Personal Data protection Policy

 

Data protection is important to us.

Thank you for visiting our website www.dumagas.ro.

In interactions with you, Dumagas collects and processes a range of personal data for the purposes detailed in this policy. The following mentions are intended to inform you about the type and limits of personal data processing carried out by S.C. DUMAGAS TRANSPORT S.A. (Dumagas) in the context of your accessing the website www.dumagas.ro.

Personal data is information that can be directly or indirectly connected to you. The legal grounds for data processing is especially the General Data Protection Regulation (RGPD).
 

1. General

The personal data processed by Dumagas can be divided into two categories:

 

2. Visiting our website

Purposes of data processing/legal grounds:

When you visit our website, through the browser used on your end device and without your intervention, the information regarding:

On our website server it is temporarily stored on a so-called log file for the following purposes:

Recipients/categories of recipients:

Your data may be processed by any third parties (IT service providers) contracted by Dumagas; they are carefully selected, checked by Dumagas and also contractually bound to protect your data in accordance with art. 28 GDPR.

Duration of storage/criteria for determining the storage period

The data is stored for a period of seven days, after which it is automatically deleted.
 

3. The use of cookies and similar techniques for data processing

Details regarding the use of cookies are available here: Cookies Policy
 

4. Contact by e-mail/phone calls

Purposes of data processing/legal grounds:

The personal data that you make available to us by e-mail or telephone are processed in compliance with the principles of the RGPD. We use your data exclusively for the purpose of processing your request. Thus, we process, on a case-by-case basis, data such as name, surname, telephone number, contact address, e-mail address, your voice (in the case of telephone calls), as well as other data, depending on the nature of the request ( (eg: the nature of the problem you are facing, the information you are interested in). The legal grounds for data processing is art. 6 para. 1 lit. f) from GDPR. Dumagas’ legitimate interest in processing this data results from the interest in solving your requests/complaints.

Recipients/categories of recipients

From case to case, your data may also be processed by persons authorized by us in this regard. They are carefully selected, checked by us and also contractually bound in accordance with art. 28 GDPR.

Storage period/criteria for determining the storage period

The data you submit to us in the context of email inquiries is usually deleted or anonymized by us within 90 days of the date on which the final response was provided. Experience has shown us that generally after 90 days there are no more questions about our answers.

When you exercise your data subject rights, your personal data will be stored for 3 years after the final response to prove that we have provided you with complete information and that legal requirements are met.
 

5. Press Releases

Purposes of data processing/legal grounds:

If you have agreed, we process your personal data in order to send our press releases/information about Dumagas by e-mail. The personal data we process are your name, surname, e-mail address, the publication/company you collaborate with. At the same time, if you provide us with your phone number, we can use it for the purpose of facilitating communication with you in relation to the requests you make to us. The legal grounds for data processing is art. 6 para. 1 lit. a) of the GDPR.

You can withdraw your consent at any time with effect for the future, for example, by sending an appropriate message to juridic@dumagas.ro. In this case, your contact data will be deleted.

Recipients/categories of recipients

We use specialized service providers for press releases, for example to format messages and send them to a specific mailing list. These service providers process your data on our behalf as authorized operators, are carefully selected and contractually bound in accordance with art. 28 of the RGPD.

Storage period

Your data will be processed for the aforementioned purpose until you withdraw your consent. If you withdraw your consent, your email address will be blocked from receiving press releases/information. Your data will then be deleted from the mailing lists immediately, but no later than three days from the date of receipt of the notice of withdrawal of consent.
 

6. Processing of additional information

Purpose of data processing/legal grounds

In order to track how you use the details and information you have received from us as part of our cooperation, we also store other relevant information (for example, your posts and articles that include information provided by us). Mainly, we receive your data from publicly accessible sources, such as the website where you post/publish your articles, their printed version, other forms of publication, including through social networks.

The legal grounds for data processing is Art. 6 para. 1 lit. f) of GDPR. Our legal interest arises from the above-mentioned data processing purposes.

Storage period/criteria for determining the storage period

We can store the above-mentioned data until you send us a denial request regarding the processing of this data, in accordance with art. 21 of the GDPR.
 

