Data protection
Thank you for your interest in our company. Data protection is a very high priority for the management of Synergy Consulting Services SRL. The Synergy Consulting Services SRL website can be used in general without providing personal data. However, if a person wishes to use the specialized services of our company through our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.
The processing of personal data, for example the name, address, e-mail address or telephone number of a person concerned, is always carried out in accordance with the general data protection regulation and in accordance with the applicable country-specific data protection regulations. Synergy Consulting Services SRL. With this data protection statement, our company would like to inform the public about the type, purpose and purpose of personal data collected, used and processed by us. Furthermore, data subjects are informed of their rights through this data protection statement.
As an operator, Synergy Consulting Services SRL has implemented numerous technical and organizational measures to ensure the most complete possible protection for personal data processed through this site. However, data transmissions over the Internet may generally have security gaps, so absolute protection cannot be guaranteed. For this reason, any person in question is free to send us personal data alternately, for example by phone.
1. Definitions
The data protection statement Synergy Consulting Services SRL is based on the terms used by the European legislator for directives and regulations when adopting the general regulation on data protection (GDPR). Our data protection statement should be easy to read and understand for both the public and customers and business partners. To ensure this, we would like to explain the terms used in advance.
We use the following terms in this data protection statement:
a) personal data
Personal data is all information that refers to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable which, directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical, physiological, genetic identity , psychological, economic, cultural or social of this individual can be identified.
b) the person concerned
The person in question is any identified or identifiable natural person whose personal data are processed by the person responsible for processing.
c) processing
Processing is any process carried out with or without the help of automated procedures or such a series of processes in connection with personal data, such as collecting, recording, organizing, ordering, storing, adapting or modifying, reading, querying, using , disclosure by transmission, dissemination or any other form of supply, comparison or binding, restriction, deletion or destruction.
d) processing restriction
The processing restriction represents the marking of stored personal data in order to restrict their future processing.
e) profiling
Profiling is any type of automatic processing of personal data which consists in using this personal data to evaluate certain personal aspects that relate to an individual, especially aspects related to work performance, economic situation, personal health, for to analyze or predict the preferences, interests, reliability, behavior, location or relocation of this individual.
f) pseudonymization
Pseudonymization is the processing of personal data in a way that personal data can no longer be attributed to a specific subject without using additional information, provided that this additional information is stored separately and is subject to technical and organizational measures. to guarantee that personal data cannot be attributed to an identified or identifiable natural person.
g) controller or controller
The person responsible or the person responsible for processing is the natural or legal person, public authority, institution or any other body that, alone or in common with others, decides on the purposes and means of processing personal data. If the purposes and means of such processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States.
h) processors
The processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the responsible person.
i) recipient
The recipient is a natural or legal person, authority, institution or other body to whom personal data are disclosed, whether or not it is a third party. Authorities that may receive personal data as part of a specific investigation under Union law or the law of the Member States are not considered recipients.
j) third party
A third party is a natural or legal person, public authority, agency or body, other than the data subject, the responsible person, the processor and the persons who are authorized to process personal data under the direct responsibility of the responsible person or the processor.
k) consent
Consent is any statement of intent, informed and unequivocal given by the person concerned for the specific case, in the form of an unequivocal statement or other affirmative action with which the person concerned indicates that he agrees to the processing of his personal data.
2. Name and address of the person responsible for processing
The person responsible for the purposes of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other data protection provisions is:
Synergy Consulting Services SRL
Aleea Negru Voda 6, 030775
Bucharest
Romania
Phone: +4 074 267 4714
Email: contact@syncoservices.com
Website: syncoservices.com
3. Cookies
The websites of Synergy Consulting Services SRL use cookies. Cookies are text files that are stored and stored on a computer system through an internet browser.
Many websites and servers use cookies. Many cookies contain a so-called cookie identifier. A cookie code is a unique identifier for a cookie. It consists of a string through which sites and servers can be assigned to the specific internet browser in which the cookie was stored. This allows the sites and servers visited to distinguish the individual browser of the person in question from other internet browsers that contain other cookies. A certain internet browser can be recognized and identified through the unique cookie code.
By using cookies, Synergy Consulting Services SRL can offer users of this website services that are easier to use, which would not be possible without setting cookies.
