X-PERT ALUMINIU S.R.L. (hereinafter referred to as "the Company" or "the Organization")  aligns with Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the General Data Protection Regulation (GDPR), applicable from May 25, 2018.

As an EU Regulation, GDPR applies directly and uniformly across all member states of the European Union, aiming to strengthen and unify security policies in the online environment and provide better protection of personal data for all European citizens.

Respecting confidentiality and protecting personal data are fundamental principles that our organization has recognized and given due importance and attention to. Understanding, awareness, and implementation of these principles are crucial for our company to comply with the requirements of the aforementioned European Regulation.

One of the fundamental principles of this Regulation is transparency, and through this General Privacy Policy, we aim to inform you about how we collect, use, transfer, and protect your personal data.

We reserve the right to update, revise, and modify this General Privacy Policy periodically. In the event of any changes, we will post the updated and revised version of the General Privacy Policy on our website.

This Policy applies to:

• The headquarters and workplaces belonging to X-PERT ALUMINIU S.R.L.
• All departments and entire staff belonging to X-PERT ALUMINIU S.R.L.
• All contractors, suppliers, and other individuals working on behalf of X-PERT ALUMINIU S.R.L.

This General Privacy Policy concerns the personal data of customers, suppliers, and other individuals who contact us, visit us, and their representatives, potential partners, and collaborators. It applies to the data collected through our website www.xpertaluminiu.ro, as well as all other personal data collected through email and contact forms.

GENERAL INFORMATION:

Who we are and how to contact us:

X-PERT ALUMINIU S.R.L. (hereinafter referred to as the "COMPANY") is a legal entity of Romanian nationality, with its registered office in Ploiesti city, Parcul Industrial Ploiești, 100213, Șos. Ploiești-Târgoviște, km. 8, Str. Piramidei nr. 6A, registered with the Trade Register attached to Prahova Tribunal under the unique identification number RO 36542789.

Under data protection legislation, we act as the DATA CONTROLLER when processing your personal data. We have taken all reasonable efforts to implement measures to safeguard the personal information of individuals.

We value your opinions and are always interested in providing you with any additional information you may need regarding the processing of your data. You can contact us at the email address: office@xpertaluminiu.ro or directly through a registered request at our office or sent by mail or courier to our address in Ploiesti city, Parcul Industrial Ploiești, 100213, Șos. Ploiești-Târgoviște, km. 8, Str. Piramidei nr. 6A - attention: Customer Relations Department.

Regulation Terms:

• Data Controller - the entity - in this case - X-PERT ALUMINIU S.R.L.or any other legal person, public authority, agency, or non-governmental organization that processes or determines the purposes and means of processing personal data.
• Personal Data - any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as name, address, personal identification number, email, phone number, income, biometric data, image, IP address, or by reference to medical, genetic data, data concerning ethnic or racial origin, political, religious, philosophical, cultural beliefs, or trade union membership.
• Data Subject - any individual whose personal data is or may be processed by the data controller.

• Purpose of the General Privacy Policy:

When a data subject enters into any kind of relationship with us, they entrust us with their information.

The purpose of this General Privacy Policy is to explain to the data subjects what data we process, why we process it, and what we do with it – as the data controller. We take confidentiality seriously and never transmit or sell any personal data of our customers, lists, or email addresses. Being fully aware that personal information belongs to each individual, we take every possible measure to store them securely and process them with care. We do not provide information to third parties without prior notification to the data subjects. This information is crucial, and we hope it will be read attentively.

This General Privacy Policy does not cover the applications and websites of other third parties that individuals may access through the links on our website. This is beyond our control. We encourage everyone to review the Privacy Policy of any site and/or application before providing personal data.

This General Privacy Policy also covers the recruitment and selection process for candidates applying to company positions (e.g., the company obtains personal data as a result of completing a form in an application or submitting a CV via email). The company informs applicants about the personal data that will be collected, the purpose of the collection, and how it will be used, in connection with the specific recruitment privacy policy formulated by the company (the recruitment email contains a link to the privacy policy).

According to the legislation, the individual receiving our services or the individual in any kind of relationship with us is a "data subject", meaning an identified or identifiable natural person. To be completely transparent about data processing and to enable data subjects to easily exercise their rights at any time, we have implemented measures to facilitate communication between us, the data controller, and the data subject.

If you have not yet reached the age of 16, you will need the consent of your parents or legal guardian before providing any personal information to us for registration or other online activities. If you are unsure about the information you see on this site, please ask your parents or guardian for help. 

Any processing of personal data of minors will be carried out only in accordance with the law.

