Protecting your personal data is one of the main concerns of Kastamonu Romania S.A.

Therefore we take care of the processing of your personal data in accordance with the principles set out in the applicable data protection legislation in Romania, including (EU) Regulation 2016/679 on the protection of individuals regarding personal data processing and free movement of such data also the repealing of Directive 95/46 / EC ("GDPR").

Personal data means any information about an identified or identifiable individual; an identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, of his physical, physiological, genetic, psychic, economic, cultural or social identity.

This privacy policy concerns the personal data of our existing and potential customers and suppliers, their legal or conventional representatives, other people who contact us or who visit us, employees or potential employees, and applies to the data collected, including through our site, www.kastamonu.ro as well as all other personal data we collect by e-mail or offline.

Privacy Policy describes:

• the purposes for which we collect and use your personal data
• the basis for the processing of personal data for these purposes
• the categories of personal data that we collect from you and process them
• the length of the processing of these data
• your rights as subjects of personal data processing (the person concerned) and how to exercise them
• whom we may disclose your personal data

Purposes and grounds for processing and the categories of personal data processed

In the context of your interaction with Kastamonu Romania SA, you, as an individual, may be subjected to personal data processing activities that we perform.

We use your personal data in the following cases:

1. If you are a customer of Kastamonu Romania SA.

1.1. Communicating with you

We use your contact information to communicate with you regarding your requests and any other relevant issues related to the business relationship. In this case, the basis of the processing is the execution of the contract between us.

1.2. Data processing as a requirement imposed by law

We may process some of your data in the context of providing information to state authorities on the basis of the applicable legal provisions or the fulfillment of obligations imposed by law. In this case, the basis of the processing is the existence of a legal obligation.

1.3. Sending newsletters

We may also use your contact information to provide you electronically our newsletters about our products and services, but only if you have subscribed and therefore have expressly gave your consent to a such processing.

You can withdraw your consent at any time by expressing your option not to receive our newsletter in the future by clicking "unsubscribe" when you receive that email or by sending an email to gdpr@kastamonu.ro. The categories of data processed in the context of our relationship with you are: your name, email, telephone, fax, address, and other personal data that you can provide us directly and which are necessary for the purposes mentioned above.

2. If you are a representative or contact person of a client of Kastamonu Romania SA.

2.1. Communicating with you

We use your contact information to communicate with you as a representative or employee of one of our clients when communication is required to fulfill the obligations assumed in relation to our client. We may also process your personal data for marketing purposes when we want to promote or offer new products or services to our client, whose representative or employee you are, in which case we can send you business communications to your company that you represent .

2.2. Data processing as a requirement imposed by law

We may process some data from your data in the context of providing information to state authorities on the basis of the applicable legal provisions or in order to meet legal obligations. In this case, the basis of the processing is the existence of a legal obligation.

In all cases, data is provided either directly by you or by the customer. The categories of data processed in this context are generally: name, position, e-mail, telephone, fax, address, identification data, and other personal data provided to you by Kastamonu Romania SA, and are necessary for the fulfillment of the aforementioned purposes.

3. If you are a supplier of Kastamonu Romania SA

3.1. Communicating with you

We use your contact information to communicate with you, as a supplier of Kastamonu Romania SA, when communication is required to meet the obligations assumed under our contract. In this case, the basis of the processing is the execution of the contract.

3.2. Data processing as a requirement imposed by law

We may process some of your data in the context of providing information to state authorities on the basis of the applicable legal provisions or the fulfillment of obligations imposed by law. In this case, the basis of the processing is the existence of a legal obligation.

The categories of data processed in the context of our relationship with you are: your name, email, telephone, fax, address, and other personal data that you can provide us directly and which are necessary for the abovementioned purposes.

4. If you are a representative or contact person of a supplier of Kastamonu Romania SA

4.1. Communicating with you

We use your contact information to communicate with you as a representative or employee of one of our suppliers when communication is required to meet the obligations assumed under our contract with our supplier. In this case, we rely on the legitimate interest in ensuring that the relationship with the provider you represent is adequately achieved.

4.2. Data processing as a requirement imposed by law

We may process some of your data in the context of providing information to state authorities on the basis of the applicable legal provisions or the fulfillment of obligations imposed by law. In this case, the basis of the processing is the existence of a legal obligation.

In all cases, data is provided either directly by you or by the vendor. The categories of data processed in this context are generally: name, position, e-mail, telephone, fax, address, identification data, and other personal data provided to you by Kastamonu Romania SA, and which are necessary for the fulfillment of the aforementioned purposes.

5. If you are a potential business partner or contact person or a representative of a potential customer or supplier of Kastamonu Romania SA

5.1. Communicating with you

We process your personal data when we want to promote or offer products or services to the company whose representative or employee you are, in which case we can send you business communications to the company you represent. We will also be able to process your personal data in order to communicate with you in the process of concluding a contract with the company whose representative or employee you are (if you have attributions to do so) when it wants to purchase the products or our services or we want to purchase the products or services offered by it.

