KOMSI GROUP S.R.L.
in the collection, processing and storage of personal data
Based on the provisions of Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR), this Privacy Policy applies only to customers of KOMSI GROUP S.R.L. and users of our online services and visitors to our website. KOMSI GROUP S.R.L. strives to ensure the protection of the privacy of your personal data as a data subject when using our services. In this sense, this policy establishes both the way in which your personal data will be processed, the rights you have as a data subject and the way in which they will be protected. Any changes made to this Privacy Policy can be found by visiting our website.
KOMSI GROUP S.R.L. is in line with the provisions of Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) and through this General Privacy Policy we will point out some important aspects.
1. The purpose of using personal data as a data subject
By providing your personal data, as the data subject you expressly and unequivocally agree to the use by KOMSI GROUP S.R.L. of data collected for the following purposes:
- In order to take over your complaints and / or suggestions and to respond to you accordingly, in which case we will need, for example, your name, landline / mobile phone number, e-mail address;
- In order to take over the online requests sent through the form provided on the website www.vilamamaia.ro in which case we will need, for example, name, landline / mobile phone number, address;
- In order to contact you in the event of any problems arising in the provision of services, in which case we will need, for example, your landline / mobile phone number;
- For the recruitment process when you apply online for one of the positions open for employment, in which case we will need your name, landline / mobile phone number, e-mail address. Applying for a job / recruitment. When applying for a job at KOMSI GROUP S.R.L. personal data will be processed and controlled by KOMSI GROUP S.R.L. and will be used only for the purpose of recruitment (interview, communications related to the recruitment process). The personal data used in the recruitment process will not be stored for a longer period of time than is necessary for recruitment and will not be disclosed to third parties. If applicants / candidates wish to access, modify or delete personal data after the end of the recruitment process, please contact contact@komsitravel.ro.
Your data collected for the purposes listed above will be kept only for as long as necessary to meet the purposes for which they were collected for 1 (one) year or as long as required by law, after which personal data will be deleted or transformed into anonymous data, unless there is an imperative legal provision to keep them.
2. Your rights as a data subject
Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) gives more rights to persons whose personal data are processed. As long as the personal data is kept by KOMSI GROUP S.R.L., you as the data subject have the following rights:
The right of access means that you have the right to obtain confirmation from us whether or not we process personal data concerning you and, if so, access to such data and information on how the data is processed.
The right to data portability refers to the right to receive personal data in a structured, commonly used and automatically readable format and to the right to have this data transmitted directly to another operator, if this is feasible from the point of view of technical view.
The right to object refers to the right to oppose the processing of personal data when the processing is necessary for the performance of a task that serves a public interest or when it considers a legitimate interest of the controller. When the processing of personal data is aimed at direct marketing, you have the right to object to the processing at any time.
The right to rectification refers to the correction, without undue delay, of inaccurate personal data. The rectification will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate effort.
The right to delete data (“the right to be forgotten”) means that you have the right to request that we delete your personal data, without undue delay, if one of the following reasons applies: it is no longer necessary for the fulfillment the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for processing; you object to the processing and there are no legitimate reasons to prevail; personal data has been processed illegally; personal data must be deleted in order to comply with a legal obligation; personal data were collected in connection with the provision of information society services.
The right to restrict the processing can be exercised in case the data subject disputes the accuracy of the data, for a period that allows us to verify the correctness of the data; the processing is illegal, and the person opposes the deletion of personal data, instead requesting the restriction; if KOMSI GROUP S.R.L. he no longer needs the personal data for the purpose of processing, but the person requests them for the ascertainment, exercise or defense of a right in court; if the data subject has objected to the processing for the period of time in which it is verified whether the legitimate rights of the operator prevail over those of the respective person.
All these rights can be exercised through a written request, signed and dated, sent to our headquarters or to the email address contact@komsitravel.ro.
In addition, starting with May 25, 2018, if you have any dissatisfaction or questions related to the processing of personal data, you can contact the Data Protection Officer at contact@komsitravel.ro. Complaints regarding the processing of personal data may be addressed to the National Authority for the Supervision of Personal Data Processing.
3. Data transfer
KOMSI GROUP S.R.L. will not transfer, sell or exchange your data to third parties for marketing purposes.
4. Security of your data
KOMSI GROUP S.R.L. has taken technical and organizational measures to ensure an adequate level of protection and security in the context of operations carried out on personal data by limiting unauthorized access, or against unauthorized loss or manipulation of data. In addition, in line with the evolution of information technology, we make continuous efforts to adapt security measures.
5. Use of personal data
We will only use personal data for the purpose for which it was collected. We will keep this information for the period specified in art. 1 above. Access to personal data is strictly limited to the staff of KOMSI GROUP S.R.L.
6. Responsibility
KOMSI GROUP S.R.L. is responsible for compliance with the GDPR as well as for the principles set out in this Policy. KOMSI GROUP S.R.L. will keep under its responsibility a register in which it will keep a record of the processing of personal data and the purpose for which they were collected and where necessary will make the information available to the supervisory authorities.
Any questions regarding this privacy policy can be addressed to the email address contact@komsitravel.ro
7. Security of processing
We will process the data securely, apply and maintain appropriate technical measures to protect personal data against accidental or unlawful destruction or loss, alteration, disclosure or unauthorized access. In case of possible data security breaches. KOMSI GROUP S.R.L. has the obligation to notify the National Authority for the Supervision of Personal Data Processing within 72 hours and of the data subjects as soon as possible;
8. Access and rectification or deletion of personal data.
Users have the right to request at any time during the storage period described in art. 1 of the present, the exercise of the rights of the data subject as provided in art. 2 of this policy and by Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) by sending an email to contact@komsitravel.ro.
Complaints / notifications / requests and response deadlines
Users whose data has been collected and or processed and for whose purposes they have given their consent, for the entire period for which this data was collected, the data subjects – users may submit complaints / notifications / requests to KOMSI GROUP S.R.L. thus sending an email to contact@komsitravel.ro. The response time for such complaints / notifications / requests is 30 (thirty) days from the date of their receipt and registration.
9. Modifications / completions of this policy
DATA PROTECTION SECURITY S.R.L. reserves the right to change this policy unilaterally whenever it deems it necessary and or for example following relevant legislative changes. If any changes are made to this DATA PROTECTION SECURITY S.R.L. will make them known through the website www.vilamamaia.ro. We encourage users to check this page regularly for updates on the General Privacy Policy.
10. Contact details
KOMSI GROUP S.R.L., headquartered in Bucharest, sector 6, registered at the Bucharest Trade Register Office, under no. J40 / 32298 from 1992, fiscal code no. 3153432 from 1992, email address: contact@komsitravel.ro.