processed unlawfully; (iv) you exercise a legal right to object. We will not be able to comply with your request for erasure where the processing of personal data is necessary for compliance with a legal obligation, or for the establishment, exercise or defence of legal claims. There are also other circumstances in which we are not required to comply with this request for erasure of personal data.
- Restriction of processing: You may ask us to restrict the processing of your personal data in the following situations: (i) where you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data concerned; (ii) where the processing is unlawful and you oppose the erasure of the Personal data, requesting the restriction of its use instead; (iii) where we no longer need the personal data for the purposes of the processing, but you require it from us for legal proceedings; (iv) where you have objected to the processing, for the period during which it is verified whether our legitimate grounds as controller override those of the data subject. We may continue to use personal data following a request for restriction where: (i) we have your consent; (ii) in order to establish, exercise or defend legal claims; or (iii) in order to protect the rights of another natural or legal person.
- Right to data portability: To the extent that personal data is processed on the basis of your consent or for the performance of the contract and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and you have the right to transmit this personal data to another controller. This right does not adversely affect the rights and freedoms of others.
- Right to object: In certain situations, such as when we process your personal data on the basis of a legitimate interest, you have the right to object to the processing of your personal data by us. In the event of an unjustified objection, Veziv It Services SRL is entitled to continue processing the personal data.
- Right to object to receiving commercial messages: You may also object to the processing of your personal data for the purpose of sending commercial messages.
- Withdrawal of consent: To the extent that we process your personal data on the basis of your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Right not to be subject to individual decisions: In certain circumstances you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply where the decision: (i) is necessary for entering into or performing a contract between you and us; (ii) is authorised by law which also lays down suitable safeguards for your rights and freedoms; (iii) is based on your explicit consent.
- Right to apply to the supervisory authority: You have the right to lodge a complaint with the Autoritatea Națională pentru Supravegherea Prelucrării Datelor cu Caracter Personal (the Romanian National Supervisory Authority for Personal Data Processing, “ANSPDCP”) in connection with any infringement of your rights regarding the processing of your personal data. The contact details of ANSPDCP are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postcode 010336 București, România; e-mail: anspdcp@dataprotection.ro.
Exercising your rights
The data protection officer (DPO) has the role of facilitating communication between you, us and the National Supervisory Authority (ANSPDCP), acting as an extension of the ANS in the controller's personal data processing activity, in order to ensure compliance with the GDPR requirements. You may rely with confidence on the DPO's expertise in defending your right to privacy and private life with regard to the processing of your personal data, at the e-mail address dpo@veziv.ro
- Verification of identity: We pay the greatest attention to the confidentiality of all personal data and we reserve the right to verify your identity if you make a request concerning personal data.
- Fees: As a rule, you can exercise your rights free of charge. However, we reserve the right to charge a reasonable fee where your requests are manifestly unfounded or excessive, in particular because of their repetitive character.
- Response time: We make every effort to respond to your requests within one month of receipt of the request at the latest. This period may be extended by two months where necessary, taking into account the complexity and number of the requests, in which case we will inform you of any such extension and of the reasons for the delay.
Contact
If you have any questions or concerns about this Privacy Policy or its implementation, you can contact us by e-mail at dpo@veziv.ro
Updates to this privacy policy
We regularly review and, where appropriate, periodically update this privacy policy when changes occur as a result of the provision of services. If we want to use your personal data in a way that we have not previously identified, we will contact you to provide you with information about this and, where necessary, to ask for your consent.
We will update the version number and the date of this document each time it is amended.
This policy becomes operational on 12/12/2024