7. Sharing personal data to external environments

Purpose of data processing/legal grounds

To the extent that you, as a interest person or data subject, have consented to the publication of your personal data in one of our communications, for example through press releases, we process the personal data on the basis of the consent or on the basis of execution of the existing contract with you that involves the use of data, based on art. 6 para. 1 lit. a) and b) from RGPD.

For situations where the grounds of processing is consent, we inform you that you can withdraw your consent at any time, with effect for the future, for example, by sending a message to this regard to juridic@dumagas.ro, without affecting the legality of the processing carried out based on consent before its withdrawal. In this case, your records/information will be immediately deleted by us from the media over which we have control (eg our websites). Please note that we have no control over the processing and deletion of your data by third parties.

Recipients/categories of recipients

Your data will be shared to a journalist or media/publishing company as part of the data processing and, if published, may also be viewed in third countries outside the EU or EEA.

Storage period/criteria for determining the storage period

When the processing is based on consent, the data will be processed until the date of withdrawal of your consent, according to the above. If the processing is necessary for the fulfillment of an existing contract between us, the data will be processed according to the contractual provisions.

We have no control over the storage of your data by third parties. Therefore, the data protection policy of third parties who have received your data from us applies.
 

8. Transmission to recipients in a third country

If we share data to recipients in a third country (located outside the European Economic Area), you can find this out in the information on recipients/categories of recipients in the description of the respective data processing. The European Commission certifies that some third countries have a data protection standard that is comparable to the level in the European Economic Area, through so-called adequacy decisions. A list of these countries can be accessed at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html.

If there is no comparable data protection standard in a country, we ensure that data protection is proper guaranteed by other measures. This is possible, for example, through binding corporate rules, certified European Commission standard contractual clauses for the protection of personal data (https://eur-lex.europa.eu/) or recognized codes of conduct. Please contact our Data Protection Officer (Section 11) if you would like more information on this matter.
 

9. The rights of data subjects

The right to access and information according to Article 15 of the GDPR

According to Article 15 paragraph 1 of the RGPD you have the right to receive, upon request, free of charge, information about the personal data saved with us about you.

This refers, in particular, to:

If personal data is transferred to a third country or to an international organization, then you have the right to be informed on the appropriate safeguards according to Article 46 of the GDPR in connection with the transfer.

The right to correction of data according to Article 16 of the GDPR

You have the right to request the correction of incorrect personal data concerning you without delay. By considering the purposes of the processing, you have the right to request the completion of incomplete personal data – including by means of a statement of completion.

The right to erasure according to Article 17 of the GDPR

You have the right to ask us to delete your personal data without delay if one of the following reasons applies:

If we have made the personal data public and we are bound to delete it, then we take appropriate measures, considering the available technology and implementation costs to inform the third parties who process your data that you are also requesting their deletion of all links to such personal data or copies and replications of such personal data.

The right to limit processing according to article 18 of RGPD

You have the right to ask us to limit processing if one of the following premises exists:

You have the right to receive the personal data concerning you that you have made available to us in a structured, commonly used and machine-readable format and you have the right to share this data with another operator without us having any objection if:

the processing is based on a consent according to Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) or on a contract/ agreement according to Article 6 paragraph 1 letter b) of the GDPR and the processing is carried out by automatic means.

When exercising your right to data portability, you have the right to have your personal data sent directly by us to another operator, if this is technically possible.

The right not to agree according to article 21 of RGPD

Under the conditions of Article 21 paragraph 1 of the RGPD, as a data subject, you can not agree to data processing for reasons arising from your special situation.

This general right to not agree is valid for all processing purposes described in these data protection provisions, which are based on the provisions of Article 6 paragraph 1 letter f) of the GDPR. Other than in the case of the special right of opposition applicable to the processing of data for direct marketing purposes, we are bound according to the GDPR to implement such a general right of opposition only if you let us know the reasons of overriding significance, e.g. a possible danger to life and health.
 

10. Contact person

If you have any questions on the website or to exercise your rights as a data subject, you can contact Customer Service at the email address juridic@dumagas.ro.