Privacy

1. Introduction

Data protection is very important to us. We respect your privacy and personal life. Therefore, we will inform you below about the processing of personal data when you use the services of our company with the following identification data:

IMAGEPRO RECYCLE S.R.L., with registered office in Calea Florești, nr.1, Block T1, Staircase 3, Floor 7, Apt.96, Cluj County, registered at the Trade Register under nr.J12/1421/18.03.2022, CUI RO45821529 (hereinafter referred to as "the Company" or "the Operator").

The company is responsible for complying with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, abbreviated in English as GDPR or in Romanian as RGPD). Additionally, the company also complies with the primary legislation in Romania: the Law no. 190/2018 and the secondary legislation (decisions of the President of the supervisory authority ANSPDPC) or the working instructions recommended by the European Data Protection Board (EDPB, former WP Art.29 )

This personal data protection policy describes our practices regarding the processing (activities including collection, use and possible transfer) of data communicated directly or indirectly to the Company, as well as the use of personal data collected by its employees from public sources for the purpose of providing agreed services:

• Collection of waste and clearance of spaces at generator sites;
  
  
• Waste transport;
  
  
• Waste disposal;
  
  
• Sorting of waste into distinct categories (paper, cardboard, plastic film, PET, Al cans, etc.);
  
  
• Baling of waste with specific machinery;
  
  
• Transport and recovery of waste to internal and external final recyclers.
  
  

Our data protection practices comply with applicable data protection legislation, but if, for any reason, the terms set out in this data protection policy are not acceptable to you, you may communicate your objection to us at office@ipq.ro and we will respond promptly.

2. Definitions

1.1 Personal data

Personal data are all data relating to you personally and potentially to other persons within your family or to any persons involved in the activities mentioned above in point 1.

These include:

identification and contact details (name, surname, phone number, email);

Invoicing data: CNP and/or address in the case of individuals and CUI/address for legal entities

financial data: bank account, bank details

1.2 Volume of services provided

In the following, we will describe the scope of services provided by us, based on existing services made available to you: data subject relationship management system (internal ERP), call-center type systems, electronic messaging systems or localized via website https://www.ipq.ro/.

1.2.1 Basic services

In the case of the basic service, it is provided through the systems for managing the relationship with the data subject or the persons authorised by the data subject, for requesting services offered by the Company, for participation in the Company's events. All information collected about you is strictly used for the agreed common contractual purpose for which it was collected, according to the mandate granted directly by you or your representatives and/or the signed contracts - where applicable.

3. Prelucrarea datelor cu caracter personal in contextul utilizarii aplicatiilor puse la dispozitie

In the context of contractual relations, you make available to us for the purpose of registration, for the provision of our services, the personal data mentioned above in point 1.1, the data being collected according to the type of request, not all categories being necessary.

The data is normally processed through the web platform accessible at https://www.ipq.ro/, respectively through internal productivity applications (ERP, CRM, call center, email system).

As an applicant for services offered by the Company, you have the option to request changes to data already collected or previously transmitted, or collected by the Company, in direct conversations or by sending a written notification (e-mail, classic postal services, courier) to our team, and the changes will be made immediately.

The company does not request and does not process personal data in special categories but only necessary and relevant non-sensitive data, unless legally required to do so at a later stage. Data considered sensitive/special (generically speaking) could be, but is not limited to, information relating to race or ethnicity, political opinions, religion, trade union membership, health, sexual preferences or criminal record.

The company does not allow the use of the services by data subjects under the age of 16, thus collecting data from children/minors..

The information collected about you is not transferred to our partners or agents except for the purpose of performing the services already agreed with you, where possible the requests made by you being transmitted without personal data.

4. Duration of data storage

Your usage data as well as the data related to your requests will be kept for a fixed period of 3 years after the termination of the contractual relationship.

In the case of data received from you on the basis of the contact form available on the Company's website, we will keep your data for a maximum of 3 months from the date of provision, unless they will be included in the contract to be concluded by the Company with the entity you represent (in which case the aforementioned period will apply).

5. Use of service providers to process personal data/process data in countries outside the European Economic Area

Our organization does not use suppliers from outside the European Economic Area for the provision of services and processing of your data. In the event that there is a need to transfer information to entities outside the European Economic Area, the transfer can only be made with your explicit approval (in all cases it is recommended that this transfer is carried out and controlled directly by you).

The company can use technological services that can help the internal organizational process:

electronic mail systems - email;

via the Web platform of www.ipq.ro, hosted by Microsoft Azure (details here);

all applications ensuring that they reside within the European Space with approved suppliers with whom the Company has valid contracts which in turn ensure compliance and protection of personal data under GDPR.

6. Source of personal data

Personal data can be obtained from the following sources:

1. directly from you when you request the Company's services, either through the platform www.ipq.ro or by phone or email;

2. through the activities you carry out during the period you benefit from the services offered, such as additional information, conversation history through various communication channels (email, social media, etc.);

3. dfrom third parties, such as where we receive your personal data from third parties from whom we are authorised to collect it (companies that perform primary collection and transfer or rent our services).