In this case, we rely on our legitimate interest in promoting or offering products and services to or requesting products and services from the company whose representative or employee you are, in which case in our commercial communication with this company we address you as representative, employee, employee, or our legitimate interest in communicating with you as a representative or employee of the company in the process of concluding a contract with it.

The categories of data processed in this context are generally: name, position, e-mail, telephone, fax, address, identification data, and other personal data provided to you by Kastamonu Romania SA, and which are necessary for the fulfillment of the aforementioned purposes

6. If you are an employee of Kastamonu Romania SA or a person in practice / training at Kastamonu Romania SA

6.1. Running the work relationship

We use personal data to perform the individual or collective work contract applicable in our relationship, respectively the practice / probation agreement. In this case, the basis of the processing is the execution of a contract.

6.2. Data processing as a requirement imposed by law

We may process some of your data in the context of providing information to state authorities on the basis of the applicable legal provisions or the fulfillment of obligations imposed by law. In this case, the basis of the processing is the existence of a legal obligation.

6.3. Communicate with you

We use your contact information to communicate with you about the company's business and any other business-related issues. We rely, in this case, on the legitimate interest of the company in ensuring that the employees are properly and fully informed and that their activity is properly conducted. The categories of data processed in the context of our relationship with you are: name, e-mail, telephone, address, personal details included in the education and training details, professional qualifications, health status, signature, brand number and other data staff that you can supply directly to us and which are necessary for the above mentioned purposes.

7. If you are a job seeker / trainee:

We use the personal data contained in the CVs we receive to evaluate applicants' qualifications for a position within the company, including our internship or internship program. In this case, the basis of processing is our legitimate interest. The categories of data processed in the context of our relationship with you are: name, e-mail, telephone, fax, address, personal data included in CVs, education and training details, professional qualifications, and other personal data you can provide them to us and which are necessary for the above mentioned purposes.

8. If you are a visitor to our headquarters:

We use your personal data to ensure the security of our premises, property and staff. In this case, we base our processing of personal data on the legitimate interest of Kastamonu Romania SA, namely the protection of premises, assets and personnel. The categories of data processed in this context are: your name, serial number and ID number, image, voice, signature, and other personal data that you can provide to us and which are necessary for the abovementioned purposes.

9. If you are a user of our Internet site

We use the personal data we collect from you when you visit our website, www.kastamonu.ro, to monitor traffic and improve the content of the site. We rely on this data processing activity on our legitimate interest to ensure the proper functioning of our website and its improvement.

The categories of data processed in this context are: the time and date of access to the Internet site and the IP address from which our website was accessed.

Provision of personal data

If some of your personal data are requested directly for the purposes mentioned above, please provide them correctly and completely, otherwise there may be an inappropriate relationship between us.

If you provide Kastamonu Romania SA with the personal data of other individuals, please ensure in advance that such disclosure is lawful and communicate to them how Kastamonu Romania SA intends to process their personal data as described in this privacy policy.

Disclosure of your personal data

As a general rule, we will not disclose your personal data to third parties.

However, it may be necessary to transfer your personal data to other companies in the Kastamonu Group within the European Economic Area (EEA).

Also, if we have a contract with a service provider or contractor to provide us services or provide a service on our behalf, they may have access to your personal data. Kastamonu Romania S.A does not authorize these service providers / contractors to use or disclose your personal data, such as in connection with the provision of their services.

Processing time

We intend to retain your personal data for the duration of the agreement / agreement between us as well as subsequently, according to our internal policies and our legal obligations.

If the data are not collected under a contract / agreement. these data will be retained for as long as is necessary to achieve the intended purpose of collecting data.

Your rights

As a target person, "GDPR" gives you a series of rights, including:

• the right of access - allowing you to obtain confirmation that your personal data is being processed by us and, if so, the relevant details of these processing activities;

• the right to rectification - by allowing you to rectify your personal data if it is inaccurate;

• the right to delete - allowing you to obtain the deletion of your personal data in certain cases (for example, if data is no longer required for the purposes for which it was collected);

• the right to restrict processing - allowing you to obtain restriction of processing of your personal data in some cases (for example, when you contest the accuracy of your personal data for a period that allows us to verify this accuracy);

• the right to opposition - allowing you to oppose further processing of your personal data under the conditions and limits set by law;

• the right to data portability - by allowing you to receive the personal data that you provide to us in a structured, commonly used and automatically readable format, or to send this data to another operator data.

We are glad to assure you of the exercise of these rights.

You may exercise your rights above and learn more about these rights by submitting a written request to us at Reghin Ierbus Street no. 37, by e-mail at gdpr@kastamonu.ro or by telephone at 0372 593720 - 3732 interior.

You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing.

We are committed to always treat your requests with the utmost care in the shortest possible time and to ask any questions you may have.

Versions to this Privacy Policy

This Privacy Policy is in effect from May 25, 2018.

Privacy policy can be updated whenever necessary. Any updates will become applicable within 15 days of the publication of the new version on www.kastamonu.ro.