Scope of this Policy

At SC ROMALEXIS SRL, we are committed to respecting and protecting all private and confidential information we obtain when negotiating with third parties, including the personal data of individuals (information relating to an identified or identifiable individual).

This privacy policy and personal data processing will help you understand what kind of information we collect in connection with the use of our websites, communication with third parties, or other forms of interaction and provision of our services, and how we process these data and information.

Data We Process

The personal data that ROMALEXIS processes may include: Contact information, such as name, employer’s name and position held within a company, home and/or residence address, professional address, phone number, mobile phone number, email address, nationality, identity card and/or passport data; Additional information processed in the context of a contractual relationship or voluntarily communicated by you, such as: instructions given, payments made, information regarding any legal matters, etc. We place great importance on these data and will ensure specific protection for them.

Data resulting from your navigation on our website collected through cookies and similar technologies (IP address, etc.). For more details, please review our below cookie policy.

We do not intend to collect sensitive personal data, such as: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the unique identification of an individual, health data, or data concerning an individual’s sexual life or sexual orientation.

Use of Cookies

ROMALEXIS may use cookies on its website. Cookies are information that a website leaves on a user’s computer hard drive so that it can remember certain information about you when you return to that site or a related one. ROMALEXIS will not use your personal data sent in a cookie for marketing purposes and will not disclose these data to third parties without your consent. ROMALEXIS may use cookies for statistical purposes. If you do not wish to receive cookies from ROMALEXIS websites, you can set your browser to warn you before accepting cookies and refuse cookies when your browser alerts you to their presence. You can also enable cookies on your browser or delete installed cookies, but this may affect your experience on the website.

Legal Grounds

Any operation of processing your personal data will be carried out based on one of the following legal grounds:

• Processing is necessary for the conclusion or execution of a contract to which you are a party;
• Processing is necessary for compliance with a legal obligation of the operator;
• Processing is carried out based on your consent;
• Processing is necessary to protect your vital interests or those of another individual;
• Processing is necessary for the legitimate interests of ROMALEXIS or a third party (e.g., when processing is necessary for the execution of a contract to which your organization is a party), except where your interests or fundamental rights and freedoms prevail over these interests;

In the case of special categories of data, processing will be carried out if, in addition to a general legal basis for data processing, one of the following specific processing conditions is met:

• The consent of the data subject has been obtained;
• We have a legal obligation to process these categories of data;
• Processing is necessary for the establishment, exercise, or defense of a legal claim.

Purposes for Which We Process Personal Data

We may use your personal data for the following purposes (“Permitted Purposes”):

• Managing and administering the contractual relationship with our clients;
• Complying with our legal obligations (such as reporting obligations to tax authorities);
• Managing the use of IT systems (e.g., website, data management platforms, communication systems used), including preventing and detecting security threats, fraud, or other unauthorized or malicious activities;
• Complying with court orders and exercising and/or defending our rights and interests;
• Analyzing and improving our services and communications to you, including (as we have a legitimate interest in continuously improving our services) conducting customer satisfaction surveys regarding the services offered;

For any purpose related and/or auxiliary to any of the above, or for any other purpose for which your personal data have been provided to us, in compliance with applicable legislation. Additionally, based on your consent, we may send you various communications through the channels you have approved to keep you informed about the latest developments in the tourism field, announcements, and other information about ROMALEXIS services, products, or other promotional events.

Disclosure and Transfer of Personal Data

We may disclose your personal data to contractual (eg. lawyers, consultants, courts, or arbitration tribunals, as well as other public authorities, entities indicated by you, or other entities) in the context of providing Romalexis services (such as insurance service providers, accounting service providers, IT, telephony, email, etc.).

We may transfer your personal data to countries within the European Economic Area or to countries recognized by the European Commission as providing an adequate level of personal data protection if this transfer is necessary for processing according to the Permitted Purposes described above. In exceptional situations, if necessary for the Permitted Purposes, we may transfer your personal data to third countries that have not been recognized by the European Commission as providing an adequate level of protection. We will ensure that these international transfers are carried out subject to appropriate safeguards (such as, based on Standard Contractual Clauses approved by the European Commission) as required by the General Data Protection Regulation (EU) 2016/679 or other applicable legal provisions. You can contact us at any time, using the contact details below, if you want additional information about these safeguards.

Updating Personal Data

If any of the personal data you have provided to us changes, for example, if you change your first name, last name, or email address, or if you wish to cancel any request made to us, or if you become aware that we hold any incorrect personal data about you, please contact us by email at: office@romalexis.ro. We will not be liable for any loss arising from incorrect, inauthentic, insufficient, or incomplete personal data you provide to us.

Your Rights Over Your Personal Data Held by ROMALEXIS

ROMALEXIS will retain your information as long as required by a legal provision or as relevant for the purposes for which the information was collected, but generally no longer than seven years.

According to the Regulation, you will benefit from the following rights: the right to request access, rectification, deletion, or restriction of processing under the conditions of the applicable laws, the right to object, and the right to data portability, withdrawal of consent, the right to file a complaint with the supervisory authority.

If you wish to find out the personal data we hold about you or if you wish to rectify, delete any incomplete, incorrect, or outdated personal data, or if you wish to stop processing personal data for any purpose, you can exercise these rights by contacting us through the contact points mentioned on this site. Please note that, in some cases, especially if you wish to delete or stop processing personal data, this may also mean that we will no longer be able to continue providing services to you.

Data Protection Officer

ROMALEXIS has appointed a Data Protection Officer whom you can contact by email.