Data protection. Privacy policy.

Since 25th May 2018, comes into force the Regulation 2016/679 / EU about the protection of personal data and free movement of such data of individuals.

In this regard, the CLIENT expressly declares and agrees to the processing of personal data for contractual and legal purposes.

The basis of the processing is the act of adherence and the applicable legal provisions. In order to facilitate the conduct of the activities related to the adherence act and in order to fulfill the legal obligations, it is possible to communicate these data to public authorities, operators, third parties or empowered persons or other categories of recipients.

 

At the same time, the CLIENT has the following rights:

The right of access refers to the right to obtain a confirmation from the Provider that it processes or not the personal data and, if so, access to that data and information on how the data is processed.

The right to data portability refers to the right to receive personal data in a structured format, currently used and in a readable format, and to the right to transmit these data directly to another operator if this is technically feasible.

The right to opposition refers to the right of opposition to the processing of personal data when the processing is necessary for the performance of a task which regards the public interest or when the operator’s legitimate interest is taken into account. When processing your personal data is for direct marketing purposes, you have the right to oppose the processing of your data at any time.

The right to rectification refers to the correction, without undue delay, of inaccurate personal data. Correction shall be communicated to each recipient to whom the data was transmitted, unless this proves impossible or involves disproportionate efforts.

The right to delete data (“the right to be forgotten”) refers to the right to request the deletion of personal data without undue delay if one of the following reasons applies: they are no longer necessary for the purposes for which they have been collected or processed; consent is withdrawn and there is no other legal basis for processing; there is opposition to processing and there are no legitimate reasons to prevail; personal data has been processed illegally; personal data must be deleted for compliance with a legal obligation; personal data was collected in connection with the provision of information of society services.

The right to restrict processing can be exercised if the person disputes the accuracy of the data for a period that allows us to verify the correctness of the data; processing is illegal and the person opposes the deletion of personal data, but instead calls for restriction; in the event that the Provider no longer requires personal data for the purpose of processing, but the person requests them for the establishment, exercise or defense of a right in court; if the person opposed the processing for the period of time that it is necessary for the verification if the legitimate rights of the operator prevail over the person’s rights.

All these rights may be exercised by a written, signed and dated request sent to 61A Aron Cotrus Street, 3rd Floor, Apartment 133, 1st District of Bucharest or by e-mail to office@nordis.ro.