Privacy Policy

Please be informed that, as of 25 May 2018, Regulation (EU)2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) has been applicable in all Member States of the European Union.

The main purpose of the GDPR is to enhance the protection of personal data and to create a climate of trust that enables individuals to maintain control over their own data.

Rinapack SRL complies with the European standards regarding the processing of personal data as set out in the GDPR. Data protection is of particular importance to us, and we are committed to being open and transparent regarding the processing of personal data.

I. Categories of Data Subjects

This Personal Data Processing Policy applies to customers, both natural and legal persons (including representatives of legal entities), involved in the conclusion and performance of contracts or in the course of a business relationship with Rinapack SRL, potential customers or suppliers, employees, trainees or collaborators, as well as other individuals who contact us or visit our premises.

II. Types of Personal Data Processed, Purposes and Legal Bases of Processing, Recipients

1. If you are representatives/ delegates of partner companies (legal entities)

We process personal data such as first name, last name, telephone number, e-mail address, position held, employer’s name and other contact details for the purpose of performing an existing contract, concluding a new contract, and fulfilling legal obligations arising from a contract, offer, or business relationship.

The legal basis for the processing is Article 6(1) (b) and (c) of the GDPR, namely the performance of a contract and compliance with legal obligations applicable to the controller.

Personal data relating to contact persons may be collected from electronic communications, contractual offers, or directly from the data subject.

Categories of recipients of such data:

• Supervisory and control authorities, law enforcement authorities, courts of law, public authorities and other competent bodies, where required by law;

• Transport service providers/ couriers for the collection and dispatch of goods or correspondence, technical maintenance service providers, IT service providers, auditors or other professional consultants, and other third parties authorised by law to receive personal data disclosures.

2. If you are visitors to our premises or provide transport services

Pursuant to Annex 2(d) of Government Decision No. 301/2012 approving the Methodological Norms for the application of Law No. 333/2003, the personal data of visitors to Rinapack SRL premises, namely first name, last name, identity card/passport series and number, are processed for the purpose of ensuring the security of the premises.

The processing is carried out on the basis of the legal obligations applicable to the controller, in accordance with Article 6(1)(c) of the GDPR.

In the case of drivers delegated by transport companies, we also process identification data for the purpose of preparing accounting documents (invoices, delivery notes) and transport documents (CMR consignment notes), in accordance with tax legislation and for the performance of transport and sale-purchase agreements.

The legal basis for processing is Article 6(1)(b) and (c) of the GDPR, namely the performance of contracts and compliance with legal obligations applicable to the controller.

Categories of recipients to whom the above data may be disclosed:

• Supervisory and control authorities, law enforcement authorities, courts of law and other competent authorities, where required by law;

• Technical maintenance service providers, IT service providers, auditors or other professional consultants, and other third parties authorised by law to receive personal data disclosures;

• Companies that have contracted with us for the transportation or purchase of goods, solely in relation to the contractual activities performed by the delegated persons;

• Cargo insurance providers.

3. If you are delegates of other companies carrying out works on our premises

Personal data such as first name, last name, identity card series and number, position, education, qualifications and employer details, belonging to individuals delegated to perform various works on the premises of Rinapack SRL, are processed for the purpose of providing collective occupational health and safety training in accordance with Law No. 319/2006, as well as for granting access to our premises during the execution of the relevant works and for the performance of the contract.

The legal basis for processing is Article 6(1)(b) and (c) of the GDPR, namely the performance of contracts and compliance with legal obligations applicable to the controller.

Categories of recipients of such data:

• Supervisory and control authorities, law enforcement authorities, courts of law and other competent authorities, where required by law;

• The employer of the trained personnel;

• Technical maintenance service providers, IT service providers, auditors or other professional consultants, and other third parties authorised by law to receive personal data disclosures.

4. If you are applicants for our vacant positions

Your personal data, including first name, last name, personal identification number (CNP), date of birth, parent’s names, address, identity card series and number, position, education, qualifications, marital status, telephone number and e-mail address, are processed during the recruitment process for the purpose of entering into an individual employment agreement.

The personal identification number (CNP) is processed exclusively to the extent necessary for carrying out the legal formalities preceding employment and preparing employment-related documentation.

The legal basis for processing is Article 6(1)(b) and (c) of the GDPR, namely taking steps at the request of the data subject prior to entering a contract and compliance with legal obligations applicable to the controller.

