INFORMATION ON THE PROCESSING OF PERSONAL DATA
1. Data Controller:
The website krottendorf.eu (hereinafter referred to as the “Website”) is operated by the company AD AUTO TOTAL S.R.L. (hereinafter referred to as the “Controller”), seated in Bucharest, str. Tincani nr. 8, bl. Z18, sc. A, et. 10, ap. 66, sector 6, registration number in the Trade Register J40/29340/1994, Tax no. RO 6844726, with mailing address at its business establishment in Bucharest, Splaiul Unirii nr. 96, sector 4 – entrance via str. Verzisori nr. 16.
In order to operate the Website, the Controller shall collect certain personal data of you. The processing of data shall be carried out pursuant to and in accordance with the provisions of the legislation in force, and in particular of Regulation 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the GDPR).
2. Purposes and legal grounds for data processing:
AD Auto total SRL processes personal data for the following purposes: sale of products from the Controller’s commercial offer, advertising, marketing and publicity for the products and services promoted by the Controller.
The processing of personal data is carried out pursuant to your freely expressed consent by accepting these terms and conditions or by filling in and sending the forms on the Website.
You do not have a legal or contractual obligation or a necessary obligation to conclude a contract for providing us with personal data.
If you do not wish to provide this data to us, the consequence will be that you will not be able to benefit from the products and services provided by the Controller.
3. Categories of data processed:
The Controller shall process the data that you make directly available to it through the Website.
Categories of personal data include surname and forename, contact details (e-mail address), place, company you represent and, in some cases, position held in such company.
For technical reasons, we may also collect certain technical information, data necessary for your connection to the Website (such as the IP address, the type of device and the type of browser you use to connect), as well as the time and date of your connection to the Website.
4. Categories of recipients:
In general, your identity data shall not be disclosed to third parties.
In some cases, your data may be shared with our business partners (such as suppliers of the goods and providers of the services offered through the Website).
5. Use of the contact form:
If you would like to send us a message via the contact form, you must fill in the boxes concerning your first and last name, place and e-mail address. In this situation, we will process this information which constitutes personal data, as well as any other personal data that you will voluntarily communicate to us by means of the contact form.
Your data will be processed for the purposes of correspondence between you and our company, and the legal basis for processing will be your consent, expressed as a result of initiating communication via the contact form. You may withdraw your consent at any time without affecting the lawfulness of the processing prior to its withdrawal, by writing an e-mail to email@example.com. The data shall be kept at least for the duration of our correspondence, and afterwards, if there is a legal basis for keeping it.
Occasionally, you will be sent newsletters, to the e-mail address communicated through the contact form, to inform you about products, offers and campaigns. By filling in and submitting the contact form, you give your consent for receiving them, but you can always oppose to receiving them by simply accessing the link provided within the newsletter.
7. Period of data storage:
Your data will be retained for the duration of your correspondence with the Controller and for a period of 60 days after the correspondence is over. Where correspondence results in the conclusion of a contractual relationship, the data shall be retained for at least the period during which contractual relations exist between the Controller and the company you represent, as well as for the prescription period of the last legal act established between the Controller and that company.
In certain specific cases (such as, but not limited to, cases of fraud, occurrence of disputed situations, requests by public authorities, etc.), the data will be retained for the entire period of time necessary for the event to be definitively clarified.
8. Rights of data subjects:
As a data subject, you have the following rights:
- the right to be informed and to access the data you provide to us, and the right to request rectification, where inaccurate;
- the right to request the deletion of your data and/or restriction of the processing of such data, and the right to object to the processing, in the cases and under the conditions set out in the GDPR;
- the right to data portability, in the cases and under the conditions set out in the GDPR;
- the right to withdraw your consent at any time without affecting the lawfulness of the processing made based on consent prior to its withdrawal.
To exercise these rights, you can send a written request, dated and signed, to the Controller’s above-mentioned e-mail address: firstname.lastname@example.org or to the Controller’s above-mentioned mailing address.
You also have the right to lodge a complaint with the supervisory authority – the National Supervisory Authority for Personal Data Processing (ANSPCP).
To learn more about exercising your rights, please access the adjoining link that contains General Information on the Processing of Personal Data.