1. General Information

The privacy of your personal data is one of the primary concerns of Mihai Pop, as the data controller (“Website Owner”).
This document aims to inform you about the processing of your personal data in the context of using the website www.bravoparamotors.ro (the “Website”).

2. Categories of Personal Data Processed

2.1. If you are a user of the Website, the Website Owner will process your personal data, such as your name and surname, phone number, email address, billing address, and data related to how you use the Website, such as your behavior/preferences/habits on the Website.

3. Purposes and Legal Grounds for Processing

3.1. If you are a client of the Website, the Website Owner processes your personal data for the following purposes:

• Account Creation. Allows you to add listings and interact with potential clients through messages. Legal Ground: The processing of your data for this purpose is based on the contract concluded between you and [the website owner], as defined in the Terms and Conditions [hyperlink to T&Cs]. Providing your personal data is necessary for the performance of this contract. Refusal to provide your data may result in the inability to fulfill the contractual relationship between you and [the website owner].
• To fulfill the legal obligations of [the website owner] in the context of the services provided through the Website, including tax obligations and archiving. Legal Ground: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is mandatory. Refusal to provide the data may result in skytransylvania.ro being unable to comply with its legal obligations and thus unable to offer you services through the Website.
• For marketing activities, such as sending commercial communications via remote communication means (email, SMS) regarding the products and services offered by the Website Owner through the Website. Legal Ground: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for data processing for this purpose by ticking the box “I agree with the Privacy Policy.” To unsubscribe from such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. Additionally, you can unsubscribe by ticking the box “I wish to unsubscribe from the newsletter,” available on the subscription page or by accessing the “My Account Information” section.

Providing your data for this purpose is voluntary. Refusing to provide your consent for data processing for this purpose will not have any negative consequences for you.

• For resolving complaints and monitoring traffic and improving your experience on the Website.

4. Data Processing Duration

In principle, the Website Owner will process your personal data for as long as necessary to fulfill the above-mentioned processing purposes.

If you are a client and choose to delete your user account by clicking the “Delete Account” button, all your information will be deleted from our database.

5. Disclosure of Personal Data

For the fulfillment of the processing purposes, the Website Owner may disclose your data to partners, third parties, or entities that support the Website Owner in the operation of the Website (leasing companies, insurance companies), or to central/local public authorities, in the following examples:

• for the administration of the Website;
• in situations where such communication is necessary for awarding prizes or other benefits to individuals as a result of their participation in promotional campaigns organized by the Website Owner through the Website;
• for maintaining, personalizing, and improving the Website and services provided through it;
• for data analysis, testing and research, monitoring usage trends and activity, developing safety features, and user authentication;
• for sending marketing communications, under the conditions and limits provided by law;
• when the disclosure of personal data is required by law, etc.

6. Transfer of Personal Data

The personal data provided to the Website Owner may be transferred outside of Romania, but only to countries within the European Union.

7. Your Rights

Under the conditions provided by the legislation on personal data processing, as a data subject, you have the following rights:

• Right to Information, i.e., the right to receive details about the processing activities carried out by the Website Owner, as described in this document;
• Right of Access, i.e., the right to obtain confirmation from the Website Owner regarding the processing of personal data, as well as details of the processing activities such as the way data is processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.;
• Right to Rectification, i.e., the right to obtain the correction, without undue delay, by the Website Owner of inaccurate/unjustified personal data, as well as the completion of incomplete data. The rectification/completion will be communicated to each recipient to whom the data was transmitted unless this proves impossible or involves disproportionate effort;
• Right to Erasure of Data, without undue delay (“right to be forgotten”), in case one of the following reasons applies:
  • The data is no longer necessary for the purposes for which it was collected or processed;
  • Consent is withdrawn and there is no other legal ground for processing;
  • The data subject opposes the processing, and there are no overriding legitimate grounds for processing;
  • The personal data was processed unlawfully;
  • The personal data must be erased for compliance with a legal obligation;
  • The personal data has been collected in connection with the provision of information society services according to Union law or the national law under which the controller operates.

  It is possible that following the request to delete the data, the Website Owner will anonymize this data (thus depriving it of its personal nature) and continue processing it for statistical purposes;

• Right to Restriction of Processing to the extent that:
  • The accuracy of the data is contested by the person, for a period allowing the verification of the data’s accuracy;
  • The processing is unlawful, and the person opposes the deletion of personal data, requesting instead the restriction of their use;
  • The controller no longer needs the personal data for processing, but the person requests it for establishing, exercising, or defending a right in court; or
  • The person has opposed the processing (other than for direct marketing), for the period during which it is verified whether the controller’s legitimate rights override those of the data subject;
• Right to Data Portability, meaning (i) the right to receive personal data in a structured, commonly used, and machine-readable format and (ii) the right for such data to be transmitted by the Website Owner to another data controller, provided that the conditions stipulated by law are met;
• Right to Object to processing activities, which can be exercised by submitting a request as indicated below;
  • At any time, for reasons related to your particular situation, for the processing of your data under the Website Owner’s legitimate interest or public interest, unless the Website Owner demonstrates legitimate and compelling grounds for processing that prevail over your interests, rights, and freedoms, or for establishing, exercising, or defending a legal claim;
  • At any time, freely and without any justification, for the processing of your data for direct marketing purposes.
• Right not to be subject to an automated individual decision, i.e., the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or affects them significantly in a similar way;
• Right to contact the National Supervisory Authority for Personal Data Processing or the competent courts, if you consider it necessary.

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact us at the following email address: contact@skytransylvania.ro.