Last update: 28.01.2025
Protector PriVit S.R.L. (hereinafter PPV) is a limited liability company established in Romania under the registration no. 49527454. Within the Register of Commerce, with ROONRC.J2024000338051 as the EUID.
This Privacy Notice explains how PPV processes personal data as a data controller. For all cases when PPV may act as a data processor, the Data Processing Agreement with the data controller on behalf of which the processing activity occurs sets the rules.
Whenever the concept of “data protection laws” will be used throughout this Privacy Notice, it will inherently include:
- The General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR)
- Law no. 190/2018 on implementing measures to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
However, this list is not exhaustive. Other relevant laws may be applicable depending on the circumstances, such as the processing activity, the territory, the residency of the data subjects.
Categories of personal data being processed
- Name and surname
- E-mail address
- Physical address
- Phone number
Purposes and legal grounds allowing the processing activities
As part of your contact with PPV:
- For inquiries, recommendations, PPV will process your name and surname and e-mail. Additional personal data may be processed only exceptionally, if required by the circumstances, such as phone number. This is needed for responding to your messages, under the legal ground of legitimate interest [Art. 6 (f) GDPR].
- For pre-contractual and contractual discussions etc., PPV will process your name and surname, e-mail, phone number and physical address. This is needed as part of concluding or performing a contract with you [Art. 6 (b) GDPR].
- The right to access – You have the right to request access to what personal data PPV stores about you. Your request will delineate what should be included in our response (limited by Art. 15 of the GDPR).
- The right to rectification – You have the right to request that PPV corrects or completes any information you believe is inaccurate or incomplete (Art. 16 of the GDPR).
- The right to erasure – You have the right to request that Our Company erase your personal data, under certain conditions (Art. 17 of the GDPR).
- The right to restrict processing – You have the right to request that Our Company restrict the processing of your personal data, under certain conditions (Art. 18 of the GDPR).
- The right to data portability – You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions (Art. 20 of the GDPR).
- The right to object to processing – You have the right to object to Our Company’s processing of your personal data, under certain conditions (Art. 21 of the GDPR).
- Right not to be subject to be subject to a decision based solely on automated processing (Art. 22 of the GDPR).
- Right to lodge a complaint with the Supervisory Authority (Art. 77 of the GDPR). More details about exercising this right can be found in section 6.
Upon receiving your request, PPV endeavours to respond to it within one calendar month, according to the law. However, in exceptional circumstances and depending on your particular request, this deadline may be legally extended by further two months.
If you would like to exercise any of these rights, please use the contact details from section 6.
Protector PriVit does not use any ADM systems at the moment. Should this change, the Privacy Notice will be reviewed and updated.
Protector PriVit transfers personal data only to territories that have been deemed adequate by the European Commission, in line with Art. 45 of the GDPR. Any transfer outside such adequate countries will most likely be subject to complying with Standard Contractual Clauses or your consent.
At the moment, the following organisations are processing personal data for/with PPV:
- Microsoft programs as part of pre-contractual or contractual obligations (for communications, meetings, calendar) – Teams, Outlook
Please note you have the right to complain to the Supervisory Authority – normally, in the Member State of your habitual residence, place of work or place of the alleged infringement. However, the Supervisory Authority from Romania requires that the complaint was initially addressed with us, as the data controller, as a procedural condition. In line with Decision no. 133/2018, we are obliged to respond to your complaint within a period of one month, unless we exceptionally extend this by further two months.
If you decide to still file a complaint afterwards to the Supervisory Authority in Romania, you can use the contact details below:
The National Supervisory Authority For Personal Data Processing
28-30 G-ral Gheorghe Magheru Bld., District 1, post code 010336, Bucharest, Romania
anspdcp@dataprotection.ro
+40318059211
