Personal data processing policy
1. Scope of Personal Data Processing Policy:
1.1. By this Personal Data Processing Policy, CARGUS SRL, company having registered address in str. 11 Iunie, nr. 14, sector 4, Bucharest, Romania, J40/4892/2022, company number RO 3541906, by its legal representatives, aims to make its clients/customers aware of the fact that the activity carried out under NACE Code 5320 “Other postal and courier activities ” takes place in accordance with the requirements of EU Regulation 679/2016 for the protection of individuals regarding the processing of personal data and the free movement of such data (amended and supplemented).
1.2. CARGUS SRL processes the personal data provided by its clients/customers (also called “data subjects”) in complete safety and only for the specified purposes.
2. Categories of personal data that CARGUS processes:
2.1. In order to carry out its business as per the object of its activity and to provide the services offered by Cargus SRL through its website www.cargus.ro, the following personal data may be processed: name, surname, address (domicile/residence), telephone , fax, e-mail, date and place of birth, gender, signature, technical information regarding the website visitor’s device (its location, IP address, type of hardware equipment, information about the time interval as well as the date on which the website was used), information resulting from the Cookies Policy.
2.2. For carrying out the activity of selling postal and courier services, for managing the accounts of Cargus SRL’s clients/customers, for transmitting information and solving complaints made by the clients/customers, for carrying out research activities and/or conducting market or statistical studies , the following personal data can be processed: name, surname, address (domicile/residence), personal ID number, e-mail address, telephone number, fax number, delivery addresses of customer shipments.
2.3. In order to carry out advertising, marketing and advertising activities, to promote the services provided by CARGUS SRL, to carry out promotional campaigns, to send information bulletins and newsletters, to track and monitor sales and the behavior of consumers and clients of CARGUS SRL, the following personal data are processed: name and surname, date and place of birth, telephone/fax numbers, e-mail address, physical address (domicile/residence), habits, preferences, commercial behavior.
Also, within the promotional campaigns, to identify the winners, CARGUS SRL processes personal data consisting of the personal ID number and the series and number of the identity document.
2.4. To liaise and inform the clients/customers regarding the evaluation of the services offered by CARGUS SRL, as well as for the activity carried out in order to improve the quality of the services offered and provided, activity carried out through the Department of Customer Relations and/or the Commercial Department, the following personal data are processed: name and surname, date and place of birth, phone/fax numbers, email address, physical address (domicile/residence), voice, habits, preferences, behavior, as well as other data that may result from the evaluation by the client of the services offered.
2.5. Also, CARGUS SRL processes personal data in connection with the activities presented above, for the purpose of archiving (maintain records related to the activities carried out, in accordance with legal requirements), for evidentiary purposes (to protect legal rights and exercise other rights in accordance with the legal provisions), as well as in order to administer and monitor the contracts concluded with its clients.
2.6. Personal data with a special protection regime, namely the personal ID number, the series and number of the identity document, will be collected and processed only in accordance with the legal provisions and only under limiting conditions.
2.7. In the case of certain categories of data, such as name, surname, physical address (domicile/residence), telephone number, fax number, e-mail address, their provision is mandatory to prepare the shipment documents related to the services ordered from CARGUS SRL, to notify the client in accordance with the legislation specific to the postal and courier activity, the consequences of refusing to provide them resulting in the impossibility of our company to perform the requested services.
2.8. Also, CARGUS SRL (through its Human Resources Department) processes personal data when it selects and recruits individuals who apply for jobs available at CARGUS SRL;
In this sense, CARGUS SRL will collect the candidate’s first and last name, email address, phone number, information regarding previous employer(s), as well as details regarding the previous job description(s). Candidates who apply are responsible for the correctness of the data entered in the CV/summary.
If candidates visit the website www.cargus.ro, even if they don’t apply for jobs, CARGUS SRL can collect the IP address and information about the computer operating system used by the candidates when accessing the website – the browser used, the version of the application, the language settings, the web pages accessed by the candidates.
In the event that a candidate uses a mobile phone, CARGUS SRL can collect data that identifies the device used, the specific settings, the characteristics of the device.
When a candidate applies for a job at the company, CARGUS SRL collects information about the websites from which the application was made, as well as the means used to make the application.
3. The purposes of collecting and processing personal data
3.1. CARGUS SRL collects and processes the personal data of its clients/customers for the following processing purposes:
a) the execution of the services provided by CARGUS SRL, implicitly through the website www.cargus.ro, as well as the administration of these services;
b) carrying out commercial activities for the sale of postal and courier services, managing customer accounts, conducting research and market studies, conducting statistics;
c) carrying out advertising, marketing and advertising activities regarding the services offered by CARGUS SRL, carrying out promotional campaigns, sending informational bulletins and newsletters, carrying out the activity of tracking and monitoring the sales of postal and courier services;
d) carrying out activities relating to clients, informing clients about the services offered and performed, registering and resolving complaints, improving the quality of services;
e) for evidentiary purposes, in connection with the above activities and with the archiving activity, as it was presented in Art. 2.5.
f) recruiting candidates who submit CVs/summaries via the “Careers” page on the www.cargus.ro website (https://www.cargus.ro/careers-ro/) or on any other means of communication (simple correspondence, email, in person, recruitment sites, to the attention of the Human Resources Department or to the attention of another CARGUS SRL department ), in order to carry out the selection-recruitment process.