Using a cookie, the information and offers on our website can be optimized in the interest of the user. As already mentioned, cookies allow us to recognize the users of our website. The purpose of this recognition is to facilitate the use of users of our website. The user of a website that uses cookies, for example, does not have to re-enter the access data every time he visits the site, because this is done by the website and the cookies stored on the user's computer system. Another example is a shopping cart cookie in an online store. The online store uses a cookie to remember the items that a customer has placed in the virtual shopping cart.
The person in question may prevent the setting of cookies by our website at any time through an appropriate setting in the internet browser used and, thus, to permanently oppose the setting of cookies. Moreover, the cookies already set can be deleted at any time through an internet browser or other software programs. This is possible in all common internet browsers. If the person in question disables the setting of cookies in the internet browser used, not all the functions of our website can be fully usable.
4. Collection of data and general information
The site of Synergy Consulting Services SRL collects a series of general data and information every time the site is accessed by a subject or by an automated system. This general data and information is stored in the server's log files. (1) the types and versions of browser used, (2) the operating system used by the access system, (3) the website from which an access system reaches our website (the so-called referrer), (4) sub-sites that are accessed through an access system on our website can be controlled, (5) the date and time of access to the website, (6) an internet protocol address ( IP address).
When you use this data and general information, Synergy Consulting Services SRL does not draw any conclusions about the person in question. Rather, this information is necessary to (1) properly deliver the content of our website, (2) to optimize the content of our website and advertising for it, (3) to ensure the long-term functionality of our systems. information technology and technology. our website and (4) provide law enforcement with the information needed to enforce the law in the event of a cyber attack. This data and information collected anonymously is therefore statistically evaluated by Synergy Consulting Services SRL, on the one hand, and also in order to increase data protection and data security in our company, to ensure in finally an optimal level of protection of personal data. process. Anonymous data in server log files is stored separately from all personal data provided by a data subject.
5. Contact options through the website
Due to the legal regulations, the website of Synergy Consulting Services SRL contains information that allows quick electronic contact to our company and direct communication with us, which also includes a general address for the so-called e-mail (e-mail address). If a data subject contacts the person responsible for processing by e-mail or a contact form, the personal data transmitted by the data subject will be saved automatically. These personal data transmitted voluntarily by a data subject by the person responsible for processing are stored for the purpose of processing or contacting the data subject.
6. Routine deletion and blocking of personal data
The person responsible for processing and storing the personal data of the data subject only for the period necessary to achieve the purpose of storage or if this is specified by European directives and regulations or another legislator in laws or regulations, on which the responsible person was provided Processing.
If the purpose of storage no longer applies or if a period of storage provided by European directives and ordinances or another responsible legislator expires, personal data will be routinely blocked or deleted in accordance with legal provisions.
7. The rights of the data subject
a) The right to confirmation
Each person concerned has the right granted by the European directive and the author of the regulation to request the confirmation of the person responsible for the processing regarding the processing of personal data. If the data subject wishes to use this right of confirmation, he may at any time contact an employee of the person responsible for processing.
b) The right to information
Any person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to receive free information about personal data stored about him and a copy of this information from the person responsible for processing at any time. In addition, European directives and regulations allow the data subject access to the following information:
processing purposes
the categories of personal data that are processed
recipients or categories of recipients to whom personal data are disclosed or are still disclosed, in particular to recipients from third countries or international organizations
if possible, the planned duration for which personal data will be stored or, if this is not possible, the criteria for determining this duration
the existence of a right to the correction or deletion of personal data concerning you or to the restriction of the processing by the responsible person or a right to oppose such processing
the existence of a right of appeal to a supervisory authority
if personal data are not collected from the data subject: All available information on the origin of the data
the existence of the automated decision-making process, including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - significant information on the logic involved and on the scope and expected effects of such processing for the person concerned
Furthermore, the data subject has the right to information on the transmission of personal data in a third country or to an international organization. In this case, the data subject has the right to receive information about the appropriate guarantees in connection with the transmission.
If a data subject wishes to exercise this right to information, he may at any time contact an employee of the person responsible for processing.
c) The right to rectification
Every person affected by the processing of personal data has the right granted by European directives and regulations to request the immediate correction of incorrect personal data relating to them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - including through an additional statement.
