Personal Data protection Policy

 

Data protection is important to us.

Thank you for visiting our website www.dumagas.ro.

In interactions with you, Dumagas collects and processes a range of personal data for the purposes detailed in this policy. The following mentions are intended to inform you about the type and limits of personal data processing carried out by S.C. DUMAGAS TRANSPORT S.A. (Dumagas) in the context of your accessing the website www.dumagas.ro.

Personal data is information that can be directly or indirectly connected to you. The legal grounds for data processing is especially the General Data Protection Regulation (RGPD).
 

1. General

The personal data processed by Dumagas can be divided into two categories:

• personal data processed as a result of accessing the website www.dumagas.ro.
• personal data processed by Dumagas in order to process your messages and/or send press releases/information about Dumagas.

 

2. Visiting our website

Purposes of data processing/legal grounds:

When you visit our website, through the browser used on your end device and without your intervention, the information regarding:

• the IP address of your terminal connected to the Internet
• date and time of access
• the name and URL of the accessed file
• web page/application from which access took place (Referrer-URL)
• the browser you use and, where applicable, the operating system of your Internet-connected device
• the name of the access provider is automatically transmitted

On our website server it is temporarily stored on a so-called log file for the following purposes:

• ensuring an optimal connection,
• ensuring a comfortable use of our website/app,
• assessment of system security and stability

Recipients/categories of recipients:

Your data may be processed by any third parties (IT service providers) contracted by Dumagas; they are carefully selected, checked by Dumagas and also contractually bound to protect your data in accordance with art. 28 GDPR.

Duration of storage/criteria for determining the storage period

The data is stored for a period of seven days, after which it is automatically deleted.
 

3. The use of cookies and similar techniques for data processing

Details regarding the use of cookies are available here: Cookies Policy
 

4. Contact by e-mail/phone calls

Purposes of data processing/legal grounds:

The personal data that you make available to us by e-mail or telephone are processed in compliance with the principles of the RGPD. We use your data exclusively for the purpose of processing your request. Thus, we process, on a case-by-case basis, data such as name, surname, telephone number, contact address, e-mail address, your voice (in the case of telephone calls), as well as other data, depending on the nature of the request ( (eg: the nature of the problem you are facing, the information you are interested in). The legal grounds for data processing is art. 6 para. 1 lit. f) from GDPR. Dumagas’ legitimate interest in processing this data results from the interest in solving your requests/complaints.

Recipients/categories of recipients

From case to case, your data may also be processed by persons authorized by us in this regard. They are carefully selected, checked by us and also contractually bound in accordance with art. 28 GDPR.

Storage period/criteria for determining the storage period

The data you submit to us in the context of email inquiries is usually deleted or anonymized by us within 90 days of the date on which the final response was provided. Experience has shown us that generally after 90 days there are no more questions about our answers.

When you exercise your data subject rights, your personal data will be stored for 3 years after the final response to prove that we have provided you with complete information and that legal requirements are met.
 

5. Press Releases

Purposes of data processing/legal grounds:

If you have agreed, we process your personal data in order to send our press releases/information about Dumagas by e-mail. The personal data we process are your name, surname, e-mail address, the publication/company you collaborate with. At the same time, if you provide us with your phone number, we can use it for the purpose of facilitating communication with you in relation to the requests you make to us. The legal grounds for data processing is art. 6 para. 1 lit. a) of the GDPR.

You can withdraw your consent at any time with effect for the future, for example, by sending an appropriate message to juridic@dumagas.ro. In this case, your contact data will be deleted.

Recipients/categories of recipients

We use specialized service providers for press releases, for example to format messages and send them to a specific mailing list. These service providers process your data on our behalf as authorized operators, are carefully selected and contractually bound in accordance with art. 28 of the RGPD.

Storage period

Your data will be processed for the aforementioned purpose until you withdraw your consent. If you withdraw your consent, your email address will be blocked from receiving press releases/information. Your data will then be deleted from the mailing lists immediately, but no later than three days from the date of receipt of the notice of withdrawal of consent.
 

6. Processing of additional information

Purpose of data processing/legal grounds

In order to track how you use the details and information you have received from us as part of our cooperation, we also store other relevant information (for example, your posts and articles that include information provided by us). Mainly, we receive your data from publicly accessible sources, such as the website where you post/publish your articles, their printed version, other forms of publication, including through social networks.

The legal grounds for data processing is Art. 6 para. 1 lit. f) of GDPR. Our legal interest arises from the above-mentioned data processing purposes.

Storage period/criteria for determining the storage period

We can store the above-mentioned data until you send us a denial request regarding the processing of this data, in accordance with art. 21 of the GDPR.
 

7. Sharing personal data to external environments

Purpose of data processing/legal grounds

To the extent that you, as a interest person or data subject, have consented to the publication of your personal data in one of our communications, for example through press releases, we process the personal data on the basis of the consent or on the basis of execution of the existing contract with you that involves the use of data, based on art. 6 para. 1 lit. a) and b) from RGPD.

For situations where the grounds of processing is consent, we inform you that you can withdraw your consent at any time, with effect for the future, for example, by sending a message to this regard to juridic@dumagas.ro, without affecting the legality of the processing carried out based on consent before its withdrawal. In this case, your records/information will be immediately deleted by us from the media over which we have control (eg our websites). Please note that we have no control over the processing and deletion of your data by third parties.

