Personal data Policy (hereinafter referred to as the Policy)
1. General provisions
1.1. This Policy was developed by HYPERTECH INTELLIGENCE SRL (reg. # 51624718; 031044, Bucuresti Sec. 3. Strada NERVA TRAIAN, NR. 27-33, Birou NR 6) (hereinafter — Owner) in compliance laws on Personal Data, including GDPR in order to ensure the protection of the rights and freedoms of a person and citizen in the processing of his personal data, including the protection of rights to privacy, personal and family secrets.
1.2. This policy determines the procedure for processing and measures to ensure the safety of personal data of Owner employees, visitors to the Owner website, counterparties and other individuals interacting with individual entrepreneurs in order to ensure the protection of human and freedoms of a person and citizen in the processing of their personal data.
1.3. This policy uses the following basic concepts:
1.3.1. Personal data processing — any action (operation) or a set of actions (operations) performed using automation means or without the use of such means with personal data, including collection, record, systematization, accumulation, storage, clarification (update, change), extraction, use (distribution, provision, access), depersonalization, removal, destruction of personal data;
1.3.2. Personal data — any information related directly or indirectly to a specific or determined person (subject of personal data);
1.3.3. Providing personal data — actions aimed at disclosing personal data to a specific person or a certain circle of persons;
1.3.4. Distribution of personal data — actions aimed at revealing personal data to an indefinite circle of people;
1.3.5. cross -border transfer of personal data — the transfer of personal data to the territory of a foreign state to the authority of a foreign state, a foreign individual or a foreign legal entity;
1.3.6. The destruction of personal data is actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed;
1.3.7. Cookie is a fragmentation of data, the complex of which is stored on a computer or other device visitor to the Owner site, indicating the visited pages.
1.4. In pursuance of the requirements of Part 2 of Art. 18.1 of the Law on Personal Data, this Policy is published in free access in the information and telecommunication network on the Owner website.
2. Principles of personal data processing
2.1. The processing of personal data is carried out on the basis of the following principles:
2.1.1. legality;
2.1.2. restrictions on the achievement of specific, predetermined and legal goals;
2.1.3. prevention of personal data processing incompatible with the goals of the collection of personal data;
2.1.4. compliance of the content and volume of the processed personal data with the declared processing goals;
2.1.5. storage of personal data in the form that allows you to determine the subject of personal data is no longer than the purpose of processing personal data requires, if the shelf life of personal data is not established by federal law, agreement;
2.1.6. destruction or depersonalization of personal data upon achieving the goals of processing or in case of loss of need to achieve these goals, unless otherwise provided by federal law.
3. Purpose of personal data processing
3.1. The processing of individual data is carried out for the following purposes:
• ensuring compliance with the Constitution of the Romania, federal laws and other regulatory legal acts of the Romania;
• implementation of their activities in accordance with the Charter of the Owner, the performance of duties provided for by the Labor Code of the Romania;
• filling and transfer to the executive authorities and other authorized organizations of the required reporting forms;
• implementation of civil law relations, including the provision of services;
• Accounting.
4. Legal grounds for processing personal data
4.1. The legal basis for the processing of personal data is the totality of regulatory legal acts, in the implementation of which and in accordance with which the individual entrepreneur carries out the processing of personal data, including:
• Constitution of the Romania;
• Civil Code of the Romania;
• Tax Code of the Romania;
• Other regulatory legal acts regulating relations related to the activities of individual entrepreneurs.
4.2. The legal basis for processing personal data is also:
• Charter of the Owner;
• agreements concluded between individual entrepreneurs and personal data subjects;
• Consent of personal data subjects to process their personal data.
5. The volume and category of processed personal data, categories of personal data subjects
5.1. The content and volume of the processed personal data must comply with the declared processing goals indicated in section 3 of this Policy. The processed personal data should not be excessive to the declared purposes of their processing.
5.2. Owner can process personal data of the following categories of personal data.
• candidates for hiring for Owner;
• employees and former Owner employees;
• Owner counterparties (individuals);
• representatives (employees) of counterparties — legal entities of the individual entrepreneur;
• site visitors (users): surname, name, patronymic; date and place of birth; Contact details (mobile and (or) home phone number, email address, if necessary — account in the Skype system or other similar systems).
