Protection of personal data – updated according to EU regulation 2016/679 (GDPR)
General information
ACTIV PROMO BUSINESS SRL with registered office in Str. Liviu Rebreanu, Nr.46-58, Bl.Tr6, Sc.I, Et.10, Ap.102, Sector 3, Bucharest, we represent the operator in accordance with the GDPR and, therefore, we are responsible for the data processing described below. For questions or requests regarding data processing, please contact our data protection officer, whose contact details can be found below.
You can contact our data protection officer at any time using the following contact methods:
– By email: office@activexpo.ro
Information on data processing
We will process the personal data collected through the online customer registration form and, in the course of future commercial transactions, for the purpose of concluding and executing the contract. This processing is based on Art. 6 paragraph sentence 1 letter b) GDPR.
We will process all your personal data that is collected through the online registration form as well as by placing orders on our website and during all future commercial transactions, for the purpose of developing commercial relations and data analysis. We will also contact you for these purposes by e-mail, telephone.
For the purposes mentioned above, your data will be stored in our database and will be enriched with data that we collect from public sources (eg the Trade Register). This processing is based on Art. 6 paragraph 1 sentence 1 letter f) GDPR.
All your personal data collected through the online customer registration form and during all future commercial transactions will be processed by us for the purpose of providing you with information about advertising and marketing campaigns. This processing is based on Art. 6 paragraph 1 sentence 1 letter f) GDPR.
It is necessary to pursue our legitimate interests to inform you about our offers and services and to expand the relationship with customers. If you have given us your prior consent, we will also use your personal data to provide you with our information by e-mail, telephone. This processing is legitimately based on Art. 6 paragraph 1 sentence 1 letter a) GDPR.
Beneficiaries of the data
To achieve the goals mentioned above, we use service providers, respectively authorized according to art. 28 GDPR, for example our service providers for hosting, platform and maintenance services, courier service providers or our service providers for sending e-mails, contacting you by phone or printing personalized advertising materials.
We ensure through contractual regulations, that these service providers process personal data in accordance with European data protection legislation, to guarantee a high level of data protection, even if the personal data is transferred to a country where normally uses another level of data protection and for which there is no EU Commission adequacy decision. No other transfers of personal data are made to other recipients, with the exception of the case where we have this obligation by law.
For more information about the appropriate protection of the international transfer of data or their copy, please contact our data protection officer by e-mail at: office@activexpo.ro.
Mandatory/Voluntary Provision of Data and Duration of their retention
Providing the following data is necessary to be able to conclude a contract with you and to process the customer registration: customer name (= your company name), legal form, billing address, company phone number, tax code (as far as concerns EU customers: registration number for VAT purposes), the identification data of a person authorized for purchases (for example, the business owner), the position of the person authorized for purchase (for example, the business owner or the buyer), proof of the existence of your company .
The rest of the data collected during the customer registration process are provided by you voluntarily. You are not obliged to provide us with this personal data, and this data is not a legal or contractual requirement or a necessary requirement to conclude a contract. If you do not provide us with this personal data, this will have no consequences for you. Your personal data will be stored until the termination of the relationship with the customer, unless we are legally obliged to continue to store your data for the purpose to present them to public authorities, for example the tax authorities. The storage and transfer of your personal data to public authorities for the purpose of fulfilling a legal obligation is legally based on Art. 6 paragraph 1 sentence 1 letter c) GDPR.
Your rights
As a data subject, you can contact our data protection officer at any time and free of charge, with a notification, using the contact details mentioned above in order to exercise your rights in accordance with the GDPR. These rights are the following:
• The right to receive information about data processing and a copy of the processed data (right of access, Article 15 GDPR),
• The right to request the rectification of inaccurate data or the completion of incomplete data (right to rectification, art. 16 GDPR),
• The right to request the deletion of personal data and, if the personal data have been made public, the transmission of information regarding the deletion request to other operators (the right to deletion, Article 17 GDPR),
• The right to request the restriction of data processing (the right to restriction of processing, Article 18 GDPR),
• The right to receive personal data regarding the data subject in a structured, commonly used and mechanizable format and to request the transmission of this data to another operator (the right to data portability, Article 20 GDPR),
• The right to object to data processing with the intention to stop processing (the right to object, Article 21 GDPR),
• The right to withdraw at any time a given consent in order to stop a data processing that is based on your consent. The withdrawal will not affect the legality of the processing based on the consent granted before the withdrawal (the right to withdraw consent, Article 7 GDPR),
• The right to file a complaint with a supervisory authority if you consider that data processing is a violation of the GDPR (the right to file a complaint with a supervisory authority, Article 77 GDPR).
Due to possible changes in legislation, an amendment to these data protection notices may become necessary. In this case, we will inform you about such changes. To the extent that the changes affect processing that is based on your consent, we will ask you for a new consent, if necessary.