Personal Data Protection Policy
The privacy policy sets the terms and conditions under which SMS Ticketing SRL, headquartered in Cluj-Napoca, Decebal, no. 69, Cluj County, as a personal data operator, processes and handles the personal data you provide us when you use the TaxeAuto.ro website (and all its sub-brands existing at the time of concluding this agreement as well as those in the future).
When using the TaxeAuto.ro site, each time you provide us with, or it is necessary to access any kind of information which, by its nature, allows us to identify you, such as your name, surname, email address, billing address, telephone number, etc. (personal data), whether it is for browsing, purchasing our products, or utilizing our services or functions, this Privacy Policy and our Cookie Policy will apply.
You, as a user, guarantee that the personal data provided are true and accurate, and you agree to notify us of any change or modification in a timely manner. If you provide us with third-party personal data, you are solely responsible for informing them and obtaining their consent for the purposes indicated in the corresponding sections of this Policy. Any loss or damage caused to the website, the personal data operator, or any third party through the communication of erroneous, inaccurate, or incomplete information in the registration/order forms will be the sole responsibility of the user.
Personal Data Processed by TaxeAuto.ro
TaxeAuto.ro uses the information collected - details provided by you at registration and activities carried out on our site - to facilitate access to this site, to improve certain products and services, and to inform you about the latest products and services of interest.
TaxeAuto.ro collects information from its users in the following ways:
a) Directly from the user:
When you subscribe to a service provided by TaxeAuto.ro, by creating an account, accessing, ordering, or purchasing various services and products we offer, TaxeAuto.ro will process personal data that can identify a specific person, such as: name/surname; address; email address; telephone number, contact information, billing information for services, and other information through which a person can be identified.
In other areas of our sites, TaxeAuto.ro collects or may collect information of a nature that can indirectly identify a person, such as: car chassis series, car registration country.
TaxeAuto.ro sometimes collects or may collect a combination of the two types of information, appropriately processing information that falls under the category of personal data.
b) Indirectly, through automated collection systems (webserver)
When you visit our site, certain information about you, such as the IP address, the time of visit, the place from where the site was accessed, TaxeAuto.ro, like other operators, automatically registers this information for traceability and security assurance purposes.
To provide a personalized service to our users, TaxeAuto.ro may use cookies to facilitate the storage and tracking of your preferences. For example, we may use cookies to identify you and to provide information and services based on the preferences you have expressed in your previous visits. More details can be found in our Cookie Policy.
We use the information provided by you for the following purposes:
a) To manage your account registrations, to answer your queries, to improve our site, to consult you to increase the quality of the products and services offered.
b) To conclude and execute the purchase contract for the products you have purchased from the TaxeAuto.ro site or any other contract with us through the site.
c) To fulfill legal obligations when purchasing products such as vignettes.
d) For marketing and advertising purposes: To be able to contact you via email, phone, SMS, or other forms of electronic communication, regarding updates or informative communications related to contracted products (for example, the SMS alert system), including security updates of our site, when their implementation is necessary and/or reasonable; (through cookies) to observe site browsing preferences and behaviors, aiming to offer personalized experiences.
e) To improve our products and services through customer feedback.
f) To improve the functionality of our website and to ensure its security.
g) For administrative, legal, and evidentiary purposes related to the above activities as well as archiving.
h) In case of other necessary uses of your personal data, as described in this policy. Thus, it may be necessary to transfer your personal data to third parties who provide us with support services, such as financial bodies, entities fighting against fraud, providers of legal services, technological services, logistics, IT, hosting, customer services, and/or services analyzing transactions made on the platform to provide users with sufficient guarantees in commercial operations, etc.
The legal bases for processing personal data are: our legitimate interest (ensuring that our actions do not override your rights and freedoms), your consent (this applies when it comes to direct marketing communications – newsletter, or installations of cookies that are not strictly necessary), as well as the execution of the contract (when there is an order/contract concluded between parties).
By using this website, you accept our Personal Data Protection Policy and expressly authorize us to transfer your personal data to the mentioned service providers. By accepting the sharing of their personal data, the user must be aware that service providers in partnership may have separate privacy and personal data collection practices. TaxeAuto.ro has no control and does not guarantee the legal aspects involved in the use of these independent privacy practices.
SECURITY OF PROCESSING AND DATA TRANSFERS
SMS Ticketing SRL has adopted technical and organizational data processing measures, updated in accordance with GDPR requirements, to protect your personal data against any unauthorized access, improper use or disclosure, unauthorized modification, accidental destruction or loss. All employees and collaborators of SMS Ticketing SRL, as well as any third parties acting on behalf of and for SMS Ticketing SRL, are required to respect the confidentiality of your information and GDPR requirements, in accordance with the provisions of this Policy.
Depending on the context, we may find ourselves in the absolute necessity to provide information at a higher level, both globally and internally or externally, to our partners and those with whom we make data transfers respecting the aforementioned Regulation, by virtue of providing the most professional services possible. Information controlled by SMS Ticketing SRL could be transferred, transmitted, or stored and processed in the EU or in countries other than the country you live in, for the purposes described in this policy. These data transfers are necessary to be able to provide services at the highest level, as well as to continue providing you with our materials at the highest professional level. If there is a case of data transfer outside the EEA, we will ensure that the transfer is only legally made in terms of data protection (e.g., where there are adequacy decisions, Privacy Shield, or specific contractual clauses, etc.).
DATA STORAGE PERIOD
SMS Ticketing SRL may retain the processed data for different periods of time, deemed reasonable, in accordance with the purposes indicated above. We keep your data only for the period necessary to achieve the purpose for which we hold the data, to meet your needs, or to fulfill our legal obligations.