Recipients/categories of recipients

Your data will be shared to a journalist or media/publishing company as part of the data processing and, if published, may also be viewed in third countries outside the EU or EEA.

Storage period/criteria for determining the storage period

When the processing is based on consent, the data will be processed until the date of withdrawal of your consent, according to the above. If the processing is necessary for the fulfillment of an existing contract between us, the data will be processed according to the contractual provisions.

We have no control over the storage of your data by third parties. Therefore, the data protection policy of third parties who have received your data from us applies.
 

8. Transmission to recipients in a third country

If we share data to recipients in a third country (located outside the European Economic Area), you can find this out in the information on recipients/categories of recipients in the description of the respective data processing. The European Commission certifies that some third countries have a data protection standard that is comparable to the level in the European Economic Area, through so-called adequacy decisions. A list of these countries can be accessed at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html.

If there is no comparable data protection standard in a country, we ensure that data protection is proper guaranteed by other measures. This is possible, for example, through binding corporate rules, certified European Commission standard contractual clauses for the protection of personal data (https://eur-lex.europa.eu/) or recognized codes of conduct. Please contact our Data Protection Officer (Section 11) if you would like more information on this matter.
 

9. The rights of data subjects

The right to access and information according to Article 15 of the GDPR

According to Article 15 paragraph 1 of the RGPD you have the right to receive, upon request, free of charge, information about the personal data saved with us about you.

This refers, in particular, to:

• The purposes for which personal data are processed;
• The categories of personal data that are processed;
• The recipients, respectively the categories of recipients to whom the respective personal data have been disclosed or are still being disclosed;
• Duration of storage of personal data concerning you or, if clear indications in this regard are not possible, criteria for determining the duration of storage;
• The existence of the right to request the operator to correct or delete your personal data, restrict processing or the right to object to processing;
• Existence of the right to file a complaint with a supervisory authority;
• All available information about the origin of the data, if the personal data is not collected from the data subject;
• The existence of an automated decision-making process, including the creation of profiles, according to Article 22 paragraphs 1 and 4 of the GDPR as well as – at least in these cases – relevant information regarding the logic used and the importance and expected consequences of such processing for the data subject.

If personal data is transferred to a third country or to an international organization, then you have the right to be informed on the appropriate safeguards according to Article 46 of the GDPR in connection with the transfer.

The right to correction of data according to Article 16 of the GDPR

You have the right to request the correction of incorrect personal data concerning you without delay. By considering the purposes of the processing, you have the right to request the completion of incomplete personal data – including by means of a statement of completion.

The right to erasure according to Article 17 of the GDPR

You have the right to ask us to delete your personal data without delay if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or were otherwise processed;
• You withdraw your consent on which the processing was based on Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing;
• You no longer  agree to the processing according to Article 21 paragraph 1 or paragraph 2 of the GDPR, and in the case of Article 21 paragraph 1 of the GDPR there are no priority justified reasons for the processing;
• Personal data have been illegally processed;
• The deletion of personal data is necessary to fulfill a legal obligation;
• The personal data were collected in connection with the provision of information society services referred to in Article 8 paragraph 1 of the GDPR.

If we have made the personal data public and we are bound to delete it, then we take appropriate measures, considering the available technology and implementation costs to inform the third parties who process your data that you are also requesting their deletion of all links to such personal data or copies and replications of such personal data.

The right to limit processing according to article 18 of RGPD

You have the right to ask us to limit processing if one of the following premises exists:

• You have doubts on the correctness of personal data;
• The processing is illegal and you request, instead of deletion, the limitation of the use of personal data;
• The operator no longer needs the personal data for the purposes of processing, but the data subject needs them to establish, exercise or defend a right in court
• The data subject did not agreed to the processing according to Article 21 paragraph 1 of the GDPR, as long as it is not yet established whether the legitimate reasons of the operator prevail over those of the data subject.
• The right to data portability according to Article 20 of the GDPR

You have the right to receive the personal data concerning you that you have made available to us in a structured, commonly used and machine-readable format and you have the right to share this data with another operator without us having any objection if:

the processing is based on a consent according to Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) or on a contract/ agreement according to Article 6 paragraph 1 letter b) of the GDPR and the processing is carried out by automatic means.

When exercising your right to data portability, you have the right to have your personal data sent directly by us to another operator, if this is technically possible.

The right not to agree according to article 21 of RGPD

Under the conditions of Article 21 paragraph 1 of the RGPD, as a data subject, you can not agree to data processing for reasons arising from your special situation.

This general right to not agree is valid for all processing purposes described in these data protection provisions, which are based on the provisions of Article 6 paragraph 1 letter f) of the GDPR. Other than in the case of the special right of opposition applicable to the processing of data for direct marketing purposes, we are bound according to the GDPR to implement such a general right of opposition only if you let us know the reasons of overriding significance, e.g. a possible danger to life and health.
 

10. Contact person

If you have any questions on the website or to exercise your rights as a data subject, you can contact Customer Service at the email address juridic@dumagas.ro.