Information on the Processing of Personal Data
We would like to assure you that for Info Quest Technologies Romania SRL (hereinafter the Company) with its registered office at 4B and 2-4 Ing. George Constantinescu Str. Building A, 6th Floor, 2nd District, Office Nr. 620, Bucharest, Register Number: J40/24683/, email: info@info-quest.ro, tel.: +40 (31) 228 50 80, corporate website: www.info-quest.ro, the protection of our customers’ and partners’ personal data is of paramount importance. For this reason, we are taking appropriate measures to protect the personal data we process from any loss, leakage, alteration, transmission, or otherwise improper processing and to ensure that the processing of personal data is always carried out in accordance with the obligations laid down by the legal framework, both by the company itself and by those third parties that process personal data on behalf of the Company.
What is GDPR?
The General Data Protection Regulation (GDPR) is the new regulatory framework of the European Union (EU) in the field under consideration. The purpose of the law is to lay down the conditions for the processing of personal data to protect the rights and freedoms of natural persons, and in particular, the right to the protection of personal data.
Controller
The Company informs that, for the purposes of its business activities, processes the personal data of its clients & partners in accordance with applicable national law and European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter referred to as the “Regulation”), as such is in force. For any matter relating to the processing of personal data, please contact the Company via the following email: dataprotection@info-quest.ro or databreach@info-quest.ro or dpo@info-quest.ro.
What categories of personal data do we process?
Your personal data that we process are necessary adequate and appropriate to achieve our intended purposes. The personal data that may be collected when you browse the Website are the following:
- If you wish to submit your complaint via the relevant form, we collect personal data, such as your first name, surname, VAT number, contact hours, telephone number, email address, and the information contained in the relevant message you send us, through the relevant contact form.
- If you wish to become an Info Quest Technologies Romania customer, by completing the relevant form found in our Website, we collect personal data, such as your name, surname, position in your company, as well as the company’s name, e-mail address, phone number.
- Information collected through software tools, such as cookies, and other similar technologies and related to the analysis of your visit to the Website. For more information about the data collected through cookies and similar technologies, please visit the relevant “Cookies Policy” section.
Which are legitimate grounds for processing your personal data?
The Company processes your personal data transparently in accordance with the principles of legality, proportionality, confidentiality and integrity, limitation of purpose and accuracy, specific data retention time, and data minimization. Within the context of the Website’s use, the Company processes your data according to the following purposes and legal bases:
- To properly handle your complaint
Our Website provides you with the opportunity to submit your complaint through the relevant form. If you do so, we will process the information you provide in order to respond to you and handle any complaint you may have. It is in our legitimate interest to process such communication and to properly reply to you [Article 6(1)(f) GDPR].
- To register you as an Info Quest Technologies Romania customer
Our website offers you the opportunity to become an Info Quest Technologies Romania customer by completing the relevant form available on our website. By providing the necessary information, we will register you as a customer. The legal basis for this processing is the performance of our contract [Article 6(1)(b) of the GDPR].
- To safeguard our legitimate interests and to comply with applicable law.
We may process your personal data for the establishment, exercise and/or defense of legal claims and/or the defense of our rights before courts, administrative or judicial authorities or in the context of extrajudicial proceedings [Article 6(1)(f) of the GDPR], as well as for the purposes of complying with obligations arising from applicable legislation [Article 6(1)(c) of the GDPR].
- To provide you with the functionalities of the Website.
We have a legitimate interest in ensuring the smooth, correct, and secure operation of the Website, to maintain data backups and in general to ensure business continuity [Article 6(1)(f) of the GDPR].
Where do we transmit your personal data?
The Company transmits personal data to third parties to whom it entrusts the processing of personal data on its behalf. Specifically: The Company may share information about how you use our website with social media, advertising, and analytics partners, who may combine it with other information you have provided to them or collected in connection with your use of their services or courier companies to implement a service you have entrusted to us. Transport companies may contact you to request clarification and to inform you on the delivery of your products. Data is also transmitted to companies cooperating with the Company that provide services in order to inform you about a specific product / service for which you requested information.
Transport companies may contact you to ask for clarifications and to inform you about the delivery of your products.
Finally, the data are transferred when payment is made to payment providers. On our side, we use high security systems to prevent data leakage due to malicious actions.