Commitment of X-PERT ALUMINIU S.R.L.:

The protection of personal information of data subjects is of utmost importance to us. Therefore, we are committed to complying with the new Regulation (EU) 2016/679, applicable national legislation, and the following principles:

Legality, fairness, and transparency:

We process personal data legally and fairly. We are always transparent about the information we use, and the data subject is appropriately informed.

Data subject's control:

Within the limits of the law, we provide the data subject with the ability to examine, modify, delete the personal data they have shared with us, and exercise their other rights.

Data integrity and purpose limitation:

We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are in line with the law. We take reasonable measures to ensure that personal data is accurate, complete, and up-to-date.

Security:

We have implemented reasonable security and encryption measures to protect information to the best of our ability. However, it is important to note that no website, application, or internet connection is entirely secure.

RIGHTS OF THE DATA SUBJECT UNDER THE NEW REGULATION:

• The right to withdraw consent where the processing is based on consent;
• The right to be informed about the processing of your data;
• The right of access to your data;
• The right to rectify inaccurate or incomplete data;
• The right to erasure ("right to be forgotten");
• The right to restrict processing;
• The right to data portability to another controller;
• The right to object to the processing of data;
• The right not to be subject to a decision based solely on automated processing, including profiling;
• The right to seek judicial remedies;
• The right to lodge a complaint with the Supervisory Authority.

 

CATEGORIES OF PERSONAL DATA. PURPOSES AND LEGAL BASIS FOR PROCESSING:

In the context of your interaction with X-PERT ALUMINIU S.R.L., as an individual - and in the sense of the Regulation - a data subject, you may become subject to the data processing activities we carry out.

X-PERT ALUMINIU S.R.L. may request and/or collect information from you voluntarily when:

You seek assistance or provide us with comments, suggestions, or questions related to our website, activities, and/or services, as well as the processing of your personal data.

In this case, we use the contact information to communicate with you regarding your requests. The purpose of processing in this case is to analyze your inquiries and provide responses to them.

We collect some of your data when you order and purchase our products or when you register on our website www.xpertaluminiu.ro.

THE CATEGORIES OF PERSONAL DATA PROCESSED IN THE CONTEXT OF OUR RELATIONSHIP WITH YOU ARE:

1. In the case where you are our collaborators or potential collaborators, representatives of our suppliers, the personal data we process are your name, email address, and phone number.
2. If you are a customer of our company, the personal data we process are your name, surname, date of birth, gender, billing address, delivery address, financial information, email address, phone number, and additional information that you voluntarily choose to share.

 

If you apply for a job at X-PERT ALUMINIU S.R.L.:

We use the personal data contained in the CVs we receive to evaluate the qualifications of applicants for a position within our company. In this case, we rely on the steps taken with the aim of entering into and performing a contract.

The categories of data processed in the context of our relationship with you are your name, email address, phone number, address, personal data included in CVs, details about education and training, professional qualifications, and any other personal data you may provide directly.

If you are a visitor to our website:

We use the personal data collected from you when you visit our website www.xpertaluminiu.ro to process and respond to your inquiries submitted through the available online forms, as well as to send newsletters, a service you subscribed to while visiting our website.

We base this data processing activity on our legitimate interest in providing the requested information related to our activities, services, and products. The categories of data processed in this context are your name, email address, and phone number.

Additionally, we use your personal data to monitor traffic and improve the content of the website. We rely on our legitimate interest in ensuring the proper functioning of our website and its improvement for this data processing activity. A cookies usage policy is also available on the website.

WHY DOES X-PERT ALUMINIU S.R.L. COLLECT THIS DATA 

We collect the information of data subjects for specific and legitimate purposes as described above in this General Privacy Policy, which include, but are not limited to, the following:

• To communicate with candidates for company positions;
• To make the appropriate decision regarding their employment;
• For the conclusion and execution of an employment contract according to the candidates' specialization/qualifications;
• For the conclusion, execution, or modification of a contract between the data subjects and the company;
• To respond to inquiries and requests from data subjects;
• To provide and improve the services and products offered by the company;
• To fulfill our contractual obligations to you;
• To diagnose or resolve technical problems;
• To defend the company against cyberattacks;
• To comply with company legislation;
• To establish or exercise a legal claim in court.

When data is directly requested from you, X-PERT ALUMINIU S.R.L.asks you to provide all categories of personal data we request for the purposes mentioned above, as otherwise, we will not be able to conduct our activities. 

If you provide X-PERT ALUMINIU S.R.L. with the personal data of other individuals, please inform them before this disclosure about how X-PERT ALUMINIU S.R.L. intends to process their personal data, as described in this general privacy policy. 

DATA STORAGE WITHIN X-PERT ALUMINIU S.R.L.

Your personal data is stored for the period necessary to comply with various legal obligations by  X-PERT ALUMINIU S.R.L.. It is important to note that in certain expressly regulated situations, we store the data for the period required by law.