7. Legal basis for processing personal data

The legal grounds for the personal data processing operations described in this Notice are:

o perform the contract concluded with the company represented by the data subjects or to take steps at the request of the data subjects prior to the conclusion of a contract (in the context of data collection via the contact form);

the legitimate interests of the Company;

your consent for other periodic information activities.

Our legitimate interests or those of a third party include our requirements to use your personal data in litigation, law enforcement investigations, data processing for advertising, marketing or publicity purposes or other lawful purposes involving the Company.

8. Data security

In order to prevent unauthorized access or to maintain data accuracy and ensure the correct use of data, we implement reasonable and appropriate physical, IT and organizational security measures to effectively protect all personal data we process.

We take technical and organisational security measures to protect your data from unwanted access as widely as possible. Apart from securing the operating environment, for example, in certain areas (customer account, website contact form) we use encryption. The information you provide will then be transmitted in encrypted form using the SSL (Secure Socket Layer) protocol to prevent misuse of the data by third parties. You can identify this by the fact that your browser's status bar shows a closed lock symbol and the address bar starts with "https".

Data security will be adjusted according to the state of the art.

9. Your rights

9.1 Right of access
You have the right to request information from us at any time about the data stored about you, as well as, among other things, about their origin, the recipients or categories of recipients to whom this data is transmitted and the purpose of storage. For all other copies except the first copy, reasonable administrative costs may be charged. This does not apply to electronic communication of information.

9.2 Right of withdrawal
If you have given your consent to the use of your data, you may withdraw it at any time with effect for the future (once the contracted services have been completed), without stating your reasons. To do so, simply send an email to office@ipq.ro.

9.3 Right of rectification
If your data collected by the Company is incorrect, you may request its correction at any time by contacting the representative with whom you are in contact.

9.4 Right of deletion
You have the right to obtain from the Company the deletion of your data, which may be exercised in certain circumstances provided for by applicable law, including: where the Personal Data are no longer necessary for the purposes of the processing; where the data subject objects to the processing and there are no other legitimate interests prevailing for the processing; where the Personal Data have been unlawfully processed.

The deletion of your personal data can be carried out at any time by means of a request via the methods already mentioned or by using our general contact details. As a rule, your data will be deleted immediately, but no later than one month after you have requested this right. If deletion is contrary to or necessary for data retention obligations established by law, contract or by legislative or commercial regulations or other reasons provided by law, instead of deletion, only blocking of your data can be carried out, thus ensuring that your data cannot be used for any purpose other than archival or audit/verification purposes. If this is the case for your customer account, you will receive a notification from us to this effect. After deletion of your data, it is no longer possible to receive the information.

9.5. Right to carry data
If you request personal data made available to us, we will provide or communicate the data to you or another responsible person in a structured, common and electronically processable format. Data obtained as a result of services rendered is not part of the scope of such processing, and will be discussed separately.

9.6 Right to object
You have the right to object to the processing of your data under the conditions and in the cases provided for by the applicable law (situations which include the processing of data for direct marketing purposes), at any time and without stating your reasons. In addition, we draw your attention to the fact that, by refusing all data processing processes, it is possible that the performance of the contract with regard to the services engaged and the running of programs for clients may be limited or may no longer be possible, and we ask you to consider carefully before submitting such requests.

9.7 Contact (for enforcement of data subjects' rights)
Daca ne contactati prin email la office@ipq.ro sau prin posta (Calea Florești, nr.1, Bloc T1, Scara 3,Etaj 7, Ap.96, Judet Cluj), informatiile furnizate de dvs. (adresa dvs. de email, numele dvs. si numarul dvs. de telefon, daca este cazul) vor fi stocate de noi pentru a va raspunde la intrebari, respectiv pentru a va satisface solicitarea. Stergem datele care apar in acest context dupa ce spatiul de stocare nu mai este necesar sau limitam procesarea daca exista obligatii de pastrare stipulate de lege.

10. Right to complain

You have the right to lodge a complaint with a competent supervisory authority (mentioned in section 12 below) about the processing of your personal data if you believe that your data protection rights have been violated.

11. Questions about data protection

Inquiries about all data processing can be addressed at any time to:

Address: Calea Florești, nr.1, Bloc T1, Scara 3,Etaj 7, Ap.96, Judet Cluj

Data Protection Officer, email: office@ipq.ro, phone: 0725 892 022

Last but not least, you have the right to contact the National Supervisory Authority for Personal Data Processing at the following contact details:

Web page: http://www.dataprotection.ro

or directly to the page for submitting a complaint:

https://www.dataprotection.ro/?page=Plangeri_pagina_principala

Email address: anspdcp@dataprotection.ro

Tel.: 40.318.059.211/ +40.318.059.212