The company has lawfully ensured that the partners processing data on its behalf meet the requirements and provide sufficient assurances for the implementation of appropriate technical and organizational measures to ensure that during the processing of your personal data your rights are protected.
We may also share your information with relevant agencies, law enforcement agencies, government authorities and other third parties, according to the legal framework, in order to prevent or detect criminal acts, etc.
We may assign certain issues to external partners, lawyers, law firms and consulting firms if it is deemed necessary to assist them in the management of cases. In such cases the Company remains responsible for the processing of your personal data and defines the individual elements of the processing and signs a special contract with the third parties to whom it entrusts processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that any natural person can freely and unhindered exercise the rights granted to him by the legal framework.
Storage Time
The personal data processed by the Company shall be kept for the period necessary to fulfil the purpose of the processing. At the end of this period, the data will be deleted, unless otherwise is required by the law or for the establishment, exercise, or support of legal claims of the Company.
What are your rights in respect to your personal data?
Every natural person whose data are being processed by the Company enjoys the following rights:
Right to Access: You have the right to be aware and verify the legitimacy of the processing. So, you have the right to access the data and get additional information about their processing.
Right to rectification: You have the right to review, correct, update or modify your personal data.
Right to delete (‘right to be forgotten’): You have the right to request the deletion of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as, by way of indication, where there is a contract, obligation to process personal data required by law, public interest), such right shall be subject to specific restrictions or shall not exist, as the case may be.
Right to restriction of processing: You have the right to request the limitation of the processing of your personal data in the following cases: (a) when the accuracy of the personal data are questioned and until such data are verified, (b) when you object to the deletion of personal data and request the limitation of their use rather than their deletion, (c) when such personal data are not needed for processing purposes, they are, however, indispensable for the foundation, exercise, support of legal claims, and (d) when you oppose to the processing and until it is verified that there are legitimate grounds that concern us and supersede the reasons for which you are opposed to the processing.
Right to oppose the processing: You are entitled to oppose the processing of your personal data, at all times, in case where, as described above, this is necessary for the purposes of legitimate interests pursued by us as controllers, as well as in the processing for direct marketing purposes and consumer profiling.
Right to data portability: You have the right to receive your personal data free of charge in a format that allows you to access, use, and edit them with commonly used editing methods. Moreover, you have the right to ask us, if technically feasible, to pass the data directly to another controller. Such right to do so exists for the data you have provided to us, and their process is carried out by automated means based on your consent or performance of a relevant contract.
Right to revoke your consent: Lastly, the Company informs you that, where processing is based on your consent, you have the right to revoke it without affecting the legality of consent-based processing in the period prior to said revocation.
You may address any questions or requests regarding the protection of your personal data within the context of the Website’s performance, at dataprotection@info-quest.ro or databreach@info-quest.ro or dpo@info-quest.ro or by filling out the complaint form. In the above cases, we will try to respond to your request within (30) days of its submission. This period may be extended for an additional sixty (60) days, if necessary, considering the complexity of the request and the number of requests, in which case we will inform you thereon within the abovementioned period of thirty (30) days.
Right to submit a complaint: If you consider that the processing of your data violates Regulation (EU) 2016/679, you have the right to lodge a complaint via the Data Protection Authority’s web portal. Detailed instructions for filing a complaint can be found on the Authority’s website.
Contact details
For any questions or requests regarding the protection of your personal information, including the revocation of your consent, you can contact the Data Protection Officer via email at dataprotection@info-quest.ro or databreach@info-quest.ro or dpo@info-quest.ro
Security of Personal Data
The Company implements appropriate technical and organizational measures aiming at the safe processing of personal data and the prevention of accidental loss or destruction and the unauthorized and/or unlawful access to, use, modification or disclosure thereof. In any case, the way in which internet operates and the fact that it is free to anyone cannot guarantee that unauthorized third parties will never be able to violate the applicable technical and organizational measures gaining access and, possibly, using personal data for unauthorized and/or unfair purposes.
Amendment of the Privacy Notice
The information about our Company’s privacy notice reflects the current state of data processing on our website. In the event of changes in data processing, this data protection information will be updated accordingly. On our website there will always be the latest version of this data protection information, so you will be informed about the scope of data processing on our website. We recommend that you always be aware of how we process and protect your personal information. All future changes to this Privacy Notice will be made known in good time before these changes take effect.
This information is provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council.
