Privacy Policy




    1. INTRODUCTION

We, namely the company PROPERTY MANAGEMNT CONSULTANT SRL, a Romanian legal entity, headquartered in Cluj-Napoca, Str. Wolfgang Amadeus Mozart, no. 16, Cluj County, registered with the Trade Register Office under no. J12/2366/2021, Unique Registration Code 44278140, have taken the necessary technical and organizational measures to protect your personal data against loss or alteration, as well as to eliminate the risks of unauthorized access.

Thus, the processing of personal data is in accordance with the legal provisions regarding the protection of personal data and EU Regulation 2016/679 (hereinafter GDPR).

In addition to this Privacy Policy, please also read the Cookie Policy to find out how the Operator uses the cookies installed on the website.www.pmcforma.ro, as well as the Terms and Conditions section for the websitewww.pmcforma.ro.

 

1.1. The personal data controller in relation to you

The personal data controller in relation to the personal data provided by you is PROPERTY MANAGEMENT CONSULTANT SRL., a legal entity with its registered office in the municipality of Cluj-Napoca, 16 Wolfgang Amadeus Mozart Street, Cluj County, with CUI 44278140, registration number with the Trade Register Office J12/2366/2021 (hereinafter also referred to as "PMC"), as developer and administrator of the websitewww.pmcforma.ro (hereinafter referred to as the "Site").

 

1.2. To whom does this Privacy Policy apply?

This Privacy Policy applies to all visitors and Users of our Site and to all our contractual partners.

 

1.3. Definitions

"personal data" - means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;

“Categories of processed data”- personal data (first name, last name, address, telephone number, e-mail address, etc.) are processed by us only if this data is entered by the interested person in the sections created on our site (e.g. the section regarding the request for an offer for a specific product/service or the contact form).

"processing" - means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

"controller" - means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or national law, the controller or the specific criteria for its designation may be provided for in Union or national law; PMC is the entity which determines the purposes and means of the processing of personal data, having the capacity of domain name holderwww.pmcforma.ro

"User" - means any person who visits or accesses our Site in a manner that involves the transmission of personal data.

"Business partner" - any natural person who is a business partner of the company or collaborates within a partner legal entity.

 

  1. CATEGORIES OF DATA WE PROCESS

When we talk about personal data, we refer to data that can clearly identify a living natural person, such as the name and address on the identity card, the residential address, the telephone number, the e-mail address. The identification must be possible solely on the basis of this information or in conjunction with other data in our possession.

If you choose to use our Site or benefit from our services, we may collect the following personal information about you: name, surname, telephone number, e-mail address, and other information provided when completing the message/information form, company, IP, cookies.

In all cases, the details we request from you through the forms available on the Site are necessary to provide you with an optimal service, depending on the purpose for which you provided them to us (e.g. issuing an offer regarding products sold/services provided by PMC, responding to certain questions asked by you in connection with PMC's activity, etc.), and if you refuse to provide us with this information, you may not be able to fully benefit from our services.

 

We use your personal data to benefit from our products/services, as follows:

  1. The data you provide to us as a User of the Site in order to request and obtain information/offers regarding products sold/services provided by PMC.

Purpose of processing: 

  • issuing an offer to the User regarding products sold and/or services provided by PMC with a view to the subsequent conclusion of a separate contract between PMC and the User;
  • resolving requests, questions, requests of any type addressed via the form on the Site in the "Contact" section

To the extent that you browse the Site and make a request of any type addressed to PMC at the telephone number, via the e-mail address or contact form displayed on the Site or request an offer for a specific product/service listed on the Site using the form available for this purpose on the Site, our company may receive the following data from you: e-mail address, name, surname, telephone number, as well as other information provided when completing the message/information form, company, IP, cookies.

The basis for processing your data is found in art. 6 para. 1 lit. a of the GDPR, respectively the data is processed based on your consent when using the Site or based on art. 6 para. 1 lit. b of the GDPR.

