Personal data processing policy

CERTION GRUP personal data processing policy

 The Certion group of companies processes a series of personal data of visitors when they visit www.certion.ro. This privacy policy describes what types of personal data are processed, how they are used, what the user’s choices are in relation to such processing, and how we will respect your rights as a data subject (referred to generically as ‘data subject’). USER/) in accordance with personal data protection legislation, including EU Regulation no. 2016/679 (GDPR).

 

PERSONAL DATA  CONTROLLER

The personal data controller chosen as the contact point of the Certion Group in relationship with the user is CERTION SALES&MARKETING SRL (J40/18098/2022 RO 46829547), based in Bucharest, district 1, at al. Alexandru, nr. 32, parter, ap. 3 generically referred to as CERTION.

 

CATEGORIES OF PERSONAL DATA PROCESSED

The personal data we process may include:

  • Contact information such as name, surname, postal address, including home address, business address, telephone number, mobile phone number, fax number, e-mail address, etc.;
  • Additional information processed in the context of a contractual relationship with CERTION or voluntarily communicated by the User, such as: PIN, ID card series and number, ID card issuer, date of birth, age, real estate preferences

 

LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Any processing of the User’s personal data shall be carried out on one of the following legal grounds:

  • The processing is necessary for the entering into or performance of a contract to which the User is a party;
  • The processing is necessary in order to comply with a legal obligation of the controller;
  • The processing is performed with the User’s consent;
  • The processing is necessary to protect the vital interests of the User or of another natural person;
  • The processing is necessary for purposes of the legitimate interests of CERTION or of a third party, unless the interests or fundamental rights and freedoms override these interests;

In case of special categories of data, the processing shall be carried out if, in addition to a general legal grounds for processing the data, the explicit consent of the user has been obtained.

 

PURPOSE FOR PROCESSING PERSONAL DATA

We may use your personal data for the following purposes:

  • Offering real estate services, real estate consulting, promotion of real estate offers in our commercial activity, promotion of real estate offers on the website certion.ro or on other profile sites;
  • Managing and administering the contractual relationship with our clients;
  • Ensuring compliance with our legal obligations (such as reporting obligations to tax authorities);
  • Managing security and access to our premises, managing the use of IT systems used by CERTION (e.g. website, data management platforms, communications systems used), including preventing and detecting security threats, fraud or other unauthorised or malicious activity;
  • In order to comply with court decisions and to exercise and/or defend our rights and interests;
  • Analysing and improving our services and communications to you, including (as we have a legitimate interest in continually improving our services) conducting customer surveys regarding customer satisfaction on CERTION services;
  • For any purpose related and/or ancillary to any of the above, or for any other purpose for which personal data has been provided to us, subject to applicable law.

Based on your consent, we may send you various communications to keep you updated on the latest offers, announcements and information on CERTION real estate services.

 

DISCLOSURE OF PERSONAL DATA

We may disclose user personal data to employees, other service providers with whom we collaborate to provide CERTION services (e.g. real estate marketers, potential sellers, real estate promotion platforms).,   public authorities, as well as entities indicated by you, (which may be our client or a third party involved).

 

UPDATING PERSONAL DATA

If any of the personal data you have provided to us changes, (e.g. if you change your name, email address), or if you become aware that we hold any incorrect personal data about you, please contact us by email at: dpo@certion.ro and office@certion.ro. We cannot be held liable for any loss arising from inaccurate, unauthentic, insufficient or incomplete personal data that you provide to us.

