WHO WE ARE
SC OBELUS LIMITED SRL is a juridical person of Romanian nationality, having its registered office in Satu Mare, Str. Acs Alajos 12A, with the serial number in the Trade Register J30/642/2019 unique tax registration code RO41194176 (hereinafter “us” ). For the purpose of data protection law, we are an operator and a processor when we process your personal data. Since we are always open to your views and we wish to provide you with any further information you may need regarding the processing of your data, we encourage you to contact the OBELUS Data Protection Officer at the email@example.com
WHICH CATEGORIES OF PERSONAL DATAS WE COLLCT
In general, we collect your personal data directly from you, so you have control over the type of information you give us. For example, we receive information from you as follows:
– When you create an account on OBELUS.AGENCY, you give us your first and last name, e-mail address and phone number;
– When filling in the contact form, you send us your first and last name and e-mail address.
– When filling in the employment form, you give us your first and last name and e-mail address, but also your CV and the data you put in this CV (address, phone number etc)
WHAT ARE THE PURPOSES AND BASES OF THE PROCESSING
We will use your personal data for the following purposes:
1. To provide OBELUS’s services for your benefit:
This general purpose may include, as appropriate, the following: Creating and managing your OBELUS account (OBELUS.AGENCY); Processing all your requests The processing of your data for these purposes is in most cases necessary for the conclusion and performance of a contract between OBELUS and you. Certain processes underlying these purposes are also required by applicable law, including tax and accounting legislation.
2. To improve our services
We always want to offer you the best experience. For this, we may collect and use certain information about our Customer’s behavior, we may invite you to fill in satisfaction queries subsequent to the completion of a service, or we can conduct research and market research directly or through partners. We base these activities on our legitimate interest in doing business, always taking care that your fundamental rights and freedoms are not affected.
3. For marketing purposes
In certain situations, we can base our marketing activities on our legitimate interest in promoting and developing our commercial activity. In any situation where we use information about you for our legitimate interest, we take care and take all necessary measures to ensure that your fundamental rights and freedoms are not affected. However, you may, at any time, request us, by the means described above, to stop processing your personal data for marketing purposes, and we will follow up your request as soon as possible.
4. To defend our legitimate interests
There may be situations in which we use or transmit information to protect our rights and commercial activity. These may include:
– Measures to protect the website and users of the OBELUS platform against cyber attacks:
– Measures to prevent and detect fraud attempts, including the transmission of information to competent public authorities;
– Measures to manage various other risks.
The general focus of these types of processing is our legitimate interest in defending our commercial activity, being understood that we ensure that all the measures we take guarantees a balance between our interests and your fundamental rights and freedoms.
Also, in some cases, we base our processing on legal provisions such as the obligation to safeguard the goods and values provided by applicable legislation in this field.
How long do we keep your personal data
As a general rule, we will store your personal data as long as you have an account on the OBELUS platform. You may request us at any time to delete certain information or to close your account, and we will respond to these requests, subject to the storage of certain information, including after the account has been closed, in cases where applicable law or legitimate interests impose it.
If you do not have an account on the OBELUS platform, the general rule is to keep information on the services we’ve done for a period of 5 years after completing the service. Similar to the previous situation, we may keep certain dates after the expiration of this period, in accordance with applicable law or our legitimate interests.
WHO WE SEND YOUR PERSONAL DATAS
As the case may be, we may transmit or give you access to certain personal data of the following categories of recipients:- companies within the same group of companies as OBELUS;
– our partners that are helping us with various services that we do for you;
– manufacturers with whom we are in an authorized service relationship
– courier service providers;
– payment / banking service providers;
– marketing / telemarketing service providers;
– market research service providers;
– other companies with which we can develop joint marketing programs for our goods and services.
– If we have a legal obligation, or if it is necessary to defend our legitimate interest, we can also disclose certain personal data to public authorities.
We ensure that access to your data by third parties private legal entities is done in accordance with the legal provisions on data protection and confidentiality of information, based on contracts concluded with them.
IN WHICH COUNTRIES TRANSFER YOUR PERSONAL DATA
We currently store and process your personal data on the Romanian territory.
However, from time to time, it is possible to transfer some of your personal data to entities located outside of Romania. These entities may be located in the European Union or outside the Union, including in countries where the European Commission has not recognized an adequate level of protection of personal data.
We will always take steps to ensure that any international transfer of personal data is carefully managed in order to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, by other safeguards, such as standard European Commission standard contracts or certification schemes, such as Privacy Shield for Personal Data Protection transferred from within the EU to the United States of America.
You can contact us at any time, using the contact details listed above, to find out more about the countries where we transfer your data, the pairs, and the safeguards that we have applied to these transfers.
