header-logo
Request the offer 0

GDPR Policy.

1. IDENTIFICATION OF THE CLIENT/PARTNER

In my personal name, as a Client/Partner (buyer, tenant, beneficiary, borrower, depositor, broker, etc.), in the commercial relationship with TIMEPAL ROMANIA SRL, as the Operator, through this document, being informed by the Operator regarding my rights concerning data protection (the right to be informed, the right of access, the right to object, the right to restrict data processing, the right to be forgotten, the right to data portability), I declare that I freely and expressly agree and consent that TIMEPAL ROMANIA SRL may process my personal data under the following conditions:

2. IDENTIFICATION OF THE OPERATOR

TIMEPAL ROMANIA SRL, headquartered in Bucharest, Sector 1, str. Dobrogei, no. 1, registered at the Trade Register under no. J40/11505/2013, VAT no. RO 32250048.
The GDPR policy at TIMEPAL ROMANIA SRL is also available on the website.

3. PERSONAL DATA PROCESSED

  • Name, surname,
  • Home address,
  • Personal Identification Number (CNP), identification data from the ID card, passport, driver’s license, phone number, and email address,
  • Bank account, IBAN code

4. METHOD AND PURPOSE OF PERSONAL DATA PROCESSING

The method of processing involves storage on paper and electronic support (as applicable).
The basis and purpose of processing:

  • Conclusion and execution of the Contract (commercial relationship with the Operator),
  • Fulfillment of a legal obligation of the Operator,
  • For the legitimate interest of the Operator and/or a third party.

5. DURATION OF PROCESSING. THE RIGHT TO RESTRICT PROCESSING, THE RIGHT TO BE FORGOTTEN

I agree that the Operator collects and processes my personal data mentioned above for the entire duration of the contract/commercial relationship or for a period of 10 years (whichever is longer), unless otherwise required by law. After this period, I will inform the Operator (in writing) whether they may continue to retain and process my personal data or not, requesting them to act accordingly in a positive (continuing processing)/negative (withdrawing consent) manner.
I will also notify the Operator if I decide to withdraw consent for the processing of personal data before the expiration of the above-mentioned period.
I understand that the withdrawal of consent operates for the future, from the date of the written notification addressed to the Operator, and may be accompanied by the specific request to be forgotten, in case I decide not to purchase products and services from TIMEPAL ROMANIA SRL anymore or not to engage in other commercial relationships with it.
If I fail to inform the Operator about withdrawing consent, I agree that the Operator may continue processing my personal data until the notification is sent.

6. RECIPIENTS OF PERSONAL DATA. INTENTION TO TRANSFER PERSONAL DATA

The recipients of personal data are:

(i) THE OPERATOR

  • For concluding and executing the Contract (commercial relationship with the Operator),
  • To fulfill a legal obligation of the Operator,
  • For the legitimate interest of the Operator and/or a third party,
  • For specific information/offers on new products/promotions, special offers/invitations to company events/services – via email or through courier/postal services.

I understand that I have the right to express or not my consent regarding the processing of personal data, including for marketing purposes, without negative consequences related to the execution of the commercial relationship with the Operator. I also understand that even if I have given my consent, I can change this option at any time later, with appropriate notification to the Operator.

(ii) THE OPERATOR’S PARTNERS

  • Directly involved in conducting the commercial relationship
  • Public institutions and authorities
  • Partners involved in fulfilling legal obligations and satisfying the legitimate interest of the Operator

In this situation, the Operator must notify their partners about my final decision regarding the processing of personal data.
I understand that the Operator does not intend to transfer my personal data to third parties, other than those mentioned above and with whom I have expressly agreed.

Transfer of Personal Data
Personal data may be transferred to our partners and other third parties only for the purposes established in this document and only after obtaining the User’s explicit consent. In cases where data is transferred outside the European Economic Area, the Operator ensures that the recipient country offers an adequate level of data protection, as per applicable regulations, or uses standard contractual clauses to ensure data protection.

7. OTHER RIGHTS OF THE CLIENT/PARTNER REGARDING PERSONAL DATA

I have been informed by the Operator that I have the right:

  • To be informed about and have access to my personal data processed by the Operator or transferred to the recipients mentioned above;
  • To modify, correct, and update personal data;
  • To have personal data erased from their records (the right to be forgotten), and to withdraw consent for future processing;
  • The right to data portability;
  • The right to file complaints with the Romanian Data Protection Authority regarding the processing of my personal data.

Consent and Withdrawal of Consent

The User has the right to give free and informed consent for the processing of their personal data for the purposes specified in this document. Consent can be withdrawn at any time without affecting the legality of processing based on consent before its withdrawal. Withdrawal of consent can be done through a written notification addressed to the Operator and will not have negative consequences on the existing commercial relationship between the User and the Operator, except for those services where data processing is essential.

8. DATA SECURITY

The Operator implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to, data encryption, physical and electronic access control to data centers and information, as well as strict security procedures for employees.

I confirm that I have carefully read this form and understood which personal data is processed, for what purposes, and to whom this data will be made available. I have been informed about my rights regarding the processed personal data, especially about the right to withdraw consent, the right to access processed data, and the right to be forgotten. I sign this form with full knowledge of its effects according to the General Data Protection Regulation no. 679/2016. I attest and confirm the completed data.