PERSONAL DATA PROCESSING POLICY
The protection and confidentiality of your data is very important to us. You can read further about our personal data processing policy.
1. IDENTIFICATION DATA
The data controller is SC OPLOG ACTIVE SRL SRL, with headquarters in Resita, Piata 1 Decembrie 1918, block 31, 1st floor, apt. offices, Post code 320067, registered with the Trade Registry under no. J11/175/2016, tax identification number RO35778294, telephone +40 355 429 593, Postal address: Resita, Piata 1 Decembrie 1918, block 31, 1st floor, apt. offices, Post code 320067, Romania, hereinafter referred to as “the Company”.
2. ABOUT THE PERSONAL DATA PROCESSING POLICY
The company would like to inform you about the way it processes personal data in the context of its activity, as well as the rights you have as a data subject, starting with May 25, 2018 (date of entry into force of the General Data Protection Regulation – GDPR.
Protecting the security and safety of your personal data is very important to us, therefore the activities we carry out are in accordance with the applicable legislation regarding the protection of data security and safety. The purpose of this Personal Data Processing Policy is to establish the appropriate technical and organizational measures and responsibilities of the Company’s employees involved in personal data processing, to comply with the obligations regarding the guaranteeing and protecting the fundamental rights and freedoms of individuals, in particular the right to intimate, family and private life, with regard to the processing of personal data.
By visiting our website, www.oplog.ro, all users agree to abide by the terms of use and the legislation in force.
In accordance with the legal provisions on the protection of individuals with regard to the processing of personal data and the free movement of such data, the Company processes personal data for legitimate purposes, for the purposes of direct marketing communications and bidding, for research, analysis, studies for measuring customer satisfaction and feedback, for making decisions automatically and creating profiles automatically, as well as for carrying out the activities of providing transport services/shipments and removals.
The processing of personal data shall be made by mixed means (manual and automatic), according to the legal provisions and under conditions that ensure security, confidentiality and respect of the rights of data subjects.
The company shall certify that it meets the minimum security requirements of personal data and is subject to the general rules of this Personal Data Processing Policy.
3. WHERE DO WE HAVE YOUR PERSONAL DATA FROM AND HOW DO WE COLLECT IT
We process personal data that you provide to us, directly or indirectly (e.g., by means of a proxy or other persons who represent you in relations with the Company), or that we generate or deduct as a result of the interaction with you through any of the communication channels with the Company. We may collect your personal data at the following times:
When you or your company request a commercial offer from us or use any of our services
When we send you an offer request, a request from a customer of the Company
When you contact us or we contact you by phone, email, chat or other electronic means or in writing or when you provide us with other information, including in conversations with our employees
When you or your company browse, fill out a form or make a request or interact in another way on our website or other online platforms
When you participate in events organized by the Company
For recruitment and selection
We may also obtain and process your personal data, including from external sources, such as:
Publicly accessible online platforms (social media and Internet)
Commercial partners, in particular service providers for the Company (e.g., companies that sell databases or companies that provide access services to freight exchanges platforms)
Individuals – e.g., if certain individuals recommend our services and send us your personal data
The refusal to provide your personal data to the Company may determine, in certain situations, the impossibility of entering into a relation with the Company or contracting the desired service.
4. CATEGORIES OF PROCESSED PERSONAL DATA
In the management process of this website, the Company will collect and process certain information (“personal data”) about identified individuals, or which may lead to the identification of individuals, which are provided by users of this website directly or indirectly, such as:
Identity and contact details, including name, surname, gender, postal address, email address, telephone number, date of birth, personal identification number (CNP), identity card number and serial number, copy of the identity card, signature, assets property, photos and other personal data relating to your preferences relevant to our services.
Financial and payment data, including your bank account number, currency, the bank where the account is opened and other data necessary to process payments and prevent fraud.
Business information, including information provided during the contractual relationship or provided voluntarily by you or your organization.
Profile and usage data, including your preferences in receiving marketing information from us, your communication preferences and information about how you use our website.
Technical data, including information collected during your visits on our website, the internet protocol (IP address), browser type and version, operating system, device type, time-zone setting and other details about your visit on our website and the resources you access.
Data resulting from the audio recording of telephone conversations (content and metadata).
5. PURPOSES AND GROUNDS FOR WHICH WE PROCESS PERSONAL DATA
We process personal data for the following purposes: sales through orders placed by you to the Company (acceptance, confirmation, honouring, invoicing, cancellation and so forth), internal or market research, measuring the effectiveness of advertising campaigns, other general business purposes, advertising, marketing and publicity, for marketing communications in the form of newsletters, by email, text messages, telephone, online marketing platforms, involving the profiling of customers/potential customers according to expressed interests, maintaining the relation with customers/potential customers by phone and email (including but not limited to: questions about services, complaints, general questions).
