GDPR

Notice on the processing of personal data

Update: Download Standard Contractual Clauses June 2021 CELEX 32021D0915 RO TXT here

  1. ADREM’s contact details (hereinafter, the Company), as a personal data controller: Bucharest, Iancu de Hunedoara St., District 1
  2. The contact details of the Data Protection Officer are: pr**************@***em.ro
  3. Purpose of processing personal data: The purposes of personal data processing concern the performance of the specific business activity, including both contractual relationships with the Company’s service providers or beneficiaries, as well as contractual relationships related to staff recruitment and the performance of work, and the related legal obligations.

The Company may act both as a Controller and as a Processor for another company and may transfer personal data to other third-party entities only for the performance of the purpose of the concluded contracts or, as applicable, the relevant legal obligations.

  1. The categories of personal data processed may include, as applicable, the following: first and last name, personal identification number (CNP), identity document series and number, driving licence, domicile, contract series and number, or meter, bank account, image, voice, handwritten signatures, copy of identity document, phone number, email address, correspondence address, family ties, age, gender, health status, criminal convictions, or, as applicable, level of income or education, specialisations and certifications, cookies, IP addresses and other types of personal data recorded through documents issued by public authorities in the country or abroad, including courts and investigative bodies, or through statements by natural or legal persons.
  2. The categories of recipients of your personal data may include, as applicable, the following: companies acting as Controllers in relation to the Company, debt recovery companies, lawyers, the Directorate for Persons Records and Database Administration, translators, banks, courts, court technical experts and bailiffs, accounting, audit and IT service operators and providers in the country or abroad, including outside the European Economic Area, insurers and reinsurers in the country or abroad, established, as applicable, within or outside the European Economic Area, and their agents, postal and courier service operators, natural or legal persons who justify a legitimate interest in obtaining the respective information.

For situations in which the Company exports personal data to international organisations or to states outside the European Economic Area, upon request it may provide evidence of the appropriate safeguards implemented.

  1. Personal data will be retained until the purpose is achieved and for as long as the Company can justify a legitimate interest in retaining it. Without limitation, the generally applied rule concerns the minimum storage periods provided by applicable law for certain categories of documents or those regarding statutory limitation periods. Personal data may be retained to preserve the exercise of a right in court or to ensure the evidence necessary to fulfil legal obligations.
  2. The Company’s legitimate interests concern more efficient staff selection and recruitment, fraud prevention, preserving defence rights by ensuring evidence of the performance of obligations, or, as applicable, streamlining internal processes and increasing the speed of resolving petitions or fulfilling legal obligations;
  3. Without affecting the legal obligations of the Company or those it represents, you may request access to personal data, rectification or erasure thereof, or restriction of processing, having the right to object to processing, as well as the right to data portability;
  4. Right of access to personal data – Allows you to obtain from us confirmation as to whether or not we process personal data concerning you and what such data are processed. Where the personal data concerning you are not collected from you, any available information regarding their source, in cases where we do not have a legal prohibition on disclosing the source.
  5. Right to rectification – Means the right to request the rectification or updating of inaccurate or incomplete personal data concerning you, or the completion of such data where they are incomplete.
  6. Right to erasure of data or the “right to be forgotten” – Means the right to request the erasure of personal data concerning you, in certain circumstances, such as (i) the personal data are no longer necessary for the purposes for which they were collected or processed, (ii) your data have been processed unlawfully, (iii) the processing was based on your consent and that consent has been withdrawn.
  7. Right to withdraw consent – Consent may be withdrawn at any time where the processing of personal data concerning you was carried out on the basis of your consent.
  8. Right to restriction of processing – Means the right to request and obtain restriction of the processing of personal data concerning you, in certain circumstances, such as (i) you contest the accuracy of the data, for the period that allows us to verify the accuracy of those data, (ii) your data have been processed unlawfully and you object to their erasure, requesting restriction of their use.
  9. Right to data portability – Means the right to receive the personal data concerning you that you have provided to us, with the right to transmit them to another controller, where (i) the processing was carried out based on your consent or on the contract concluded with us, and the processing of personal data was carried out by automated means. This right may be exercised only to the extent that the processing of the provided data was carried out exclusively by automated means and only where the extraction of such data is feasible in view of the technical capabilities used by the Company.
  10. Right to object – Means that, at any time, you have the right to object, on grounds relating to your particular situation, to the processing of personal data in certain circumstances, such as (i) the processing was carried out in our legitimate interest or (ii) the processing is for direct marketing purposes, including profiling based on those provisions.
  11. The right not to be subject to a decision based solely on automated processing of your data, including profiling, which produces legal effects or similarly significantly affects you, means that you have the right to request human intervention from the Controller, to express your point of view and to contest the decision.
  12. The right to lodge a complaint with us and/or with the competent data protection authority.
  13. The right to bring an action before the courts.

