Who we are

GRUP PETROL MARIN S.A., with the registered office in Constanta, registered with the Trade Register Office under number J13/1755/1995, CIF: RO7471838, email: sales@axxisnova.ro, phone number 0744.30.50.50 (hereinafter referred to as “The Company” or “Platform” or “Operator”)) is a data operator with a personal cart.

This policy has the role of informing the data subjects about the conditions under which the personal data are processed by the Company. This policy is valid for all specific activities of the company carried out through the www.axxisnova.ro website.

The use of the services offered by the company can be made only after taking note of these policies.
The platform is not intended for minors and cannot be used by them.

Definitions
For the purposes of this Convention (as well as in the Annexes and other related documents), the terms mentioned shall have the meanings specified below:

“Contract” – the contract concluded between the Parties and the annexes thereto;
“Personal data of the Beneficiary / legal representative / conventional representative” – all personal data, regardless of their form or environment, which are: i) provided either by the Beneficiary or by the legal or conventional representative of the Beneficiary ii) provided, originated, brought to the attention in writing or verbally by the insurer of the vehicle under repair or by another insurer directly involved or by the public institutions / authorities / entities (police stations, prosecutor’s offices attached to courts, courts, etc.);
“Services” – services provided by the Provider in accordance with the object of the Contract;
“Supervisory Authority” – means an independent public authority established by a Member State with the power to supervise the protection of personal data in the EU in whose jurisdiction the Provider is established and carries out the processing of personal data the Provider, as controller, or the processor by the Provider;

“Processing” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise putting, alignment or combination, restriction, erasure or destruction;
“Operator” – the legal person, as in the present situation the Provider or the natural person who, alone or together with others, determines the purposes and means of processing personal data;

“Processor” means the natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;

“Consent” of the data subject – means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she accepts, by a statement or by a clear affirmative action, that the personal data concerning him or her are processed;
“Personal data breach” – means a breach of security that leads, accidentally or unlawfully, to the destruction, loss, modification, or unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed, or to unauthorised access to them;

The “consent” of the data subject (the Beneficiary) means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she accepts, by a statement or by a clear affirmative action, that personal data concerning him or her are processed.

“Regulation” means Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

General provisions

As we value the confidentiality of your information, the Controller undertakes to comply with the provisions of this Policy, as well as the provisions mentioned in the Regulation and the rules provided in the national law regarding the processing of personal data, their security and confidentiality.

If we change this policy, we will notify you on this page and inform you by e-mail or through our Platform. If you do not agree to our data privacy policy or you do not agree to its changes, you may close your account by accessing the account setting and selecting the deletion of the account or you may request the deletion of personal data from the platform.

Object, duration, nature, purpose, type of personal data

Object of processing

Processing the data of the persons who post real estate sales announcements on the web pages administered by the company or the contact details of the persons who make public such announcements on other pages of announcements and taken over by the Company.

Duration of processing

The processing of personal data will be carried out: during the period when the sale of the real estate related to the announcement posted by you has not yet been carried out and / or so long you have an active account on the Platform and / or until the moment when you ask us to stop processing the data contained in your announcement, but not more than 3 years from the date of starting the processing by receiving the announcement or taking it over from third-party public sites.
Nature of processing

The processing of personal data is done on the basis of the provision of our specific activities, based on the contractual relationship between us or on the basis of a legitimate interest.

Purpose of processing

Providing the specific activity of providing the users with a platform through which they are made public informed of sales offers / Informing you about the status of the announcement / To improve your experience on our Platform / To provide you with a safe and secure platform

Legal basis of processing;

Performance of the contract;

Legal obligation;

Legitimate interest;

Consent;

Type of personal data.
Persons who use the Platform for posting ads or persons whose ads are taken from similar public platforms

Name and/or surname,
email address,
phone number
version of the operating system, unique identifiers.

The place from which you post the ad by identifying the Internet Protocol (IP) of the device used.

User sessions to store language selection preferences and provide you with relevant advertisements by using cookies.

(Possible) financial data that may include bank account and payment card details (issuing bank, card validity, cardholder, etc.).