Research, analysis, studies for measuring customer satisfaction and feedback
We will process your personal data when you decide to participate in our market research, customer satisfaction analysis or when you provide us with your feedback on our services. Personal data will be processed for the purpose mentioned above only on the basis of your consent, also taking into account our legitimate interest in helping us understand the needs of customers regarding our services. Your participation in such studies is voluntary, being your choice whether or not you provide us with personal data, by filling in the participation forms on our website or other similar forms provided in those studies.
Statistics and other internal studies
We are concerned with the continuous improvement of the quality of our services and with the monitoring of the contractual relationship with the Company’s clients. Based on our legitimate interest, we use the data we collect from customers or other data we generate from the data received for various statistics, analyzes and internal studies in an anonymized format.
Direct marketing communications
We will process your personal data to inform you about our services, promotional offers and to subscribe to newsletters. As a general rule, personal data will be processed for direct marketing communications purposes only with your consent and by using the communication channels (e.g., email, telephone, postal address, etc.) with which you have agreed to when you have given consent. In each marketing message we send you, we will give you the opportunity to oppose the use of your email address (we will include the Unsubscribe option).
Making decisions and creating profiles automatically
Your personal data is subject to automated decision-making processes, including profiling. The purpose of this type of processing is to send you personalized messages based on the legitimate interest of the Company. The criteria and algorithms that the Company considers relevant may vary over time.
Recruitment activities
In order to quickly submit your application for a position within the Company, you can use our section created on the website in this regard and available at this link: https://oplog.ro/cariera
Your data and documents will be used exclusively for the processing of your application, so as to identify a suitable position available within the Company. They are saved in our database, protected against unauthorized access and processed in accordance with the legislation in force regarding the processing of personal data.
6. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
The company uses the services of several counterparties, both for the main services and the ancillary services. Some of these counterparties have the status of authorized persons and are active in areas such as transport, marketing, information technology, market research, courier, legal services, consulting, accounting, etc. and your personal data may be transmitted to them in order to be used within the limits of the obligations they have undertaken towards the Company. The personal data that we transmit to the persons authorized by the Company are limited to the minimum personal data that are necessary for the provision of those services and we ask them not to use your personal data for any other purpose.
Your personal data may be transmitted to third parties in the following situations: public authorities, audit companies or institutions with attributions in conducting inspections and controls on the company’s activity and assets, which request the Company to provide information, by virtue of the legal obligations of the latter.
For the compliance with a legal requirement or protection of the rights and assets of the Company or other entities or persons, such as courts.
The persons and entities to whom we may share your personal data are the following:
In order to provide transport or removal services, we may transmit your personal data to subcontractors/suppliers of transport services or removal services.
For the purpose of browsing the website and for purposes related to the use of cookies, we may transmit your personal data to the analysis and search engine service suppliers so that they provide maintenance services for our website.
For the conduct of promotional campaigns, as well as for the analysis of their results, we may transmit your personal data to advertising and marketing agencies, digital media agencies or social networking agencies.
For direct marketing communications, we may transmit your personal data to advertising and marketing agencies that communicate on behalf of the Company.
In order to conduct research, analysis, customer satisfaction measurement studies or to obtain feedback from our customers on our services, we may transmit your personal data to market research service suppliers.
7. TRANSFER OF PERSONAL DATA ABROAD
The transfer of personal data abroad is made, as a general rule if necessary for the execution of a contract concluded between the data subject and the Company or for the execution of pre-contractual measures or when the transfer is necessary for the conclusion or execution of a concluded contract or which will be concluded, in the interest of the data subject, between the Company and a third party.
8. PERIOD FOR THE STORAGE OF PERSONAL DATA
We will store your personal data for the period of time necessary for the fulfilment of the processing purposes mentioned above, while respecting the legal requirements in force.
If you are our client, we will keep your personal data, as a general rule, for the entire duration of the contractual relations with the Company, to which is added an additional period of at least 10 (ten) years.
If the Company determines that it has a legitimate interest or a legal obligation to further process your personal data for other purposes, you will be duly informed in this regard. Once this period expires, and the Company has no legal or legitimate reasons to process your personal data, the data will be deleted in accordance with its procedures, which may involve the archiving, anonymization or destruction of data.
9. DATA PROCESSING OF CHILDREN UNDER 16 YEARS OLD
All personal data processing activities mentioned in this Policy refer exclusively to persons who are at least 16 years old. The use of the systems, as well as of the results of the processing is forbidden regarding the children under this age without the consent of their parents/legal representatives. If, despite our reasonable prevention efforts, such processing still takes place, we will stop it as soon as we notice that the persons concerned are under the age of 16 years.
