Privacy Policy

Privacy Policy

Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL

 

Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL with registered office at 16 Charles de Gaulle Square, Sector 1, Bucharest, registered with the Trade Registry Office under no. J40/3870/2015, VAT number RO 34304829, complies with the current legal provisions regarding the protection of personal data in the conduct of its entire activity and provides respect, trust, and confidentiality, offering security to all personal data collected on our website.

Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL values the confidentiality of the information of the visitors of the website https://www.richrbt.ro/ and of the individuals whose personal information it receives through the use of applications, forms, and other related services.

This privacy policy explains how the Company collects and processes personal information through the website and beyond, in the conduct of its activities regarding the operation and delivery of services and products, ensuring that your personal data is processed responsibly and in accordance with the applicable data protection legislation.

By providing personal information on the website of Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL, you agree to the information handling practices described in this privacy policy. We encourage you to read the section entitled "Your Rights" below, to understand the choices you have regarding your personal information.

To facilitate the understanding of the document, we have included at the end of this note a glossary explaining the main concepts used (e.g. "personal data", "processing", etc.).

  1. OUR CONTACT DETAILS:

If you have any comments, suggestions, questions regarding any information in this notice or regarding any other aspects related to the processing of your data that we carry out, please do not hesitate to contact our Data Protection Officer at any time. Depending on your preferences, you can contact us through any of the communication channels below:

Full name: Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL

Registered office address: 16 Charles de Gaulle Square, Sector 1, Bucharest

Phone number: +40312298468

Email address: office@richrbt.ro

  1. COMPLIANCE WITH PROCESSING PRINCIPLES:
  2. Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL, in its processing of personal data, always adheres to the following principles:
  3. All data is processed lawfully, fairly, and transparently towards the data subject ("lawfulness, fairness, and transparency");
  4. Personal data is collected for specified, explicit, and legitimate purposes and is not further processed in a manner that is incompatible with those purposes ("purpose limitation");
  5. All personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed ("data minimization");
  6. We ensure that your data is accurate and, where necessary, we update it; we take all necessary measures to ensure that personal data that is inaccurate, considering the purposes for which it is processed, is erased or rectified without delay ("accuracy");
  7. Your personal data is not kept for longer than necessary ("storage limitation");
  8. Adequate security of your personal data processing, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by implementing appropriate technical or organizational measures ("integrity and confidentiality");
  9. Processing is carried out in accordance with respect for your rights as a data subject;
  10. Your data is not transferred outside the European Economic Area unless the territory/country to which it is transferred provides an adequate level of protection of personal data.

III. PERSONAL DATA WE PROCESS:

The personal data concerning you that we will process are the data obtained directly from you, which you voluntarily transmit to us, technical data collected from all website users, information collected through our services, information we collect from third parties who have permission to exchange information with us, and include the following categories of data:

  1. Personal details: name; surname; gender; date of birth/age; nationality; home address/residence, mobile/landline phone number, fax number; email address, CNP, other information from your identity document (including issue date, expiry date of the document, place of birth),
  2. Image data: geolocation data, images/video recordings (in our premises where we have installed CCTV surveillance cameras – where applicable, these are indicated by visible signs);
  3. Your contact with us, such as a note or recording of a call you made to us, data transmitted by email or letter, requesting a quote, or other records of contact with us;
  4. Payment details: billing address, bank account number or bank card number/IBAN code, name and surname of the bank account or bank card holder (may be different from yours if someone else has made a payment on behalf of and for you); date from which the bank card is valid; bank card expiry date, customer code;
  5. Opinions and views (may include sensitive data), such as: any opinions and views you transmit to us or any opinions and views you publicly post about us on social media networks or make known through other public channels;

We will collect your ordinary personal data when, for example:

  1. You visit our premises, you send us CVs or job applications;
  2. You send us a collaboration request or a response to the collaboration request;
  3. You request/purchase or use any of our services/products;
  4. For the conclusion/execution of a contract;
  5. You subscribe to newsletters, alerts, or other services offered by us;
  6. You contact us through various channels to request information about our services; e.g. when you choose to provide them through the website https://www.richrbt.ro/ including when you send us an email with a question – it is recorded to respond to your request;
  7. You visit or browse our website;
  8. In situations where we transmit such data to third-party providers or collaborators, to the extent that we have legal grounds, for example: lawyers, consultants, accountants, etc.;
  9. When your personal data is publicly available;
  10. We receive and automatically record information from your browser's server logs when you use the website https://www.richrbt.ro/. We may use a variety of methods, including "cookies," to collect this information. The information we may collect through these automated methods may include, for example, your IP address, the type of browser you use, the content and pages you access on our website, the duration and frequency of your visits to track your movements on our website – see the Cookie section below.