Personal data provided by users: Owner collects personal data that enters into the data fields on the website of the individual entrepreneur users themselves or other persons on their behalf. Passive collection of personal data on the current connection in terms of statistical information: on the Internet site Owner can collect statistical data about the user, including: visited pages; the number of pages visits; the duration of the user session; entry points (third -party sites from which the user by the link passes to the Owner website); output points (links by which the user switches to third -party sites); user country; User region; User provider; User browser; user system languages; User OS; User screen resolution; The number of user screen colors. Data can be obtained using various methods, for example, cookies, file web, etc.
Owner can use third-party Internet services to organize the collection of statistical personal data, third-party Internet services provide storage of data on their own services. Owner is not responsible for the localization of servers of third-party Internet services. Owner does not compare the information provided by the user independently and allows you to identify the subject of personal data, with statistical personal data obtained during the application of such passive methods of collecting information.
5.3. Owner does not process special categories of personal data relating to racial, nationality, political views, religious or philosophical beliefs, health conditions, with the exception of cases provided for by the legislation of the Romania.
6. Rights of personal data subjects
6.1. The subject of personal data has the following rights:
• receive complete information that concerns the processing of the individual entrepreneur of his personal data, with the exception of cases provided for by the legislation of the Romania;
• require the correction of incorrect or incomplete personal data;
• require blocking or destroying their personal data in case personal data are incomplete, outdated, inaccurate;
• withdraw consent to the processing of their personal data in cases provided for by the legislation of the Romania;
• exercise other rights provided for by the legislation of the Romania.
7. Measures taken to protect personal data
7.1. To ensure the safety of personal data during their processing, Owner takes measures to protect against unauthorized or random unlawful access, destruction, change, blocking, copying and other actions that may violate the safety characteristics established for personal data, which include:
— confidentiality (the requirement not to transmit information to third parties without the consent of its Owner, mandatory for a person who gained access to information);
— integrity (a state of information in which any change is absent, or a change is carried out only intentionally by subjects that have the right to it);
— accessibility (the state of information in which entities that have access rights can realize them freely).
7.2. Owner takes the necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destroy, change, block, distribution and other unauthorized actions, including:
7.2.1. determines threats to the safety of personal data in their processing;
7.2.2. accepts local regulatory acts and other documents governing relations in the field of processing and protecting personal data;
7.2.3. appoints persons responsible for ensuring the safety of personal data in the structural units of the individual entrepreneur, limits the rights to access to the lockable premises and cabinets, where there are personal data on paper;
7.2.4. creates the necessary conditions for working with personal data;
7.2.5. organizes the accounting of documents containing personal data;
7.2.6. organizes work with information systems in which personal data are processed;
7.2.7. It stores personal data in conditions under which their safety is ensured and non -legal access to them is excluded;
7.2.8. establishes individual passwords to access employees in information systems containing personal data, in accordance with their production duties;
7.2.9. Organizes the training of employees of individual entrepreneurs engaged in the processing of personal data.
8. Procedure and conditions for processing personal data
8.1. Personal data processing is carried out in accordance with the requirements of the legislation of the Romania.
8.2. The processing of personal data is carried out with the consent of the subjects of personal data to the processing of their personal data, as well as without such in cases provided for by the legislation of the Romania.
8.3. Owner carries out both automated and non -automated processing of personal data.
8.4. Owner employees are allowed for the processing of personal data, whose official duties include the processing of personal data.
8.5. Personal data processing is carried out by:
8.5.1. obtaining personal data in oral and written form directly from the subjects of personal data;
8.5.2. obtaining personal data from public sources;
8.5.3. entering personal data to magazines, registers and information systems of individual entrepreneurs;
8.6. using other methods of processing personal data.
8.7. In the course of its activities, Owner can provide and (or) instruct the processing of personal data to another person with the consent of the subject of personal data, unless otherwise provided by the legislation of the Romania on personal data. In this case, a prerequisite for the provision and (or) instructions of the processing of personal data to another person is the obligation of the parties to comply with confidentiality and ensure the safety of personal data in their processing.
