Information notice on data protection

Who we are?

Sarom Impex S.R.L., a company established according to Romanian legislation with headquarters in Bucharest, sector 3, Str. Theodor Speranția Nr. 106, Bl. S24, Sc. 2, Et. 1, Ap. 34, work point in Bucharest, sector 2, Str. Delea Veche, No. 24, Building A, Floor 9, Module M4, no. of registration at the Trade Register J40/13428/1992, unique registration code RO2356455, e-mail office@sarom.eu (hereinafter referred to as “Sarum”) processes your personal data asoperator in accordance with the provisions of Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), hereinafter referred to as “Regulation”, for the purposes detailed below.

What personal data do we process?

First name, last name, email address, phone number, location.

For what purposes does Sarom process your personal data?

Through the contact form you can write to us to request additional information about our products and services or to get in touch with us about any aspects of our work that are of interest to you.

The legal basis for processing your data is your consent to contact us, which you give by ticking the box: “Information notice on data protection”. 

Who do we send your data to?

Your data is not passed on to third parties.

Where do we process your data?

The personal data mentioned above are processed by Sarom in European union.

How long do we keep the data?

Sarom will store personal data for the period necessary to fulfill the purposes for which they are processed, namely the contact with you.

Your rights as a Beneficiary regarding personal data

According to the provisions of the Regulation, you benefit from the following rights that can be exercised, individually or cumulatively, regarding the personal data processed by Sarom as operator:

• The right of access to personal data – you can request confirmation of the fact that his personal data concerning you are processed or not by the operator, and if so, you can request access to them, as well as information about the processing activity (e.g., the purposes of the processing and the categories of processed data, the recipients or the categories of recipients to whom the data have been or will be disclosed, the duration of the processing or criteria used to determine this period, the existence of certain rights provided by law, the source of the information, etc.). At your request, the operator will also provide a copy of the processed personal data. The request for additional copies may be charged according to the actual costs borne by the operator, under the conditions to be communicated by him.
• The right to rectify personal data – you can obtain the rectification of inaccurate personal data, as well as the completion of those that are incomplete.
• The right to restrict the processing of personal data – in situations expressly regulated by law (e.g., if you dispute the accuracy of personal data concerning you, for the period necessary to verify their accuracy, etc.) you can obtain the restriction of the processing of personal data by the operator. Restriction of processing means that the operator will limit himself to storing personal data and will not carry out other processing operations except with your consent or in other cases expressly reviewed by law (mainly, for the establishment, exercise or defense of a right in court or for the protection of the rights of another natural or legal person).
• The right to delete personal data(„the right to be forgotten“) – in situations expressly regulated by law (e.g., in case of withdrawal of consent if there is no other legal basis for data processing or if it is found that the personal data are no longer necessary for the purpose for which they were collected or processed, etc.), you can obtain the deletion of that data.
• The right to object to the processing of personal data – you can object at any time, for reasons related to the particular situation in which you are, to the processing by the operator of personal data in certain cases expressly provided by law (in particular, if the processing is based on the legitimate interest of the operator). Also, when the processing of personal data is aimed at direct marketing, the data subject has the right to object at any time to the processing for this purpose of the personal data concerning him, including the creation of profiles.
• The right to portability of personal data – in the situations expressly regulated by law (respectively, if the processing of personal data is carried out by the operator by automatic means and has as a legal basis either the execution of a contract or your consent), you can receive, in a structured format, which can be read automatically, the personal data you have provided to the operator and you can request that said data be transmitted to another operator.
• Right to withdraw consent given – you can withdraw your consent for the processing of personal data by the operator at any time. The withdrawal of consent will only have effects for the future, the processing carried out prior to the withdrawal still remaining valid.
• Additional rights related to automated decisions – in case the operator makes automatic decisions as a result of the processing of personal data concerning you and these produce legal effects on you or affect you in a significantly similar way, you can (a) obtain human intervention regarding said processing, (b) express the point of view regarding the respective processing, (c) obtain explanations regarding the decision taken and (d) contest the respective decision.

To exercise any of the rights listed above, you can send a written, dated and signed request to the address of our office in Bucharest, sector 2, Str. Delea Veche, No. 24, Building A, Floor 9, Modul M4, sau la adresa de e-mail: office@sarom.eu.

Also, if you feel that your rights have not been respected, you have the right to file a complaint regarding the way of personal data processing by Sarom at the National Authority for the Supervision of Personal Data Processing.