Information note
INFORMATION NOTE REGARDING PERSONAL DATA PROTECTION AND STATEMENT OF CONSENT OF THE NATURAL PERSON REGARDING THE PROCESSING OF THEIR PERSONAL DATA FOR THE WEB SITE CONTACT FORM
Personal data controller
KMG Rompetrol (the Company), part of the KMG International Group, headquartered in 3-5 Presei Libere Square, 5th floor, Bucharest, registered with the Trade Registry under no. J40/9817/2010, duly represented by Mr. Zhanat Tussupbekov, as Director, has the obligation to process and store your personal data which you provided to us under safe conditions according to the applicable Law
Applicable law
• Law no. 677/2001 for the persons’ protection regarding the processing of personal data and the free movement of such data (the Law), and
• (EU) Regulation no. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR),
Personal data (PD) - forename, surname, email address, company, telephone, IP address
Processing purposes – PD are processed by the Company to provide you with answers as a result of your requests sent through www.kmginternational.com, to send your request to the internal responsible departments on the following Internal Communication Means: Yammer, email, SharePoint, digital screens, to archive the request and the provided answer and to communicate to you newsletters, commercial communications and information on the products and services of KMG International;
Data processing duration - The PD storage period shall be over the performance of the offer selection procedure, and then the PD shall be stored in the Company’s internal archive over the existence of the Company’s legitimate commercial interest or until you withdraw your consent, whichever occurs first.
Empowered persons/Recipients/Associated controller – PD may be processed by the following persons, subject to the strict observance of the legislation regarding personal data protection:
The companies in the KMG International Group supplying activities for the Company or to which the Company reports the results of its activity (KMG Rompetrol Services Center)
Related or/and archive service supply providers, SC WEBSTYLER S.R.L. and any other entity with which the Company shall contract services and goods and which took adequate protection measures.
Other suppliers of services which concluded agreements with the Company and which have the capacity as associated controller according to Art. 26 of GDPR, for the use, archiving of the Materials related to the Event in order to promote it based on your Consent.
PD use - to provide you with answers as a result of your requests sent through www.kmginternational.com, to send your request to the internal responsible departments on the following Internal Communication Means, to archive the request and the provided answer and to communicate to you newsletters, commercial communications and information on the products and services of KMG International; PD may be accessed, viewed from anywhere, by third persons.
The Company shall take all the necessary and legal technical measures to protect the PD and the copyright related to their content.
Rights of the data subject as regards PD
According to the Applicable law, you have the following rights:
i. the right to information and access to your personal data,
ii. the right to the rectification of your data,
iii. the right to be forgotten /right to data deletion;
iv. the right to restrict the processing;
v. the right to data portability;
vi. the right to oppose to PD processing;
vii. the right not to be subject to an individual decision;
viii. the right to notify the National Supervisory Authority for Personal Data Processing (link) or any competent courts.
All these rights may be exercised through a written, signed and dated application, to the Data Protection Officer to: dataprotection@rompetrol.com.
Also, as data subject, you are entitled to address the National Supervisory Authority for Personal Data Processing and the court.
If you address a request regarding the exercise of your rights regarding data protection, the Controller shall answer such request within 30 days under the terms provided by the EU General Data Protection Regulation 2016/679.
If you invoke the right to oppose to the PD processing you shall receive an answer according to Art. 21 of the GDPR, your objection for such an operation not having any effect on the other purposes mentioned herein.
The personal data controller guarantees that it processes your data under legitimacy conditions, while implementing adequate technical and organizational measures to ensure data integrity and confidentiality according to Arts. 25 and 32 of the General Data Protection Regulation.