Privacy Policy

teknosec.eu

1.Who are we?

TEKNOSEC S.R.L. (hereinafter referred to as ‘Controller’), attaches great importance to your personal data, constantly taking the necessary steps to ensure that the data processing carried out by it complies with the legal requirements in this area. To this end, we have developed this Privacy Policy, by which we undertake to respect the confidentiality of your personal data and by which we explain to you what categories of personal data TEKNOSEC S.R.L. processes, how that data is used, and for what purposes it is processed in the context of your visit to or interaction with the teknosec.eu website.

This Policy relates only to the personal data that we process through our website teknosec.eu (hereinafter referred to as the ‘Site’ or ‘Platform’), in the context of your interaction with it. We want to assure you that we have taken all necessary measures to ensure the confidentiality of your data, which is processed only by the Controller’s staff and collaborators who have been previously trained and authorized to process personal data and who respect firm confidentiality commitments.

To get to know us virtually, we provide you our identification data.

The Controller that process your personal data when you browse or interact with the online platform teknosec.eu is TEKNOSEC S.R.L., with headquarters in Bucharest 2^nd District, Dinu Vintilă Street, No. 11, with UIC 50962753, registered in the National Trade Register Office under no. J2024045362002.

For any questions/ queries regarding the protection of personal data, you are invited to send a request either to the postal address indicated above, to the e-mail address info@teknosec.eu, by accessing our Site on teknosec.eu/contact/ or by calling the phone number 0723 623 677.

Individuals sending such requests to TEKNOSEC S.R.L. via e-mail/ mail are requested to mention in the subject line of the email/ mailing envelope information such as ‘data protection’, ‘GDPR’ or ‘personal data’, in order to ensure that requests will be treated with priority.

As a data subject, you will receive a response within a maximum of 30 days from the communication of the document to TEKNOSEC S.R.L. An extension of this deadline can only operate in exceptional situations. In these cases, we assure you that you will be duly informed of this deadline.

2.Definitions

‘personal data’ means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or to one of more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person.

! For the purposes of this policy, personal data that will be subject to processing may relate to: name, surname, telephone number, e-mail address, etc., as described below.

‘processing’ means any operation or set of operations which is performed on personal data, whether or not by automated means, such as: collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

! For the purposes of this policy, data processing refers to those processing operations carried out at the time of your navigation on the website teknosec.eu or your interaction with it by subscribing to the Controller’s newsletter or accepting cookies, other than those necessary (essential).

‘controller’ means the person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

! For clarity, for the purposes of this Privacy Policy, the Personal Data Controller is represented by TEKNOSEC S.R.L.

‘data subject’ represents the person whose personal data is being processed.

! For the purposes of this Policy, the data subject is the Internet user who browses on or interacts with teknosec.eu.

‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

! The data processing carried out through the Platform and based on the legal basis of the consent is exclusively for the purpose of subscribing to the newsletter.

‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‘affiliate’ means an entity that controls, is controlled by or is under common control with a party, where ‘control’ means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for the election of directors or other managing authority.

3.What types of personal data do we process?

Your browsing and interaction with the Site involves the processing of two categories of personal data, namely:

personal data that you disclose to the Controller on a voluntary basis (e.g. in the case of newsletter subscription or in the context of contacting the Controller, etc.), which are collected on an individual basis;
data that you provide involuntarily, simply by browsing our website.

TEKNOSEC S.R.L. collects, on the basis of the voluntary provision of the data subject, the following personal data:

In order to obtain additional information via e-mail:

Name and surname;
E-mail address;
Other categories of personal data that you make available to us in the context of contacting the Controller by the above-mentioned mean.

In the context of subscribing to the newsletter:

Subscribing to the newsletter is conditional on your consent to receive commercial and marketing messages. In this context, it will be processed as personal data:

E-mail address;
Name and surname (indirectly resulting from the e-mail address if it is surname@x.com).

In the context of submitting an application for employment with the controller:

Name and surname;
Image (if included in your CV);
Information on education and professional experience;
Any other personal data included in the submitted CV or cover letter.