Our respect for your data includes the fact that we provide the necessary human attention to it through our staff. Under current conditions, you are not subject to any decision made solely based on automated processing of your data (including profiling) that produces legal effects concerning you or similarly affects you in a significant way.

  1. THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

The purposes for which we process personal data concerning you are as follows:

  1. For the provision of our services. Your personal data is used to carry out our activities, to comply with requests from the competent authorities that supervise and regulate our activities.
  2. Billing and customer relations. To invoice you for the purchase of our services, to contact you in case the billing details you provided are incorrect, about to expire, or if we cannot collect the payment, to respond to any questions or concerns you may have regarding our services;
  3. Management of our communication and IT systems. Management of our communication systems; management of our IT security; conducting security audits on our IT networks, issuing reports to authorized institutions, or repairing system errors;
  4. Compliance with our legal obligations. Compliance with our legal obligations regarding archiving, security, reporting, record-keeping, and other obligations imposed by the legislation.
  5. Improvement of services. Identifying potential issues regarding our services for their improvement, addressing your complaints/claims recorded on the Company's website https://www.richrbt.ro/, managing routine correspondence with contractual partners, etc., controlling visitor access to the Company's premises;
  6. Monitoring of spaces according to legal provisions. CCTV systems installed for monitoring spaces related to access ways, areas with valuables, for the protection and security of goods and personnel in those areas, etc.
  7. LEGAL BASIS FOR PROCESSING YOUR DATA

”Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL” will process your ordinary personal data considering at least one of the following legal bases:

  1. Consent – in case no other legal basis for processing applies, the Company always obtains the data subject's consent for processing their personal data for one or more specific purposes.
  2. Conclusion/execution of a contract – processing is necessary for the Company to execute a contract to which the data subject is a party or to take steps at the data subject's request before entering into a contract. For example, to initiate discussions regarding the costs and types of services requested, to be able to conclude a contract with you.
  3. Legal obligation – processing is necessary for the Company to fulfill a legal obligation. For example, accounting and tax requirements subject to strict internal policies such as the period for retaining fiscal/accounting documents. We may process your data to fulfill our obligations to archive files regarding the services provided, obligations to communicate certain information to public authorities upon request, or other legal obligations.
  4. Legitimate interest – processing is necessary for the legitimate interests pursued by the Company. For example, when we process your data to maintain network security, improve our services.
  5. Assertion, exercise, or defense of a legal claim. In cases where disputes arise between you and us that cannot be resolved amicably, we may process your data to assert, exercise, or defend our legal rights in court.
  6. TO WHOM WE DISCLOSE YOUR DATA

As a general rule, we do not disclose your data to other companies, organizations, or individuals from any country (including Romania). However, in certain situations, we may disclose your data to other individuals or legal entities.

Nevertheless, we strive to be as transparent and specific as possible, and below we will present the categories of such recipients:

  1. Competent authorities, accounting and auditing firms, lawyers, human resources, contractual partners, service providers, etc. Whenever we do this, we ensure that there is a sound justification, that we will transmit only the data strictly necessary to achieve the purpose of transmission, and we will try to ensure that the recipient ensures a high standard of protection of personal data.

In the case of data processing activities carried out by a third-party provider/supplier/partner/intermediary for the Company based on a service contract of any kind concluded between Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL and the respective third party (who acts as the processor of personal data under GDPR), these contracts are concluded in writing and include a series of specific clauses by which the respective third parties provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing complies with the requirements set out in GDPR and ensures the protection of the data subject's rights.

  1. Recipients for whom you request or give consent in this regard or persons who can demonstrate that they have the legal authority to act on your behalf;
  2. Any person, agency, bailiff, or relevant court in Romania – to the extent necessary to assert, exercise, or defend our rights;
  3. In the event that it is in our legitimate interest to do so to manage, expand, or develop our business, for example, in the event that we sell or transfer all or part of our shares, assets, or our business (including in the event of reorganization, dissolution, or liquidation), in which case the personal data held by us will constitute one of the transferred assets – in this potential situation, potential buyers will be bound by a confidentiality obligation.

