Information on the processing of personal data

The following information is designed to make you aware of the issues regarding the processing of your personal data and your rights regarding this processing in accordance with the General Data Protection Regulation 2016/679 ("GDPR") and applicable national law.

1. General information
We, the company S.C. TALA IAPIS S.R.L. , with registered office in the county of Iasi, locality Tomesti, STR. TRANDAFIRULUI NR. 6, registered under no. J22/2455/2021 | 44637138, ("the Company"), we represent the controller in accordance with GDPR. The contact details of the Company's data protection officer are e-mail: contact@lapis-residence.ro, telephone: 0757 70 70 80

2. When do we collect data about you?
We will collect your personal data when, for example:

- You are the customer/beneficiary of a commercial activity that we purchase/provide;

- Buy or use any of our products and services;

- Visit or browse website our website or other websites of S.C. TALA IAPIS S.R.L.

- You register for a specific product or service (e.g. create a user account on https://www.lapis-residence.ro/);

- You contact us through various channels, or request information about a product or service, including communication channels associated with social media applications such as Facebook, LinkedIn, etc.;

- You have granted permission to other companies, such as our business partners or associates, as well as third party suppliers or contractors of ours, to exchange information with us about you;

- Subscribe to marketing communications (Neewsletters), alerts or other services offered by us;

- When your personal data is public;

- We also collect information from certain organisations where appropriate and to the extent that we have legal grounds to do so. These include fraud prevention agencies, trade directories, verification/control agencies, billing agencies and contracted service providers;

- We use cookies (small text files stored in your browser) and other techniques such as web beacons (small, transparent image files used to track your movements on our site). For further details on this and how to opt-out of these, please see the Cookies section of our website https://www.lapis-residence.ro/.

3. Purpose of processing
The company processes your personal data for the following purposes:

- in order to ensure interaction and establish a relationship with you when we have a contractual relationship or legitimate interest;

- supply of products / provision of services;

- in order to fulfil the legal obligations of the Company;

- in order to pursue the legitimate interests of the Company;

- for the following purposes, all of which relate to it, to the extent that you have agreed to each of them:

- Providing information on commercial offers;

- Provide information on test drives;

- Providing information on Society events;

- Providing information;

- Participating in opinion surveys on the Company's products and services regarding customer satisfaction.

4. Categories of processed
In S.C. TALA IAPIS S.R.L. the following categories of data are processed:

- Name, personal number, date of birth, identity document, position, address, e-mail, landline and/or mobile phone numbers, fax number

- Your contact with us, such as a note or record of a call you have made to one of our contact centres, a Customer Service, a forwarded email or letter or other evidence of contact with us;

- Information about your account, such as dates of payments due or received, subscriptions you use, account numbers or other information about your account or that is included in our customer relationship management portal;

- Access legitimacy information - we will collect passwords, passwords and similar security information used for authentication and access to accounts and services (for online accounts opened by each customer on our company's website);

- Your preferences for certain products, services and lifestyle when you tell us what they are or when we assume what they are, based on how you use the products and services of S.C. TALA IAPIS S.R.L.;

- Marketing preferences.

- Your browsing history. If you have given us permission, S.C. TALA IAPIS S.R.L. collects the categories of websites you have browsed from your mobile, device or PC, for example sports, music or news. However, we do not have a history of the websites you browse, this is limited to a short period of time to allow for logging in. We use this interest information to send you personalised marketing offers or to show you personalised advertisements. You can opt out of ads under the Cookies section on our website https://www.lapis-residence.ro/ or, in the case of marketing, via the Data Protection Settings section;

- The information we obtain from other sources, such as public or private authorities, fraud prevention agencies, and other data providers. This includes demographic data, interest data, and browsing behavior. online;

- To improve the service we offer, the conversation with our consultants could be recorded and transcribed in text format. If you agree to authorize the recording and transcription, please continue the call with our consultants. If you do not wish to do so, please end the call and contact us by other means of communication as outlined in this document;

- For the loyalty program consisting in offering advantages, discounts, rebates to reward customer loyalty.

- The level of service provided to you - for example, operational problems and other events that may affect our services;

- Responses to invitations and confirmations of participation in events.