The Controller also processes marketing and communication data only on the basis of prior consent of the users, as well as technical data and browsing actions by means of cookies and similar technologies. You can access our Cookie Policy.

The above-mentioned data is necessary for the effective provision of the services offered by TEKNOSEC S.R.L., to provide additional information regarding the Controller’s activity, to register applications for a job within the Controller’s team, to resolve any complaints, as well as for communication with the Controller or the transmission of marketing communications on its behalf, but with the prior consent of the user, as detailed in the Newsletter Subscription Policy.

In the event that you provide us with personal data that is not necessary for the purposes described below, detailed in section 4, we reserve the right to remove it immediately from our database.

The Controller may also unintentionally collect other personal data belonging to you, namely: IP address, browser version, time and location settings, operating system, platforms on the devices used to access our site etc. This information will not be used to identify individuals and will not be made public other than as set out in this Privacy Policy, supplemented by the Cookie Policy.

The Controller reserves the right to request additional information from you, accompanied by supporting documents, by e-mail, in hard copy or in any other way deemed appropriate by the Controller, if necessary, for the purposes detailed below.

Your personal data may be disclosed by TEKNOSEC S.R.L. for processing or to designated data processors, including contractual partners, financial authorities and institutions, courts or competent bodies, at their request and for the purpose of providing the services offered by the Controller.

TEKNOSEC S.R.L. may store your personal data even after registering a request for deletion of such data, if the storage is for one of the following purposes, provided for in Article 17 of the GDPR, respectively:

for the performance of a contract;

for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject;
for exercising the right of freedom of expression and information;
for protecting the vital interests of the data subject;
for the performance of a task carried out in the public interest;
for archiving purposes in the public interest, scientific or historical research purposes;

for the establishment, exercise or defense of legal claims.

4.For what purpose and on what legal grounds do we process personal data?

TEKNOSEC S.R.L. processes your personal data for the following purposes and on the following legal grounds:

the data subject has given consent to the processing of his or her personal data (art. 6, para. (1), let. a) of Regulation (EU) no. 679/ 2016 of the European Parliament and of the Council of 27 april 2016), in the case of the transmission of commercial and marketing communications or the acceptance of cookies other than necessary, if needed be;
processing is necessary for the purposes of the legitimate interests pursued by the controller (art. 6 para. (1) let. f) of Regulation (EU) no. 679/ 2016 of the European Parliament and of the Council of 27 april 2016), to be able to provide accurate information and to solve problems of any nature related to the content of the website teknosec.eu or the services offered by the Controller, as well as for actions involving interaction with the online platform;
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. (1) let. B) of Regulation (EU) no. 679/ 2016 of the European Parliament and of the Council of 27 april 2016), in concrete with a view to the conclusion of an individual employment contract with the Controller by the applicant, as a data subject.

Your personal data will be processed so that the Controller can:

improve the website and the services provided through it;
determine the usefulness/popularity of the web content presented on the Site;
send technical, support or administrative notifications;
honor requests and resolve complaints received from users;
facilitate user access to the services offered by TEKNOSEC S.R.L.;
communicate information of interest to users of the site;
protect the Controller’s rights;
evaluate and improve the quality of the Controller’s services.
The duration of processing personal data

Personal data processed at the level of the Controller through the website teknosec.eu are retained for a reasonable period of time in relation to the purpose of data processing, in accordance with the legal provisions on data archiving. The Controller respects the data archiving deadlines required by law.

Data processed as a result of your subscription to the newsletter will be processed by the Controller only until you withdraw your consent for processing in accordance with the Newsletter Subscription Policy.

Data processed through cookies will be retained strictly for the lifetime of each cookie, as detailed in the Cookies policy for each type of cookie.

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.

5.Transfer of the personal data

Your data is processed on the territory of the European Union through secure internal servers. However, by means of plugins specific to social networks (e.g. Facebook, LinkedIn, Instagram, etc.), as third-party recipients of the data, it is possible that your data processed in this context may also be transferred outside the European Union/European Economic Area and stored on servers in third countries. In this regard, the Controller has implemented a number of necessary and appropriate measures to ensure that the data is processed accordingly.