VII. HOW LONG AND HOW WE KEEP YOUR DATA

We keep your personal data only for as long as necessary or as required by applicable law.

Your data that is necessary for purposes related to the provision of our services will be stored for a period of 3 years from the termination of the service contract concluded with the Company.

Payment/billing-related data will be stored for a period of 10 years, according to Law no. 82/1991 on accounting.

Video surveillance data for the security of goods and persons will be stored for a period of 30 calendar days in accordance with applicable law.

If there is no legal requirement, we will only keep them for as long as necessary for processing data for the purposes mentioned above.

Except in situations where the law provides otherwise and those exemplified above, we generally process your data for the duration of a contract between you and “Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL”, plus a period of 3 years after its termination.

We make efforts to ensure that the data is kept securely. For storing your data in electronic format, we use our own servers or those of other companies specialized in electronic archiving.

We strive to use reasonable organizational, technical, and administrative measures to protect personal data within our Company.

To this end, we have adopted dedicated policies regarding physical and electronic security measures to protect our systems from unauthorized access and other potential security threats.

To the extent possible, we will anonymize data that is no longer needed in a manner that does not allow the identification of data subjects or apply pseudonymization to limit risks related to the processed personal data.

VIII. WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM

We take your rights related to the processing we carry out on your data seriously and with full involvement. In short, your rights are as follows:

  1. Right to be informed. When personal data is collected from you or obtained from another source, we have an obligation to inform you about the purpose of using this data and about your rights.
  2. Right of access to data. You have the right to request information about the personal data we hold about you, including information about the categories of data we hold or control, their use, the source from which we obtained them if we obtained them indirectly, and to whom this data is disclosed, if applicable. We will provide you with a copy of your personal data upon request. If you request multiple copies of your personal data, we may charge you a reasonable fee based on administrative costs.
  3. Right to rectify data. You have the right to obtain the rectification of your personal data that we process or control if it is inaccurate.
  4. Right to erasure of data (the "right to be forgotten"). You have the right to obtain from us the erasure of your personal data that we process or control. “Regional Infrastructure Company For Highways, Roads, Bridges and Tunnels SRL” aims to process and keep your data only as long as necessary. We must comply with this request if we process your personal data, and if:
  • Personal data is no longer necessary for the purposes for which it was collected;
  • You object to processing for reasons related to your particular situation;
  • Your data has been processed unlawfully;
  • Personal data must be deleted to comply with a legal obligation;
  • Except where your data is still needed:
  • For the exercise of the right to freedom of expression and information;
  • To comply with a legal obligation incumbent upon us;
  • For archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes; or
  • For the establishment, exercise, or defense of a legal claim.
  1. Right to Restrict Data Processing. You can obtain from us the restriction of the processing of your personal data if:
  • You contest the accuracy of your personal data, for the period during which we need to verify its accuracy;
  • The processing is unlawful, but you oppose the deletion of personal data and instead request the restriction of their use;
  • We no longer need your personal data, but you request it for the establishment, exercise, or defense of a legal claim, or
  • You object to the processing, for the period during which we verify whether our legitimate interests prevail over yours.
  1. Right to Object to the Use of Personal Data. Under certain circumstances, you have the right to object to the processing of your data by us or on our behalf. Where processing is not based on your consent, but on our legitimate interests or those of a third party, you may object at any time to the processing of your personal data for reasons related to your particular situation. In this case, we will no longer process your personal data unless: (a) we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or (b) the purpose is the establishment, exercise, or defense of a legal claim.

If you object to processing, please specify whether you also want your personal data to be deleted; otherwise, we will only restrict it.

  1. Right to Data Portability. You have the right to receive your personal data that you provided to us, and where technically feasible, to request that we transmit your personal data (that you provided to us) to another organization/clinic.

