Last update: 23.04.2025
This Policy informs you about how we collect, use, transfer and protect your personal data. We process it in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“”General Data Protection Regulation”, hereinafter “”GDPR“”) and relevant national legislation on the protection of personal data.
1. WHO ARE WE?
ROCA INDUSTRY HOLDINGROCK1 SA, Romanian legal entity, with registered office in Bucuresti, sector 2, Str Gara Herastrau, nr. 4, cladirea A, etaj 3 , registered at the Trade Register under no. J40/16918/2021, unique registration code 44987869, (hereinafter referred to as the “Company” or “We“).
Our contact details are:
Address: Gara Herăstrău Street no. 4, building A, 3rd floor, Sector 2, Bucharest
E-mail address: protectia.datelor@rocaindustry.ro
Tel: +4021.326.6014
2. HOW WE PROCESS YOUR DATA PERSONAL DATA?
The Company, its capacity as Operator, processes the personal data of candidates applying for available positions, employees, contractual partners and collaborators, investors, interested persons, representatives of partners and data of other natural persons who interact with the Company and/or are involved in contractual relations with it.
Personal data are:
- processed lawfully, fairly and transparently in relation to the data subject;
- collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- accurate and timely updated;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
- processed in a way that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or accidental damage, by taking appropriate technical or organizational measures.
3. WHAT TYPES OF PERSONAL DATA ARE PROCESSED AND FOR WHAT PURPOSES?
In the context of staff recruitment, we process the following types of personal data: name, surname, address, date of birth, nationality, gender, telephone number, e-mail address, data on professional and/or social experience, education and training, skills and other personal data that result from the information contained in the submitted CV and cover letter, and where appropriate, from the discussions during the job interview.
In order to fill in and send the contact form (”Leave us a message”) on the website of the Company -ROCA INDUSTRY HOLDINGROCK1 SA (hereinafter ”the website”), we process the following types of personal data: name, surname, telephone number, e-mail address and, where appropriate, other data if left at the initiative of the data subject in the ”Message” section.
In order to fill in and submit the “Leave us your CV” form, we process the following personal data: name, surname, telephone number, e-mail address and, where applicable, other data if left at the initiative of the person concerned in the “Message” section and in the CV uploaded in this form.
In order to display images, videos and testimonials of employees/collaborators/other data subjects on the website and social media, we process the following personal data: name, surname, image, voice, function.
In order to display the teleconferences on the website and social networks (Youtube), we process the following personal data: name, surname, function, image, voice.
In order to display the Annual Reports or other specific documents on the website, we process the following personal data: name, surname, job title, image.
In order to display the results of the various campaigns/contests on the website, we process the following personal data: name, surname, image.
For website visitors we may collect data through cookies or other similar technologies, such as IP address, internet browser, location, web pages accessed on our website, time spent on the website, internet network, device used. For more details in this regard, please see our Cookie Policy.
We do not use your personal data to send you marketing communications, such as newsletters, unless you expressly consent to such communications by ticking an opt-in box. In doing so, we only process your e-mail address, first and last name and ensure that you have a simple option to unsubscribe at any time or to withdraw your consent to receive these types of communications.
4. WHAT ARE THE LEGAL GROUNDS ON WHICH THE PROCESSING OF PERSONAL DATA IS BASED?
Your personal data is processed in order to:
- the conclusion and performance of various contracts
- to fulfill our legal obligations;
- on the basis of consent requested and/or given in advance (in the context of recruitment of staff, for the transmission of marketing communications (newsletters), etc.);
- for the purposes of legitimate interests pursued by the Company (e.g. taking measures for the protection and security of our employees, exercising legitimate rights and interests of the Company in contentious or non-contentious proceedings, etc.).
5. HOW LONG WE PROCESS YOUR DATA. PERSONAL DATA?
Personal data is stored for processing for the period necessary to achieve the processing purposes mentioned in this Policy or for the period required by law (e.g. for archiving, accounting, etc.).
6. TO WHOM DO WE TRANSMIT PERSONAL DATA?
We will not disclose or transfer to any third party any personal data collected from or about you except:
- Public authorities and public institutions – when there is a legal obligation to do so or for a legitimate interest (defense of the Society’s rights in contentious or non-contentious proceedings, etc.).
- Contractual partners or collaborators of the Company who provide us with web hosting, website development, website maintenance, online marketing and marketing communication services.
- To any third party – if you have expressly and specifically consented to that situation and data.
In principle, the Company does not transfer personal data to third countries outside the European Economic Area or to international organizations for the above-mentioned purposes. If such transfers become necessary as a result of collaboration with third parties that process the Company’s data, they will be carried out in strict compliance with applicable legal provisions. The Company will ensure compliance with international data transfer requirements, either on the basis of existing adequacy decisions or by implementing other appropriate legal mechanisms.
7. WHAT SAFEGUARDS AND SAFEGUARDS DO WE TAKE?
The company implements appropriate technical and organizational measures to ensure a high level of security and protection of personal data. We use security methods and technologies, together with internal working policies and procedures, including control and auditing, to protect the personal data collected in accordance with the relevant legal provisions in force in the field of personal data protection.
8. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
Any data subject may exercise the following rights as provided by the General Data Protection Regulation:
- Right of access;
- Right of rectification;
- Right to erasure;
- Right to restrict processing;
- The right to portability;
- Right to object to processing;
- The right not to be subject to a decision based solely on automated processing, including profiling;
- The right to contact the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) and the courts.
To exercise these rights or for any questions related to the processing of your personal data, please contact us at: protectia.datelor@rocaindustry.ro or by phone: 0745508673, contact person Ionel Orza. Data Protection Officer (DPO) services are outsourced and provided by GDPRComplet.