ROMAQUA GROUP SA processes personal data when carrying out its auxiliary activities entailed by its main activities, which consist of the operation, bottling and trade of mineral waters, the production and trade of carbonated and non-carbonated non-alcoholic beverages, as well as the production and trade of beer. The personal data processed by ROMAQUA GROUP SA generally belongs to our representatives and employees, as well as to our commercial or institutional partners’ representatives or agents.

Upon collecting, recording, storing, using or processing personal data in any way, we make sure that we adhere to an adequate data protection level, and we take all necessary measures to ensure its confidentiality.

Protecting personal data is one of ROMAQUA GROUP SA’s responsibilities as part of its activity conducted on the market. To this end, ROMAQUA GROUP SA commits to comply with the legal principles on data protection, and in particular those provided in the General Data Protection Regulation 2016/679 (hereinafter referred to as “GDPR”).

Furthermore, in its capacity as a data controller, ROMAQUA GROUP SA is under the obligation to manage personal data provided by data subjects about themselves, safely, and for stated purposes only.

ROMAQUA GROUP SA ensures the adequate training of its employees, so as to ensure compliance with all principles as part of its personal data processing.

In carrying out its activity, ROMAQUA GROUP SA processes different categories of personal data, depending on the data subject category; as such, in the case of the customers’ and provider’s representatives, the data concerns the name, the surname, position, telephone number and e-mail address.

As a rule, the basis on which ROMAQUA GROUP SA processes personal data is set out in the contract or the statutory obligation arising from the contract, its purpose relating to the proper undertaking of the contractual relation, or the performance of an obligation.

ROMAQUA GROUP SA commits solely to collect and process personal data which is necessary and proportional to its legal obligations, and for the proper performance of its main activities, which consist of the extraction, bottling and trade of mineral waters, the production and trade of carbonated and non-carbonated non-alcoholic beverages, the production and trade of beer.

ROMAQUA GROUP SA guarantees that access to personal data is only granted to its employees within the limits established in their job description, for the performance of their tasks. We do not disclose any personal data to third parties.

Personal data is stored on the ROMAQUA GROUP SA servers and is managed by an IT system which provides an adequate security level.

We would like to inform you that, according to new regulations on personal data protection, provided by the General Data Protection Regulation (EU) 2016/679, if we process your personal data, you have the following rights:

  • right of access, provided by art. 15 of GDPR, based on which you can request, free of charge, our confirmation as to whether or not we process personal data concerning you. You are also entitled to request a copy of the data we process about you. Any requests shall include relevant information, so as to allow for your identification in our database. We will address your request within no more than 30 days;
  • right to rectification, provided by art. 16 of GDPR, which you can exert by submitting an application whereby you are entitled to request that we amend the data we already hold about you. Such a request may be submitted when you notice that your data is incomplete or inaccurate;
  • right to restriction of processing, provided by art. 18 of GDPR, which you can exert to challenge the accuracy of data, when you believe its processing to be unlawful, or if you wish to object to the erasure of the personal data. Following your exercising of this right, we will be entitled to continue to store the data, but the performance of other processing operations will only be possible with your consent, unless otherwise expressly provided by law;
  • right to data portability, provided by art. 20 of GDPR, which you can only exert in cases where the processing is based on your consent or contract, and only if your data is processed by automated means. If the above requirements are met, you may send us a request for data to be transmitted to the operator of your choice;
  • right to object to the processing of data for marketing purposes, provided by art. 21 of GDPR. You may exert this right at any time, and we guarantee that your data will no longer be processed for that purpose. However, the registration and settlement of your request may require a reasonable period of time (72 hours), during which you may still receive marketing information from us;
  • right to erasure, provided by art. 17 of GDPR, based on which we have the obligation to erase the personal data we process about you. This right is not an absolute right, and it only applies in certain circumstances expressly provided by law. Upon submitting a request for erasure, please be aware that the erasure of your data may be a complex process.

In all cases where you are not satisfied with our response to your requests, you may contact the National Supervisory Authority for Personal Data Processing.

For any queries regarding the use of the www.romaqua-group.ro website and the processing of your data, call 021/667.32.40

To exert such rights, the user shall submit a written request to ROMAQUA GROUP SA, at the e-mail address office@romaqua.ro, with the subject heading“Request for personal information”, or he/she shall send said request to the address: Bd. Bucureștii Noi nr. 52, sector 1, Bucharest

The personal data processed by ROMAQUA GROUP SA shall not be transferred to any person outside the European Economic Area.

The retention period for the personal data is determined according to the basis for its processing, and its purpose. Upon expiry of such terms, all data which would allow for the identification of persons shall be erased/anonymized, and only the data that may be useful for statistical purposes shall be retained.

Data subjects may raise questions or requests to ROMAQUA GROUP SA regarding their personal data, as well as complaints related to the collection and use of their personal data, by submitting a written request, using the following contact details:

Address: Bd. Bucureștii Noi nr. 52, sector 1, Bucharest

E-mail: office@romaqua.ro

 

In the case of complaints which cannot be settled amicably with ROMAQUA GROUP SA, these can be submitted to:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (The National Supervisory Authority for Personal Data Processing)

Blvd. G-ral. Gheorghe Magheru 28-30, Sector 1, post code 010336

Bucharest, Romania

anspdcp@dataprotection.ro

Tel/Fax: +40.318.059.211/+40.318.059.212

CEO

Radu Lăzăroiu

Date: 21.05.2018