Such data are disclosed only regarding the selected candidate and only to the following recipients:

• The County Employment Agency (AJOFM), where required by law for employment placement purposes;

• The occupational health service provider, for the purpose of assessing fitness for work prior to employment, in accordance with contractual obligations.

5. If you contact us for other requests

We collect personal data when an individual contacts us regarding an inquiry, request or complaint (such as name, contact details and the content of the communication).

In such cases, the individual retains control over the personal data provided, and we will use such data solely for the purpose of responding to the relevant request.

The legal basis for processing is Article 6(1)(f) of the GDPR, namely the legitimate interest of the controller in responding to requests addressed to it.

III. Personal Data Security Measures

Rinapack SRL is continuously committed to improving the technical and organisational measures implemented to ensure the security of your personal data and to protect it against destruction, alteration, disclosure, or unauthorised access.

We maintain a framework of policies and procedures relating to personal data protection and periodically review the adequacy of the measures in place.

Within Rinapack SRL, access to your personal data is restricted to personnel involved in fulfilling contractual obligations or communicating with business partners. Such personnel are trained regarding the confidential nature of personal data, and access is granted through user authentication and login procedures.

IV. Data Retention Period

We will retain your personal data only for the period necessary to fulfil the purposes for which it is processed, as described above, and in compliance with the applicable legal requirements.

Depending on the purposes of processing, your personal data will be retained as follows:

• For the duration of the contractual or business relationship and, where applicable, after its termination for the period required by applicable legal provisions, statutory limitation periods, and archiving requirements, including but not limited to record retention obligations;

• Recordings obtained through the closed-circuit video surveillance system (CCTV) are retained for a maximum period of 30 days, except in the case of security incidents, where the recordings may be retained for a longer period, depending on the time required for further investigation;

• Applicants data are retained until the completion of the recruitment process and are deleted/destroyed once the position has been filled, except where: (i) the applicant has consented to further retention of the data, and (ii) the data relate to the applicant who has been hired;

• Data relating to visitors to our premises are retained in accordance with applicable legal provisions and archiving requirements.

In certain circumstances, we may retain your personal data for longer periods in connection with complaints or issues that may arise, as well as for the establishment, exercise, or defence of our rights before dispute resolution bodies or competent authorities.

Personal data provided by you through the contact form available on the RINAPACK SRL website, rinapack.ro, will be retained both for the period necessary to handle your request and for the duration of any applicable limitation period relating to a potential dispute, including, but not limited to, applicable archiving requirements.

However, personal data communicated through the aforementioned form that are unrelated to the purpose for which the form has been established (namely contacting RINAPACK SRL for the purpose of entering into a contract or obtaining information regarding our products and services) shall be deleted or anonymised within a reasonable period by RINAPACK SRL representatives, provided that such data do not form an integral part of a request submitted in accordance with the intended purpose of the form and subject to compliance with applicable legal obligations.

V. Your Rights

Rights of Data Subjects

As a data subject, the GDPR grants you a number of rights. The full list of your rights is set out below:

• Right of access – allows you to obtain confirmation as to whether your personal data are being processed by us, as well as relevant information regarding such processing activities and their purposes;

• Right to rectification – allows you to request the correction of inaccurate or incomplete personal data;

• Right to erasure (“right to be forgotten”) – allows you to request the deletion of your personal data where such data are no longer necessary for the purposes for which they were collected, where you have withdrawn your consent and no other legal basis for processing exists, where the data have been processed unlawfully, or where erasure is required to comply with a legal obligation;

• Right to restriction of processing – allows you to request the restriction of processing in certain circumstances provided for by the GDPR, for example where you contest the accuracy of the data or the lawfulness of the processing;

• Right to object – allows you to object to the processing of your personal data based on our legitimate interests or a task carried out in the public interest, on grounds relating to your particular situation;

• Right to data portability – allows you to receive and transfer the personal data you have provided to us to another data controller;

• Right not to be subject to a decision based solely on automated processing, including profiling – allows you to object to decisions taken exclusively by automated means, including the right to challenge such decisions or request human intervention and review;

• Right to withdraw consent – allows you to withdraw your consent through a process that is at least as easy as the one used to provide it;

• Right to lodge a complaint with the supervisory authority – allows you to submit a complaint to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) if you believe that your rights under the GDPR have been infringed;

• Right to seek judicial remedies – allows you to bring proceedings before the competent courts and seek compensation for any damage suffered as a result of a breach of the GDPR or applicable national legislation governing the processing of personal data.

