Notification Regarding the Processing of Personal Data

This notification is issued by ROMSAC S.R.L., a limited liability company organized and operating in accordance with Romanian legislation, headquartered at Str. Metalurgiei nr. 2, Oraș Buftea, Județul Ilfov, registered with the Trade Register under no. J23/1272/21.07.2003, unique registration code 14185740, hereinafter referred to as “ROMSAC” or the “Operator“.

ROMSAC processes personal data for the purpose of providing services, complying with legal obligations, and continuously improving its business activities. The protection of your data is a priority for us, and this notification is designed to transparently and comprehensively inform you about how your data is collected, used, stored, and protected.

1. Purposes of Processing Personal Data

Your personal data is collected and processed by ROMSAC for the following purposes:

  • Entering into and executing commercial contracts;
  • Communicating with you for clarifications, notifications, or information related to the contracted services;
  • Complying with legal, fiscal, accounting, and archiving obligations;
  • Managing customer relationships, including sending information or personalized offers;
  • Protecting the legitimate interests of the operator, such as fraud prevention, cybersecurity, defending rights in court;
  • Direct marketing activities, only with explicit consent.

2. Legal Grounds for Processing

We process your personal data based on the following legal grounds:

  • Performance of a contract – the data is necessary for entering into or carrying out the contractual relationship;
  • Compliance with legal obligations – such as those regarding accounting, archiving, reporting to public authorities, etc.;
  • Legitimate interest of ROMSAC – for efficient business management, service improvement, and protection of legal rights;
  • Your explicit consent – when required (e.g., direct marketing, cookies, audio recordings).

3. Categories of Personal Data Processed

Depending on the purpose of processing, ROMSAC may process the following categories of data:

  • Identification data: name, surname, personal identification number (CNP), series and number of the identity document;
  • Contact data: address, phone number, email;
  • Financial data: bank account, payment information;
  • Consumer behavior data: order history, preferences;
  • Other data necessary for the contractual relationship or to fulfill legal obligations.

4. Processing of Sensitive Data

In certain limited situations, depending on the services provided and the nature of the contractual relationship, ROMSAC may process sensitive data, such as health data or biometric data, but only when strictly necessary and in accordance with the provisions of Law no. 190/2018 and other applicable regulations.

The processing of this data is done for:

  • Evaluating contractual risks;
  • Fulfilling contractual and legal obligations;
  • Addressing requests or potential complaints;
  • Managing requests for certain benefits or specific services.

5. Recipients of Personal Data

ROMSAC may transfer your personal data to the following recipients, where necessary:

  • Public authorities, including the National Agency for Fiscal Administration (ANAF), judicial authorities, supervisory or control authorities;
  • Contractual partners and service providers (accounting, IT, courier services, marketing platforms, lawyers, consultants);
  • Banking or financial institutions, for payments and fiscal reporting;
  • Other entities when required by law or necessary for the fulfillment of a contract.

All our partners are contractually obligated to comply with data protection legislation.

6. Transfer of Data Outside the European Economic Area

In justified cases, ROMSAC may transfer personal data to third countries (outside the EEA). In such cases, we will ensure that:

  • The transfer is made only to countries that provide an adequate level of protection according to the European Commission’s decisions;
  • Additional safeguards are applied, such as standard contractual clauses approved at the EU level or binding corporate rules.

For more details, you can contact us using the contact information at the end of this notification.

7. Data Retention Period

Your personal data will be retained only for as long as necessary to achieve the purposes for which they were collected or according to applicable legal provisions:

  • 10 years from the expiration of the contract or from the last recorded operation for active customers and files;
  • 2 months for commercial offers that were not concluded into a contract, unless there is a legal reason to extend the period;
  • In other cases, the period is determined by applicable legislation (e.g., tax, archiving, reporting).

Upon the expiration of the retention period, the data will be deleted or anonymized.

8. Your Rights as a Data Subject

In accordance with Regulation (EU) 2016/679 (GDPR), you have the following rights:

  • Right of access – you can request a copy of your data and information about how it is used;
  • Right to rectification – if your data is incorrect or incomplete;
  • Right to deletion (“right to be forgotten”) – in certain conditions;
  • Right to restriction of processing – when you contest the accuracy of data or the legality of the processing;
  • Right to object – in cases where the processing is based on legitimate interest;
  • Right to data portability – to transfer your data to another operator;
  • Right to withdraw consent – at any time, without affecting the lawfulness of prior processing;
  • Right to contest automated decisions – and request human intervention.

To exercise these rights, please contact us in writing, signed and dated, at our office address or by email at: office@romsac.ro.

9. Complaints and Contact

If you believe your rights are not respected or that data processing is unlawful, you can file a complaint with:

National Authority for the Supervision of Personal Data Processing (ANSPDCP)
Website: www.dataprotection.ro

10. Identification and Contact Details of the Operator

ROMSAC S.R.L.
Headquarters: Str. Metalurgiei nr. 2, Oraș Buftea, Județul Ilfov
CUI: 14185740
J23/1272/21.07.2003
Email: office@romsac.ro
Phone: 031 824 10 66

11. Updates to the Notification

This Notification Regarding the Processing of Personal Data is periodically reviewed to reflect legislative changes or changes in ROMSAC’s operations.
Last update date: March 25, 2025
For the updated version, please check periodically our dedicated page on our website: www.romsac.ro/politica-de-confidentialitate