Privacy Policy

 

We consider ensuring the right to personal data protection as a fundamental commitment of our company, therefore we will dedicate all the necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other applicable legislation in Romania. As one of the key principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services, including through our website or by telephone.

 

We reserve the right to periodically update and amend this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will post the amended version of the Privacy Policy on our website, so please check the content of this Privacy Policy periodically.

 

The current version entered into force on 01.07.2021.

1. Who are we?

 

The data controller is ASOCIAȚIA CAMPERVAN ROMÂNIA, an association organized and operating in accordance with Romanian law, having its registered office in Sat Corbeanca Com. Corbeanca, Str. Centrala, Nr.6, Ap.Camera 1, Corbeanca represented by Tudoroiu Radu President, whocan be contacted at e-mail salut@campervan-romania.ro or telephone 0763645400.

The Privacy Policy explains the practices of CAMPERVAN ROMANIA ASSOCIATION regarding the application of the GDPR provisions, as well as your rights regarding how your information is collected, processed and stored, through the website and offline interaction with our employees.

If you have any questions about this privacy policy or what it says, please contact the data controller.

2. What personal data do we collect?

Through the contact form on the website we collect :

• Name and surname
• Email address
• Phone
• Your message

By subscribing to the newsletter we collect

• Your e-mail

By filling in the application form we collect :

• Name and surname
• Email address
• Phone
• Your message
• Mailing address/delivery package welcome
• Bank information for reimbursement of orders/payments differences occurred

At events we collect :

• Pictures/video of you

On our website we collect

• Information about your behaviour while visiting our website, to personalise your online experience and provide you with offers tailored to your profile, as
  Cookie Policy (link).
  
• Any information you upload to your profile (pictures, messages, conversations with other members).

 

We do not collect or otherwise process sensitive data, which are included by the General Data Protection Regulation in special categories of personal data.

 

We also do not want to collect or process data from minors, as the site is intended for adults. If we collect images of minors at events you can ask us to anonymise or delete them.

 

3. What is the purpose of the collection and what are the legal grounds?

 

Data obtained through the contact form

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to questions and messages we receive and to keep records of correspondence.

 

Data obtained by subscribing to the newsletter

Legal basis for processing: your consent. (Article 6(1)(a) of the General Data Protection Regulation).

Consent: you consent to receive our e-newsletter by signing up to receive it.

 

Data obtained through the Association/Campervan fest application form

Legal basis for processing: it is necessary for the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation).

The reason why it is necessary for making a contract: if your message is about providing services / delivering products or taking action at your request. before we provide you with our services (e.g. providing information about such services) / deliver the products we will process your information. to do so).

Data collected on the site

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: to improve our site for our site users and to know the preferences of our site users so that our site can better meet their needs and desires.

Data collected at events

Legal basis for processing: your consent. (Article 6(1)(a) of the General Data Protection Regulation).

Consent: you consent to be photographed/filmed and appear on our media channels, including: website, Facebook page, Instagram account.

4. Where do we store and how long do we keep your data?

 

Data obtained through the contact form and by e-mail are kept for 3 years

Data obtained through the contact form is hosted at hostico.ro which is located in the EU and is not transferred outside the EU.

Data obtained by subscribing to the newsletter – are kept for 3 years, or until unsubscription

The data is stored on MailChimp’s operator servers located in the US. The transfer of personal data outside the EU is protected by the Standard Contractual Clause. More information about MailChimp’s GDPR compliance can be found here.

The data obtained through the Association/Campervan Fest registration form is kept for 5 years. Invoices issued as a result of these transactions are kept in accordance with the tax rules in force.

Data collected on the site automatically – is stored according to the Cookie Policy, by category – according to the table here.

Data collected at events – kept for 5 years or until consent withdrawn

Photos taken at events are stored for up to 30 days on the media on which they were recorded (SSD), then transferred to the cloud in a secure folder belonging to our association. Photos may be shared with third party partners for advertising purposes. Photos displayed on the website/social media are protected by this privacy policy and those of the respective platforms. If you wish to have an image removed it is sufficient to contact us at salut@campervan-romania.ro

5. Disclosure of personal data to third parties

Disclosure of user data to third parties: if you agree to a firm order and the conclusion of a Contract, your data is provided to third parties in order to achieve the object of the contract: namely the processing and delivery of the order. Personal data entered in tax documents are processed by third parties (accounting firm) in order to fulfil legal tax obligations.

User data is not sold to third parties.

