PRIVACY POLICY
This document informs the concerned parties about how WALDEVAR Energy S.R.L. collects and processes personal data.
GENERAL INFORMATION
WALDEVAR Energy S.R.L., with its headquarters in Tulcea, str. 14 Noiembrie nr. 5, Cam. 3, bl. ARENA, sc. A, et. 1, ap. 8, Tulcea county, and correspondence address at the operational office in Voluntari, str. Emil Gârleanu nr. 11, bl. C, Ground floor, Ilfov county, registered at C.R.C. under no. J36/243/2011, with VAT code RO 28513111, hereinafter referred to as “The Operator” or “The Company”, collects personal data in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and Council dated April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR” or “The Regulation”).
These processing activities will be conducted responsibly, in compliance with European and national data protection laws, for the purposes declared in this Policy.
This Policy addresses:
- Potential individual clients.
- Representatives of potential clients/legal entities.
- Visitors of our website and our social media pages.
For any inquiries or requests regarding the processing of personal data under this Policy or to exercise your rights as a Data Subject in relation to the processing of personal data, as detailed below, you can contact our Data Protection Officer via email at: gdpr@waldevar.com.
- PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process your data for the following purposes:
- To send commercial communications related to WALDEVAR Energy’s products and services. The legal basis is Article 6(1)(f) – the legitimate interest of the Company to promote its products and services.
- For recruitment purposes by applying on the Careers page of the website www.waldevar.com. The legal basis is Article 6(1)(b) – steps taken at the request of the data subject before entering a contract, combined with the legitimate interest under Article 6(1)(f) to fill a vacancy.
- To request information of any nature or to receive commercial communications such as offers, event invitations, or service updates via newsletter, phone calls, or SMS. The legal basis is Article 6(1)(a) – your consent.
- To ensure website security and prevent fraudulent activities. We may collect data regarding your online activity, including online identifier or device ID, visited pages, and sections of interest. The legal basis is our legitimate interest in preventing inappropriate content on the platform.
If we intend to process personal data for purposes other than those for which they were initially collected, we will inform you in advance and provide all relevant information.
- CATEGORIES OF PERSONAL DATA
- For commercial communications: Name, email address, phone number.
- For recruitment: Identification data (name, birth date, place of birth, CNP), contact details (email address, home address, phone number), and other personal information (CV data regarding professional development, experience, language skills, etc.).
- For communications at your request: Name, email address, phone number.
- Website visitors: IP, cookies, age group, interests, geolocation.
III. RECIPIENTS OR CATEGORIES OF PERSONAL DATA RECIPIENTS
Personal data may be disclosed to the following recipients, strictly as necessary:
- Our service providers, including:
- Business administration and consultancy services;
- Data protection services;
- IT and website maintenance services;
- Website hosting;
- Security and surveillance system maintenance services;
- Marketing services.
- External consultants, such as lawyers, tax consultants, experts.
- Public authorities and bodies as required by law.
- Persons expressly indicated by you.
- Third-party purchasers in the event of a business transfer.
- TRANSFER TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
As a rule, we will not transfer your personal data outside the European Economic Area. Exceptions may occur if necessary, and in such cases, we will apply appropriate safeguards according to data protection laws.
- DATA RETENTION PERIOD
Personal data will be processed only for the period necessary to fulfill the purposes mentioned in this Policy. After this period, we will delete or anonymize your data.
- YOUR RIGHTS
As a Data Subject, you have the following rights:
- Right to be informed (Articles 13 and 14 of the Regulation).
- Right of access – the right to obtain confirmation whether your personal data is being processed.
- Right to rectification – the right to request the correction or completion of inaccurate or incomplete personal data.
- Right to erasure (“right to be forgotten”) – you can request the deletion of your personal data under certain circumstances.
- Right to restrict processing – you can request the restriction of data processing under certain conditions.
- Right to data portability – the right to receive your data in a structured, commonly used, and machine-readable format.
- Right to object to processing – the right to object to data processing in certain situations, including for direct marketing purposes.
- Right not to be subject to automated decision-making, including profiling.
- Right to withdraw consent – you can withdraw your consent at any time, which will affect future processing.
- Right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
For any queries or to exercise your rights, you can contact our Data Protection Officer at gdpr@waldevar.com.
VII. MANDATORY PROVISION OF PERSONAL DATA
Providing personal data is necessary for communication purposes. Refusal to provide this data may prevent communication with you.
VIII. SOURCE OF PERSONAL DATA
Personal data is obtained directly from you, when visiting or filling out forms on our website or social media pages, or indirectly from your representative.
- AUTOMATED DECISION-MAKING AND PROFILING
Personal data referenced in this Policy is not subject to automated decision-making processes.
- DATA SECURITY
WALDEVAR Energy undertakes reasonable efforts to protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, or deletion.
- USE OF PLUG-IN TECHNOLOGIES
When interacting with our social media pages (Facebook, Instagram, LinkedIn, YouTube), these platforms may process certain personal data. These networks act as data controllers, and you should refer to their respective privacy policies.
XII. PROCESSING PERSONAL DATA THROUGH SOCIAL NETWORKS OR OTHER WEBSITES
When interacting with our website via social networks, these platforms notify us that you have visited. We process personal data that you have publicly shared on those networks.
This Policy is effective from October 1, 2024, and may be periodically updated.