[email protected]

Privacy

PERSONAL DATA PROTECTION POLICY – PPD

The protection of your personal data is important to us, therefore we pay particular attention to protecting the privacy of individuals who have provided us with their personal data, of visitors who access this site, as well as those whose personal data has been provided to us by a third party, or to which we have had access from another source, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”).

Please pay particular attention to the following Policy (“PPD”) in order to understand how your information (“personal data”) will be handled.

The PPD explains the practices of EXPRESS SHUTTLE SRL (hereinafter referred to as “EXPRESS SHUTTLE” or “OUR ORGANIZATION”), regarding the application of the GDPR provisions, and the rights you have regarding the way your information is processed by OUR ORGANIZATION.

The processing of personal data by EXPRESS SHUTTLE will always be carried out in accordance with the GDPR and the personal data protection regulations specific to each country in which EXPRESS SHUTTLE operates.

Through the PPD, OUR ORGANIZATION wishes to inform data subjects about the nature of the personal data we collect and process, as well as the purposes of the processing. In addition, data subjects are also informed through the PPD about their rights.

DATA OPERATOR

Front site, EXPRESS-SHUTTLE.RO belongs to the organization EXPRESS SHUTTLE, based in Ana Ipatescu 71, Ciorogarla, Romania with fiscal code RO383633208 \xc8\x99i Nr. \xc3\x8enreg. Reg. Com. J40/1825/2020.

DEFINITIONS

PERSONAL DATA

“Personal data” or “personal data” means any information or information that can identify you directly (e.g. your name) or indirectly (e.g. through pseudonymous data such as a unique identification number). This means that personal data includes such things as your email address, home address, cell phone, username, profile photos, personal preferences and shopping habits, user-generated content, financial information, and financial status information. It could also include unique numeric identifiers, such as the IP address of your computer or the MAC address of your mobile device, and cookies.

PROCESSING OF PERSONAL DATA?

“Processing” shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

WHAT ARE YOUR DATA PERSONAL DATA WE PROCESS?

Your personal data that may be processed, without limitation, are the following: name, surname, physical address, e-mail address, city, county.

PERSONAL DATA CONTROLLER

The controller of personal data (hereinafter referred to as “controller”) is EXPRESS SHUTTLE.

DATA PROCESSING PRINCIPLES

OUR ORGANIZATION undertakes to comply with the personal data protection principles (hereinafter referred to as the “Principles”) laid down by the GDPR, to ensure that all data are:

  1. Processed fairly, legally and transparently;
  2. Collected for specified, explicit and legitimate purposes;
  3. Adequate, relevant and limited in relation to the purposes for which they are processed;
  4. Correct and up-to-date;
  5. Kept in a form which allows identification of data subjects for no longer than is necessary for the purposes of the processing;
  6. Processed in accordance with the data subject’s rights, in a way that ensures adequate security of processing so that the data are intact, confidential and available.

THE BASIS AND PURPOSES FOR PROCESSING PERSONAL DATA

  1. For the conclusion and performance of contracts – In accordance with Art. 6 para. 1 lit. b) GDPR, specific personal data may be processed. In order to be able to provide you with our products and services, we need to process personal data belonging to you.
  2. In order to fulfill legal obligations – According to Art. 6 para. 1 lit. c) of the GDPR, personal data may be processed for the purposes of complying with legal obligations. We require a range of personal data including, in certain circumstances, your personal identification number, in order to fulfill our obligations imposed by the tax authorities in relation to invoicing and reporting to the tax authorities.
  3. In order to fulfill the tasks established by Law 335/2007 with subsequent additions – According to art. 6 para. 1 lit. a) of the GDPR, personal data may be processed if the data subject has consented to the processing of his/her personal data for one or more specific purposes. Thus, in certain situations, your personal data will be used for purposes such as: the conduct of commercial/contractual business and, to the extent you have consented, for marketing, promotion, advertising, publicity, etc., to keep you informed about OUR ORGANIZATION’s products, services and initiatives.

CONTACT FORM PROCESSING

OUR ORGANIZATION will use the information you provide in the appropriate contact section on the website solely for the purpose of processing your request.

By providing any personal data through the www.EXPRESS-SHUTTLE.RO website, you understand and agree that your data will be processed in accordance with the PPD of EXPRESS SHUTTLE.

Please be aware that in order to process your requests submitted in the contact section of the website, we may, under certain circumstances, be obliged to disclose your data to partners with whom EXPRESS SHUTTLE cooperates and/or other third party service providers of OUR ORGANIZATION.

Nevertheless, EXPRESS SHUTTLE has adopted appropriate technical and organizational measures to ensure the security of the data transfer as well as the GDPR-compliant processing of your data by the aforementioned entities.

EXPRESS SHUTTLE undertakes not to process the personal data provided for any purpose other than that for which it was transmitted, except in situations where there is your express consent to use it for other purposes.

It is also possible that EXPRESS SHUTTLE may have access to other personal data by you establishing a link with EXPRESS SHUTTLE, by processing data communicated as a result of telephone conversations, e-mail conversations, coming to our premises to obtain information, etc.