10. EXECUTION OF BACKUPS
The software applications perform at specified time intervals, automatically, a back-up of the databases, for a possible data recovery, in case of loss, destruction or malfunction of the software applications.
The company determines the time interval at which the backups of the personal databases will be executed, as well as of the programs used for the automated processing. The users that perform these backups are appointed by the Company, in a limited number.
11. THE RIGHTS OF THE DATA SUBJECTS
In the context of the processing of your personal data, unless otherwise provided by law, you have the following rights:
The right to be informed – the right to be informed about the data and the characteristics of their processing in your relation with the Company
The right of access to data – The company has the obligation, at the request sent through any channel by the data subjects (customers, employees, other individuals) to confirm to them what data they process and under what conditions
The right to rectification of data – The company has the obligation to respect the rights of data subjects to obtain without delay the rectification of any inaccurate data (erroneous or incomplete) concerning them
The right to erasure – The company has the obligation to delete personal data without any delay, when the data subjects make a request in this regard. In addition, when the Company has made public the data whose deletion is requested and the data subject requires inclusively the deletion of this data from any recipient, the Company is obliged to ensure the information of the recipients of the data regarding such a request.
The right to restriction of processing – The data subject has the right to obtain from the Company the restriction of processing, respectively its limitation (except for the actual storage) strictly to the processing with which the data subject agrees and/or strictly to the processing necessary to ascertain, exercise or defend a right in court or for the protection of the rights of another natural or legal person or for important reasons of public interest of the Union or a Member State
The right to data portability – The company is obliged to ensure:
Transmission of data received from the data subject in an accessible format at his request and
Transmission of data to other operators at the request of the data subject, incident when the following cumulative conditions are met:
The processing is based on consent or is necessary for the execution of a contract to which the data subject is a party or to intercede at the request of the data subject before concluding a contract and is performed by automatic means (not in physical form/paper, but by any means automated).
The right to object to processing of data – Data subjects may at any time object to the processing of their personal data:
For reasons related to the particular situation in which they find themselves in, the processing operations carried out on the basis of the need for processing for the performance of a task that serves a public interest with which the Company is invested; and/or the processing carried out on the basis of the legitimate interests pursued by the Company or a third party of the personal data, including profiling.
Without reasons and justification, in case of data processing in direct marketing communications.
The right not to be subject to automated decision-making, including profiling – Data subjects have the right not to have their personal data processed in the context of making automated decisions.
If you consider that there is a problem in the way the Company processes your personal data, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (NSAPDP).
The rights regarding the processing of your personal data can be exercised at any time. In order to be able to exercise these rights, we encourage you to send a request by post to the following address: OPLOG ACTIVE SRL Resita, Piata 1 Decembrie 1918, block 31, 1st floor, apt. offices, Romania, or by email at office@oplog.ro.
If you wish to withdraw your consent to the processing of your personal data for purposes related to direct marketing communications, you may at any time use the Unsubscribe option which is included in all direct marketing communications.
12. WITHDRAWAL OF CONSENT
You can withdraw your consent at any time by writing to us at the email address office@oplog.ro or at the postal address: OPLOG ACTIVE SRL Resita, Piata 1 Decembrie 1918, block 31, 1st floor, apt. offices, Romania
13. SECURITY OF PERSONAL DATA
The Company will make every reasonable effort to protect your personal data in our possession or control and shall take the appropriate technical and organizational measures to ensure a level of security corresponding to the risk with varying degrees of probability and severity for the rights and freedoms of individuals.
A personal data breach means a breach of security leading accidentally or illegally to:
Destruction (refers to the situation in which the data no longer exists or no longer exists in a form in which to make them usable by the Company)
Loss (considers the situation in which the data may exist, but the Company has lost control or access to data)
Alteration (the situation in which the data is corrupted or otherwise altered, so that they are no longer complete)
Unauthorized disclosure of personal data transmitted, stored or otherwise processed (the situation in which the data were transmitted to or accessed by persons not authorized to receive or access personal data) or to
Unauthorized access to them.
If the existence of a security incident has been documented, the Company will analyze the risks involved in that incident for the rights and freedoms of the data subjects.
If there is such an obvious risk, then the Company will notify the Supervisory Authority.
If the identified risk is high, then the Company will also inform the data subject about the particular security incident.
14. CHANGES TO THE PERSONAL DATA PROCESSING POLICY
This Personal Data Processing Policy is subject to change over time. If the changes are significant, you will receive an information note regarding the making of these changes, at the email address you provided us.
15. CONTACT DETAILS
All the questions you have regarding this Personal Data Processing Policy can be sent to the attention of the Data Protection Officer, at the email address office@oplog.ro or at the postal address: OPLOG ACTIVE SRL Resita, Piata 1 Decembrie 1918, block 31, 1st floor, apt. offices, Romania.
Last updated: 23.08.2021