Legal and/or conventional representative(s) of the clients.

Identification data (name, surname, position).

Contact details (home, phone number, e-mail address).

Categories of data subjects

Car owners/policyholders, injured persons and/or their legal or conventional representatives

From whom we collect the data

From the data subject when the data is provided directly, for example when you post an announcement on the Platform, when you create an account;

From public sources: when we take over on the Platform public announcements posted on other specialized platforms;

From third parties such as Google when we receive information about the use of our Platform.

Sensitive personal data

Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health. and genetic and biometric data. We do not collect any information about beliefs, life or sexual orientation, political opinions, trade union membership, health information, genetic or biometric data, or crimes.

In accordance with the tax and accounting legislation, we may be obliged to collect data that can be considered sensitive such as the C.N.P., such as the bank account and the bank card (including the issuing bank, the validity of the card, the card user). The processing of this data can be done only if we are obliged by a legal provision

Legal basis for the use of personal data

The Provider shall process the personal data in order to:
fulfillment of obligations arising from the Contract – contractual obligation, in accordance with the provisions of art. 6 para. (1) point (b) of the Regulation.

where there is a legal or statutory obligation, in accordance with the provisions of Art. 6 para. (1) point (c) of the Regulation.

when there is a legitimate interest of the Company, in accordance with the provisions of art. 6 para. (1) lit. f),this legitimate interest not being able to prevail over your legitimate interests.

When we have obtained your consent for the provision of advertising messages by email or sms, other than messages in connection with which you have a direct interest.
The processing of these data, in terms of frequency and manner, are:

At the time of posting an announcement on our Platform;

At the time of taking over a public announcement from other third-party platforms;

At the time of creating a user account on our Platform;

At the moment we conclude a contract;

If necessary, in our legitimate interests (or those of a third party) and your interests and rights. fundamentals do not go beyond those interests.

Whether we have to comply with a legal or statutory obligation.

When we send you a notification by SMS or email.
When we receive information about your visits, we will not be able to do so. and interacting with services provided by other entities when you visit the services of other providers that include advertisements, cookies or similar technologies.

Consent

In view of the foregoing of this policy it follows that we do not generally process sensitive personal data as finite in the Regulation, your consent is not required. express.

By creating an account on the Platform, we believe that it is your legitimate interest to receive periodical information from the Company by sms or email regarding announcements that may be of interest to you. If at any time you consider that your legitimate interest has changed and you no longer want to receive periodic information, you always have the option to express the option to stop receiving those messages.
Changing the purpose

The provider will use only personal data for the purpose for which they were obtained, unless, reasonably necessary to use it for another purpose and the reason is compatible with the original purpose. If you would like to know more about how processing for the new purpose is compatible with the original purpose, please send us an e-mail to sales@axxisnova.ro.

If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and explain the legal reasons for the processing.

We may process your personal data without the consent or information of the Beneficiary, the legal or conventional representative, if necessary and / or permitted in accordance with the law.

DIVULGATION OF YOUR DATA. WITH PERSONAL CHARACTER
We may distribute or disclose your personal data to the third parties listed below:

Real estate agencies, but only data made publicly by you on our Platform or other specialized platforms.

Insurance companies.

Service providers that provide IT and system management services.

Professional consultants including lawyers, auditors, accountants and insurers who provide consulting services not to carry out our activity.

Tax and customs administration, regulatory bodies and other authorities based in Romania requesting the reporting of processing activities in certain circumstances (for example police stations, prosecutor’s offices attached to courts, courts, etc. ).
We ask all third parties to whom we transfer data to respect the security of your personal data and to process it in accordance with the law. We will allow these third parties to process your data. personal for the specified purposes and in accordance with legal provisions only if we receive assurances regarding the legality and conformity of the processing of personal data.

INTERNATIONAL TRANSFERS

We do not transfer your personal data outside the European Economic Area (EEA ).

DATA SECURITY
The provider has implemented appropriate security measures to prevent your personal data from being lost, used or accidentally accessed, modified or disclosed unauthorized. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a commercial need to know that data. They will process your personal data on our instruction and are subject to the obligation of confidentiality.