VI. Exercising Your Rights Regarding Data Processing

You may exercise your rights, request clarification regarding the manner in which we process your personal data, or seek information regarding the contents of this document by submitting a written request to the following e-mail address: info@rinapack.ro or by contacting us at our registered office located in Codlea, 26 Hălchiului Street, Brașov County, Romania.

‍

COOKIE POLICY

When you use the rinapack.ro website, cookies will be stored on the device used to access the website. Our website is continuously adapted to meet the needs of our users. For this purpose, we use cookies. We also use certain cookies for analytics, content personalization, and the display of relevant advertisements on our website or on third-party platforms, including social media networks, to the extent that you have provided your consent for these categories of cookies.

Please read below to learn what cookies are, how they work, and how we use them on the rinapack.ro website.

1. What is a cookie and what is it used for?

Our website uses cookie technology to provide you with a better and more personalized web experience. The cookies used on the website may collect information regarding website usage and user preferences. In certain circumstances, such information may constitute personal data.

Cookies are files created by the websites you visit. They improve your online experience by saving browsing information. By using cookies, websites can keep you signed in, remember your website preferences, and provide locally relevant content. (Source: Google)

With the exception of cookies that are strictly necessary for the operation of the website, cookies are installed on your device only on the basis of your consent, expressed by selecting the options corresponding to each category of cookies available when accessing the website.

You may choose to enable any category of cookies for which you wish to provide consent by selecting the corresponding option. Necessary cookies will always remain active when accessing the website, as the website cannot function properly without them.

2. How can you modify your cookie settings?

You may allow or block cookies stored by websites.

For this purpose, you may block or delete cookies either through your web browser settings, by using third-party software solutions, or by following the instructions applicable to the browser you use.

Cookie-related settings can usually be found in the “Options”, “Tools”, or “Preferences” menus of the web browser used to access the rinapack.ro website. Depending on the browser used, different methods maybe available for disabling cookies. For further information, please visit your browser provider’s website.

You may also prevent the installation of cookies by choosing not to select the corresponding options, except for strictly necessary cookies, without which the website can`t function.

Selecting the options corresponding to each type of cookie constitutes your valid consent to the installation of such cookies on the device used to access the website. Likewise, changing your preferences by deselecting an option corresponding to a cookie category constitutes withdrawal of your consent.

3. Types of cookies used on the rinapack.ro website

• Strictly Necessary Cookies – These cookies enable you to navigate the rinapack.ro website and use its essential features. They are generally set only in response to actions performed by you that amount to a request for services. These cookies are indispensable for the proper functioning of the website.

• Analytics and Performance Cookies – These cookies allow us to recognize and count users and collect information regarding how therinapack.ro website is used (for example, which pages are accessed most frequently and whether users receive error messages from certain pages). This helps us improve the way our website operates.

Specifically, we use Google Analytics, Google's analytics tool that helps website and application owners understand how visitors interact with their properties. Google Analytics uses cookies to collect information about website usage and to generate statistical reports regarding user activity. The primary cookie used by Google Analytics is the "__ga"cookie. (Source: Google)

Please note that we use Google Analytics together with IP address anonymization functionality for website visitors.

Detailed information regarding Google Analytics and personal data protection can be found at policies.google.com/privacy/partners.

If you wish to prevent Google Analytics from using your data, you may access the following link and download the browser add-on designed to block certain cookies: https://tools.google.com/dlpage/gaoptout.

• Social Media Cookies – These cookies allow you to share your activity on the website through social media platforms such as Facebook. These cookies are not controlled by Rinapack SRL. For more information regarding the cookie policies of the respective social media platforms, please consult their dedicated pages (Facebook: https://www.facebook.com/policies/cookies/).

• Other Types of Cookies – Additional categories of cookies may be used in the future. If any such cookies are implemented, we will inform you through updated versions of this policy.

• Third-Party Cookies – Third parties may use anonymous cookies to measure performance or determine visitor preferences. These cookies may originate from third parties that provide applications used for the operation of the website (such as Google Maps, which may process your personal data when loading the map displayed in the Contact section of the rinapack.ro website) or from third parties that are not directly involved in the operation of the website (such as social media platforms where the URL of the rinapack.ro website may be shared).

Please note that the administrator of this website does not have access to such cookies. Cookie preferences may be managed both through the settings of the browser used and through the options made available when accessing the website.

‍