4. Recipients of personal data
4.1. CARGUS SRL may disclose personal data to the following categories of recipients:
a) subcontractors and agents of CARGUS SRL (providers of postal and courier services that carry out activities on behalf of CARGUS SRL, based on the contracts concluded with CARGUS SRL), with their respect for confidentiality, guaranteeing that the personal data processed are kept in safety, and their supply is carried out only in accordance with the applicable legislation in force;
b) service providers/suppliers (marketing, banking, other service providers), as well as other recipients (Police, courts, Prosecutor’s Office, authorities, other State authorities), who have the role of assisting CARGUS SRL during personal data processing, as Attorneys-in-fact, assistance that is carried out only within the limits of the applicable legal provisions and/or as a result of the existence of requests expressly made regarding the processed personal data.
c) employees of the Human Resources department and managers of the departments for which the candidates send CVs/Resumes through the website www.cargus.ro or through any other means of communication (simple correspondence, email, staff, recruitment sites , to the attention of the Human Resources Department or to the attention of another CARGUS SRL department).
5. Special provisions related to minors
5.1. In performing its activity, CARGUS SRL does not directly aim to process the personal data of minors. In this sense, CARGUS SRL pays special attention to this data, ensuring that any processing of the personal data of minors is carried out only in accordance with the legal provisions and only in strictly and limitedly determined cases.
In this sense, CARGUS SRL:
• does not carry out direct marketing activities towards minors;
• does not allow minors under the age of 14 to order and request postal and courier services;
• does not allow minors who have not reached the age of 14 to participate in contests or campaigns, unless this is done through the minors’ legal representatives or guardians, acting on their behalf;
• allows ordering and purchasing services, only with the consent expressly received from his or her legal representative or guardian;
5.2. Any person who provides personal data through the website www.cargus.ro guarantees that they are of legal age, or have full legal capacity.
6. Duration of personal data processing
6.1. The duration of the processing of personal data will be determined by when the data subjects exercise their right of opposition, in accordance with the provisions of Art.15/Paragraph 2 of EU Regulation 679/2016.
6.2. CARGUS SRL can store personal data for the duration determined by law, for evidentiary and archiving purposes, as well as for carrying out statistical activities, conducting research and market studies, managing customer accounts.
6.3. The duration of the processing of the personal data of the candidates selected and recruited by CARGUS SRL is 1 (one) year at most, calculated from the date on which CARGUS came into possession of the CV/Resume, the period deemed necessary for the provision of the requested recruitment services to the candidate.
7. The rights of the data subject, according to Regulation 679/2016
7.1. By reading this Data Processing Policy and by ticking the related boxes made available to clients/customers in this regard, they acknowledge that the company CARGUS SRL guarantees them the rights provided by Regulation 679/2016 – articles 15-22, respectively:
• The right of access according to art. 15;
• The right to rectification, according to art. 16;
• The right to erasure, according to art. 17;
• The right to restriction, according to art. 18,
• The right to data portability, according to art. 20;
• The right to object, according to art. 21;
• The right not to be subject to automated individual decision-making, including profiling, according to art. 22;
• The right to address the National Authority for the Supervision of Personal Data Processing
7.2. All these rights can be exercised by e-mail to dpo@cargus.ro or by a written request, signed and dated, by the concerned person, sent to the registered office of the party that acts as recipient of the data from the other contracting party and personal data processor. On the envelope in which the request will be sent, the mention will be made to the attention of GDPR – DPO. The party to whom the request will be addressed will respond to this request within 30 days under the conditions provided by the General Data Protection Regulation.
7.3. The data subject can also exercise any of these rights by sending a notification to the address of CARGUS SRL or by accessing the contact form on the website www.cargus.ro.
7.4. The data subject can object at any time and without any justification, to the processing of personal data for direct marketing purposes, by sending a request to the address of the company CARGUS SRL or by accessing the contact form on the website www.cargus.ro.
7.5. Upon completion of the personal data processing operations, the recorded data may be transferred, in whole or in part, to any other legal entity, which has the obligation to comply with the special legislation in force, if they will be used for purposes similar to those provided in this Personal Data Processing Policy.
7.6. In the case of candidates selected and/or recruited by CARGUS: in order to review, block or delete the personal data that CARGUS has collected, the interested candidate must send a request to this effect, by email at career@. cargus.ro, with the request to make the mention: “Personal information request” in the subject of the e-mail. CARGUS will respond to this request within the legal term of 15 days, after the prior verification of the identity of the candidate making the request.
Also, if the personal data collected by CARGUS is incorrect, it will be updated at the express request of the candidate.
7.7. If a data subject has subscribed to the CARGUS newsletters, they can unsubscribe at any time by clicking on the “Unsubscribe” link included in each newsletter.