  1. Data necessary for conducting relations with business partners

Purpose of processing: 

  • execution of contracts concluded with various partners

As a commercial partner of the company, if we conclude a sales-purchase/services contract with you or the legal entity you are part of, we may process the following data: name, surname, e-mail address, telephone, images.

All this data will be collected and processed as a result of their communication directly by you or indirectly by the legal entity to which you belong, via mobile phone, email, or presentation at our company's headquarters.

The basis for the processing is found in art. 6 para. 1 letter b of the GDPR, namely the data are processed as a result of concluding a contract and are intended to perform the contract.

  1. Other purposes for which we process your personal data
  • For the development of the contractual relationships we have concluded with you upon acceptance of the terms and conditions of use of the Site and the separate signing of a sales-purchase/services contract.
  • In order to communicate newsletters or new information regarding the products sold and/or services provided by PMC (categories of processed data: name and surname, email address, phone number, products viewed on the website, products and/or services provided by PMC that were the subject of offers sent to the User);
  • To communicate with you and resolve any issues or concerns you may have regarding the services we provide;
  • To fulfill our obligations as a result of the products provided and/or services rendered (e.g. accounting, tax obligations);
  • To resolve complaints, grievances and to monitor traffic and improve your experience on the Site;
  • Ensuring the functioning of the Site (categories of processed data: cookies - For information about the specific cookies placed on the website, as well as for information on the possibility of controlling or disabling cookies, see the Cookie Policy).
  • For customer relations services, informing users/customers regarding the evaluation of the services offered by PMC
  • For any other purpose ancillary to the above, or for any other purpose for which the personal data was provided to us, in compliance with the relevant legislation.

 

Sometimes, personal data is used by PMC for a number of secondary purposes (e.g. for archiving, internal, external audit, etc.), these being always compatible with the main purposes for which the data were collected. In situations where we will use your data for purposes other than those mentioned in this privacy policy, we undertake to obtain your consent, unless we are subject to a legal obligation or have another legal basis for processing the data.

The basis for the processing of personal data is art. 6 para. (1) letter a of the GDPR (e.g.: data provided to obtain a preliminary offer from PMC regarding a product sold/service provided), letter b) (e.g.: data provided for the execution of a sales-purchase/service provision contract concluded between PMC and the User), letter c) (e.g.: communication of data to authorities upon their request, fulfillment of tax obligations), letter f) (e.g.: in order to defend the rights of the subscriber from a legal point of view).

 

  1. HOW DO WE COLLECT PERSONAL DATA?

We collect information about you in three ways:

  • Directly- when you contact PMC using the contact details available on the Site, when you fill out the contact form on the site, when you request an online offer from PMC for products sold/services provided by PMC using the relevant form. Therefore, it is very important to remember that, if other people use your computer/device, you must log out when you finish browsing. Otherwise, any person with access to your devices will automatically have access to all the information you have provided to us.
  • Automatically- when you use our services on the WEB, we collect information through cookies and by logging your activity. For more information on the use of cookies, please consult the information on the Site.
  • From third parties- We may also obtain information about you from third parties. We may also obtain information about you from third parties that operate data through cookies.

We note that your data will be stored for a reasonable period of time, relative to the purpose for which we collected that data.

 

  1. Form of storage of personal data

The personal data of visitors, Users of our Site or business partners are stored in electronic format via internal servers, where persons within the IT department who have responsibilities in the development or maintenance of the Site have internal access.

 

  1. Transfer of personal data

PMC has a firm policy regarding the processing of personal data and will take all necessary measures to prevent the trading of personal data for marketing purposes.

Sharing your personal data with third parties may be carried out mainly for the following purposes (the list is not exhaustive):

  • Prevention of possible fraud actions;
  • Conclusion and execution of contracts concluded between PMC and Users;
  • Fulfilling specific objectives in accordance with the legitimate interest of the PMC;
  • Carrying out activities related to IT services (maintenance and support), advertising and communication, digital services, etc.;
  • Express expression of consent;
  • Compliance with the obligations imposed by the legal provisions in force;
  • Compliance with the provisions and provisions regarding inspections and controls carried out by public authorities, institutions and/or other competent entities.

