PRIVACY POLICY
1. According to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applicable from 25 May 2018, KEMP Products Line S.R.L. has the obligation to manage in safe conditions and only for the specified purposes, the personal data that you provide us.
2. What personal data we process
We collect, process and store the personal data necessary to fulfill the contract or the order sent by you, respectively: name, surname, e-mail, telephone.
3. How we process your personal data
We process the personal data collected only for legitimate purposes, respectively in order to fulfill the contractual obligations assumed, e.g. for the delivery of the ordered products, for the repairs of the products within the warranty period or for the service activities in general, for marketing purposes, in order to prevent and combat frauds or money laundering activities etc. The data processing is always performed based on the contracts concluded with our company / orders sent to our company, based on legal requirements, taking into consideration our legitimate interest or based on your consent.
4. We communicate personal data to other recipients
We communicate personal data only in order to fulfill the obligations assumed towards you, respectively to the subcontractors with whom we have concluded contracts in this respect, these having in their turn the legal obligation to respect the security and confidentiality of personal data.
5. For how long we process personal data
We will process personal data for the period necessary to fulfill the purpose for which they were collected, in accordance with the existing legal provisions or if their processing is carried out strictly for purposes for which your consent is required, we will process them until such time as you will disagree in this regard.
6. What are your rights and how can they be exercised
The right to information – you can request information regarding the activities of processing your personal data carried out by our company;
The right to rectification – you can modify or complete your personal data;
The right to delete data (“the right to be forgotten”) – you can request the deletion of data, if their processing was not legal or in other cases provided by law;
The right to restrict the processing – you can request the restriction of the processing in case you contest the accuracy of the data, as well as in other cases provided by law;
The right of opposition – you may object, particularly, to data processing based on our legitimate interest;
The right to data portability – you may receive, under certain conditions, the personal data you have provided to us, in a format that can be read automatically or you can request that the data be transmitted to another operator;
The right to file a complaint – you can file a complaint regarding the way of processing personal data at the National Authority for the Supervision of Personal Data Processing;
The right of consent withdrawal – in cases where the processing is based on your consent, you can withdraw it at any time. Withdrawal of consent will have effects only for the future, the processing performed prior to the withdrawal remaining valid;
7. Who can you contact to exercise your rights?
To exercise any of the rights listed above you can contact us at the following contact details:
KEMP Products Line S.R.L.
Bd. Ghencea no. 43 B, sector 6, Bucharest, Romania, postal code 061692
Tel.:0721 267 777, e-mail: i.olteanu@kemp-products.com
Contact person: Olteanu Irina
8. How we protect personal data
We maintain appropriate technical and organizational measures to protect your personal data that you provide to us against destruction, loss, alteration, unauthorized disclosure or accidental or illegal access.
9. Can we change our privacy statement?
We may change this Privacy Policy from time to time by posting the updated version here. We recommend that you visit this section frequently for information.
(a) processed lawfully, fairly and transparently to the data subject (“legality, fairness and transparency”);
(b) collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes; further processing for archiving purposes in the public interest, for scientific or historical research or for statistical purposes shall not be considered incompatible with the original purposes, in accordance with Article 89 (1) (“purpose limitations”);
(c) appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“minimization of data”);
(d) accurate and, where necessary, updated; all necessary measures must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are deleted or rectified without delay (“accuracy”);
(e) kept in a form which allows the identification of data subjects for a period not exceeding the period necessary for the purposes for which the data are processed; (“Storage limitations”);
(f) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by taking appropriate technical or organizational measures (“integrity and confidentiality”); ).
This policy and the documents concluded for its observance regulate the manner in which KEMP Products Line S.R.L. collects, processes, stores, transfers and manipulates personal data.
We collect, process, store, manipulate and transfer personal data necessary to fulfill individual employment contracts, contracts or orders sent by customers or potential customers of the company, as well as to provide answers to questions asked by potential customers through the company’s website. Thus, depending on the purpose of collection and strictly in order to fulfill legal and / or contractual obligations, we collect personal data consisting of information on an identified or identifiable natural person (“data subject”), directly or indirectly, by reference to an identification element, such as a name, an identification number, location data, an online identifier, or one or more specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity; “
According to art. 4 point 2 of the GDPR Regulation “processing” means any operation or set of operations performed on personal data or on personal data sets, with or without the use of automated means, such as collection, registration, organization, structuring storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise made available, alignment or combination, restriction, deletion or destruction; “
We process personal data collected only for legitimate purposes, respectively in order to fulfill the contractual obligations assumed, e.g. for the delivery of the ordered products, for the repairs of the products within the warranty period or for the service activities in general, for marketing purposes, to prevent and combat fraud or money laundering activities etc., in order to fulfill our legal obligations of individual employment contracts.
The data processing is always performed based on the contracts concluded with our company / orders sent to our company, based on legal requirements, taking into consideration our legitimate interest or based on your consent.
In order to ensure the protection of personal data, the company has developed its own policies by which it explained to the data subjects the way in which it proceeds at the company level to ensure the rights of the data subjects are in accordance with the applicable legislation.
Thus, documents are drawn up at the company’s level by which:
All printed documents containing personal data are kept in places provided with locking and security systems, the company holding a security plan prepared in compliance with the legal provisions in force.
Access to each computer is restricted by passwords known only to their users and their boss.
Files containing personal data are stored on the servers of the company to which access is allowed to employees only insofar as they must fulfill their service obligations and only to these persons.
The management of the company will solve all the requests related to the personal data of the clients or employees within max. 15 days from their receipt.
Any request regarding personal data will be addressed to the company using the contact information mentioned in this document.
The company shall immediately notify the supervising authority if it has identified a case of destruction, loss, alteration, unauthorized disclosure or accidental or illegal access to personal data that did not result from legal and intentional company proceedings as well as any unauthorized intervention on these data about which it became aware.
The company will process personal data in the minimum period necessary only in order to fulfill its contractual and legal obligations.
This policy may be changed whenever the company deems it necessary to update it in order to ensure adequate protection of personal data and will be brought to the notice of the company’s employees.
Date 26.11.2020