Where your personal data are processed by the Company based on your consent expressed directly or in relation to other entities, you have the right to withdraw that consent directly in relation to us;

  1. Your data were obtained following direct interaction with the Company, including through your representatives, employers or other natural or legal persons with whom you are in a contractual relationship, or from public authorities, courts, documents issued by public authorities and courts in the country or abroad, statements or other documents communicated by natural or legal persons, or by your accessing our IT systems, or by consulting certain databases and the like.
  2. Data processing is not carried out through an automated decision-making system, including profiling;


The exercise of the rights set out above may be carried out as follows:

– directly, by submitting a request to the Company’s registry office in Bucharest, Iancu de Hunedoara St., District 1;

or

– electronically, by accessing the forms made available for this purpose on the company’s website http://adrem.ro/adrem-contactpage/ and sending them to the email address pr**************@***em.ro

GDPR NOTICE – PROCESSING CURRICULUM VITAE DATA

We inform you that our company, as controller, intends to process your personal data within the staff recruitment process. The processing will be carried out based on your freely given consent, in accordance with the provisions of Article 6(1)(a) of EU Regulation No. 679/2016. For the purpose mentioned above, our company may use your data included in the submitted CV in order to analyse eligibility criteria and select your application. In this regard, depending on the outcome, you may be contacted to arrange an interview, which may consist of one or more stages.

In this regard, we inform you that you have no legal obligation to provide our company with the data included in the CV; the communication of all this information is based exclusively on your consent. If you do not wish to provide these personal data, we inform you that there will be no negative legal consequences for you; however, our company will not be able to include your application in the recruitment process.

The personal data thus collected by our company may be stored both in physical/hard-copy form and electronically and will not be disclosed to any third-party recipient, except in the event of requests/obligations from the competent state institutions, carried out in accordance with the law.

In accordance with the provisions of the Regulation, the candidate, as the data subject, has the right to withdraw consent at any time without affecting the lawfulness of processing carried out based on consent before its withdrawal, and to request from our company, as controller, access, rectification or restriction of the processing of personal data, also having the right to object to processing, as well as the right to data portability.

In principle, our company will store the personal data thus obtained until the recruitment process is completed. If your application is not selected for entering into an individual employment contract, after the recruitment process is completed, our company may keep your CV in the database for future recruitment and employment opportunities for a period of no more than 3 (three) years, with the possibility of annual updates of the data included in the CV.  If you do not wish your CV to be kept in our database after the recruitment process is completed, please send us a simple request to this effect, using the contact details below.

If our company fails to comply with its obligations regarding data processing, you have the right to address both the courts and the ANSPDCP.

The exercise of the rights set out above may be carried out: – directly, by submitting a request to the Company’s registry office in Bucharest, Iancu de Hunedoara St., District 1; or – electronically, by accessing the forms made available for this purpose on the company’s website  http://adrem.ro/adrem-contactpage and sending them to the email address pr**************@***em.ro.