Our company attaches particular importance to the protection of personal data in the spirit of respect for the fundamental rights of individuals, consciously and responsibly assuming the application of the principles and rules on the protection of individuals with regard to the processing of personal data.

• General information

WALDEVAR ENERGY S.R.L., with registered office in Tulcea, str.14 Noiembrie nr. 5, Cam. 3, bl. ARENA, sc. A, et.1, ap. 8, Tulcea county and correspondence address at the working point in Voluntari city, str. Emil Gârleanu nr.11, bl. C, Parter, Ilfov county, registered with the R.C. under no. J36/243/2011, with CUI RO 28513111, hereinafter referred to as the "Company", we represent the controller in accordance with the General Data Protection Regulation. 

The contact details of the Data Protection Officer are e-mail: gdpr@waldevar.com.

• The purpose of processing personal data

The company processes your personal data for the following purposes:

• for the design, construction and maintenance of large-scale photovoltaic parks;
• in order to fulfil the Company's legal obligations; 
• for the purpose of pursuing the legitimate interests of the Company;

WALDEVAR ENERGY SRL's mission is to carry out activities in the field of energy and we aim to solve problems in a legal, transparent, fair, competent and efficient manner, thus providing services at a high quality standard.

Our mission is to focus on meeting our customers' needs by providing the highest quality products/services, while ensuring a high level of protection of personal data processed.

1.Legal basis for processing personal data

WALDEVAR ENERGY SRL, as personal data controller, carries out processing activities, based on the specific duties assigned to it by the regulations in force, in accordance with the provisions of Regulation (EU) No 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and Law 190 of 18 July on measures implementing Regulation (EU) 2016/679.

The legal basis underlying the specific personal data processing activities is regulated by the following normative acts:

• Law No 31 of 16 November 1990 on companies, republished with subsequent amendments and additions;
• Law 53 of 24 January 2003 - Labour Code, republished with subsequent amendments and additions;
• Law 506 of 17 November 2004 on the processing of personal data and protection of privacy in the electronic communications sector;
• All other applicable regulations.

For the purposes mentioned above, the Company processes your data on the following legal grounds under data protection legislation:

• When you want to apply for a job available in our company, mentioned in the "CAREERS" section, data processing is carried out on the basis of the Consent given after studying the document "INFORMATION ON RECRUITMENT" in the "PROCESSING OF PERSONAL DATA" section.
• When you request support through the Form in the "CONTACT" section, data processing is carried out on the basis of the Consent granted after studying the document "PRIVACY POLICY" in the "PROCESSING OF PERSONAL DATA" section.
• When you want to apply for one of the services offered by our Company, mentioned in the "SERVICES" section, the data processing is carried out on the basis of the Consent granted after studying the "PRIVACY POLICY" in the "PROCESSING OF PERSONAL DATA" section.
• If you visit our website, your data is processed in accordance with the document "COOKIE POLICY" in the section "PROCESSING OF PERSONAL DATA".

2.Categories of personal data

For the purpose of fulfilling the duties and obligations set out in the aforementioned regulations, our company processes the following data and categories of data by automated and manual means:

• For employees

Name and surname/family members' names and surnames, home/residence address, gender, date and place of birth, National Identity Card (CNP), ID card number and number/data from civil status certificates, telephone number, email address, occupation, education, health data, racial or ethnic origin, religious denomination, criminal record data, signature.

• For Customers/Partners

Full name, position, email address, phone number, signature.

Data about you is collected at the time of employment with our company or through requests/applications you make on the website and which we are required to respond to only for the purpose you specify.

The categories of data subjects whose data are processed by our company for the performance of its lawful tasks are predominantly employees, customers or business partners.

WALDEVAR ENERGY SRL manages the data of its employees, customers and contract partners and ensures that each operation or set of operations performed on personal data, by automatic or non-automatic means, is in full compliance with the applicable legal rules. The personal data processed are provided by the data subject in connection with employment, contact for the provision of requested information, the provision of a service or the conclusion of a contract. In view of the provisions of the regulations governing employment and commercial activities, data subjects are obliged to provide the requested identification data, which are necessary for our company to fulfil certain legal obligations. Refusal to provide data will make it impossible to provide services to data subjects.