The personal data we process is primarily your identifying, transactional, financial, demographic, location or other personal data that we collect directly from you or from other sources when you become our customer, or when you use our products or services. Sensitive personal data reveals your racial and ethnic origin, political opinions, religious and philosophical beliefs, trade union affiliation, genetic data, biometric data, health data or data relating to life or sexual orientation. S.C. TALA IAPIS S.R.L. does not intentionally collect sensitive personal data from you for storage. It is not the intention of S.C. TALA IAPIS S.R.L. to process this type of data unless you explicitly provide us with sensitive personal data (e.g. specific requirements relating to trade union membership or biometric data, in situations where you are our employees).

5. Legal basis of the processing
- The legal basis for collecting and processing your data for each of the purposes mentioned above is:

- The supply or service contract to which you are a party or your request prior to the conclusion of a contract;

- Legitimate business interests of the Company, for example, preventing fraud, maintaining the security of our services, direct marketing and improving our services. Whenever we rely on this legal basis to process your data, we assess our commercial interests to ensure that they do not override your rights. In addition, in some cases you have the right to object to such processing. The legitimate interest of the Company to enable us to exercise our statutory rights in our favour, to take legal action against any unlawful or damaging activity by the Company;

- Compliance with a mandatory legal requirement, e.g. accounting and tax requirements, which are subject to strict internal policies (such as retention periods), procedures and your right to restrict the use of your own data, which controls the scope of our services to be provided;

- In addition, to the extent that you have agreed, your consent. The processing of personal data on the basis of your consent is an additional purpose to the processing of personal data for the performance of the contract to which you are a party and does not condition the provision/performance of contractual services;

- The processing is necessary for the performance of a task serving a public interest.

6. Categories of recipients to whom personal data collected may be disclosed:
In order to achieve the above purposes, we use the following categories of product and service providers / agents:

- suppliers directly/indirectly involved in the provision of products and services in the online domain;

- State authorities (including tax authorities);

- accountants, auditors, forensic experts, lawyers or other such external advisors to the Company or to third parties providing products and services to the Company (security service providers, IT system providers, financial consultants);

- the Company's suppliers directly/indirectly involved in the marketing and promotion process.

7. Automatically collected data
When you visit the Site, we automatically collect data through your browser or device through the use of cookies and similar technologies. Please see our Cookies Policy for additional information on these practices.

8. Marketing controls
If you no longer wish to receive marketing communications from us (Newsletters), update your preferences in your profile or account, or go to the "Unsubscribe" section. If you opt out of receiving marketing communications from us, we may continue to send you messages related to your orders, or other messages related to user account management or updating our policies, which you cannot opt out of, as long as you have an active user account or a current contract/order with us.

9. Storage period
We will keep your personal data for as long as necessary, or as permitted in view of the purpose(s) for which it was obtained and as set out in this Notice. Criteria used to determine the length of retention periods include:

- the length of time we have an ongoing relationship with you;

- for the period of time necessary for the execution of the obligations and rights assumed contractually, i.e. for a period equal to the period established by the legal requirements for keeping information, tax/financial legislation, other laws, regulations and/or other specific provisions;

- if there is a legal obligation under which we fall;

- whether retention is advisable in light of our legal position (such as enforcement of the Terms and Conditions, applicable limitation periods, litigation or regulatory investigations). When we no longer need your personal data, we will securely delete or destroy it. We will also consider whether and how we can minimize over time the personal data we use and whether we can anonymize your personal data so that it can no longer be associated with or identify you, in which case we may use this information without further notice.

10. Transfer to third countries and safety measures
Depending on the location of the servers of S.C. TALA IAPIS S.R.L. or of its representatives, on which the data will be stored or depending on the location of certain recipients of the data, personal data may be transferred, as appropriate, to other Member States of the European Union or of the European Economic Area. Unless the law expressly requires otherwise or if it is strictly necessary for the fulfilment by S.C. TALA IAPIS S.R.L. of the contract or the obligations undertaken, we will not transfer personal data outside the European Economic Area. In the event that S.C. TALA IAPIS S.R.L., in order to perform the contract and the obligations assumed, has to transfer data to third countries, we will transfer only those personal data strictly necessary to perform the contract and/or the obligations assumed In situations other than those mentioned above, if, on an exceptional basis, in order to perform a contract with a third party and/or obligations assumed towards third parties, S.C. TALA IAPIS S.R.L. carries out, on its own initiative or on the initiative of a third party, a transfer of personal data concerning you to a third country, specific protection measures will be implemented in the event of such a transfer and the data subjects will be notified accordingly.