 

PERSONAL DATA RETENTION PERIOD

CERTION has implemented technical and organisational measures to organise the process and specific criteria for the retention of personal data (including according to our archiving procedures). They will be stored in the databases for a 3 years period or for longer periods, only if this is required by law. We will stop processing personal data when it is no longer reasonably necessary for the purposes permitted, or when you withdraw your consent (if applicable) and:

  • if there are no longer compelling legitimate grounds justifying further processing by CERTION (including CERTION’s legal obligation to continue to store that data) which override your interests, rights and freedoms; or
  • if they are no longer necessary for the establishment, exercise or defence of a right in court

 

USER RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA

Subject to certain legal conditions, you have the following rights in relation to the processing of your personal data:

  • The right to be informed on how your data is processed and why;
  • The access right – the right to obtain confirmation from us on whether or not we are processing your personal data and, if so, access to that data and information on how the data is processed;
  • The right to rectification any incorrect or incomplete personal data;
  • The right to object or to restrict our use of your personal data;
  • The right to erasure of your personal data, in situations where you have withdrawn your consent, the processing is no longer necessary or the processing is contrary to law;
  • The right to data portability which allows you to receive a copy of the processed data we have received from you or to transmit it to another entity indicated by you; f.
  • The rights related to automated decision making,, including profiling You can ask for and obtain human intervention with regard to such processing or you can express your own views on such processing;
  • The right to lodge a complaint regarding the processing of personal data at the National Supervisory Authority for Personal Data Processing;
  • The right to withdraw consent for processing carried out on the basis of consent. Withdrawal of your consent shall not affect the lawfulness of the processing based on your consent prior to its withdrawal. In cases where you withdraw your consent, CERTION shall no longer process your personal data and shall take appropriate measures to delete your personal data. However, CERTION may process your personal data if there is another legal basis for such processing.

All these rights can be exercised by a written request, dated, signed and sent to our company, by mail to the address of the registered office in Bucharest, district 1, al. Alexandru, nr. 32, parter, ap. 3  or by email, at dpo@certion.ro

 

DATA COLLECTED THROUGH COOKIES FOR MARKETING PURPOSES

With regard to data collected through cookies for marketing purposes (for details see the Cookies Policy section), CERTION cooperates with  third parties (Google, Facebook,) to manage how cookie technologies are used for advertising purposes. In relation to these types of processing, CERTION acts as a controller associated with third parties in accordance with art. 26 of the GDPR. Both CERTION and third parties have undertaken the obligation to comply with personal data protection legislation related to this processing. We process a series of personal data for purposes of establishing commercial real estate brokerage relationships. Statistics and marketing, according to the legislation in force.

 

PROVIDING COMMUNICATIONS ON BROKERAGE SERVICES

Users may receive various communications from us relating to the rendering of services. We process this data based on our legitimate interest, pursuant to art. 6(1)(f) GDPR. We consider that our legitimate interest does not prejudice the rights and interests of data subjects as the communications are closely related to the rendering of the requested Services. We also offer Users the possibility to deactivate these communications, at any time, by sending a written request to dpo@certion.ro.

We wish to send you offers, promotional materials, to inform you about new services offered by CERTION, to launch invitations to participate in surveys or to answer questionnaires and to communicate other similar information that we consider as being of interest to you, including, if you agree, by sending promotional materials/marketing communications on the products/services of the Company’s partners. We will forward these communications to you if we get your consent. Legal grounds: art. 6(1)(a) GDPR- Consent

Users may unsubscribe from these communications at any time. For example, if you withdraw your consent to commercial communications we will no longer be able to send you our offers or you will not be able to participate in our surveys and questionnaires. Also, if we have your consent for marketing communications, in certain situations, we may use information collected from you in combination with data resulting from your interaction with our Services to use in the context of our marketing communications. The legal grounds for such processing is: art. 6(1)(f) GDPR – Legitimate interest. We want to streamline our marketing activity by providing our clients with relevant and customized service offers.

 

FULFILMENT OF LEGAL OBLIGATIONS

Sometimes, data processing is necessary to fulfil our legal obligations (Legal grounds: art. 6(1)(c) GDPR – The enforcement of a legal obligation) incumbent upon us, such as: archiving data according to applicable legislation.

 

DEFENCE OF RIGHTS AND INTERESTS IN JUSTICE

We may also process personal data for the establishment, exercise or defence of a legal claim in court, administrative or other official proceedings in which CERTION is involved (Legal grounds: art. 6(1)(f) GDPR – Legitimate interest).