We would like to inform you that, starting on 25 May 2018, Regulation 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) applies in all European Union states.
The main purpose of the GDPR is to increase the level of protection of personal data and to create a climate of trust that allows every person to control their own data.
Spectra aligns with the European standards on personal data processing set out in the GDPR. Data protection is of particular importance to us and we want to be open and transparent about how we process personal data.
I. Categories of data subjects:
The personal data processing policy is addressed to legal representatives and/or employees responsible for or involved in concluding and performing contracts or in the business relationship with Spectra – potential customers or suppliers, employees, trainees or collaborators, as well as other persons who contact us or visit our premises.
II. Types of personal data processed, purpose and legal basis of processing, recipients:
1. If you are representatives/delegates of the various partner companies (legal entities).
We process personal data, namely first name, last name, telephone, e-mail, position held, employer’s name and other contact details, for the purpose of performing a contract or concluding a new contract and for fulfilling the legal obligations arising from the contract/offer or from the business relationship. Personal data about contact persons may be collected from electronic messages, from contract offers or directly from the data subject.
Categories of recipients for this data:
- Supervisory and control authorities/institutions, criminal investigation bodies, courts of law, etc., as provided by law;
- Transport/courier service providers for collecting/dispatching goods/correspondence, technical maintenance companies, IT service providers, auditors or other specialist consultants, and other third parties authorised to obtain disclosure of personal data under the law;
2. If you are visitors to our premises or you carry out transport services
Pursuant to Annex 2d) of Government Decision no. 301/2012 – the methodological norms for applying Law no. 333/2003, the data of Spectra’s visitors, namely first name, last name, series and number of identity card/passport, are processed for the purpose of ensuring the security of the premises.
For the drivers delegated by carriers, we process the identification data also for the purpose of drawing up accounting documents (invoices, delivery notes) and transport documents (CMR), in accordance with tax law and for the performance of transport contracts and of goods sale-purchase contracts.
Categories of recipients to whom the above data is disclosed by transmission:
- Supervisory and control authorities/institutions, criminal investigation bodies, courts of law, etc., as provided by law;
- Technical maintenance companies, IT service providers, auditors or other specialist consultants, and other third parties authorised to obtain disclosure of personal data under the law.
- Companies that have contracted with us for the transport of goods or their purchase, only with regard to the contractual relationship carried out by the delegated persons;
- Insurers of the transported goods;
3. If you are delegates of other companies carrying out works on our companies’ premises
Personal data, namely first name, last name, series and number of identity card, position, education, qualification, employer, belonging to natural persons delegated to carry out various works on Spectra’s premises, are processed in order to provide the collective occupational health and safety training, in accordance with Law no. 319/2006, and to allow access to the premises for the duration of the works, in order to perform the contract.
Categories of recipients for this data:
- Supervisory and control authorities/institutions, criminal investigation bodies, courts of law, etc., as provided by law;
- The employer of the trained personnel;
- Technical maintenance companies, IT service providers, auditors or other specialist consultants, and other third parties authorised to obtain disclosure of personal data under the law.
4. If you are candidates for our vacant positions
Your data: first name, last name, personal identification number, date of birth, parents’ names, address, series and number of identity card, position, education, qualification, marital status, telephone, e-mail are processed during the recruitment process with a view to concluding an individual employment contract.
They are transmitted, only for the selected person, to the following recipients:
- the county employment agency (AJOFM) for obtaining the placement, as provided by law,
- the medical services provider, in order to verify fitness for work at hiring, according to the contract.
5. If you are persons who contact us for other requests
We collect personal data when a person contacts us with a question, request or complaint (such as name, contact details and the content of the communication). In these situations, the person concerned has control over the personal data sent, and we will use this data only for the purpose of answering the request.
III. How personal data is secured:
Spectra constantly works to improve the technical and organisational measures implemented to ensure the security of your personal data, in order to protect it against destruction, alteration, disclosure or unauthorised access. We have a framework of policies and procedures on personal data protection and we periodically check that the measures in place are adequate.
Within Spectra, access to your personal data is limited to the staff involved in fulfilling the obligations assumed under the contract or in communicating with business partners; they are trained on the confidential nature of the data, and access is made through user authentication and login procedures.
IV. Data storage period:
We will store your personal data only for the period of time necessary to achieve the purposes of processing, as mentioned above, and in compliance with the legal regulations in force.
