This Personal Data Protection Policy was drawn up pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and enters into force on May 25, 2018.
This Personal Data Protection Policy contains the basic principles governing the protection of personal data within ARTEGO.
As a personal data controller, ARTEGO S.A. follows that any processing, defined as any operation performed on personal data, with or without the use of automated means, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission , disseminating or otherwise making available, aligning or combining, restricting, deleting or destroying them, shall be carried out in accordance with the following principles:
-legality, fairness and transparency;
-collection for determined, explicit and legitimate purposes;
-adequate processing, relevant and limited to what is necessary in relation to the aims pursued;
- keeping in a form that allows the identification of the data subjects for a period that does not exceed the period necessary to fulfill the purposes for which the data are processed;
-processing in a way that ensures adequate security of personal data (integrity and confidentiality).
2.CATEGORIES OF PERSONAL DATA
ARTEGO processes personal data about individuals in their capacity as employees, former employees, potential employees, customers, suppliers, business partners, current or potential, representatives or proxies, visitors, practitioners, companions, shareholders, auditors or any another person who makes personal data available to the Company, such as:
Personal data: data from identity documents, data from studies and qualifications documents, data from judicial or civil status documents, data from professional assessments, contact data, data from records in the surveillance system, and other data that are strictly related to the performance of contracts, the fulfillment of legal obligations, the legitimate interests of the controller or the vital interests of the data subject, as well as the fulfillment of obligations and the enforcement of company or data subject rights security and social protection, under Union and national law, and through collective labor agreement.
Special data: we do not process data on racial or ethnic origin, political opinions, data relating to religious denomination, philosophical beliefs and genetic data. We process data through video recordings only as a legal obligation to monitor and ensure the security of persons, spaces and / or company assets.
We process health data only for the purpose of fulfilling the obligations and enforcing specific rights of the company or of the persons concerned in the field of employment and of social security and protection, in compliance with the applicable normative acts.
Data of minors: we process personal data of children up to 18 years only for the purpose of fulfilling obligations and enforcing certain rights specific to the company or persons concerned.
3.COLLECTION OF PERSONAL DATA
Personal data are obtained directly from data subjects or indirectly based on contractual relationships with business partners.
4.BASES OF PERSONAL DATA PROCESSING
In the activity of personal data processing ARTEGO has as a basis the following:
- fulfillment of legal obligations;
- fulfilling the contractual obligations or as a request at the request of the data subject before concluding a contract;
-legitimate interest, when the company considers that the processing is fair, reasonable and proportionate to the purpose of the processing;
-protection of the vital interests of the data subject or of another natural person;
- the free and unadulterated consent given by the data subject when he provides the company with those data.
5.PURPOSE OF PROCESSING
Depending on the quality in which it operates, ARTEGO processes personal data for the following purposes:
-as an employer, the purpose of data processing by the Company will be represented by human resources management, accounting, litigation management, training, payment of salary rights, monitoring and ensuring the security of persons, spaces and / or public / private property, prevention fraud, the fight against terrorism, etc.
-as an issuer of securities listed on the regulated market (Bucharest Stock Exchange) the purpose of data processing by the Company will be to fulfill the legal obligations applicable to entities regulated / supervised by ASF, concluding, executing, terminating contracts, managing disputes, accounting records, etc.
-as a contractual partner, the purpose of data processing by the Company will be represented by the conclusion, execution, termination of contracts, litigation management, accounting, etc.
6.TRANSFER OF PERSONAL DATA
Personal data is intended for use by the Company, but may be disclosed in accordance with the law and to third parties who are able to know it, in which case ARTEGO requires that they provide appropriate measures to protect personal data.
Personal data can be transferred to:
- central public authorities, local public authorities, financial-banking institutions, in order to fulfill their legal obligations, etc .;
- authorized persons, to whom we provide the necessary data only to process them on our behalf and only for the requested purpose. These entities are selected even after the guarantee that they ensure and meet the specific requirements regarding the protection of personal data;
-other countries or international / foreign organizations only if in that country or international / foreign organization adequate data security protection measures are offered; when transferring personal data to a State outside the European Economic Area, ARTEGO will provide adequate guarantees for the protection of data recorded in the contract concluded with that natural person, legal person or international organization.
7.THE RIGHTS OF THE PERSONS CONCERNED
ARTEGO guarantees to the data subjects the rights provided by the Regulation, respectively:
–The right of access;
-the right to rectification;
-the right to delete data (“the right to be forgotten”);
-the right to restrict processing;
-the right to data portability;
- the right not to be the subject of a decision based exclusively on automatic processing;
-the right to withdraw consent.
These rights can be exercised by the data subject by formulating a written, dated and signed request which he will communicate to the Company either by fax: 0253226140, or by e-mail: firstname.lastname@example.org or at the correspondence address: Târgu-Jiu, Ciocârlău street, no. 38, Gorj county, postal code 210103.
The data subject also has the possibility to lodge a complaint with the supervisory authority (National Authority for the Supervision of Personal Data Processing) or to bring an action in the event of an alleged breach of the data protection legislation in force. personal character.
8.SECURITY OF PERSONAL DATA
ARTEGO will make all reasonable efforts to protect your personal data in our possession or control by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copying, modification or destruction, and other similar risks.
Personal data are kept only for the period necessary to fulfill the purposes for which they were collected, the period imposed by the applicable legal provisions in the field and the provisions on archiving, and after this period will be deleted or destroyed, in accordance with archival legislation. force and internal procedures.
10.UPDATING THE PERSONAL DATA PROCESSING POLICY
This Policy may be subject to subsequent amendments. The revised version will be made available to interested parties by publishing it on the Company’s website.