By contacting EXPRESS SHUTTLE in any of the ways stipulated above or any other method that involves mediated or direct communication between you and OUR ORGANIZATION, you understand and agree that your data will be processed in accordance with the provisions of the EXPRESS SHUTTLE GDPR.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

The personal data processed by OUR ORGANIZATION may be disclosed and/or transferred to third parties only if you expressly consent to do so, except in situations where there is a legal/contractual obligation for OUR ORGANIZATION to do so.

Please be aware that we may under certain circumstances be obliged to disclose your personal data to partners with whom EXPRESS SHUTTLE cooperates and/or other third party service providers of EXPRESS SHUTTLE.

DATA PROCESSING BY THIRD PARTIES, OTHER WEBSITES AND SPONSORS

The www.EXPRESS-SHUTTLE.RO website may contain, at a given time, links to other websites whose data processing policies may differ from those of EXPRESS SHUTTLE.

Please be aware of and consult the privacy policies of other websites, and EXPRESS SHUTTLE is not responsible for the information submitted or collected by these third parties.

AUTOMATIC DATA PROCESSING. COOKIE

The www.EXPRESS-SHUTTLE.RO website uses cookie identifiers. In this regard, you can consult our Cookie Policy, available on the website, and exercise your right to disable Cookies as specified below.

DATA STORAGE PERIOD

EXPRESS SHUTTLE may keep the processed data for various periods of time, deemed reasonable, in accordance with the purposes indicated above. We retain your data only for as long as necessary to fulfill the purpose for which we hold the data, to meet your needs or to fulfill our obligations imposed by law.

To know how long your data can be kept, we use the following criteria:

  1. When you use our services we keep your personal data for the duration of our contractual relationship;
  2. If you participate in a promotional offer, we keep your personal data for the duration of the promotional offer;
  3. In case you contact us with a question, we keep your personal data for as long as necessary to process your questions, but not more than 5 years after the last correspondence sent;
  4. In case you create an account, we keep your personal data until you request us to delete it or after a period of inactivity (no active interaction with us). In this regard, we note that the data processed for this purpose will be deleted 5 years after the last interaction with the account user (such as logging into your account);
  5. Where you have provided your consent for marketing, we retain your personal data until you unsubscribe or request deletion or after a period of inactivity (no active interaction with our brands) defined in accordance with local regulations and guidelines. In this regard, we note that data stored in our databases for the purpose of direct marketing communications is deleted from the records of these databases 5 years after the last interaction with you;
  6. Where cookies are stored on your computer, we retain them for as long as necessary for them to fulfill their purposes (for example, for the duration of a session for shopping cart cookies or session ID cookies) and for a period defined in accordance with local regulations and guidelines. In this regard, we note that the data processed through cookies used to provide online behavioral advertising, to personalize our services to you and to enable the distribution of our content on social media sites (distribution buttons intended for display on the site), will be kept for a maximum period of 1 year after their collection, based on your consent.

RIGHTS OF DATA SUBJECTS

Under the GDPR, you have a number of rights in relation to the personal data that EXPRESS SHUTTLE processes:

  1. Right of access to processing data –You have the right to access the personal data we hold about you. The first provision of information will be done without any charge. If you need further copies of information already provided, we may charge a reasonable fee taking into account the administrative costs of providing the information. Manifestly unfounded, excessive or repeated requests may go unanswered.
  2. Right to rectification of data –You have the right to ask for your Data to be rectified if it is inaccurate or out of date and/or to have it completed if it is incomplete. If you have an account, it may be easier to correct your own data through the “My Account” function.
  3. Right to erasure (“right to be forgotten”) – In some cases, you have the right to have your Data erased or destroyed. This is not an absolute right, as sometimes we may be forced to retain your Data for legal or judicial reasons.
  4. Right to restriction of processing –You have the right to request restriction of the processing of your Data. This means that the processing of your Data is restricted so that we can retain the Data but not use or process it. This right applies in specific circumstances set out in the General Data Protection Regulation, namely:
  5. – the accuracy of the Data is contested by the data subject (i.e. by you), for a period allowing the controller (i.e. EXPRESS SHUTTLE) to verify the accuracy of the Data;

– the processing is unlawful and the data subject (i.e. you) objects to the erasure of the Data and requests the restriction of its use;

– the controller (e.g. OUR ORGANIZATION) no longer needs the Data for processing, but they are required by the data subject (i.e. you) for the establishment, exercise or defense of legal claims;

– the data subject (i.e. you) has raised objections to the processing based on legitimate grounds on the part of the controller (in this case EXPRESS SHUTTLE) on the basis of verifying whether the legitimate grounds of the controller (EXPRESS SHUTTLE) outweigh the legitimate grounds of the data subject (i.e. you).