Accordingly, depending on the purposes of processing, your data is kept:
- for the duration of the contractual or collaboration relationship and, where applicable, after its termination for the period required by the applicable legal provisions, for the limitation period, including, but not limited to, the rules on archiving.
- footage from the internal closed-circuit video system is kept for a maximum of 30 days, except for security incidents, for which the footage is kept for longer, depending on the time needed for further investigation;
- candidates’ data is kept until the end of the recruitment process and is deleted/destroyed when the position is filled, except for: (i) the expression of consent to keep it and (ii) the data of the candidate who was hired;
- the data of visitors to our premises is kept in accordance with the legal provisions and the archiving rules.
In certain circumstances, we may keep your personal data for longer periods in the event of any complaints or issues that may arise, and for the purpose of establishing, exercising or defending our rights before dispute-resolution bodies.
V. Your rights:
As a data subject, the GDPR gives you a number of rights. Here is the complete list of the rights you have:
- right of access – allows you to obtain confirmation that your personal data is processed by us, as well as relevant details of these processing activities and their purpose;
- right to rectification – allows you to modify your personal data if it is incorrect;
- right to erasure (“right to be forgotten”) – allows you to have your personal data erased if it is no longer necessary for the purpose for which it was collected, if you have withdrawn your consent and there is no other legal basis for processing, if the data was collected unlawfully, or if the data must be erased to comply with a legal obligation;
- right to restriction of processing – allows you to restrict the processing of personal data in certain cases (for example, when you contest the accuracy of the personal data, or the change of the period for which it is collected);
- right to object – allows you to object to the processing of your personal data based on our legitimate interest or a public interest, on grounds relating to your particular situation;
- right to data portability – allows you to transfer the personal data you provided to us to another data controller;
VI. Exercising your rights regarding data processing:
You can exercise your rights, or submit a request for clarification about how we process your personal data or about the content of this document, by sending a written request to the e-mail address sales@spectra.ro or to our company’s premises.
COOKIE POLICY
When you use the spectra.ro website, cookie files will be saved on your computer or on any mobile device you use. Our website is constantly adapted to meet the needs of our users. For this purpose we use cookies, and also to send you personalised offers both on our website and on social networks.
Read below to find out what a cookie is, how it works, and how we use them on the spectra.ro website:
1. What is a cookie file and what is it used for?
Our website uses cookie technology to give you a better and personalised web service. The data stored by the cookie files we use never shows personal details from which an individual identity could be established.
Cookies are files created by the websites you visit. They improve your online experience by saving browsing information. Using cookies, websites can keep you signed in, remember your site preferences and provide you with locally relevant content. (source: google.com)
2. How can you change your cookie settings?
You can allow or block the cookies saved by websites, but if you do not allow websites to save cookies, most websites that require signing in will not work.
For this purpose, you can block or remove cookie files either through your web browser settings, through software provided by third parties, or by following the specific instructions for the browser you use.
You can usually find the browsing settings related to cookie files in the “Options”, “Tools” or “Preferences” menus of the web browser you use to access the spectra.ro website. Depending on the existing web browsers, various means can be used to disable cookie files. For more information, please visit the website of your browser.
3. Cookie files used on the spectra.ro website:
- Strictly necessary cookie files allow you to browse the spectra.ro website and use its basic functions. They are usually installed only in response to actions made by you that amount to a request for services. These cookie files are indispensable for using websites.
- Analytical and performance cookie files allow us to recognise and count users and to collect information about how the spectra.ro website is used (for example, the pages a user opens most often and whether the user receives error messages from certain pages). This helps us improve the way the Spectra website works.
Specifically, we use Google Analytics, the Google analytics tool that helps website and application owners understand how visitors interact with their properties. Google Analytics may use a set of cookies to collect information and report statistical data on website usage, without sending Google data that identifies visitors. The main cookie used by Google Analytics is the “__ga” cookie. (source: google.com).
Detailed information about Google Analytics and personal data protection can be found at: policies.google.com/privacy/partners
- Social network cookie files allow you to share your activity on social networks on the website: Facebook, Google+. These cookie files are not controlled by Spectra. To learn more about the cookie policies of the social networks mentioned, you can visit each site’s own page (Facebook: https://www.facebook.com/policies/cookies/, Google+: policies.google.com/technologies/cookies)
- Other types of cookie files that may be used later. We will inform you through our updated policies if any other types of cookies are used.
