“Personal data” means any information relating to an identified or identifiable natural person (the data subject). An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity. “Processing” means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Recipient” means a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. Public authorities that may receive personal data in the context of a particular inquiry under Union or national law are not considered recipients. “Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data. “Consent of the data subject” means a freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or clear affirmative action, signify agreement to the processing of personal data relating to them.

Personal data will be collected only for specified or specifiable purposes; personal data will be accurate and, where necessary, kept up to date; data will be processed lawfully, fairly and transparently; the confidentiality of personal data and its secure storage will be ensured; personal data will not be disclosed to third parties unless necessary; and you have the right to request access to, rectification or erasure of your personal data, to object to or restrict processing, and to data portability. See Article 5 of the Regulation.

REMAT DOLJ SRL processes personal data relating to you as the data subject, including: first and last name, home address, telephone number, email address and other similar information.

We collect and process your personal data fairly, for specified or specifiable purposes and in accordance with the Regulation, as follows: based on your consent, for marketing communications and advertising of products or services offered by REMAT DOLJ SRL; where necessary to comply with our legal obligations (for example, tax obligations, obligations arising from employment or collaboration relationships, and statutory warranty obligations); and where necessary to perform contracts to which you are a party. See Article 6 of the Regulation.

REMAT DOLJ SRL processes your personal data, including by disclosing it through transmission or otherwise making it available to third-party recipients, such as public authorities and institutions, notaries, tax authorities, utility providers, other contracting parties and their banks, operational service providers, collaborators, investors for the purpose of facilitating commercial transactions (which may include a merger, acquisition or sale of assets), professional advisers, auditors or lawyers, regulatory authorities, professional bodies and/or public authorities. Disclosure takes place only when it is necessary, directly or indirectly, to exercise rights and obligations arising from contractual relationships between REMAT DOLJ SRL and you. Your personal data will not be transferred to third countries or international organisations.

Under the Regulation, processing is lawful where it is necessary for the performance of a contract or in order to take steps at your request before entering into a contract. See Article 6 of the Regulation. Accordingly, personal data will be processed for the duration of our contractual relationship with you. Personal data will be erased within one year after the contract ends or within one year after the statutory liability period for legal obligations has expired (such as tax obligations, obligations arising from employment or collaboration relationships, and statutory warranty obligations). If personal data is no longer necessary for the purposes described above, if you withdraw consent where consent is required, if you object to processing, or if processing does not comply with the Regulation, your data will be erased without delay. See Article 17 of the Regulation.

As the data subject, you have the following rights: to request access to your personal data; to have it rectified or erased; to restrict processing; to object to the processing of personal data; to data portability; not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you; and to lodge a complaint with the National Supervisory Authority for Personal Data Processing if you consider that your rights have been infringed. Please note that objecting to the processing of your personal data may prevent us from performing our contractual relationship, for which you assume responsibility and REMAT DOLJ SRL accepts no liability. If you withdraw your consent to marketing and advertising communications, those communications can no longer be sent. Withdrawal does not affect processing carried out on the basis of consent before it was withdrawn. See Article 7 of the Regulation. We also wish to assure you that, if a personal data breach is found that is likely to create a high risk to the rights and freedoms of the data subject, we will inform you without undue delay and notify the supervisory authority. See Articles 33–34 of the Regulation.

REMAT DOLJ SRL does not use personal data for automated processing or profiling.

We review processed data annually to assess whether it still needs to be retained for the purposes described above. Data that is no longer relevant to those purposes will be erased.

We seek to fulfil all obligations arising from the Regulation. We have informed employees who process personal data as part of their duties of the need to comply with the rules on personal data processing, and we have taken appropriate technical and organisational measures to ensure an adequate level of security. If we fail to meet any of our obligations under the Regulation, we accept responsibility for any damage you suffer, in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Personal data will be processed fairly and for the specified or specifiable purposes described above, in a manner that ensures appropriate data security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through appropriate technical and organisational measures. See Article 39 of the Regulation. We understand that protecting your personal data is necessary to maintain a lasting relationship, and we assure you that we will use your data only for the purposes stated above. We will continue improving our privacy policy to provide appropriate protection and remain compliant with the Regulation. Please note that your express consent is required if you wish to receive email messages about our offers, services and products. For further information about personal data protection or any other request, please contact us at radu@greenlaser.ro, and we will try to respond as soon as possible.