PERSONAL DATA PROCESSING POLICY
Rev.1/march 2019
For ALKA GROUP, the confidentiality of personal data and the correct and complete information of the users of the website www.alkagroup.ro and of the websites of our brands are important. Therefore, we comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and process your data safely and only for the specified purposes.
WHO WE ARE
ALKACO SRL, a Romanian company headquartered in Sos. Straulesti no. 76-86, sector 1, Bucharest, registered with the Trade Register under number J40/29134/29.12.1994, unique fiscal registration code 16811931, Share Capital: 7,955,500 lei
PERSONAL DATA
All information provided by you through our web pages, which allows a link to be created between them and your identity (for example, your name and your e-mail address), will be considered as personal data. We process this data in accordance with the legal provisions regarding the purposes defined below.
ALKA GROUP may process the following categories of data:
- Information that you send us by filling out the form on our website http://www.alkagroup.ro. This includes the information sent when registering to contact the company.
- We may request information from you when you participate in a campaign or promotion sponsored by ALKA, in accordance with the provisions of the Campaign Regulations that are published on the website http://www.alkagroup.ro in compliance with the legal obligations in this regard;
- If you contact us, we may keep data about the correspondence;
- We may also ask you to participate in opinion polls that we use for research, although you are not obliged to respond to them;
- Details about your access to the sites, including but not limited to traffic data, location data, web logs and other communication data, as well as the resources you access. In all cases, we assure you that we do not disclose the data we have collected in these circumstances to third parties. In addition, we use your data to optimize our site and to make your visit to our site even more convenient, personalized and secure.
CAMPAIGNS AND PROMOTIONS
Participants in the campaigns and promotions carried out by ALKA are presented with the conditions under which their personal data is processed by the regulations published in accordance with the legal provisions on the website http://www.alkagroup.ro as well as on the websites of our brands. As a result of winning the promotions carried out, as a rule, the winner will be asked for a copy of their identity card in order to collect the data contained in the identity document, and the purpose of collecting this data is to transmit the prize, as well as to fulfill the tax obligation regarding the transfer of the tax related to the prize won. Also, for efficiency, the winners may also be contacted on social networks, if they have given their consent to the use of their social network IDs, and the data provided through these channels could also be stored by the operators of the social network used. The storage period of this data will be 10 years, according to tax regulations regarding the retention of accounting documents, and data processing in a manner incompatible with the declared purpose is not permitted.
LOG FILES
For the purely informative use of our websites, i.e. if you do not fill out the contact form or do not submit any other information, only the data that your browser automatically transmits to the server on which the content is hosted are stored in so-called logs and are processed as necessary. If you visit our websites, we collect the following data, which are technically necessary for us to display the website to you and to ensure the stability and security of your use:
- access status of the web server (file transferred, file not found, command not executed, etc.)
- browser type and version;
- operating system of the terminal device used;
- volume of data transferred.
The collection of this data takes place only in anonymized form. Therefore, the collected data does not allow a link to be established between them and specific persons. There is no correlation of this data with other data sources that could create a reference to a natural person. At most, the data is evaluated for statistical purposes and is automatically deleted after 30 days.
COOKIE FILES
We use so-called cookies on our websites. A cookie is a small data file that is transferred to your computer when you browse our web pages. A cookie can only contain information that we send to your computer and through which we receive certain information – private data cannot be read in this way. This information is, in particular, your browser type and version, the URL of the clicks (i.e. the web pages you visited and in what order on our website), the date and time of your visit to our website and the number of cookies. If you accept cookies on our website, we do not have access to your personal information, but we can identify your computer using the cookies. Based on the cookies, we cannot make any connection with your identity. Only anonymous information is generated.
We only use so-called “session” cookies: these cookies do not remain on your computer. When you leave our web pages, the temporary cookie is also deleted. With the help of the information collected, we can analyze the usage patterns and structures of our website and optimize the website by improving the content or personalizing and simplifying the use.
We do not set persistent cookies, i.e. cookies that are stored after you leave our website. Our goal is to provide a user-friendly website with relevant information. Therefore, we use technologies to collect and process information about the use of our websites. We collect this information through so-called cookies.
Among other things, this means that our websites remember you when you return to our page, and we can create statistics from which it can be seen how you and other users behave. Most browsers (e.g. Firefox, Chrome, Internet Explorer, Safari, etc.) accept cookies by default.
You can allow or prohibit temporary and saved cookies independently in your browser settings. However, we explicitly point out that certain functions are not available to you on our websites and that some websites may not be displayed correctly if you disable cookies.
STAFF RECRUITMENT
By sending any data or documents (curriculum vitae, letter of intent, letter of recommendation, request for information regarding vacancies or the recruitment process, etc.) to ALKA, at the e-mail address it.center@alkagroup.ro or another e-mail address belonging to Alka Group, as well as through any other means made available to users, you express your unequivocal consent for the collection and processing of your data by Alka Group.