The personal data transfer process is based on the principle of minimal use of personal data and making sustained efforts to ensure that all entities we work with comply with security and safety requirements in data processing.

 

  1. To whom do we disclose your information?

As a rule, the information you provide to us cannot be disclosed. However, there may be situations where we are required to do so, such as:

  • If you are a User, Contractual Partner or simple visitor to the Site, your personal data may be transmitted to IT and security providers, or to other companies with whom we can develop joint programs to offer our products and services, etc.
  • Regardless of your status as a User, Contractual Partner or simple visitor to the Site, your personal data may be transmitted upon request to authorities, institutions and public bodies, in accordance with legal, fiscal, labor protection, social security or any other applicable regulations (e.g. provision of contracts or tax invoices at the request of tax or judicial bodies).

At the same time, the company has the right to disclose, in good faith, personal data or other information when it deems it necessary to take precautionary measures against liability, protect us or others from fraudulent, abusive or illegal uses, to investigate and defend ourselves against any claims or allegations of third parties, to protect the security or integrity of our services and any facilities or equipment used to make the services available; to protect our property or other rights, as well as the safety of others or to enforce contracts.

Regarding the transfer of personal data to other EU or non-EU countries, as a rule, the PMC company does not transmit personal data to third countries.

However, your personal data may be transferred to third countries, based on the contractual relationships we have with our partners, to the extent necessary for the performance of the contractual relationship with you. In this situation, the company undertakes that these transfers will be carried out in accordance with the applicable legislation on the protection of personal data and data confidentiality.

 

  1. Your rights in relation to the processing of personal data

In accordance with the provisions of the General Data Protection Regulation No. 679/2016, you have the following rights:

  • The right to information– the right to be informed about the identity of the operator, the purpose for which the data is processed, the recipients or categories of recipients of the data, the existence of the rights provided for by the GDPR and the conditions under which the rights can be exercised.
  • Right of access– the right to obtain from us, upon request and free of charge, confirmation of whether or not data concerning you is being processed and the right to access this data, except where such requests are repetitive or made in manifest bad faith;
  • Right to rectification– you can request the rectification of inaccurate personal data.
  • The right to erasure of data ("right to be forgotten")– data deletion may take place when the processing was not lawful or in other cases provided for by law (for example, when the data are no longer necessary in relation to the purpose for which they were processed). However, data deletion may not take place when the processing is based on the law;
  • Right to restriction of processing– you may request restriction of processing if you contest the accuracy of the data, as well as in other cases provided for by law;
  • Right to opposition– the right to object at any time, for valid and legitimate reasons, to your data being processed, except in cases where there are legal provisions to the contrary or when the processing is based on our legitimate interest;
  • Right to data portability- you can receive the personal data you have provided to us in a machine-readable format or you can request that the data be transmitted to another operator.
  • The right to file a complaint- you can file a complaint regarding the processing of your personal data with the National Supervisory Authority for Personal Data Processing or you can contact the courts.

The data protection supervisory authority in Romania is:

National Supervisory Authority for Personal Data Processing

Blvd. General Gheorghe Magheru 28-30,

010336, Bucharest,

Romania

Phone: 031 805 9211

www.dataprotection.ro

 

  • Right to withdraw consent– if the basis for data processing is consent, we inform you that this consent can be withdrawn at any time. The withdrawal of consent will only have effect for the future, the processing carried out prior to the withdrawal being valid. However, if the processing is mandatory for the provision of services and it can be carried out on the basis of other legal provisions, the company will proceed with such processing and notify the data subjects.
  • The right not to be subject to automated decisions or further profiling related to automated decisions– the right to request and obtain the withdrawal, annulment or reassessment of any decision that produces legal effects, adopted exclusively on the basis of a processing of personal data, carried out by automated means, intended to evaluate some aspects of the personality, such as professional competence, credibility, behavior or other such aspects, when applicable.