HOW WE PROTECT YOUR PERSONAL DATA
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to industry standards. We keep your personal data on secure servers securing redundancy. Despite the steps taken to protect your personal data, we note that the transmission of information via the Internet in general or via other public networks is not entirely secure, with the risk that data may be seen and used by third parties unauthorized. We can not be responsible for such vulnerabilities of systems that are not under our control.
WHAT RIGHTS DO YOU HAVE?
The General Data Protection Regulation recognizes a series of rights in regards to your personal data. You may request access to your data, correct any mistakes in our files, and / or you can oppose the processing of your personal data. You can also exercise your right to complain to the competent oversight authority or to court. As the case may be, you may also have the right to request the deletion of your personal data, the right to restrict your data processing and the right to data portability.
More information about each of these rights can be obtained by reviewing the table below.
In order to exercise your rights, you may contact us using the contact details listed above. Please note the following if you want to exercise these rights:
Identity: We take seriously the confidentiality of all records that contain personal data. For this reason, please send us your requests regarding such records using the email address of the OBELUS account or, as the case may be, the e-mail address communicated in the service request to extend the warranty. Otherwise, we reserve the right to verify your identity by requesting additional information to confirm your identity.
Fees: We will not charge a fee to exercise any right with respect to your personal data unless your request for access to information is groundless, repetitive or excessive, in which case we will charge a reasonable amount in such circumstances. We will inform you of any fees applied before you resolve your request.
Processing time: We plan to respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made several requests, in which case we will respond within a maximum of two months. We’ll let you know if we’ll need more than a month. We may ask if you can tell us exactly what you want to receive or what you are worried about. This will help us to act faster and shorten the response time to your request.
Rights of third parties: We do not have to respect an application if it negatively affects the rights and freedoms of other targeted persons.
You can ask us:
– to confirm that we process your personal data;
– to provide you with a copy of this data;
-to provide you with other information about your personal data, such as what we have, what we use, who we divulge, whether we transfer them abroad, and how we protect them, how long we keep them, what rights you have , how can you make a complaint from where we obtained your data to the extent that information has not already been provided to you by this information.
You may ask us to rectify or complete your inaccurate or incomplete personal data.
We may try to verify the accuracy of the data before correcting it.
You may ask us to delete your personal data, but only if:
– they are no longer necessary for the purposes for which they were collected;
– you have withdrawn your consent (if data processing is based on consent); or
– you have a legal right to oppose you; or
– these have been illegally processed; or
– we have a legal obligation to do so.
– we do not have to comply with your request for deletion of your personal data if processing of your personal data is required
There are certain other circumstances in which we are not obliged to comply with your request for data deletion, although these are the most likely circumstances in which we may decline your request
Please be aware that before exercising this right, make sure that you have all the documents relating to OBELUS’s service on your products. If you do not do so before exercising your right of removal, you will lose all these documents and OBELUS will be unable to provide them because the data erasure process is an irreversible process.
Restriction of data processing – You may ask us to restrict the processing of personal data, but only if:
– their accuracy is contested (see rectification section) to allow us to verify their accuracy; or
– processing is illegal, but you do not want the data to be deleted; or
– they are no longer necessary for the purposes for which they were collected, but you need them to find, exercise or defend a right in court; or
– you have exercised the right to oppose you, and checking whether our rights prevail is in progress.
We may continue to use your personal data following a restriction request if:
– we have your consent; or
– to establish, exercise or secure the defense of a right in court; or
– to protect the rights of another natural or legal person.
You may ask us to provide your personal data in a structured, commonly used and readable form, or request that it be “ported” directly to another data operator, but in each case only if:
– processing is based on your consent or on the conclusion or performance of a contract with you; and
– processing is done by automatic means.
You may oppose at any time, for reasons related to your particular situation, the processing of your personal data on our legitimate interest if you believe that your fundamental rights and freedoms prevail over this interest. You can also oppose any time processing your data for direct marketing (including profile creation) without any reason, in which case we will cease processing as soon as possible.
MAKING AUTOMATED DECISIONS
You can ask that you not be the subject of a decision based solely on automatic processing, but only when that decision:
– produces legal effects with regard to you; or
– affects you in a similar way and to a significant extent.
This right shall not apply if the decision taken following automatic decision-making:
– we are required to conclude or run a contract with you;
– is authorized by law and there are adequate safeguards for your rights and freedoms; or
– is based on your explicit consent.
You have the right to file a complaint with the supervisor regarding the processing of your personal data. In Romania, the data protection supervisory authority’s contact data is as follows:
The National Supervisory Authority for Personal Data Processing
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212;
Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance, and we promise that we will do our best to resolve any issues amicably. We remind you that you can contact the OBELUS Data Protection Officer at any time by submitting your request in any of the following ways: by e-mail at: firstname.lastname@example.org