GDPR Policy

, Romanian legal entithy, identification number , UIN , applies the following GDPR policy:

INTRODUCTION

The privacy policy applies to all personal data we process.The confidentiality of your personal data is one of the main concerns of Accellions SRL, CUI 46150650 as a data controller.This document is intended to inform you about the processing of your personal data in the context of using the website www.accellions.comThis Policy has been developed in accordance with the legislation of Romania and the European Union, in particular with the following documents:• The General Data Protection Regulation (RDPR), adopted by the European Parliament and the European Council on 27 April 2016;• Any other local law regarding the protection of personal data that applies in Romania.

For the purposes of this Policy, the following definitions are used:

• “Data Protection Officer (DPO)” means a person who is responsible for monitoring the application of the GDPR and other applicable laws on the protection of data subjects for the processing of personal data and who performs the functions assigned to him by this Policy and other applicable legislation.

• “Personal data” means any information concerning an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, proper to his physical, physiological, genetic, mental, economic, cultural or social identity of that person.

• “Processing” means any operation or set of operations performed on personal data or personal data sets, with or without the use of automated means, such as collecting, recording, organizing, structuring, storing, adapting or modifying, extraction, consultation, use, disclosure by transmission, dissemination or making available in any other way, alignment or combination, restriction, deletion or destruction.

• “Restriction of processing” means the marking of stored personal data in order to limit their future processing.

• “Profiling” means any form of automatic processing of personal data which consists in the use of personal data to assess certain personal aspects relating to an individual, in particular to analyze or anticipate performance issues in the field of personal data: work, economic situation, health, personal preferences, interests, reliability, behavior, location of the individual or his/her travels.

• “Operator” means the natural or legal person, public authority, agency, or other body which, alone or together with others, establishes the purposes and means of the processing of personal data. For the purposes of this Policy, by operator means Accellions SRL.

• “Third-party” means a natural or legal person, public authority, agency or body other than the data subject, the controller and persons who, under the direct authority of the controller, are authorized to process data personal

.• “Consent” of the data subject means any manifestation of free, specific, informed and unambiguous will of the data subject by which he / she accepts, by an unequivocal statement or action, that the personal data concerning him / her be processed.

• “Violation of the security of personal data” means a breach of security that leads, accidentally or illegally, to the destruction, loss, alteration, or unauthorized disclosure of personal data transmitted, stored, or otherwise processed, or to unauthorized access to them.

2. PURPOSE OF THE DATA PROTECTION POLICY

The main purpose of the Policy is to explain what personal data we process, why we process it, and what we do with it. Given that personal information belongs to each user, we do our best to store it securely and process it carefully. We do not provide information to third parties without fulfilling our prior obligation to inform.

3. PRINCIPLES OF PERSONAL DATA PROCESSING

Accellions SRL protects the individual rights of each person ("data subject") during the processing of personal data, personal data being collected and processed in accordance with the following principles:a) We process personal data legally, fairly and transparently in relation to the data subject.b) Personal data are processed only for the purpose defined before the start of data collection. Subsequent changes to the purpose are only possible on an exceptional basis, to a limited extent and require substantiation.c) We strictly request only the data we need in accordance with the purposes for which we process them.d) We ensure transparency regarding the way in which data are processed to the data subjects.e) Personal data are collected directly from the data subject.f) We ensure that the data subject is aware or informed about the identity of the data controller, the purpose of the processing, third parties or categories of third parties to whom the data may be transmitted.g) We take all technical and organizational measures so that the data are kept in a form that allows the identification of data subjects for a period not exceeding the period necessary to fulfill the purposes for which these data are processed.h) We have the legal obligation to keep the data secret.i) We take all technical and organizational measures to ensure the security of personal data, including protection against unauthorized or illegal processing and against their accidental loss, destruction, or damage.

4. THE PERSONAL DATA WE COLLECT

We collect personal data from you in the following ways:

• By accessing and visiting our website, as well as through various media channels, telephone, events, or applications for various jobs, in connection with different types of recruitment processes; or by applying directly to a job on the site.

• Directly from you (target person)

.• From another operator, in order to fulfill contractual obligations.

The personal data we collect depending on the nature of the relationship, including but not limited to (according to applicable law):

• identification or contact details (such as name, surname, home address, business address, e-mail address, telephone number, job title);

• the information you provide about other people you want to contact;

• other information that you can provide through our website through the "Contact" function.

If you are a candidate and submit your CV for a job through our website, we may collect the following types of personal data (according to local law):

• data on education and professional experience;

• telephone number, city;

• known foreign languages and other professional skills;

• personal numerical code or other personal data having an identification function;

• date of birth;

• sex;

• information about the bank account;

• citizenship and work permits;

• benefit information;

• information on fees and taxes;

• references about you;

• any other data contained in your CV that you provide regarding the areas of interest regarding your career and other data about your qualifications for employment.

Where required by law, with the express consent of you:

• information about your disabilities and health;

• medical history, data on criminal convictions and other checks on your person.In addition, we may collect information that you provide to us about other people, such as information about people that we may contact in an emergency.