11. Third party services
This Notice does not address, and we are not responsible for, the collection, use, disclosure or security practices, or other practices, of any third party, including any third party running a service to which our Site provides links. The inclusion of a link on our Site does not imply that we endorse the service to which the link directs.

12. Use by minors
Our site and services are not directed to persons under the age of sixteen (16), and we do not knowingly collect Personal Data from such persons. If your age is under the age relevant for consent in your jurisdiction, you will need permission from your parent or legal guardian to use the Site and our services. Please consult with your parent or legal guardian before using the Site or our services. If you provide us with personal data of persons under the age of sixteen (16), you represent that you have the proper authority to do so and that you can demonstrate this authority to us upon request.

13. Changes made
Information notice on the processing of personal data Our information notice on the processing of personal data may change from time to time and any changes to the statement will be communicated by means of an e-mail or a notice on our website. You will receive the email as long as you are registered in our databases with an email address.

14. Security of personal data
We follow strict security procedures regarding the storage and disclosure of your personal data and protect it against accidental loss, destruction or damage. We may disclose your information to trusted third parties for the purposes set out in this Notice. We require all third parties to have appropriate technical and operational security measures in place to protect your personal data in accordance with EU legislation on data protection rules.

15. Your rights
The Regulation confers a number of rights on the persons whose personal data are processed. Thus, in addition to the existing rights, there is also the right to data portability and the right to data erasure. In short, the rights you have:

- The right to withdraw at any time a consent given in order to stop a data processing that is based on your consent. Withdrawal will not affect the lawfulness of the processing based on the consent given before the withdrawal, for the performance of a contract, for the fulfilment of a legal obligation or for the purpose of pursuing our legitimate interests.

- Right of access - means that you have the right to obtain confirmation from us whether or not we are processing personal data about you and, if so, you have access to that data and information on how that data is processed.

- The right to data portability - refers to the right to receive personal data in a structured, commonly used and machine-readable format, as well as the right to have this data transmitted directly to another controller, if technically feasible.

- The right to object - refers to your right to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or when it is in the legitimate interest of the controller. Where the processing of personal data is for the purposes of direct marketing or processing carried out on the basis of express consent, you have the right to object to the processing at any time.

- Right to rectification - refers to the correction, without undue delay, of inaccurate personal data. The rectification will be communicated to each recipient to whom the data was transmitted, unless this proves impossible or involves disproportionate efforts.

- Right to erasure of data ("right to be forgotten") - means that you have the right to request the erasure of personal data, without undue delay, if one of the following grounds applies: they are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for the processing; you object to the processing and there are no other legitimate grounds prevailing; personal data have been unlawfully processed; personal data must be deleted for compliance with a legal obligation; personal data have been collected in connection with the provision of information society services.

- The right to restriction of processing - can be exercised if the person disputes the accuracy of the data, for a period necessary to verify the accuracy of the data; the processing is unlawful, and you oppose the deletion of personal data, requesting instead the restriction; if S.C. TALA IAPIS S.R.L. no longer needs the personal data for the purpose of processing, but the person requests it for the establishment, exercise or defence of legal claims; if the person has objected to the processing for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the person concerned.

- The right to lodge a complaint - can be exercised if you consider that your rights as a data subject have been violated. You can address at any time, with a complaint or referral in this regard, to the National Supervisory Authority for Personal Data Processing, with headquarters in B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania (fax: +40 318 059 602, email: anspdcp@dataprotection.ro). You can also file a legal action with the competent courts.

To exercise these rights, as well as for any further questions regarding this information or in relation to the Company's use of personal data, please contact our Data Protection Officer, choosing any of the communication methods described below. You can contact us:

- By email - at: contact@lapis-residence.ro; or

- In person or by a request sent by mail - to the Company's Head Office (at the address mentioned in item 1); or

- By phone - on the number:  0757 70 70 80  Further details as well as possible updates of this information on the protection of your data - can be found on the Company's website - Data Protection section.