GDPR Policy

CONVERGIS SRL complies with the provisions of Regulation No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and through this General Privacy Policy we will highlight several important aspects.

1. Purpose of using personal data as a data subject

By providing your personal data, as the data subject, you express your express and unequivocal agreement to the use by CONVERGIS SRL of the collected data for the following purposes:

To take your complaints and/or suggestions and to respond to you appropriately, in which case we will need, for example, your name, landline/mobile phone number, e-mail address;

To take over your online requests submitted through the form made available on the website www.nestkey.ro, in which case we will need, for example, your name, landline/mobile phone number, address;

To contact you in the event of any problems arising in the provision of services and delivery of products ordered by you, in which case we will need, for example, your landline/mobile telephone number;

To send marketing offers, such as newsletters, in which case we will need, for example, your email address, name;

For the recruitment process when you apply online for one of the open positions, in which case we will need your name, landline/mobile phone number, e-mail address. Applying for a job/recruitment. When you apply for a job within CONVERGIS SRL, your personal data will be processed and controlled by CONVERGIS SRL and will be used only for the purpose of recruitment (interview, communications related to the recruitment process). Personal data used in the recruitment process will not be stored for a longer period of time than necessary for the recruitment and will not be disclosed to third parties. If applicants/candidates wish to access, modify or delete their personal data after the recruitment process has been completed, they are asked to contact b.paraschiv@convergis.ro.

Your data collected for the purposes listed above will be kept only as long as necessary to meet the purposes for which they were collected, namely 1 (one) year or as long as the law requires, after which the personal data will be deleted or transformed into anonymous data, except in the case where there is an imperative legal provision to keep them.

2. Your rights as a data subject

Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) grants several rights to persons whose personal data are processed. For as long as personal data are kept by CONVERGIS SRL , you as the data subject have the following rights:

The right of access means that you have the right to obtain confirmation from us as to whether or not we are processing personal data concerning you and, if so, access to that data and information on how the data is processed.

The right to data portability refers to the right to receive personal data in a structured, commonly used and machine-readable format and to have these data transmitted directly to another controller, if this is technically feasible.

The right to object refers to the right to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or when it is based on the legitimate interests of the controller. When the processing of personal data is for the purpose of direct marketing, you have the right to object to the processing at any time.

The right to rectification refers to the correction, without undue delay, of inaccurate personal data. The rectification will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.

The right to erasure ("right to be forgotten") means that you have the right to request that we erase your personal data without undue delay where one of the following reasons applies: they are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for the processing; you object to the processing and there are no overriding legitimate grounds; the personal data have been processed unlawfully; the personal data must be erased for compliance with a legal obligation; the personal data were collected in connection with the provision of information society services.

The right to restrict processing may be exercised if the data subject contests the accuracy of the data, for a period that allows us to verify the accuracy of the data; the processing is unlawful, and the person opposes the deletion of personal data, requesting restriction instead; if CONVERGIS SRL no longer needs the personal data for the purpose of processing, but the person requests them for the establishment, exercise or defense of a right in court; if the data subject has opposed the processing for the period of time in which it is verified whether the legitimate rights of the operator prevail over those of the person concerned.

All these rights can be exercised through a written request, signed and dated, sent to our headquarters or to the email address b.paraschiv@convergis.ro .

In addition, starting with May 25, 2018, if you have any complaints or questions related to the processing of personal data, you can contact the Data Protection Officer at b.paraschiv@convergis.ro . Complaints regarding the processing of personal data can be addressed to the National Supervisory Authority for the Processing of Personal Data.

3. Data transfer

CONVERGIS SRL will not transfer, sell or exchange your data to third parties for marketing purposes.

4. Security of your data

CONVERGIS SRL has taken technical and organizational measures to ensure an adequate level of protection and security in the operations performed on personal data by limiting unauthorized access, or against loss or unauthorized manipulation of data. In addition, in accordance with the evolution of information technology, we make continuous efforts to adapt security measures.

5. Use of personal data

We will use personal data only for the purpose for which it was collected. We will retain this information for the period specified in art. 1 above. Access to personal data is strictly limited to CONVERGIS SRL personnel.

6. Responsibility

CONVERGIS SRL is responsible for compliance with the GDPR and the principles set out in this Policy. CONVERGIS SRL will maintain under its responsibility a register in which it will keep a record of the processing of personal data and the purpose for which they were collected and where necessary will make the information available to the supervisory authorities.

Any questions regarding this privacy policy can be addressed to the email address b.paraschiv@convergis.ro .

7. Processing security

We will process data securely, we will apply and maintain appropriate technical measures to protect personal data against accidental or unlawful destruction or loss, alteration, disclosure or unauthorized access. In the event of possible data security breaches, CONVERGIS SRL is obliged to notify the National Supervisory Authority for Personal Data Processing within 72 hours and the data subjects as soon as possible;

8. Access and rectification or deletion of personal data

Users have the right to request at any time during the storage period described in art. 1 hereof, the exercise of the rights of the data subject as provided for in art. 2 of this policy and by Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) by sending an email to b.paraschiv@convergis.ro .

9. Complaints/notifications/requests and response deadlines

Users whose data have been collected and/or processed and for whose purposes they have given their consent, for the entire period for which these data were collected, the data subjects - users may submit complaints/notifications/requests to CONVERGIS SRL by sending an email to b.paraschiv@convergis.ro. The response period for such complaints/notifications/requests is 30 (thirty) days from the date of their receipt and registration.

10. Amendments/supplements to this policy

CONVERGIS SRL reserves the right to unilaterally modify this policy whenever it deems it necessary and or for example following relevant legislative changes. In case of changes to this Policy, CONVERGIS SRL will make them known through the website www.hexacraft.ro . We encourage users to check this page periodically to be informed about the latest news regarding the General Privacy Policy.

11. Contact details

CONVERGIS SRL

Phone: +40 744.538.193

E-mail: b.paraschiv@convergis.ro