If you wish to exercise your rights mentioned above, please contact us, by means of a written, dated and signed request, sent to the registered office of PMC located in Romania, Cluj-Napoca Municipality, Str. Wolfgang Amadeus Mozart, No. 16, Cluj County. You can also contact us by e-mail atoffice@pmcforma.ro.However, it is necessary that the sender's address of the email message has a certified electronic signature.

Furthermore, our company has also appointed a Data Protection Officer (DPO), who can be contacted at the email address mihai.seles@pmcforma.ro to help data subjects exercise their rights.

To the extent that you exercise your rights, our company may ask you to prove your identity, by providing an identity document or any other information necessary to carry out a prior verification procedure of the requesting person, in accordance with the legal obligations of data security and confidentiality that are incumbent on us.

We undertake to consider any request or complaint received and to respond within a reasonable time, so that the legal provisions in the matter are respected. We work with the competent regulatory authorities, including national data protection authorities, in order to resolve any complaints regarding the transfer of personal data, which we cannot resolve directly with our Users.

 

  1. Personal data security

We follow the highest standards to protect the data processed, both during transmission to us and after this moment.

To this end, we have adopted technical security policies and procedures to protect personal data against loss, unauthorized use, destruction, alteration, unauthorized modification, unauthorized disclosure or access, and any other form of unlawful processing of personal data in our possession.

In order to guarantee security, we mention, in general terms, the following security methods:

  • Access to personal data is limited and authorized only to persons who have the legal right to use it, and they are obliged to ensure the confidentiality of the data. For example, only persons in the IT department who have responsibilities regarding the development or maintenance of the platform will have access to the data of the Site visitors. Access to personal data of other departments will be made only by virtue of the fulfillment of their job duties or to the extent that there is an obligation imposed by law, as is the case with Law no. 82/1991 and Law no. 227/2015 on the Fiscal Code.
  • Access to the electronic servers used by our company is via password and other access and authentication controls.
  • Data held for one User will be kept separate from the data of another User.
  • No employee or person who comes into contact with personal data or documents containing this data has the possibility of disclosing this data to a third party.

 

  1. Minimum security measures that all PMC employees must apply
  • Using a password with a high level of protection (consisting of numbers, letters and symbols)
  • Prohibition of disclosing the password to other persons, respectively the prohibition of using the account used for business purposes by several persons.
  • Prohibition of saving the password in both physical and/or electronic format
  • Any computer, laptop or device left unattended should be disconnected from the network, locked or turned off.
  • When the computer is not in use, information such as login usernames or passwords should not appear on its screen.
  • Verifying the physical security of data by locking, applying a padlock; verifying the security of electronically stored data by keeping the computer supervised, using a password in accordance with this policy.
  • Informing our IT staff of any changes to their role and access requirements
  • Changing all passwords every 3 months
  • The databases are located on secure computers, to which only authorized persons within PMC have access.

Failure to comply with these requirements may result in the company taking disciplinary action against the guilty individuals.

However, no method of transmission or electronic or physical storage is 100% secure. If you believe that your personal data has been compromised, please contact us in writing at our registered office located in Romania, Mun. Cluj-Napoca, Str. Wolfgang Amadeus Mozart, No. 16, Jud. Cluj. You can also contact us by email atoffice@pmcforma.ro

If we learn of a security breach, we will inform both you and the competent authorities in accordance with applicable law, within 72 hours at the latest, within which time we will communicate to you the relevant information related to security incidents.

 

  1. Security breaches

As it is our company's policy to be fair and to respect the principle of proportionality when considering the actions we need to take to inform the individuals affected by the security incident that is likely to result in a risk to the rights and freedoms of individuals, in the event of a breach we will notify both the Supervisory Authority and the person or persons concerned about this breach.

 

  1. When this Privacy Policy applies

Our privacy policy applies to all services offered by our company.

 

  1. Privacy policy update

Our privacy policy may change from time to time, but we undertake not to reduce your rights under these changes without your explicit consent.

We will post any changes to our Privacy Policy in a prominent location so that you can easily identify the updates and become familiar with their contents. We will also keep previous versions of this Privacy Policy in our electronic archive so that you can review them at any time upon request.

This privacy policy enters into force on 20.10.2024