8.8.The transfer of personal data to the bodies of inquiry and investigation, to the Federal Tax Service, the Pension Fund of the Romania, the Social Insurance Fund and other authorized executive bodies and organizations are carried out in accordance with the requirements of the legislation of the Romania.
8.9. Owner storage personal data in the form that allows you to determine the subject of personal data is no longer than the purpose of processing personal data requires, if the shelf life of personal data is not established by federal law, agreement.
8.10. When collecting personal data, including through the Internet information and telecommunication network, Owner provides recording, systematization, accumulation, storage, clarification (update, change), extracting personal data of citizens of the Romania using databases located in the Romania, with the exception of cases specified in the Law on Personal Data.
8.11. When processing personal data, the individual entrepreneur ensures the accuracy of personal data, their sufficiency and, if necessary, relevance in relation to the goals of the processing of personal data. Owner takes the necessary measures (ensures their adoption) to remove or clarify incomplete or inaccurate personal data.
8.12. Owner processes personal data without their cross -border transmission.
8.13. Owner recognizes any information that the user told the services of the Owner. Using the services of individual entrepreneurs, the user, being a subject of personal data, confirms his consent to the processing of all the provided personal data, including the personal data necessary for using the services of an Owner. Owner does not have the right to disclose personal data of the user with the services of individual entrepreneurs, with the exception of cases provided for by the current legislation of the Romania and the terms of the contract.
9. Actualization, correction, deletion and destruction of personal data, answers to the requests of subjects to access to personal data
9.1. Confirmation of the fact of processing personal data of the individual entrepreneur, legal grounds and the purpose of the processing of personal data, as well as other information specified the Law on Personal Data, Owner are provided to the subject of personal data or its representative when applying or upon receipt of the request of the subject of personal data or his representative.
The information provided does not include personal data related to other personal data subjects, with the exception of cases when there are legal grounds for disclosing such personal data.
If, in the appeal (request) of the subject of personal data in accordance with the requirements of the law on personal data, all the necessary information is not reflected, or the subject does not have access to the requested information, then he is sent a reasoned refusal.
9.2. When achieving the goals of processing personal data, as well as if the subject of personal data of consent to their processing, personal data must be destroyed if:
• otherwise is not provided for by the agreement, the party of which is the subject of personal data;
• Owner is not entitled to process without the consent of the subject of personal data on the grounds provided for by the Law on Personal Data or other federal laws;
• Other is not provided for by another agreement between the individual entrepreneur and the subject of personal data.
9.3. The destruction of personal data contained on paper documents occurs using a shredder, personal data on electronic media are destroyed by erasing or formatting the carrier. The fact of the destruction of personal data is evidenced by the act on the destruction of carriers.
10. Politics of using cookie files
10.1. Owner on its website uses server magazines and automated data collection tools such as cookies. Data collected in this way are attached to the personal information of the site visitor. The use of cookies is necessary for more correct work sites and identify the preferences of the site user. Data collection tools automatically monitor and collect some technical data that a computer or a site visitor sends, for example: Owner addresses; type and tongue of browser; exile pages and exit pages; Url; type of platform; number of clicks; domain name; target pages; Information about visits; Viewed pages (including the procedure for their viewing) (we can share this information with third parties); the amount of time; spent on specific pages; game data; The date and time of activity on the site and other similar information. Continuing to use the Owner website, the site visitor expresses its consent to the use of cookies.
10.2. A site visitor can configure his web browser so that he warns about attempts to place cookies on a computer, limit the type of cookie files or completely rejected them. You can get more detailed information by referring to the instructions posted on the official website of the browser used by the visitor to the site. However, it should be borne in mind that when the cookies are turned off, not all sections/functions of the site will be available.
Contacts:
HYPERTECH INTELLIGENCE SRL
Registration number: 51624718
Adress: 031044, Bucuresti Sec. 3. Strada NERVA TRAIAN, NR. 27-33, Birou NR 6
E-mail: hypertech.intel@gmail.com