The Controller undertakes that the data collected will only be processed in accordance with the stated purposes and will not make public, sell, rent, license, transfer, etc. unauthorized databases containing information on the data subjects to any third party not involved in the fulfilment of the stated purposes, unless the transfer/access/viewing etc. is requested by the competent authorities in cases provided for by the regulations in force at the time of the event.

It is possible that your data will be disclosed to:

other companies that provide services to us and act as our authorized persons, such as suppliers providing website maintenance, IT, legal etc. services;
affiliates, who will be required to honor this Document. The term ‘affiliates’ includes our parent company and any other subsidiaries, joint venture partners or other companies that we control or that are under common control with us;
business partners. We may share your information with our business partners in order to offer you certain products, services or promotions;
other users, when you share information or otherwise interact in the public areas with other users. Such information may be viewed by all users and may be publicly distributed outside.

These entities are selected with great care to ensure that they comply with specific personal data protection requirements. They have a limited ability to use your information for purposes other than providing services to us.

In addition to the disclosures described in this Privacy Policy, we may disclose information to third parties to whom you consent or request that we make such a disclosure.

6.Links, hyperlinks, third-party sites

The teknosec.eu website may contain links to third party sites that may collect your personal data, including through cookies or other technologies.

If you link to a third-party website, this Privacy Policy will not apply to your use of that website.

7.What are your rights as a data subject?

Any natural person browsing our website, as a data subject, has the following rights in relation to TEKNOSEC S.R.L., as a Personal Data Controller:

Right of access means the right of the data subject to obtain confirmation from the Controller as to whether or not the Controller is processing personal data relating to him or her and, where that is the case, access to the personal data and to information of how the data is processed.
Right to rectification refers to the rectification, without undue delay, of inaccurate personal data processed or to their completion if they are incomplete. They can be amended by sending an e-mail to: info@teknosec.eu.
Right to erasure (‘right to be forgotten’) means the right of the data subject to obtain from the controller the erasure of personal data concerning him or her, without undue delay, where one of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing, objects to the processing and there are no overriding legitimate legal grounds for the processing, the personal data have been unlawfully processed, the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject, the personal data have been collected in relation to the offer of information society services.
Right to restriction of processing may be exercised if the data subject requests the restriction of the processing of his/her personal data, in which case they will be used strictly for the exercise of the data subject’s other legal rights, including responding to any requests/complaints from the data subject.
Right to data portability means the right to receive personal data in a structured, commonly used and machine-readable and the right to transmit those data to another, where the processing is based on consent or on a contract and is carried out by automated means, where technically feasible.
Right to object concerns the right of the data subject to object to the processing of personal data where the processing is necessary for the performance of a task carried out in the public interest or in the legitimate interest of the Controller.
Right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. However, it will not be possible to exercise this right if the decision is necessary for the conclusion or performance of a contract between the data subject and the Controller, is authorized by the law applicable to the Controller, provided that the rights, freedoms and interests of the data subject are adequately protected or is based on the consent of the data subject obtained in compliance with applicable law.
Right to address the National Supervisory Authority for Personal Data Processing. If the data subject considers that the above-mentioned rights have been infringed, he/she has the possibility to address the ANSPDCP by lodging a complaint.

The contact details of the Authority in Romania are as follows:

Address: Bucharest, 1^st District, G-ral. Gheorghe Magheru Blvd. no. 28-30;

Telephone: 0.318.059.211/0.318.059.212;

Fax: 0.318.059.602;

E-mail: anspdcp@dataprotection.ro;

Website: www.dataprotection.ro.

In order to exercise the rights set out above, the data subject shall contact TEKNOSEC S.R.L. by sending a request to the postal address/ e-mail address mentioned above in the first section of this Policy.

8.Final provisions

If TEKNOSEC S.R.L. deems it necessary to change the privacy rules, the Controller will publish those changes to inform data subjects about the information it collects and how it uses it.

The provisions of the Privacy Policy are complemented by the provisions of the Cookie Policy and the Newsletter Subscription Policy, respectively, present on the website teknosec.eu.

TEKNOSEC S.R.L.