5. BASIS OF DATA PROCESSING

The collection and use of data by the operator will be done for the following purposes:

• creating and managing online accounts;

• placing the labor force on the market;

• providing solutions for the labor market;

• execution of a contract;

• fulfillment of a legal obligation;

• in compliance with the Cookies Policy and applicable legislation, alerts on open positions, communications and promotional materials;

• organizing, communicating and managing special events, surveys, promotions, market research, offers;

• in accordance with a legitimate interest;

• for employment relations (Data of the employee / future employees);

• the execution of a contract to which the data subject is involved or to take necessary steps at the request of the data subject before concluding a contract. Data processing is performed According to the General Regulation on Data Protection, art.6 - Legality of processing.

If the data subject applies for a position through the website www.accellions.com, in accordance with applicable law, personal data will be used for the following purposes:

• Sending job opportunities;

• Providing services in the field of human resources and / or additional services (training, counseling, outplacement);

• Assessing the applicant's competencies and performing data analysis in order to assess competencies.

6. PROTECTION OF COLLECTED INFORMATION

In order to protect personal data, the necessary technical and organizational security measures are implemented (licensed operating systems, antivirus programs, IT services that comply with the provisions of GDPR, internal procedures).The personal data we process are subject to strict internal procedures, so as to ensure that they are protected against any security breaches.We are constantly reviewing and improving the measures we have taken to protect your personal data against unauthorized access, accidental loss, disclosure, or destruction.We ensure that all partners to whom we provide, in certain circumstances, personal data in order to fulfill our contractual obligations, comply with the provisions of the General Regulation on Data Protection.

7. DURATION OF THE PROCESSING OF PERSONAL DATA COLLECTED BY THE OPERATOR

The personal data received from you will be stored as long as required by law, and if there is no legal requirement, we will keep them for as long as necessary to fulfill the purpose for which they were collected.Unless otherwise provided by law, we will usually retain your data for the duration of a contract under which we process such data, plus a period of five years from the termination of the data.After processing personal data, those that we no longer need are immediately deleted from all our records, according to internal procedures.We do not process or transmit this data to any other entity, without the consent of the Data Subject / Operator, and without a legitimate reason provided by law, the General Data Protection Regulation or European Union law.

8. TRANSMISSION OF PERSONAL DATA

The situations in which we share the personal data we collect about you and are situations in accordance with the Privacy Policy:

• if you are applying for a job, clients who may have employment or interest opportunities to place candidates and other people we work with, such as employment consultants and subcontractors to find you a job for work;• if we are required by law;

• in order to prevent physical injury or financial loss;

• in connection with investigations of fraudulent or illegal, suspected or actual activities;

• in case of reorganization, dissolution, and liquidation of the company.For Accellions SRL employees, personal data will be transferred to service providers (occupational medicine service provider, banks in order to pay the salary by bank transfer, training service providers and other similar services, external consultants, national authorities).

9. TRANSFER OF DATA OUTSIDE THE COUNTRY

- Within the European Union- Outside the European UnionGiven that the law on the protection of personal data may differ from country to country, we ensure that your data is protected in accordance with applicable law.For the transfer of personal data within the EU to countries or international organizations outside the European Union, the transfer takes place based on:The decision of the European Commission on the adequacy and, in the absence of a decision on the adequacy, on the basis of other permitted legal grounds:- a legally binding and enforceable instrument between public authorities or entities;- mandatory corporate rules;- the standard data protection clauses (formerly called standard clauses) adopted by the Commission, etc.

10. THE RIGHTS OF THE DATA SUBJECT

The data subject whose personal data are processed by Accellions SRL have the following rights:

a) The right to be informed. The right of the data subject to receive information on the processing of Personal Data.

b) The right of access, to request a copy of the personal data we hold about you. To make this request as an individual or authorized third party, please use our contact details.

c) The right to rectification. To obtain from Accellions SRL without undue delay the rectification of inaccurate or incomplete personal data concerning it, to ensure the adequate processing and accuracy of personal data.

d) The right to deletion. To obtain from Accellions SRL the deletion of personal data without undue delay (if personal data are no longer necessary for the purposes for which they were collected; the data subject withdraws his consent; personal data have been illegally processed, etc.).

e) The right to restrict processing.

f) The right of the data subject to request the operator to limit the processing of his data.

g) The right to data portability. The data subject has the right to receive personal data in a commonly used structured format that can be read automatically and has the right to transmit this data to another controller, without hindrance from the controller to whom the data was provided. personal character.

h) The right to opposition. The data subject who provides personal data to an Operator has the right to object at any time to the processing of data for several reasons provided in the GDPR, without having to justify his decision.

i) The right to withdraw the consent at any time, without affecting the legality of the processing based on the consent before its withdrawal. Thus, the data subject understands and agrees that, in case of withdrawal, it is not possible to reach the purpose of processing personal data.

j) The right to lodge a complaint with a supervisory authority, Office of the Commissioner for the Protection of Personal Data, if the data subject decides that his or her rights have been violated.

k) The right not to be subject to an automated individual decision. The data subject has the right not to be subject to a decision based exclusively on automatic processing, including the creation of profiles, if this creation produces a legal effect on the data subject or significantly affects him in a similar way.

11. PRIVACY POLICY UPDATES

The privacy policy may be periodically updated to reflect changes in our privacy practices and legal updates. For significant changes, we will notify you by posting a visible notice on our sites, indicating at the top of each notification when the last update was made.

12. HOW YOU CAN CONTACT US

If you have any questions or suggestions regarding the Privacy Policy, or if you wish to exercise your rights, please write to us at dataprotection@accellions.com

Last update: 24 August 2022

Home