PERSONAL DATA PROTECTION

NOTICE FOR LEGAL AND CONVENTIONAL REPRESENTATIVES / CONTACT PERSONS OF CONTRACTUAL PARTNERS
REGARDING THE PROCESSING OF PERSONAL DATA

TO: 

(legal / conventional representatives / contact persons of)

Dear Sir/Madam,

  1. The personal data controller

In accordance with Articles 13 and 14 of EU Regulation 2016/679 regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/, we wish to inform you that Nertrans Cargo SRL, in capacity as Personal Data Controller (hereinafter “the Company” or “the Controller”), having its registered office at str. Navelor nr. 7, bloc Siret 2, Sc. 1, ground floor, Galati, registered with the Trade Registry Office under no. J2007001459170, tax code RO22336401, processes your personal data, provided by you during the negotiation, conclusion and execution of the contract between the Controller and the company you represent/of which you are the contact person.

  1. Purpose of this informative document

This notice allows you to know, among other things, the categories of personal data concerning you that we process, the purposes and methods of processing, the legal basis for processing, the period for which personal data will be stored, the potential recipients thereof, as well as the rights granted to you.

  1. Purpose of data processing and legal basis for processing

Your personal data is processed for the following determined and legitimate purposes:

  1. Management of goods and/or services suppliers;

The processing of your personal data for this purpose is carried out based on our legitimate interest in adequately managing the contractual relationship. 

  1. Categories of personal data subject to processing

In particular, the personal data we process is the following:

  • first and last name;
  • position in the company;
  • e-mail address;
  • phone number;
  • powers of attorney;
  • signature.
  1. Data retention period

All the above-mentioned data will be retained for a period of 10 years from the date of termination for any reason of the contract between the Controller and the company you represent/of which you are the contact person, in accordance with the retention obligations imposed by applicable legislation. Upon expiry of this term, the data will be deleted and/or destroyed.

  1. Method of data use and nature of provision

Data processing is carried out through IT procedures, or in any case by electronic means or paper-based media operated by authorised persons, internal or external, specially designated for this purpose and who undertake to maintain confidentiality. The data is protected by the security measures provided by the legislator, designed to prevent unauthorised access, loss or destruction.

The provision of personal data is necessary for the conclusion and execution of the contract with the company you represent/of which you are the contact person. Your failure to provide personal data leads to the impossibility of concluding and executing the contract between the Controller and the company you represent/of which you are the contact person.

  1. Data circulation framework

The Company collects your personal data and processes it directly, in its capacity as Controller. Your data may be shared with specific categories of recipients, such as:

  • Courts of law;
  • Lawyers;
  • Transport companies.
  1. Exercise of rights

As data subjects, the Regulation grants you a series of rights, including:

  • the right of access – allows you to obtain confirmation that your personal data is being processed by us, as well as relevant details of these processing activities;
  • the right to rectification – allows you to modify personal data if it is incorrect;
  • the right to erasure (”the right to be forgotten”) – allows you to delete personal data in certain cases (for example, if it is no longer necessary for the purpose for which it was collected, if you have withdrawn your consent and there is no other legal basis for processing);
  • the right to restriction of processing – allows you to restrict the processing of personal data in certain cases (for example, when you contest the accuracy of personal data);
  • the right to object – allows you to object to the processing of your personal data based on our legitimate interest or a public interest, for reasons related to your particular situation;
  • the right to data portability – allows you to transfer personal data provided to us to another data controller.

To exercise these rights, you may use the following means of communication:

– sending an e-mail to the following address: [email protected]

– sending the request by post/courier to the address: str. Navelor nr. 7, bloc Siret 2, Sc. 1, parter, mun. Galati, CP 800030.

  1.  Right to file a complaint

We also inform you that if you consider that your rights have not been respected or that you have not received a response from the Controller in accordance with the law, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing, headquartered in Bucharest, Bd. G-ral. Gheorghe Magheru nr. 28-30, sector 1, postal code 010336, or to address the competent courts of law.