If you would like further information about the identity of the service providers, please contact us directly via our contact form or by email and we will provide you with such information if you have a legitimate reason to request it).

For continued compliance with laws, regulations and other legal requirements

We will use and process your information. to comply with the legal obligations we are subject to. For example, we may need to disclose your information. based on a court order or subpoena, if we receive one.

Legal basis for processing: compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation.

Legal obligation: legal obligations to disclose information that are part of Romania’s laws or if they have been incorporated into Romania’s legal framework (e.g. in the form of an international agreement that Romania has signed).

6. What rights do you have?

 

Rights concerned	Description
Access	You can ask us: to confirm whether we process your personal data; to provide you with a copy of this data; provide you with other information about your personal data, such as what data we hold, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can make a complaint, where we obtained your data, to the extent that information has not already been provided to you through this notice.
Correction	You can ask us to rectify or complete your inaccurate or incomplete personal data. We may try to verify the accuracy of the data before correcting it.
Deleting data	You can ask us to delete your personal data, but only if: they are no longer needed for the purposes for which they were collected; or you have withdrawn your consent (if the processing is based on consent); or give effect to a legal right to object; or they have been processed unlawfully; or we have a legal obligation to do so. We are not obliged to comply with your request. to delete your data. personal data if the processing of your personal data personal data is required: for compliance with a legal obligation; or to establish, exercise or defend a right in court. There are certain other circumstances in which we are not obliged to comply with your request. deletion of data, although these are the two most likely circumstances in which we would refuse your request
Restriction of data processing	You can ask us to restrict the processing of personal data, but only if: their accuracy is disputed (see the rectification section) to allow us to verify their accuracy; or the processing is unlawful but you do not want the data to be deleted; or they are no longer needed for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court; or you have exercised your right to object, and verification of whether our rights prevail is ongoing. We may continue to use your data. personal data following a restriction request, if: we have your consent; or to establish, exercise or defend a right in a court of law; or to protect our rights or the rights of another person or company.
Data portability	You can ask us to provide your personal data in a structured, commonly used and machine-readable format, or you can request that it be “ported” directly to another data controller, but in each case only if: processing is based on your consent. or on the conclusion or performance of a contract with you; and processing is done by automatic means.
Opposition	You may object at any time, for reasons relating to your particular situation, to the processing of your data. personal data on the basis of our legitimate interest, if you consider that your rights and freedoms are not respected. fundamental interests prevail over this interest. You can also object to the processing of your data at any time. for direct marketing purposes (including profiling), without giving any reason, in which case we will cease such processing as soon as possible.
Automatic decision-making	You can ask not to be subject to a decision based solely on automatic processing, but only when that decision: produces legal effects with respect to you; or affect you in another similar way and to a significant extent. This right does not apply if the decision reached as a result of automatic decision-making: is necessary for us to enter into or perform a contract with you; is authorised by law and there are adequate safeguards for your rights and freedoms; or is based on your consent. explicit.
Complaints	You have the right to lodge a complaint with the supervisory authority about the processing of your data. personal data. In Romania, the contact details of the data protection supervisory authority are as follows: National Supervisory Authority for Personal Data Processing B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania Phone: +40.318.059.211 or +40.318.059.212; E-mail:anspdcp@dataprotection.ro Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance, and we promise to make every effort to resolve any issues amicably.

Response time. We aim to respond to any valid requests within a maximum of 30 days, unless this is particularly complicated or if you have made multiple requests, in which case we will respond within a maximum of 45 days. We might ask if you can tell us exactly what you want to receive or what you are concerned about. This will help us to act faster and shorten the response time to your request.

 

CHANGES TO OUR PRIVACY POLICY

We regularly update and amend our privacy policy.

Minor changes to our privacy policy

If we make minor changes to our privacy policy, we will update the Privacy Policy with a new effective date stated at the beginning of the Privacy Policy. Processing your information will be governed by the practices set forth in the new version of the Privacy Policy as of its effective date.

Major changes to our privacy policy or the purposes for which we process your information.

If we make major changes to our privacy policy or intend to use your data in a different way, we will notify you. for a new purpose or for a purpose different from the purpose for which we originally collected it, we will notify you by email (if possible) or by posting a notice on our website.

We will provide you with information about the change in question and the purpose and any other relevant information before we use your information. for the new purpose.

Whenever necessary, we will obtain your consent. before using your information. for a purpose other than the purpose for which we originally collected it.