We consider ensuring the right to the protection of personal data as a fundamental commitment, therefore we will dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 („General Data Protection Regulation” or „GDPR”), as well as with any other legislation applicable in Romania. As one of the essential principles of this legal framework is transparency, we would like to inform you about how we collect, use, transfer and protect your personal data when you interact with us in connection with our products and services through our website.
Personal data is any information relating to an identified or identifiable natural person (the „data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or to one or more specific elements, his own physical, physiological, genetic, mental, economic, cultural or social identity.
The processing of personal data means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as: collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, joining or combining, blocking/restriction, erasure or destruction.
Who we are
This site is managed by Hescules SA, a legal entity of Romanian nationality, having its registered office in Braila, str Incinta Docuri no 1, Braila County, unique tax registration code 2265292.
Hescules SA controls your data processing activities in the capacity of Data Operator, within the meaning of EU Regulation 2016/679, available at: https://eur-lex.europa.eu/legal-content/RO/TXT/?uri=CELEX:32016R0679
What categories of personal data do we process
Through the web page, we collect the e-mail address, name, company name and telephone, necessary to fill out the forms: request offer, request demo, contact and newsletter sign-up.
We use your relevant personal data to prepare and provide the services and products requested from us.
We use this data to allow you access to the application and thus deliver the services of your choice. We rely in this case on the performance of a contract as the basis for the processing of personal data, since every time you choose the above options you agree to the terms and conditions for performing that service.
The data categories processed in the context of our relationship with you are the name, e-mail address, telephone, position within the company, billing data, bank data, as well as other personal data provided to Hescules SA, as necessary for the fulfilment of the above purposes.
What are the processing purposes and grounds
The collected data is used to respond to requests received through the aforementioned forms.
There is a possibility to process some of your data in the context providing the services based on legal obligations arising from the legislation regulating the accounting and financial service providers’ activity or from other specific legal provisions governing our activity. In this case, the reasons for processing this data are related to our legal obligation.
We may also use your personal contact data (e-mail) to provide you with the Newsletter service, only if you have subscribed to such service and therefore have expressed your prior explicit consent for such processing of your data.
You can withdraw your consent at any time by expressing the option to stop receiving such information by the following means: unsubscribe from the newsletter or send an e-mail to office (at) hercules-braila.ro.
www.hercules-braila.ro webpage automatically collects certain information, which it stores in its traffic reports. The information we are talking about may include the page IP as well as the browser type, operating system or the device you are accessing from.
We use this information based on our legitimate interest in observing the extent to which our web pages correspond to your device’s display needs, in particular, to diagnose any problems that our servers have when delivering pages to certain types of devices, to analyze trends, to observe how users can better navigate our pages.
We’re not processing your data for secondary purposes other than those for which they were originally collected, without prior consent, without a legitimate interest or without a legal basis.
Who do we transmit your data to? Personal
Under certain circumstances, we will share your personal data with third parties:
- Third-party service providers – we may use service providers to process your personal data on our behalf. This category may include services such as: accounting services, transmission of marketing materials, event-specific services, conferences, etc. We assure you that we have signed with all third-party service providers agreements to process your personal data and confidentiality clauses in order to protect your data and that we do not allow their usage for other purposes.
- Competent authorities – in case of legally based applications, we provide your data to the competent authorities, when this is strictly necessary for the detection of fraud, criminal acts and, in general, when the legal provisions require us to comply with such a requirement.
- When you expressly request this or expressly authorize us to disclose your data.
- In case of urgent situations or force majeure cases.
- If disclosure is necessary to resolve disputes, to be acknowledged or a right be exercised in court.
We assure you that your personal data is neither made public nor sold to any other entity, natural or legal person.
We’re not transferring your data to international organisations or countries outside the European Economic Area.
How do we protect the security of your personal data
We use appropriate systems and procedures to protect and secure personal data, specifically aimed at preventing unauthorized/illegal processing, accidental or illegal loss, accidental or illegal destruction.
We have implemented measures to identify risks, prevent and/or uncover security breaches, document security incidents and data affected by such incidents, fix them and recover personal data. The transmission of your data personal data is done using state-of-the-art encryption algorithms using HTTPS technology, thus ensuring the confidentiality of the information you provide.
Delete and keep your data Personal
We limit your personal data storing time to what is necessary for the processing purposes that have been brought to your attention.
We review the need to further keep your personal data. We will annually analyze the collected and processed data, in order to filter, sort and continue processing only for data whose processing purpose is current. You may ask us to delete your personal data, but only if it is no longer necessary for the purposes for which it was collected.
We may retain your personal data in case of finding, exercising or defending a right in court.
If the retention of your data is necessary for legal purposes, we may continue to keep this data.
Your rights about personal data
Site visitors benefit from all rights provided by the laws on the protection of personal data, as follows:
Right to information = the right of the data subject to be informed about the controller’s identity and contact details, data processing purposes, the categories of concerned personal data, data recipients or categories of data recipients, the existence of the rights provided for by the legislation on the protection of personal data for the data subject and the conditions under which they may be exercised;
Right of access to data = the right of the data subject to obtain from the data controller, upon request and free of charge, the confirmation that the personal data concerning him/her are not processed by him;
Right to rectification = the right of the data subject to obtain, upon request and free of charge, the correction of inaccurate data concerning him/her, as well as the completion of incomplete data;
Right to erasure of data („right to be forgotten„) = the right of the data subject to obtain, upon request and free of charge, to the extent that the conditions laid down by law are met, the deletion of personal data concerning that person;
Right to processing restriction = the right of the data subject to obtain, upon request and free of charge, to the extent that the conditions laid down by law are met, the marking of the personal data stored, in order to limit their further processing;
Right to data portability = the right of the data subject to receive, upon request and free of charge, personal data in a structured way, used as usual and in an easy-to-read format, as well as the right for such data to be transmitted by Hescules SA to another data controller, to the extent that the conditions laid down by law are met;
Right to opposition = the right of the data subject to object at any time, for legitimate and well-founded reasons related to his/her particular situation, that the personal data intended for him/her be processed, to the extent that the conditions laid down by law are met;
The right not to be subject to an individual decision = the right of the data subject to request and obtain the withdrawal, annulment or reassessment of any decision based solely on processing carried out by automatic means (including profiling) which produces legal effects with regard to the data subject or similarly affects it to a significant extent, ;
The right to apply to the judiciary or the National Supervisory Authority for the Processing of Personal Data = the right of the data subject to complain to the National Supervisory Authority for the Processing of Personal Data, respectively to apply to the judiciary for the defence of any rights guaranteed by the applicable legislation in the field of the protection of personal data, which have been violated.
You can exercise any of your rights mentioned above in connection with the processing of personal data and learn more about it by sending a message to the email address: office (at) hercules-braila.ro.
We are always committed to dealing with your requests with the utmost attention and to answer the questions you might have as soon as possible, but no later than 30 days from the date of receiving of valid requests. This period may be extended by two months when necessary, taking into account the complexity and number of applications.
We also remind you that you have the right to file complaints about the protection of your data with the National Supervisory Authority for the Protection of Personal Data, whose webpage is: http://dataprotection.ro