Data Protection Statement

We are very pleased with the interest you have shown in Certiva SRL. The management of our company gives great importance to data protection. The use of Certiva SRL’s Internet pages is possible without the obligation to provide personal data. However, if a person wishes to use certain services through our website, it may be necessary to provide personal data. If the processing of these data becomes necessary and if there is no legal basis for such processing, we will seek the individual’s consent.

The processing of personal data, such as names, addresses, email addresses, or phone numbers of an interested person, will always be done in accordance with the Data Protection Regulation and in compliance with the specific national data protection provisions applicable to Certiva SRL. Through this data protection statement, our company aims to make public the information regarding the manner, extent, and purpose for which we collect, use, and process personal data. With this data protection statement, individuals will be informed of their rights.

Certiva SRL, as the entity responsible for processing personal data, has implemented numerous technical and organizational measures to ensure the most secure protection of the personal data processed via this website. However, data transmission over the Internet may have security breaches, meaning that absolute protection cannot be guaranteed. For this reason, any affected person has the option of sending personal data to us through other communication channels, such as by phone.

Terminology

Certiva SRL’s data protection statement includes the terminology used by the European regulations and guidelines when issuing the General Data Protection Regulation (GDPR). We want our data protection statement to be easy to read and understand by both the general public and our customers and business partners. To this end, we would like to explain a few terms upfront.

In this data protection statement, we will use, among others, the following terms:

1. a) Personal data
   Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, especially by referencing an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2. b) Data subject
   The data subject is the identified or identifiable natural person whose personal data is processed by the data controller.
3. c) Processing
   Processing is any operation or set of operations performed on personal data or on sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, restriction, erasure, or destruction.
4. d) Restriction of processing
   Restriction of processing is the marking of stored personal data to limit its future processing.
5. e) Profiling
   Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning the natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
6. f) Pseudonymization
   Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
7. g) Controller or data controller
   The controller or data controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
8. h) Processor
   A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
9. i) Recipient
   A recipient is a natural or legal person, public authority, agency, or another body to which personal data is disclosed, whether a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry under Union or Member State law shall not be regarded as recipients.
10. j) Third party
    A third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
11. k) Consent
    Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Name and address of the entity responsible for processing

The entity responsible within the meaning of the Data Protection Regulation, other applicable data protection laws in the EU, and other provisions concerning data protection is:

Certiva SRL
Bucureşti Sectorul 2,

Şoseaua COLENTINA, Nr. 16, Bl. A5, Ap.B44

Tel.: +40 762633509
E-Mail: office@certiva.ro
Website: https://www.certiva.ro/