With effect from 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data entered into force and repealing Directive 95 / 46 / EC (General Data Protection Regulation), also known as GDPR.                                                                         Therefore, we want to inform you of your rights regarding the way we process your personal data.

What data are we talking about?

Personal data is any information that can lead to the identification of a person. So, first of all, include information that can lead to your identification, such as:

• surname and first name, numerical identification codes such as: fiscal identification code (CIF), registration number at the Trade Register, number of a bulletin.
• address and contact details, for example telephone number, e-mail address, etc.
  
  

We process this data for issuing service invoices, collecting claims related to them and resolving your requests in connection with the work performed by S.C. Staplea & Spa Serv S.R.L. Your refusal makes your refusal to provide services impossible. The recorded information is intended for use by S.C. Capsea Yachting S.R.L.  and are communicated only to the following recipients: the data subjects. We have appointed the Personal Data Protection Officer, who you can contact for anything related to the processing of your personal data and your rights in relation to these matters. You can make a request to the Data Protection Officer by email at contact@capsea-yachting.com.       

Why and for what purpose do we process your personal data?

We may process your personal data for the following purposes, based on the legitimate interests of the operator (Article 6 (1) of the GDPR), respectively:

• the establishment and collection of the debt, for which the legal basis for the processing is the legitimate interest pursued by the operator (Article 6 (1) (f) of the GDPR), consisting in the possibility to establish and pursue the recovery of the debt amicably or through judiciary;
•  to analyze the quality of our services, we evaluate your level of satisfaction with how we handle your case and check that our actions have been carried out properly;

• to find out what your preferences are, including by profiling, so that we can tailor how we contact you, what we can offer you, or how you pay your debt to meet your needs.

We may also process your data for the following purposes:

• taking action before signing a payment commitment or where it is necessary to honor or draw up a service contract for you (Article 6 (1) (b) of the GDPR). In addition, we have a legal obligation to process your personal data for accounting and tax purposes (Article 6 (1.c) of the GDPR) as well as to resolve your complaints.

How long do we store your personal data?

The period in which your personal data is processed by the Operator depends on the purpose of the processing. It is usually conditioned by:

• the term of the contractual relations – in case you have concluded one;
• the requirements set out in domestic law (for example, the obligation to keep accounting records).

            If you have given your consent for the processing of your personal data, e.g. for marketing purposes, your personal data will be processed until you withdraw this consent.

To whom will we disclose your personal data?

Your personal data is processed by:

Your data may also be made available to entities that support the debt recovery process, such as law firms, companies that provide document storage and archiving services, economic information offices, entities that provide postal or postal services. courier, as well as our consultants or auditors.

Do you have to provide us with your personal data?

Your data is provided to the subscriber voluntarily. To the extent that your personal data is processed to conclude a commitment, failure to provide the same data will make it impossible to conclude and execute the commitment.

Data obtained from other entities

If enforcement is initiated for debt recovery, we may obtain or update your data based on information received from bailiffs regarding ongoing enforcement proceedings. In accordance with the above, we specify that we can obtain the following categories of personal data: name and surname, address and contact details, numerical identification data (such as: identity card number and number), debt information such as: amounts of debt, its components and sources), information on the debt collection process (including payments made, complaints filed, legal and enforcement proceedings), information on payments made, information on the guarantee for debt repayment, information on the situation financial and economic (such as income and their sources, assets, including property).

Profiling and automatic decision making

We would like to inform you that your data will be processed by automatic means, including profiling. Profiling means that your personal data is used to assess your preferences, and to find out which is the preferred method of contact for payments made to the operator, e.g. if you wish to contact us by telephone, in person or by post only, to find such a debt repayment offer as the most favorable option for you and to consider how the debt repayment can be performed, ie by amicable settlement or legal proceedings. Therefore, you can challenge a decision on your particular situation, which was taken automatically by filing a complaint. This will be investigated by our employee who is authorized to make decisions.

What rights do you have in relation to your data and how can you exercise it?

In our work, we ensure that the rights deriving from the GDPR can be exercised. According to the GDPR, you have the right to:

• to obtain information on the processing of your personal data and a copy thereof;
• transfer personal data provided by you as a result of the conclusion of an agreement or on the basis of your consent;
• object to the processing of your personal data, especially for reasons related to your particular situation. As a rule, the exercise of the right of opposition prevents the processing of personal data. You must remember, however, that such an effect will not be produced if we have demonstrated that there are reasonable grounds for processing which take precedence over the objections or if we have demonstrated that there are reasons for establishing, exercising or defending our rights.

You can also request that:

• your data be rectified if the data we have is inaccurate, e.g. they are no longer relevant or incomplete;
• your personal data must be deleted (“right to be forgotten”) if: the data are no longer needed in relation to the purpose for which they were collected or processed, the data have been processed illegally; data deletion is required by law; you objected to the processing of your data; you have withdrawn your consent for data processing;
• the processing of your personal data is restricted, which means that you can limit your processing in the future, if you have challenged the accuracy of your personal data, the processing is illegal, but you do not want your personal data to be deleted; we no longer need your data, but you will have to defend yourself or exercise a right; you object to the processing of data – until it is established that there are legitimate reasons for processing, removing the reasons for opposition.

Please note that:

According to the GDPR, we will not delete your personal data to the extent that the processing is necessary for the establishment, exercise or defense of our rights conferred by law, e.g. a claim for debt repayment or a legal obligation to process the data, e.g. the obligation to keep the accounting documentation. However, if, at your request, we restrict your processing of your data, we will continue to be entitled to process your data in order to exercise or defend our rights under the law.

If personal data is processed on the basis of your consent, we remind you that you can withdraw it at any time. However, the consent will not affect the lawfulness of the data use by the controller on the basis of the consent before its withdrawal.

If you wish to exercise the above rights, you can send us the request:

• by e-mail to: contact@capsea-yachting.com;
• by mail to: Ploiesti, Prahova, str. Cameliei, nr.2, bl.45, Sc.B, ap.39, ground floor;
• in person, by contacting our representative: Data Protection Officer (DPO).

You can also file a complaint with a supervisory authority dealing with the protection of personal data, namely the National Authority for the Supervision of Personal Data Processing (A.N.S.D.P.D.C).