These two rights are rights you have if, cumulatively: (a) we process your personal data by automated means, (b) we rely, in the processing of your personal data, on your consent or the processing by us of your personal data is necessary for the conclusion or performance of a contract to which you are a party; (c) your personal data are provided by you, and (d) the transmission of your personal data does not have a negative effect on the rights and freedoms of others.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Your right to receive personal data must not adversely affect the rights and freedoms of others. This may happen if the transmission of your personal data to another organization also involves the transmission of personal data to other individuals (who do not consent to this transfer).

Your right to have your personal data transmitted by us to another organization is a right you have if such transmission is technically feasible.

  1. Right Not to be Subject to Automated Decision-Making (Including Profiling). You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

This right shall not apply in the following exceptional situations, where the automated decision:

  1. a) is necessary for the conclusion or performance of a contract between the data subject and the Company;
  2. b) is authorized by Union law or the law of the Member State to which the Company is subject and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests; or
  3. c) is based on your explicit consent;

In situations referred to in points a) and c) of this paragraph, the Company has the obligation to implement suitable measures to safeguard your rights, freedoms, and legitimate interests, at least your right to obtain human intervention on the part of the Company, to express your point of view, and to contest the decision.

  1. Right to Withdraw Consent. In situations where we process your data based on your consent, you have the right to withdraw your consent; you can do this at any time, at least as easily as you initially gave consent. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.
  2. Right to Lodge a Complaint with the Supervisory Authority. If you have a complaint about how we process your data, we would prefer you to contact us directly so that we can address your concern. However, if you still have concerns, you can contact the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro):

Address: B-dul G-ral. Gheorghe Magheru, Bucharest, Romania;

Telephone: +40.318.059.211/ +40.318.059.212

Fax: +40.318.059.602;

Email: anspdcp@dataprotection.ro

  1. Right to Judicial Remedies. Furthermore, it is important to note that if you believe that your rights under the Regulation have been infringed as a result of the processing of your personal data in breach of its provisions and without prejudice to your right to lodge a complaint with the supervisory authority, you have the right to address the courts by bringing an action against the Company.

To exercise one or more of these rights or to ask any questions about any of these rights or other aspects of the processing of your data by us, you can do so by submitting a written, signed, and dated request to the email address: Additionally, printed forms are available at our headquarters that you can complete to request the exercise of one or more of the above rights.

We will attempt to respond to your request within one month, which may be extended by two months due to specific reasons related to the specific right invoked or the complexity of your request. In any case, if this period is extended, we will inform you of the extension period and the reasons for it.

In certain situations, we may not be able to provide you with access to all or part of your personal data due to legal restrictions. If we refuse your access request, we will inform you of the reason for this refusal.

In certain cases, we may not be able to identify your personal data due to the identifying elements you provide in your request. In such cases, if we cannot identify you as the data subject, we cannot comply with your request under this section unless you provide us with additional information that allows us to identify you. We will inform you and give you the opportunity to provide such additional details.

  1. COOKIES

A cookie is a string of information that a website stores on a visitor's device and that the visitor's browser provides to the website each time the visitor returns. Because the browser provides this cookie information to the website at each visit, cookies serve as a sort of label that allows a website to "recognize" a browser when it returns to the site. For more details, please visit: http://en.wikipedia.org/wiki/HTTP_cookie

Cookies store information about your activities on a website or other platform. For example, cookies can store session information to make it easier for you to log in to a website or other platform that you have visited before.

The information we may collect through these automated means may include, for example, IP address, user code, browser type, system type, content, and pages you access on our websites or services, the frequency and duration of your visits to the site.

The Company's website, https://www.richrbt.ro/, uses cookies to maintain valid authentication over a long period of time, to remember browsing and usage preferences for the website, to monitor the total number of visitors and pages viewed, to administer, use, and improve the website and the Company's other services and systems, and to provide services and content tailored to you.

If you have agreed to the inclusion of cookies in your browser through the banner on the home page of the website, please note that your consent can be withdrawn at any time. Current browsers (web browsers) provide the ability to set/disable cookies. To do this, generally, you access the Options or Preferences section.

However, if you do not accept cookies, you may not be able to use all portions of our website or all of its features.

Please note that disabling these technologies may interfere with the performance and features of the services offered.

  1. CHANGE AND UPDATE OF THE PRIVACY POLICY

We reserve the right to modify, as we deem appropriate, data protection practices and to update and modify this notice at any time. For this reason, we encourage you to periodically check this notice.