Taking into account the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we – as data controller – provide the following details on when and why we process your personal data, how we use them, the circumstances in which we can disclose them to others and how we store them securely.
If you have any question about how we process your personal data, you can read our Privacy Policy on Protecția datelor cu caracter personal | Heidelberg Materials Romania or contact us by mail, at our head office, Heidelberg Materials România S.A. in Bucharest, Șoseaua BucureștiPloiești nr.1A, Bucharest Business Park, Building C2, District 1 or by e-mail at rpd@ro.heidelbergmaterials.com
Purpose of personal data processing
Following your request submitted to the Company, either personally at any of our sites, or using other communication/correspondence means (e.g. post, courier, e-mail, fax), we process your personal data thus submitted (e.g. identification data, such as first and last name) in order to reply to your request.
The processing of your personal data for these purposes is based on your consent expressed by submitting the request.
Furthermore, your personal data may be processed pursuant to certain legitimate interests of the Company related to your request or in view of complying with certain legal requirements.
Your personal data are disclosed to third parties
In order to facilitate the performance of the activities related to the processing purposes detailed above, depending on your request, we communicate these data to our affiliates and contractual partners, auditors or consultants, to authorities and public institutions.
We will not transfer your personal data outside of the European Economic Area.
Your rights regarding personal data
Unless otherwise stipulated by the law, you shall have the following rights:
- the right of access, meaning the right to obtain a confirmation from us that we process your personal data, as well as access to these data and provision of information about the processing;
- the right to rectification which means the rectification without undue delay of inaccurate personal data and/or completion of incomplete personal data;
- the right to erasure/right to be forgotten, meaning the right to have your personal data erased without undue delay, where these data are no longer necessary in relation to the purposes for which they were collected and there is no other legal ground for processing, the data were unlawfully collected or the data have to be erased to comply with a legal obligation;
- The right to restriction of processing, which applies when (i) you challenge the accuracy of the personal data, (ii) the processing is unlawful and you oppose to the erasure of your personal data and request the restriction of their use instead, (iii) we no longer need the personal data, but they are required by you for the establishment, exercise or defense of legal claims, (iv) you have objected to processing pending the verification whether our legitimate grounds override yours;
- the right to object, unless we demonstrate compelling legitimate grounds for the processing of your data which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims;
- the right to portability, respectively your right to receive your personal data, which you have provided to us for the purposes indicated herein, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
- the right to submit a complaint with the National Supervisory Authority for the Processing of Personal Data (ANSPDCP) by mail to the address: b-dul. G-ral. Gheorghe Magheru nr. 28-30, sector 1, 010336 Bucharest or by e-mail at anspdcp@dataprotection.ro;
- the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the processing is necessary for entering into a contract, is based on explicit consent or is authorized by law.
Except for the right to submit a complaint with ANSPDCP, according to the above, these rights may be exercised by submitting a written request to the head office of Heidelberg Materials România S.A. based in Bucharest, Șoseaua București-Ploiești nr.1A, Bucharest Business Park, Building C2, District 1 or by e-mail at rpd@ro.heidelbergmaterials.com.
Storage period
We will process your personal data for the time necessary to reply to your request or in compliance with the limitation and archiving periods according to the procedural rules required by civil and/or criminal law.
Personal data security
The Company shall make all reasonable efforts to protect the personal data it holds or controls by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copy, alteration or erasure, as well as other similar risks.