  1. The right to data portability – You have the right to move, copy or transfer the data you are interested in from our database to another one. This applies only to data you have provided, where the processing is based on your consent or on the basis of a contract and is implemented by automated means.
  2. Right to object –You can object at any time to the processing of your data when such processing is based on a legitimate interest.
  3. The right to withdraw consent at any time – You may withdraw your consent to the processing of your data where such processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
  4. Right to lodge a complaint with the competent supervisory authority – You have the right to lodge a complaint with the data protection authority in your country of residence or domicile to challenge the data protection practices offered by OUR ORGANIZATION.
  5. The right to object to the processing of your data for direct marketing purposes – You can unsubscribe or opt-out of our direct marketing communications at any time. It’s easiest to do this by clicking the ‘unsubscribe’ link in any email or communication we send you.
  6. The right to object to the processing of your data by us when we carry out actions in the public interest or in our own or a third party’s legitimate interests – You can object at any time to the processing of your data when such processing is based on a legitimate interest.
  7. Right to disable Cookies –you have the right to disable cookies. Internet browser settings are usually set by default to accept cookies, but you can easily adjust them by changing your browser settings. Many cookies are used to enhance the usability or functionality of our websites/apps; therefore, disabling cookies may prevent you from using certain parts of our websites or apps, as detailed in the relevant Cookie table. If you wish to restrict or block all cookies set by our websites/apps (which may prevent you from using certain parts of the website) or any other websites/apps, you can do so through your browser settings. The Help function in your browser will tell you how. For more information, see the following links: http://www.aboutcookies.org/;

You can exercise any of these rights in relation to the personal data that EXPRESS SHUTTLE processes by sending a simple request to the EXPRESS SHUTTLE DPO. In such a situation we may well ask for proof of your identity.

LEGAL REQUESTS

We access, retain and provide your information to regulators, law enforcement or other entities:

  1. In response to a legal request, when we believe in good faith that the law requires us to do so. We may also respond to legal requests where we believe in good faith that the response required by the laws of the jurisdiction in question affects users in that jurisdiction and is consistent with internationally recognized standards.
  2. When we believe, in good faith, that it is necessary to: detect, prevent and respond to acts of fraud, unauthorized use of any of our materials, violations of our terms or policies or other harmful or illegal activities, to protect us (including our rights, property or materials), you and others, including in regulatory investigations or inquiries, or to prevent imminent death or personal injury. For example, where relevant, we provide information to and receive information from third party partners about the reliability of your account in order to prevent fraud, abuse and other malicious activity within and outside of our materials.

The information we receive about you may be accessed and stored for a longer period of time when subject to a legal request or legal obligation, a governmental inquiry, or investigation of possible violations of our terms or policies, or in other cases to prevent harm.

RELATIONS WITH OTHER OPERATORS

Depending on the context, we may find it absolutely necessary to provide information at a higher level, globally, internally or externally, to our partners and those with whom we transfer data in compliance with the GDPR, in order to ensure that we provide the most professional service possible. Information controlled by EXPRESS SHUTTLE may be transferred, transmitted or stored and processed in the EU or in countries other than the country in which you reside for the purposes described in this policy. These data transfers are necessary for us to be able to provide you with the highest level of service, as well as to continue to provide you with our materials at the highest professional level. We use standard contractual clauses approved by the European Commission and rely on the adequacy decisions issued by the European Commission with respect to specific countries, where applicable, in relation to transfers of data from the EEA to the United States and other countries.

SECURITY OF PROCESSING

EXPRESS SHUTTLE has adopted technical and organizational data processing measures, updated in accordance with GDPR requirements, in order to protect your personal data against any unauthorized access, improper use or disclosure, unauthorized alteration, destruction or accidental loss. All employees and collaborators of EXPRESS SHUTTLE, as well as any third parties acting on behalf of and for EXPRESS SHUTTLE are obliged to respect the confidentiality of your information and the GDPR requirements, in accordance with the PPD.

EXEMPTION FROM LIABILITY

The www.EXPRESS-SHUTTLE.RO website may contain links to other websites and/or other web pages that are not the property of EXPRESS SHUTTLE. OUR ORGANIZATION does not assume any responsibility for the content of these sites and therefore cannot be held responsible for the content, advertising, goods, services, software, information or other materials available on or through these sites. EXPRESS SHUTTLE shall not be liable for the loss of personal data, for any negative effects on visitors’ personal data or for any other moral and/or patrimonial damages caused by the access to those websites.

UPDATING THE PERSONAL DATA PROTECTION AND PROCESSING POLICY

Please note that this Policy may be subject to periodic changes in content by updating www.EXPRESS-SHUTTLE.RO.

How will we let you know about changes to this Policy?

We will send you notice prior to making any changes to this Policy and will give you the opportunity to review the revised PPD before you choose to continue using our Materials.

Please do not continue to use www.EXPRESS-SHUTTLE.RO if you do not agree to such changes. We also recommend you check this page for any updates.

The terms PPD shall be interpreted in accordance with applicable law.

CONTACT

If you have any questions or concerns about how we process and use your personal data, or if you wish to exercise any of your rights, please contact us at [email protected].