The recorded information is intended to be used by the operator in accordance with the legal provisions and, in certain cases, to achieve a legitimate interest of the company. In these cases, the company will make a careful analysis of its legitimate interest to verify whether it outweighs the fundamental rights and freedoms of the data subject to be able to use such a legal basis.

3.Recipients or categories of recipients of personal data

Your data may be communicated to the following recipients or categories of recipients: 

• suppliers directly/indirectly involved in the supply of energy products and services; 
• State authorities (including tax authorities); 
• accountants, auditors, forensic experts, lawyers or other such external advisors to the Company or to third parties providing products and services to the Company (security service providers, IT systems, SSM/PSI);
• Company suppliers directly/indirectly involved in the marketing and promotion process.

Personal data provided will be transferred to cross-border operators or organisations

At this time we do not transfer and do not intend to transfer your personal data to third country entities or international organisations. Should such a transfer occur, we will inform you in advance and, if necessary, ask for your consent.

4.Data retention period

We will retain your information, which may include personal data for as long as necessary to provide services to you, to comply with applicable laws, to resolve disputes with any party, and otherwise as necessary to enable us to conduct our business, including to detect and prevent fraud or other illegal activity.

For example, we are obliged to keep records of financial transactions for 10 years after the end of the financial year in which they were processed.

All personal data that we retain will be subject to this Privacy Policy. If you have a question about a specific retention period for certain types of personal data we process about you, please contact us via the contact details included below.

5.Your rights

The Regulation confers a number of rights on data subjects. In short, the rights you have: 

The right to withdraw at any time a consent given, in order to stop a data processing based on your consent. Withdrawal will not affect the lawfulness of the processing based on the consent given prior to withdrawal, for the performance of a contract, for the fulfilment of a legal obligation or for the purpose of pursuing our legitimate interests.

Right of access - means that you have the right to obtain confirmation from us whether or not we are processing personal data about you and, if so, you have access to that data and information on how that data is processed.

Right to data portability - refers to the right to receive personal data in a structured, commonly used and machine-readable format by us, but also to the right to have this data transmitted directly to another controller if this is technically feasible.

The right to oppose - concerns your right to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or when it is in the legitimate interest of the controller. Where the processing of personal data is for the purpose of direct marketing or processing carried out on the basis of express consent, you have the right to object to the processing at any time.

Right to rectification - concerns the correction, without undue delay, of inaccurate personal data. The rectification will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate efforts.

Right to erasure of data ("right to be forgotten") - means that you have the right to request the erasure of personal data without undue delay if one of the following grounds applies: they are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for the processing; you object to the processing and there are no other compelling legitimate grounds; personal data have been unlawfully processed; personal data must be erased to comply with a legal obligation; personal data have been collected in connection with the provision of information society services.

Right to restrict processing - may be exercised if the data subject disputes the accuracy of the data for a period necessary to verify the accuracy of the data; the processing is unlawful and you object to the erasure of the personal data and request restriction instead; if WALDEVAR ENERGY SRL no longer needs the personal data for the purpose of the processing but the data subject requests it for the establishment, exercise or defence of legal claims; if the data subject has objected to the processing for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.

The right to lodge a complaint - complaints about the processing of personal data can be addressed to the National Supervisory Authority for Personal Data Processing. 

ANSPDCP address: Bucharest, B-dul G-ral Gheorghe Magheru 28-30, sector 1, postal code 010336

E-mail address: anspdcp@dataprotection.ro  

Phone +40 318 059 211 / +40 318 059 212

Fax:   +40 318 059 602 

To exercise these rights, as well as for any further questions regarding this information or in relation to the Company's use of personal data, please contact our Data Protection Officer by choosing any of the communication methods described below. 

You can contact us: 

• By email - to the address: gdpr@waldevar.com   or 
• In person or by a request sent by post - to the Company's Head Office (at the address mentioned in point 1); 

If you wish to exercise any of the above rights, please use form F-009 Request Form Visited Person, which can be downloaded from the website in the section "PROCESSING PERSONAL DATA".

WALDEVAR ENERGY SRL guarantees that it has implemented appropriate technical and organisational measures which it is constantly improving in order to ensure data integrity and confidentiality in accordance with Articles 25 and 32 of the EU General Regulation. One of the main objectives in this respect is the permanent training of all staff involved and the development of a policy of awareness of the major issues involved in taking responsibility in this area. 

If we decide to change our data protection policy to better protect your rights and personal data, we will publish a new version here, which will replace this one.