If you do not want Alka to collect and process your personal data, you will not send to our company, in any form, requests, data and/or documents containing personal data. In this situation, our company will not process/enter your personal data into the Human Resources department database, but it is possible that you will not be able to participate in the recruitment process and may not be considered for employment.
Consent to retain the data provided in the recruitment process must be given in writing, unequivocally, by completing the form provided during the interview or by submitting the forms from the section https://www.alkagroup.ro/en/careers/careers-in-alka/, and the storage period of these data is no longer than 6 months from the completion of the recruitment process.
For more details on the method of data processing in case you wish to apply for a position within our company, please consult the information note on recruitment permanently available by accessing the page https://www.alkagroup.ro/en/careers/careers-in-alka/
RIGHTS OF THE DATA SUBJECT
1. The right to be informed about the processing of personal data, the data that are the subject of the processing and the source of these data;
2. The right to access the personal data processed by our company; the right to consult the register of personal data processing and to obtain a copy of all processed data;
3. The right to intervene (rectify, update, delete) on personal data;
4. The right to object to the processing of personal data;
5. The right not to be subject to an individual decision adopted exclusively on the basis of a processing of personal data by automated means;
6. The right to contact the National Supervisory Authority for the Processing of Personal Data, in the event that you are not satisfied with the way in which your data is processed or with the response sent by our company to a request made by you in relation to the processing of data;
7. The right to request the deletion of data or the cessation of data processing, except in the situations provided for by Regulation (EU) 2016/679;
8. The right to request the transfer of personal data to you or to another operator
To exercise any of your rights, please send a request to the e-mail address it.center@alkagroup.ro and indicate whether you want the information to be communicated to you at a specific address, through a correspondence service, or to an electronic mail address. If necessary, before responding to a request, our company may request additional information from the person making such a request in order to confirm his or her identity.
The information/response to the request will be provided to you within 30 days of receiving the request, free of charge. This period may be extended by 60 days if the request is complex. In this case, you will be informed within one month of receiving the request about the necessity and reasons for extending the response deadline.
If you are not satisfied with the response received to your request, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing. The complaint resolution procedure is available to the candidate by accessing the link https://www.dataprotection.ro/?page=procedura_plangerilor
USE OF SOCIAL PLATFORMS
Through our presence on social platforms, the usage data generated there and the plug-ins, we offer you even more interesting information about our products and the possibility of interacting with social networks and other users, allowing us to optimize our platform and make it more interesting for you as a user. The legal basis for the use of usage data generated as a result of our presence on social platforms and for the use of plugins is Article 6 Para. 1 Clause 1 (f) of the GDPR.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in to it or not. If you are logged in to the plug-in provider, your data that has been collected by us is directly associated with your existing account with the plug-in provider. If you click on the activated button and, for example, log in to the page, the plug-in provider also stores this information in your user account and distributes it publicly to your contacts. We recommend that you log out regularly after using a social network, but especially before clicking the button, if you want to avoid the plug-in provider associating it with your profile. Furthermore, we have no influence on the data collected or the data processing operations, nor do we know the full scope of the data collection, the purposes of the processing and the storage periods. We also have no information about the deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you in the form of usage profiles and uses them for advertising purposes, market research and/or design according to the requirements of the website or website. Such an evaluation takes place in particular (for users who are not logged in) for the purpose of displaying advertisements tailored to your needs and to inform social network users about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective plug-in provider.
For more information about the purpose and scope of data collection and processing by the social channels and the plug-in provider, please refer to the privacy policies of these providers. There, you will find further information about your rights and setting options for protecting your privacy.
SECURITY MEASURES
ALKA GROUP undertakes to take all necessary technical and organizational measures to ensure an adequate level of protection and security in the operations carried out on personal data. For this purpose, the databases will be accessible only to authorized persons, and data processing will only be possible at the place where they are managed.
ALKA GROUP undertakes to take all necessary measures to keep personal data accurate, complete and up-to-date, in order to fulfill the purposes for which they were collected, while respecting the right of access, intervention and opposition. Inaccurate or incomplete data will be rectified or removed from the current records.
We will also carry out periodic checks of the personal data held by our company, which no longer serve the purposes or fulfill legal obligations, will be destroyed or transformed into anonymous data within a reasonable time, according to the procedures established by law.
MODIFICATION OF THE DATA PROCESSING POLICY
This policy may be subject to change at any time by our company. The data processing method will be that provided by the latest version of this policy, permanently available at https://www.alkagroup.ro/privacypolicy
To exercise your rights, as well as for additional questions regarding this policy or in connection with the use of personal data by ALKAa, please contact us by choosing any of the communication methods described below, specifying your name, postal or e-mail address (depending on the method by which you wish us to communicate), telephone number and the purpose of the request.
You can contact us:
by e-mail – at the address: dpo@alkagroup.ro
by a request sent by post to our headquarters: Sos. Straulesti no.76-86, sector 1, Bucharest
by phone at the number: +4021 668 4949, 668 7737
or by filling out the form on the page https://www.alkagroup.ro/en/contact-us/