Furthermore, if the data is not collected within the context of an agreement, such data will be retained for as long as necessary to achieve the intended purpose of data collection or any longer period required by law, a records retention policy, or public authorities.

Immediately after the applicable archiving period expires, the data must be:

a) securely erased or destroyed; or

b) transferred to an archive (unless prohibited by law or records retention regulation).

Personal data collected and used for subscribing to our newsletter will be deleted immediately if you unsubscribe from our newsletter service.

 After the retention period, personal data of data subjects will be destroyed or deleted from information systems or anonymized for use in scientific, historical, or statistical research purposes.

SHARING YOUR INFORMATION WITH THIRD PARTIES:

X-PERT ALUMINIU S.R.L. will not disclose the data obtained from data subjects to other third-party companies without obtaining explicit and separate consent for this purpose.

The company confirms that your personal data obtained is stored securely or destroyed. We inform data subjects that there are data processing agreements with the software provider(s) through which they have assured the company of GDPR compliance.  

X-PERT ALUMINIU S.R.L. may disclose the personal data of data subjects, in compliance with applicable law, to business partners or other third parties, such as our agents.  

We constantly make reasonable efforts to ensure that these third parties have implemented appropriate protection and security measures. We have contractual clauses with these third parties to protect your data. We will inform data subjects of the identity of these companies before disclosure or within a reasonable time frame and ensure that any transfer is legitimate, based on their consent or other legal basis.

For example, we may provide personal data to other companies, such as IT or telecommunications service providers, banks, accounting, legal services, and other third parties with whom we have a contractual relationship. These third parties are carefully selected so that your data is processed only for the purposes we indicate.

Additionally, the company may share the personal data of data subjects with business partners as part of a joint effort to provide a product or service.

Although unlikely, the company may sell the business or a portion of the business in the future, and this would involve the transfer of such data.

The data may also be transferred to other parties with the consent or based on the instructions of the data subjects. 

Personal information may be provided to prosecutors, police, courts, and other authorized state authorities, based on and within the limits of the law and in response to explicit requests.

To a reasonable extent, the company will ensure that the personal data of data subjects does not leave the European Economic Area (EEA). However, if data is transferred to countries outside the EEA, the company will ensure, in all cases, that the transfers are legitimate, based on explicit consent of the data subjects or other legal basis.

X-PERT ALUMINIU S.R.L. informs any data subject that:

• They can withdraw their consent regarding the processing of sensitive data and/or for direct marketing at any time by following the unsubscribe instructions in each email or other electronic message.
• If they wish to exercise their rights, they can do so by submitting a written request, which should be delivered to the headquarters/branch of X-PERT ALUMINIU S.R.L. or by sending a written request to the email address office@xpertaluminiu.ro.  
• The rights listed above are not absolute. There are exceptions, and each request received will be analyzed to decide whether it is well-founded or not. If the request is well-founded, the company will facilitate the exercise of the rights. If the request is unfounded, it will be rejected, but the data subjects will be informed about the reasons for the refusal and their rights to lodge a complaint with the Supervisory Authority and to seek legal remedies.
• The company will attempt to respond to the request within 30 days. However, the timeframe may be extended based on various factors, such as the complexity of the request, a large number of requests received, or the inability to identify the data subject within a reasonable time.
• If, despite making all efforts, the company is unable to identify the data subject, and the data subject does not provide additional information to facilitate identification, the company will not be obliged to comply with the request.

REQUESTS AND EXERCISING RIGHTS:

If you wish to exercise any of the rights listed in this Privacy Policy or if you have any questions, concerns, or need clarification regarding the processing of your personal data, or if you have any other concerns about the privacy of your data, please contact  X-PERT ALUMINIU S.R.L. through the designated person, Mr./Ms. Tudor Stela, at the email address office@xpertaluminiu.ro to ensure that X-PERT ALUMINIU S.R.L. complies with all GDPR requirements.

A response to all requests will be provided as soon as possible, but no later than one month from the receipt of the request, with the possibility of extending this period by a maximum of 2 months in case of complex processing or a large volume of such requests.

All requests can be submitted in person or sent by mail/courier to our headquarters at Mun. Ploiesti, Parcul Industrial Ploiești, 100213, Șos. Ploiești-Târgoviște, km. 8, Str. Piramidei nr. 6A, or by email to office@xpertaluminiu.ro.

It is also important to know that in Romania, the National Supervisory Authority for Personal Data Processing ("A.N.S.P.D.C.P.") operates, and you have the right to lodge a complaint if you believe that your rights have been violated by accessing the website www.dataprotection.ro.

X-PERT ALUMINIU S.R.L.