If the data subject wishes to exercise this right to rectification, he may at any time contact an employee of the person responsible for processing.
d) The right to deletion
Each person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to request the person responsible to immediately delete personal data concerning them, provided that one of the following reasons applies and to the extent that the processing required:
Personal data has been collected or otherwise processed for purposes that are no longer necessary.
The data subject revokes his consent, on the basis of which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is no other legal basis for the processing.
The data subject opposes the processing in accordance with art. 21 Paragraph 1 GDPR and there are no legitimate imperative reasons for processing or the objects concerned in accordance with art. 21 Paragraph 2 GDPR in processing a.
Personal data has been processed illegally.
The deletion of personal data is necessary for the fulfillment of a legal obligation under Union law or the legislation of the Member States to which the responsible person is subject.
The personal data were collected in relation to the information society services offered in accordance with art. 8 para. 1 GDPR.
If one of the above reasons applies and a data subject wishes that the personal data stored by Synergy Consulting Services SRL be deleted, they can contact at any time an employee of the person responsible for processing. The employee of Synergy Consulting Services SRL will immediately ensure the deletion request.
If the personal data were made public by Synergy Consulting Services SRL and our company, as responsible, is obliged to delete the personal data in accordance with art. 17 Paragraph 1 GDPR, Synergy Consulting Services SRL considers the available technology and the measures corresponding to the implementation costs, including technical measures, in order to inform other data processors who process personal data published that the data subject has requested the deletion of all links to this data. personal data or from these other data processors He requested copies or replicas of this personal data, insofar as the processing is not necessary. The employee of Synergy Consulting Services SRL will arrange the necessary in individual cases.
e) The right to restrict processing
Every person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to request the operator to restrict the processing if one of the following conditions is met:
The correctness of personal data is contested by the data subject for a period that allows the responsible person to verify the correctness of personal data.
The processing is illegal, the person in question refuses to delete personal data and, instead, requests a restriction on the use of personal data.
The controller no longer needs personal data for the purpose of processing, but the person in question needs them to assert, exercise or defend legal claims.
The person concerned has objections to the processing in accordance with. The art. 21 para. 1 GDPR and it has not yet been established whether the legitimate reasons of the person responsible are greater than those of the person in question.
If one of the above conditions is met and a person in question would like to request the restriction of personal data stored by Synergy Consulting Services SRL, he can contact at any time an employee of the person responsible for processing. The employee of Synergy Consulting Services SRL will ensure the restriction of processing.
f) The right to data portability
Each person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to receive the personal data provided by the person in question to a responsible person, in a structured, common and automatic way. readable format. You also have the right to transfer this data to another responsible person, without preventing the responsible person to whom the personal data were provided, provided that the processing is based on consent in accordance with art. 6 para. 1 The GDPR letter or art. 9 Paragraph 2 letter of the DS-GVO or on a contract according to art. 6 para. 1 letter b DS-GVO and processing is performed using automatic procedures,
Moreover, when exercising the right to data portability in accordance with art. 20 (1) GDPR, the data subject has the right to transmit personal data directly from one responsible person to another, insofar as they are technically feasible and if they do not affect the rights and freedoms of other persons.
In order to assert the right to data portability, the person in question may at any time contact an employee of Synergy Consulting Services SRL
g) The right to object
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to oppose at any time the processing of personal data relating to them under Article 6 Paragraph 1 Letter e or DS-GVO takes place. This also applies to profiling based on these provisions.
Synergy Consulting Services SRL will no longer process personal data in case of an objection, unless we can prove legitimate reasons for processing that exceed the interests, rights and freedoms of the data subject or the processing serves to assert the exercise. or the defense of legal claims.
If Synergy Consulting Services SRL processes personal data in order to operate direct mail, the person in question has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct advertising. If the person in question opposes the processing of Synergy Consulting Services SRL for direct marketing purposes, Synergy Consulting Services SRL will no longer process personal data for these purposes.
In addition, the data subject has the right, for reasons arising from their particular situation, to oppose the processing of personal data made by Synergy Consulting Services SRL for scientific or historical research purposes or for statistical purposes in accordance with art. 89 para. 1 GDPR, to object, unless such processing is necessary for the performance of a task in the public interest.