We have implemented procedures to deal with any suspicious breach of personal data and we will notify you and any competent regulatory authority of the breach, when we are legally obliged to do so.

We may keep your data physically or electronically formatted. In some circumstances, we may anonymise your personal data (so that it is no longer associated with you ) for research or statistical purposes, in which case we may use this information indefinitely without informing you.

13. LEGAL RIGHTS

In addition to those mentioned in this policy, in certain circumstances, the data subject has certain rights in accordance with the data protection laws regarding your personal data. These include:

The right of access

You can ask us:

confirm whether we process your personal data;

let’s give you a copy of that data;

to provide you with other information about your personal data, such as the data we have, what we use, to whom we disclose it, if we transfer it abroad and how we protect it, how long we keep them, what rights do you have, how can you make a complaint, where we got your data from and if we have performed any automated decision-making or profiling process, to the extent that the information has not already been provided to you in this Policy.

Right of rectification

You can ask us to rectify inaccurate personal data. We may seek to verify the accuracy of the data before rectifying it.

Right to delete (right to be forgotten )

You can ask us to delete your personal data, but only if:

are no longer necessary for the purposes for which they were collected; or

you withdrew your (consent when data processing was based on consent ); or

as a result of a well-founded right to object (see „ Objection ” below ); or

were processed illegally; or

a legal obligation whose subject is the Company must be respected.

We are not obliged to respond to your request to delete your personal data if the processing of your personal data is necessary:

for compliance with a legal obligation; or

for the establishment, exercise or defense of rights in court;

There are a few other circumstances in which we are not obliged to respond to your request for deletion, although these two are probably the most common circumstances in which we will refuse you this request.

Right of restriction

You may ask us to restrict your (, namely, to keep them without using) personal data only when:

their accuracy is contested (see Rectification ), to allow us to verify their accuracy; or

processing is illegal, but you do not want to delete them; or

they are no longer necessary for the purposes for which they were collected, but we still need them to establish, exercise or defend rights in court; or

you have exercised your right to object, and the verification of compelling reasons is pending.

We may continue to use your personal data following a request for a restriction if:

we have your consent; or

to establish, exercise or defend rights in court; or

to protect the rights of another natural or legal person.

The right to portability

You may ask us to provide you with your personal data in a structured, commonly used, automatically processable format, or you may request that it be „ ported” directly to another data controller, but in any case, only when:

the processing is based on your consent or the performance of a contract with you; and

the processing is carried out by automatic means.

The right of opposition

You may object to any processing of your personal data based on „ our legitimate interests”, if you believe that your fundamental rights and freedoms take precedence over our legitimate interests.

Once you have objected, we have the opportunity to show you that we have legitimate convincing interests that take precedence over your rights and freedoms.

The right to file a complaint

You have the right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing. Please try to resolve any issues by discussing with us at the first instance, although you have the right to contact the supervisory authority at any time

The right to withdraw your consent

You have the right to withdraw your consent in the situation in which the Company processes personal data based on it.

The data subject will not pay a fee or any other fee to access your personal data (or to exercise any of the other rights ). However, the Company may, as operator, impose a reasonable fee if the request is manifestly unfounded, repetitive or excessive. Alternatively, the Provider may refuse to comply with the request received in these circumstances.

The company has the right to request certain information in order to confirm the identity of the data subject who made the request and to securely provide personal data (or to exercise any of the other rights). This is a security measure to ensure that personal data are not disclosed to persons who are not entitled to receive them. We may contact you to ask for additional information about your request to speed up our response.

The company will take the necessary steps to respond to all legitimate claims within one month. Occasionally, it may take more than a month if the provider’s request is very complex or the data subject has made several requests. In this case, the Provider will notify you and keep you informed.

14. Let’s keep the connection

The first point of contact for all matters arising from this Policy, including requests for the exercise of the rights of subjects, is our Data Protection Officer. The Data Protection Officer may be contacted in the following ways:

By e-mail to sales@axxisnova.ro

By mail to the address in Constanta.

If you have a complaint or are concerned about how we use your personal data, please contact us at first instance, we and we will try to solve the problem as soon as possible.

Thank you!