To know how long your data can be kept, we use the following criteria: a) When you purchase products and services, we keep your personal data for the duration of our contractual relationship for 5 years; b) If you participate in a promotional offer, we keep your personal data for the duration of the promotional offer; c) If you contact us with a query, we keep your personal data for the duration necessary to process your queries, but not more than 5 years from the last correspondence sent; d) If you create an account, we keep your personal data until you ask us to delete them or after a period of inactivity (without an active interaction with our brands) defined in accordance with local regulations and guidelines. In this sense, we mention that the data processed for this purpose will be deleted 5 years after the last interaction with the account user (e.g., logging into your account); e) If you have given your consent for marketing, we keep your personal data until you unsubscribe or ask us to delete them or after a period of inactivity (without an active interaction with our brands) defined in accordance with local regulations and guidelines. In this sense, we mention that data stored in our databases for the purpose of direct marketing communications are deleted from the records of these databases 5 years after the last interaction with you; e) If cookies are stored on your computer, we keep them for as long as necessary for them to achieve their purposes (e.g., for the duration of a session for shopping cart cookies or session ID cookies) and for a period defined in accordance with local regulations and guidelines. In this sense, we mention that data processed through cookies used to provide online behavioral advertising, to personalize our services for you, and to allow the sharing of our content on social networking sites (sharing buttons intended for displaying the site), will be kept for a maximum period of 5 years from their collection, based on your consent.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Personal data processed through the www.TaxeAuto.ro site may be disclosed and/or transferred to third parties only in the situation where there is your express consent to proceed in this way, except for situations where there is a legal obligation or a contractual relationship with a third party necessary for SMS Ticketing SRL to proceed in this manner.
Please be aware that, in certain circumstances, we may be required to disclose your personal data, to partners with whom SMS Ticketing SRL collaborates and/or other third-party service providers of SMS Ticketing SRL.
Third parties that have access to data are: delivery companies, payment processors, marketing services (analysis, promotion), IT product and service providers (maintenance, applications and software systems, security).
Also, we may transmit your data to various authorities, public institutions, lawyers, insurance companies, auditors, external consultants only to the extent that it is necessary for them to be known or processed according to applicable legal requirements.
There may
be situations where we will need to disclose your personal data when it is necessary according to a legal requirement or when it is necessary to protect a vital interest (yours or another physical person). Also, this situation can be applied when it is necessary for the establishment and exercise of our right of defense against claims/litigations.
RIGHTS OF DATA SUBJECTS
As an individual, you have certain rights that you can exercise, and we will respond in accordance with all applicable legal requirements. It is important to highlight that some of the rights below may be applied restrictively in certain circumstances; for any kind of details, as well as for sending your request, please contact us.
Thus, you benefit from the following rights:
1. to be informed about how we process your data (this we demonstrate through the presentation and communication of this Policy)
2. The right of access to processed data - You have the right to access the personal data we hold about you. The first provision of information will be made without charging any fee. If you need copies of the information already provided, we may charge a reasonable fee considering the administrative costs of providing the information. Manifestly unfounded, excessive, or repetitive requests may not receive a response.
3. The right to data rectification - You have the right to request that your Data be rectified if it is inaccurate or outdated and/or to complete it if it is incomplete. If you have an account, it might be easier to correct your own data via the "My Account" function.
4. The right to data erasure (“the right to be forgotten”) - In some cases, you have the right to obtain the erasure or destruction of your Data. This is not an absolute right, as sometimes we may be forced to keep your Data for legal or legitimate reasons.
5. The right to restriction of processing - You have the right to request the restriction of processing your Data. This means that the processing of your Data is limited, so we can keep the Data, but not use or process it. This right applies in specific circumstances provided by the GDPR, namely:
• the accuracy of the Data is contested by the data subject (i.e., you), for a period that allows the operator (i.e., SMS Ticketing SRL) to verify the accuracy of the Data;
• the processing is unlawful and the data subject (i.e., you) opposes the deletion of the Data and requests the restriction of their use instead;
• the operator (for example, SMS Ticketing SRL) no longer needs the Data for processing, but they are requested by the data subject (i.e., you) for the establishment, exercise, or defense of legal claims;
• the data subject (i.e., you) has objected to processing based on the legitimate interests of the operator (in this case, SMS Ticketing SRL) pending the verification whether the legitimate grounds of the operator (SMS Ticketing SRL) override those of the data subject (i.e., you).
6. The right to object - You can object at any time to the processing of your data when such processing is based on a legitimate interest.
7. The right to data portability - You have the right to move, copy, or transfer data that interests you from our database to another. This applies only to data you have provided when processing is based on your consent or on a contract and is carried out by automated means.
8. The right to withdraw consent at any time - You can withdraw your consent regarding the processing of your data when such processing is based on consent. Withdrawal of consent does not affect the legality of the processing based on consent before its withdrawal.
9. Rights to object regarding automated decisions and profiling, which may have significant effects
10. The right to file a complaint with the competent supervisory authority - You have the right to file a complaint with the Data Protection Supervisory Authority to challenge the data protection practices offered by SMS Ticketing SRL (www.dataprotection.ro)
CONTACT and other information
If you have questions or concerns about how we treat and use your personal data or wish to exercise any of your rights, please contact us by accessing the contact details of our DPO: dpo @TaxeAuto .ro
Please be aware that this Policy may be subject to periodic content changes by updating the www.TaxeAuto.ro site. We invite you to review it regularly.
