Privacy Policy regarding the processing of personal data

 

General information

Introduction

The following Data Protection Notice is designed to inform you about the processing of your personal data and your rights in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to data processing. personal data and on the free movement of such data and repealing Directive 95/46 / EC and the national legislation in force.

Personal data controller

We, CORA TRADING & SERVICE SRL with headquarters in PICTOR AUREL BAESU street, no. 53, sector 1, Bucharest, we represent the operator in accordance with the provisions of Regulation no. 679 of April 27, 2016. Therefore, we are responsible for the collection and processing of personal data, as described below.

The personal data protection officer

We have appointed a Data Protection Officer who can be contacted if there are any questions regarding any aspect related to the protection of personal data, by sending a request to the contact data: DANIELA SANDU, 0742158739.

CORA TRADING & SERVICE SRL with headquarters in PICTOR AUREL BAESU street, no. 53, sector 1, Bucharest
E-Mail Manager CORA TRADING & SERVICE SRL: d.sandu@romfelt.ro

Information on the collection, processing and storage of personal data

Collection of personal data

In its capacity as operator, CORA TRADING & SERVICE SRL, regarding you, depending on the relationship between you and CORA TRADING & SERVICE SRL, may collect the following categories of personal data: identification data (name, address, telephone, CNP, series identity card, e-mail, signature), financial data (bank account, any financial transactions in which individuals are involved), data about family members, electronic identification data (cookies, IP addresses, digital signature, electronic certificates), information of a legal nature (administrative fines, convictions, other administrative sanctions), data on professional qualifications (on data subject's studies, professional qualifications, publications), data on professional history, data on health, data on affiliations and political opinions.

All such personal data are collected in accordance with the purposes and legal grounds set out below.

The purposes for which your personal data is processed

• the processing is necessary for the performance of a contract to which the data subject is a party or for making arrangements at the request of the data subject before the conclusion of a contract;
• the processing is necessary in order to fulfill a legal obligation incumbent on CORA TRADING & SERVICE SRL;
• the processing is necessary for the performance of a task that serves a public interest or that results from the exercise of the public authority with which CORA TRADING & SERVICE SRL is invested.

Basis of processing

The basis for which we collect and process your personal data is primarily the freely expressed consent, given following the interaction between you and CORA TRADING & SERVICE SRL for or in connection with the object of activity of our institution. In this regard we list

• elaboration, approval and monitoring of the application of the obligatory regulations at national level necessary for the functioning of the electricity, thermal and natural gas sector and market in conditions of efficiency, competition, transparency and consumer protection;
• granting licenses, authorizations and attestations, annual contributions charged to regulated economic operators in the electricity and heat and natural gas sectors, as well as from funds granted by international bodies.

At the same time, the basis of the processing is also a legal and / or contractual one, and is based on the public interest resulting from the exercise of the public authority with which CORA TRADING & SERVICE SRL is invested

Your personal data will only be processed for the purposes mentioned above. If they are processed for purposes other than those for which they were collected, we will provide you with information about the new purposes and any additional relevant information.

Retention, deletion and destruction of personal data

Your personal data are kept and deleted / destroyed in accordance with the archival nomenclature approved at the level of CORA TRADING & SERVICE SRL, respecting Law no. 16/1996 of the National Archives.

Your rights

We inform you that you have the following rights:

• the right to have access to your data: you may request that the categories of personal data that are processed be communicated to you, the purpose for which the processing takes place, the recipients to whom they have been or will be communicated, the period for which they are expected to be stored or, if this is not possible, the criteria used to determine this period; the existence of an automated decision-making process including the creation of profiles;
• the right to request rectification of data: in the event of errors in the data being processed, you may request that they be corrected; If the data is incomplete, you can request that it be completed. The rectification will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate effort;
• the right to request the restriction of data processing: you have the right to request the restriction of data processing in the following situations: if you have challenged the accuracy of the data, for a period that allows us to verify the accuracy of the data; if the processing is illegal and you object to the deletion of personal data, instead requesting a restriction on their use; if the controller no longer needs the personal data for the purpose of processing, but you request it in order to establish, exercise or defend a right in court; if you objected to the processing for the time period in which it is verified that the legitimate rights of the operator prevail over your rights;
• the right to request the deletion of data: you may request the deletion of the processed data, if the data is no longer necessary for the purposes for which it was collected or processed, if you have withdrawn your consent and there is no other legal basis for processing; if you object to the processing and there are no legitimate reasons prevailing in respect of the processing; personal data has been processed illegally; personal data must be deleted in order to comply with a legal obligation; personal data were collected in connection with the provision of information society services;
• the right to request the transfer of data (on data portability): you can request the transfer of your data to another operator if the processing is based on your consent and the processing is automatic;
• tight to object to processing: You have the right to object to the processing of your data if it relates to direct marketing. At the same time, you may object to the processing, unless the controller demonstrates that he has legitimate reasons justifying the processing and that it prevails over your interests, rights and freedoms or that the purpose is to establish, exercise or defend a right in court;
• the right not to be subject to a decision based solely on automated data processing. You will not be subject to a decision based solely on automated data processing.

If you consider that your rights have been violated, you can file a complaint with the National Authority for the Supervision of Personal Data Processing.