Data processing
Information on the processing of personal data
Aberdeen Angus Romania Association, with registered office in Sibiu, str. Octavian Goga, nr.1, et. 1, jud. Sibiu, Romania, CUI: RO 31168722, established by Civil Decision no. 201/2012, hereinafter referred to as Aberdeen Angus Romania Association, hereby informs you of the following:
We are a controller under the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on data protection. In this regard, we collect and process personal data, and through this information we explain how your personal data is used and the purpose for which it is used.
We comply with the legal provisions on the protection of personal data and implement technical and organizational measures to protect all operations directly or indirectly relating to personal data, which prevent unauthorized or unlawful processing and accidental or unlawful loss or destruction.
Purpose and legal basis of data processing
The personal data processed are: name/name; personal numerical code; e-mail address; telephone number, position and company where you work, etc.
These data are processed for the purposes of the company’s activity of breeding animals, marketing them, producing and marketing meat, and any other activity for which our company is authorized by law.
The data are necessary for the purpose:
- contractual (for the conclusion and execution of activity-specific contracts by our company); including, the execution of the contract concluded with you, including the performance of activities carried out by us on your behalf by virtue of the contract between us;
- legal (in order to fulfill a legal obligation of the undersigned);
- marketing (information about new products/services; invitations to events; interviews/articles; granting of loyalty benefits and for continuous improvement of the quality of services and products offered).
Data processing for purposes other than those indicated above will only be done with your consent.
Collection and processing period
The company declares that it will only process data that are necessary to achieve the specific purpose of the processing and are collected and processed only for the duration of the contracts, i. e. until the expiry of all contractual obligations, after which they are archived for the duration of the legal term.
At the time of closing your notice, we may retain certain data to the extent necessary to (i) fulfill our legal obligations, such as for tax, accounting or auditing purposes, or (ii) to resolve a complaint or dispute in court or to comply with a request from an authority (e. g. in connection with law enforcement). We will retain only that data which is relevant for such purposes and we will delete such data upon expiry of the applicable or statutory retention period or upon fulfillment of the lawful purpose.
Data source and processing method
The data is obtained partly directly from you-the contractual partners, partly from public sources.
The data processing is done in compliance with minimum security requirements to prevent unauthorized use or access to such data and we will prevent personal data breaches in accordance with applicable law.
Your data will be subject to an automated decision-making process (including profiling) necessary for the conclusion or execution of the contract(s). In this regard, we have put in place appropriate measures to protect your rights, freedoms and legitimate interests, with the right to obtain human intervention, to express your point of view and to challenge the decision.
Persons working on behalf of the controller shall have confidentiality clauses in their employment contract/job description and shall process the data in accordance with the internal data processing procedures.
Data recipients
In order to carry out activities in connection with the contract, to fulfil legal obligations and marketing objectives, we communicate these data to third party operators or processors, group companies or third party companies, public authorities.
Personal data will be transmitted for processing to a processor of the controller (external accounting service, external IT service, natural or legal persons with whom we have concluded collaboration or cooperation agreements, etc.) We have taken measures to ensure that our processors respect data confidentiality, process personal data in a way that ensures adequate data security, including protection against unauthorized or unlawful processing, accidental destruction, loss or accidental damage.
We strictly respect and ensure contractual secrecy. We do not disclose data except for the fulfillment of your interests or legal obligations.
International transfers
We intend to transfer your data to third countries or international organizations.
Whenever we transfer your personal data outside the E. E. A. (European Economic Area), we ensure that it is afforded a similar level of protection by implementing at least one of the following safeguards:
- We will only transfer personal data to those countries that have been deemed to offer an adequate level of protection of personal data by the European Commission. For further details, see European Commission: Adequacy of the level of protection of personal data in third countries.
- Where we use certain service providers, we may use specific contracts approved by the European Commission, which ensure the same level of protection for personal data as in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
Communicate
We will communicate with you by email, text or via the notification application in relation to our Services, about the publication of your ad on our website, about the posting fee, etc., to inform you if the ad has become active/expired and about other messages regarding transactions in relation to our Services. As it is imperative for us to send you such transaction-related messages, you may not be able to opt-out of such messages.
Rights of the data subject
We review each year the data collected and analyse to what extent their retention is necessary for the purposes mentioned, your legitimate interests or the fulfillment of legal obligations.
The Regulation confers several rights on the persons whose personal data are processed: the right of access to personal data concerning you; the right to rectify data when inaccurate or incomplete; the right to erase and delete data in certain circumstances; the right to restrict processing in certain circumstances for as long as it allows us to verify the accuracy of those data; the right to object to processing in certain circumstances; the right to withdraw your consent to the processing of data to which you have previously consented; the right to be notified in the event of data security breaches by the controller, and the right to data portability for the purposes of transferring your personal data to another personal data controller designated by you. You also have the right to lodge a complaint with the Supervisory Authority.
To exercise your rights, you may submit a written, dated and signed request to the company’s registered office or to the company’s Data Protection Officer.