In order to exercise the right to object, the person in question may contact directly any employee of Synergy Consulting Services SRL or another employee. The data subject is also free, in connection with the use of information society services, regardless of Directive 2002/58 / EC, to exercise his right of objection through automated procedures in which the technical specifications are used.
h) Automated decisions in individual cases, including profiling
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations not to be subject to a decision based exclusively on automatic processing - including profiling - which has legal effects on them or which significantly affects them in a similarly, if decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the responsible person or (2) on the basis of the legal provisions of the Union or of the Member States to which the responsible person is subject, legal provisions contain adequate measures to protect the rights and freedoms, as well as the legitimate interests of the data subject or (3) takes place with the express consent of the data subject.
If the decision (1) is necessary for the conclusion or execution of a contract between the data subject and the responsible person or (2) is taken with the express consent of the data subject, Synergy Consulting Services SRL takes appropriate measures to protect rights and freedoms, as well as the legitimate interests of the data subject, including at least the right to obtain the intervention of a person from the controller, to express his / her own point of view and to challenge the decision.
If the data subject wishes to assert rights regarding automated decisions, he may contact an employee of the controller at any time.
i) The right to withdraw consent according to the law on data protection
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to revoke the consent for the processing of personal data at any time.
If the person concerned wishes to assert his right to withdraw his consent, he may at any time contact an employee of the person responsible for processing.
8. Data protection in applications and in the request process
The person responsible for processing collects and processes the personal data of the applicants in order to manage the application process. Processing can also be done electronically. This is especially the case if an applicant sends the relevant application documents in electronic format, for example by e-mail or via a web form on the website, to the person responsible for processing. If the person responsible for processing concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in accordance with legal provisions. If the person responsible for processing does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that the deletion does not conflict with other legitimate interests of the person responsible for processing. Another legitimate interest in this regard is, for example, a burden of proof in proceedings under the General Law on Equal Treatment.
9. Legal basis for processing
The art. 6 am on. a DS-GVO serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or for the provision of other services or services, the processing is based on art. 6 am on. b GDPR. The same applies to processing operations that are necessary to perform pre-contractual measures, for example in cases of investigation of our products or services. If our company is subject to a legal obligation that requires the processing of personal data, for example for the fulfillment of fiscal obligations, the processing is based on art. 6 am on. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third party. Then the processing would be based on art. 6 am on. d GDPR is based. the processing is done based on art. 6 am on. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third party. Then the processing would be based on art. 6 am on. d GDPR is based. the processing is done based on art. 6 am on. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third party. Then the processing would be based on art. 6 am on. d GDPR is based. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third party. Then the processing would be based on art. 6 am on. d GDPR is based. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third party. Then the processing would be based on art. 6 am on. d GDPR is based.
Finally, the processing operations could be based on art. 6 am on. f GDPR. Processing operations that are not covered by any of the legal bases mentioned above are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the person targeted. does not prevail. We are especially allowed to carry out such processing operations, as they have been specifically mentioned by the European legislator. In this respect, he considered that a legitimate interest could be assumed if the person in question is a client of the responsible person (recital 47 sentence 2 HGP).
10. The legitimate interests of the processing pursued by the controller or by a third party
If the processing of personal data is based on Article 6 am letter f DS-GVO is our legitimate interest in carrying out our activity for the benefit of the well-being of all our employees and shareholders.
11. Duration for which personal data are stored
The criterion for the duration of storage of personal data is the legal retention period. After the expiration of the term, the relevant data are routinely deleted, provided that they are no longer obliged to perform or initiate a contract.
12. Legal or contractual provisions for the provision of personal data; The need to conclude the contract; The obligation of the data subject to provide personal data; possible consequences of non-supply
We explain that the provision of personal data is in part required by law (eg, tax regulations) or may result from contractual regulations (eg, information about the contractual partner).
In order to conclude a contract, it may sometimes be necessary for the data subject to provide us with personal data that we must subsequently process. For example, the person in question is obliged to provide us with personal data when our company concludes a contract with them. Failure to comply with personal data would mean that the contract could not be concluded with the person concerned.
Before the person in question provides personal data, the person in question must contact one of our employees. Our employee explains to the person concerned on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract, if there is an obligation to provide personal data and what consequences it would have. providing personal data.
13. Existence of automated decision making
As a responsible company, we do not use automatic decision making or profiling.