GDPR

Privacy Notice

  1. Introduction

This Privacy Notice is made pursuant to and with the view of implementing the provisions of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the ‘General Data Protection Regulation’ or ‘GDPR’);

We have compiled this document with the purpose of duly informing you, in compliance with the GDPR requirements, about the processing of your personal data by us, DRY ICE SRL, a legal entity organised and functioning under Romanian law, with our registered office located in Cluj-Napoca, at 34, Aurel Vlaicu Street, flat 14, Cluj County, Romania, formed with the Trade Register in Cluj under no. J12/1682/2011 and with tax registration no. (CUI) RO 28700683 (the Company, We, Us).

In compliance with the provisions laid down in Article 13 of GDPR, we hereby inform you of the following:

  1. Data Controller

Your personal data will be processed by: DRY ICE SRL, DRY ICE SRL, a legal entity organised and functioning under Romanian law, with our registered office located in Cluj-Napoca, at 34, Aurel Vlaicu Street, flat 14, Cluj County, Romania, formed with the Trade Register in Cluj under no. J12/1682/2011 and with tax registration no. (CUI) RO 28700683. According to GDRP, the Company is the data Controller, meaning the legal person that determines the purposes and means of the processing of your personal data.

  1. Processing Operation

We may process the following type of personal data: surname, first name, telephone number, IP, bank account, as well as any and all other data which you fill in when placing an order with us.

In order to maintain and protect the vehicle and to prevent and detect criminal actions, we may use electronic devices intended to monitor the status, performance and operation of the vehicle and/or to track its movements. This information may be used both during, as well as after the end of the rental period.

  1. Purpose of the Processing Operation

We will process the personal data referred to under Article 3 above for the following purposes, as applicable: to carry out all the actions required to contract our services and perform the contract.

We do not process your personal data for any other purposes and we undertake to inform you and/or, as applicable, ask for your explicit consent where we intend on processing/will process your data for any other purposes.

  1. Lawfulness of Processing

Depending on the applicable case, we will process your personal data under the provisions set out by Article 6 (1) (b) of GDPR, namely in order to enter into a contract.

  1. Storing Period

We will store your personal data, as applicable: until the full performance of the contract (plus the statutory storing period for accounting records) or, where you no longer wish to conclude the contract, until the time you inform us as such (except for the data collected upon payment).

At the end of the storing period, according to the above, your personal data will be erased.

  1. Data Recipients

We will not disclose your personal data to third parties except where (i) we may be required to do so to the relevant authorities in order to comply with a legal obligation, and (ii) we may send your data to our suppliers and providers for services such as accounting, web hosting, fleet monitoring and payment services.

  1. Storing Location

Your personal data will be stored in the European Union.

  1. Data Protection

We process your personal data in compliance with our internal data protection policy. To this effect, we want to assure you that we implemented all the protection measures required under the applicable law in force to safeguard the privacy of your data.

Where a data breach occurs, which is likely to pose a high risk to your rights and freedoms, we will notify you without undue delay and we will take any and all necessary measures in order to address the breach and/or mitigate its adverse effects.

  1. Automated Decision-Making

We do not use automated decision-making processes, which means you will not be subject to a decision based solely on automated processing, including profiling.

  1. Your Rights

11.a. Right of access.

You have the right to obtain a confirmation that we process your personal data and also access to that data. To the extent you send us a request, we will make available to you a copy of all the personal data we process about you, along with the information we are required to provide in compliance with GDPR.

11.b. Right to rectification and erasure.

You have the right to request the rectification of inaccurate or incomplete data. Furthermore, you have the right to obtain the erasure of your personal data from our records where the personal data are no longer necessary in relation to the purposes for which they were processed or where the personal data have been unlawfully processed.

11.c. Right to restriction of processing

You have the right to obtain the restriction of processing of your personal data where (i) you contest the accuracy of the personal data for a period enabling us to verify their accuracy, (ii) the processing is unlawful and you oppose the erasure of your personal data, and (iii) we no longer need the personal data but you require them for the establishment, exercise or defence of a legal claim.

11.d. Right to object

You have the right to object to the processing of your personal data for marketing purposes or for reasons pertaining to a particular situation. In such case, we will no longer process your data, except where we are allowed to continue doing so under GDPR.

11.a. Right to data portability

You have the right to receive from us the personal data you initially provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit such data to another controller.

  1. Exercising Your Rights.

In order to exercise any of your rights under GDPR, please send us a written request at: GDPR @city-transfer.ro

We will reply to your request without undue delay and in any event within one month of receiving it, except where, taking into account the complexity or number of requests, we must extend this period by two further months maximum, according to GDPR.

At the same time, please be aware that we may ask you for information in order to confirm your identity (e.g. click on a verification link, insert a user name or a password) for the exercise of your rights.

  1. Lodging a Complaint with the Supervisory Authority

Where you consider your rights have been breached, you may lodge a complaint with the relevant supervisory authority, which in this case is The National Supervisory Authority for Personal Data Processing, seated in Bucharest, at 28-30 G-ral. Gheorghe Magheru Blvd, District 1, RO-010336 Bucharest, Romania.

  1. Contact Information

Please send us your requests at: contact @city-transfer.ro

 

All Rights Reserved © 2020 City Transfer