Polityka prywatności AVA AUTOSIGMA SRL

This Privacy Policy describes the principles of processing and protecting personal data in Ava AutoSigma SRL, based in Bucharest, Veseliei, street no 39-41, Sector 5.

I. Personal data operator

1.1 Personal data operator of persons cooperating with Ava AutoSigma.ro and visitors to the website managed by Ava Autosigma SRL based in Bucharest, Veseliei, street no 39-41, Sector 5.

1.2 The controller processes personal data in accordance with the requirements of the European Parliament and of the Council Regulation of 27 April 2016 on the protection of individuals with regard to the processing of personal data, and on the free movement of such data and repealing Directive 95/46/EC.

II. Rules on the collection of personal data

2.1 Source of data
a. The provision of personal data is voluntary but necessary to process and fulfill questions and orders. Consent for any of the purposes of the processing may be withdrawn at any time.
b. The operator may collect personal data from public sources, such as KRS or CEIDG registers, as well as from sources with limited access e.g. KRD or BIG registers. In such cases, the controller shall verify the lawfulness of the data processing.
c. The user is not obliged to provide personal data while browsing the website autosigma.ro. However, the use of data processing services may require the provision of personal data.
d. If the user accesses the services through mobile devices, the Operator may collect identification data of the mobile device, the Internet service provider and the subscriber. The data collected in this way will be processed anonymously and will only be used for statistical purposes or to ensure the optimal functioning of the website.

2.2 Scope of data retention
a. The personal data collected may include: name, surname, company name, position, address, contact details such as telephone number, e-mail address, etc, the fax number and addresses of internet communicators or any other communicator that allows customers to be contacted through the preferred method of contact.
b. In justified cases, the Collector may also keep the data as an ID number if required by additional regulations on, for example, contract documentation.
c. The Administrator collects information related to the navigation of the site, such as: the source and number of visits, their time and duration, the content navigated, the number and type of subpages and links used, the IP address. The operator does not connect such information with the user's personal data and does not use it to identify the user, unless it is necessary for the proper provision of services.
d. The operator does not retain sensitive data.

III Data processing

3.1 Purposes of processing
Personal data are processed for the following purposes:
a. Processing and fulfilling of queries and orders submitted directly in autosigma.ro, via all available communication channels as well as exercising any legal claims or redress related to the queries or orders on the basis of Article 6 (1b) GDPR;
b. Direct marketing connected with the Controller’s business on the basis of Article 6 (1a) GDPR via all sale channels, including but not limited to commercial communication by e-mail or phone and presentations of promotional offers in current campaigns.
c. Satisfaction surveys on cooperation with the Controller and its local distributors on the basis of Article 6 (1f) GDPR. The surveys may be conducted by electronic means based on questionnaires, forms or questions by phone or e-mail.

3.2 Scope of the information used
a. The Controller uses the information referred to in section 2.2 point c only for the purposes connected with the market investigation and website traffic, statistical purposes, and to assess the interest in the website content and to improve it.
b. The Controller uses cookies or similar technologies. Such technologies enable the Controller to customise the website for user’s individual interests and preferences.

3.3 Profiling
a. The Controller does not use profiling based on personal data.
b. The Controller does not use automated decision-making based on profiling.

3.4 Personal data storage period
a. Personal data are processed until the consent is withdrawn.
b. It is possible to extend the period of the processing until the fulfilment of legally justified interests of the Controller, including performance of contracts or securing possible claims. However, it does not mean a possibility to process personal data for any other purpose than the above-mentioned.

IV Data recipients

4.1 The Controller does not sell, disclose or make available the collected personal data to any third party unrelated to contract performance.

4.2 The Controller may entrust its local distributor with data processing in order to process and fulfil queries and orders.

4.3 Personal data maybe entrusted only based on a data processing agreement which protects personal data according to the applicable provisions and regulations.

4.4 Personal data may be disclosed to the Controller’s cooperating entities in order to perform and exercise contractual rights including but not limited to the entities providing the following services:

  • accounting;
  • debt collecting;
  • IT;
  • marketing;
  • mail and courier;
  • legal;
  • administrative and back office.

4.5 The Controller does not transfer the personal data outside the European Union except for situations when specifically requested by clients in relation to their order.

4.6 The Controller reserves the right to disclose information about a user to a competent authority or a third party if requested based on the appropriate legal basis and in accordance with the provisions of law in force.

V Rights regarding the processing of personal data

5.1 Every person whose personal data is processed has the right to:

  • the right to withdraw consent to the processing of their personal data;
  • the right to object to data processing for marketing purposes;
  • the right of access to their personal data;
  • their rectification of their personal data;
  • the erasure of their personal data;
  • the right to restrict the processing of their personal data;
  • the right to data portability.

5.2 A person whose data is processed has the right to lodge a complaint with a supervisory authority on the protection of personal data, for example. the President of the Office for Personal Data Protection.

5.3 The Administrator may refuse to delete personal data if there is a reasonable basis for this, in accordance with the legal provisions in force.

5.4 Contact details regarding the protection of personal data in autosigma.ro: +40 314 051 168
e-mail: office@autosigma.ro