DATA PROCESSING CONSENT

Information notice/consent for the purchase of goods/services in the context of personal data processing

IMPORTANT MATTERS

S.C. SMART TOURS SRL is a Romanian legal person whose main business is the sale of travel, tourism and dmc services.

S.C. SMART TOURS SRL  has its registered office in Brasov, Str. 13 Decembrie 31, Post Code 500199, County of Brasov, telephone 0748.149.477; it is registered with the Trade Register Office attached to Brasov Tribunal, under no. J08/2873/ 2004, VAT Code RO17013404, duly represented by Mr. Alex Pop – Administrator

S.C. SMART TOURS SRL respects its customers’ privacy and shall carefully treat/process personal data, under suitable technical and organizational security conditions.

S.C. SMART TOURS SRL processes the personal data received directly from you depending on the option you expressed herein.

S.C. SMART TOURS SRL shall only process your personal data if this measure is required for the fulfillment of the purpose hereinbelow.

What personal data does S.C. SMART TOURS SRL process?

The personal data processing shall mean any operation or set of operations performed on your personal data, with or without the use of automated means, such as the collection, registration, organization, structuring, storage, adaptation or change, extraction, consultation, use disclosure by transmission, dissemination or provision in any manner whatsoever, the aligning or combination, restriction, blocking, archiving, erasure or destruction of data.

In the context of the promotion, intermediation, offering and sale of goods and services that are part of the activity of the store by S.C. SMART TOURS SRL, and of the maintenance/development of the commercial/contractual relations with you, we may require you to disclose certain personal data: name, e-mail address, telephone number, physical address, other identity document details.

In this respect, S.C. SMART TOURS SRL may process, among other things, the following personal data: surname and name, personal identification number, address, telephone, e-mail.

Who are the data subjects?

The data subjects, whose data may be processed by S.C. SMART TOURS SRL, exclusively for the purpose mentioned herein below, are you, as beneficiaries/customers of the products sold by us within companies or public institutions/authorities.

What are the personal data collection purposes?

We use your personal data for the following purpose:

• Intermediation, offering and/or sale of goods that are part of our portfolio
• Advertising, marketing (direct marketing), publicity, promotion/appraisal of services, promotion of events and products, performance of promotional campaigns, competitions, advertising baffles, loyalty programs, newsletter transmission, commercial communications regarding the services offered by S.C. SMART TOURS SRL, including the ones developed in cooperation with one of S.C. SMART TOURS SRL’s partners, via any communication means, including by electronic communication;

Personal data processing for promotional purposes (marketing)

S.C. SMART TOURS SRL shall process the personal data you provided (e-mail, telephone no.) only with your express, unequivocal, freely informed and previously expressed consent, in compliance with your rights as stipulated under the law and mentioned herein.
The personal data you provided can be used for promotional (marketing) purposes and for the goods services of other S.C. SMART TOURS SRL partners, with the observance of your rights.
You can express your option with regards to such processing by selecting/ticking the suitable boxes in the forms/documents used for personal data collection purposes.
Regardless of the situation, if, at any time, you desire S.C. SMART TOURS SRL to cease the processing of your data, you can request us to stop processing them at all times.
You can also unsubscribe at all times using the “Unsubscribe” button, in case you no longer want to receive newsletters or information materials from S.C. SMART TOURS SRL.

S.C. SMART TOURS SRL will regard all information collected from you as confidential and will not disclose it to third parties (except for the tour operators, the accommodation units, the carriers, other natural and/or legal entities involved in the provision of the services and/or of the travel service package, other tourism services, cultural events, leisure or business travel services reserved or purchased by you, or for S.C. SMART TOURS SRL ‘s business partners, respectively, in case, in the absence of such disclosure, you could not benefit from all the services above) without your express and prior consent.

Who are the recipients of your personal data?

Data recipients shall mean any natural or legal persons, public authority, agency or another body to which your personal data is disclosed, such as, but not limited to, the following: tour operators, accommodation units, carriers, natural and/or legal persons involved in the provision of the travel services and/or service packages, of other tourism services, the deployment of cultural events, leisure or business travel services, central or local public authorities, legal authorities, police, prosecutor’s office (within the limits of the legal provisions and/or following grounded and expressly formulated requests), etc.
Personal data confidentiality shall be guaranteed by S.C. SMART TOURS SRL and it shall not be disclosed to any other parties than the ones mentioned herein.

Personal data processing term

In order to achieve the aforementioned purpose, S.C. SMART TOURS SRL shall process your personal data throughout the performance of S.C. SMART TOURS SRL’s activity, up to the point when you or your legal representative/agent, exert the right to oppose/delete de data (unless S.C. SMART TOURS SRL processes the data on the basis of a legal obligation or of legitimate grounds). Subsequently to the completion of the personal data processing operations, for the purpose for which they were collected, if you or your legal representative/agent do not exert your right object/erasure, according to the law, these data shall be archived by S.C. SMART TOURS SRL during the period of time stipulated in S.C. SMART TOURS SRL’s internal procedures and/or shall be destroyed.

What are your rights?

In the relation with S.C. SMART TOURS SRL, you benefit, according to the applicable legal provisions, from the following rights: the right to be informed, the right of access, the right to rectification, the right to data erasure, the right to restrict processing, the data portability right, the right to object and the individual automated decision-making process, including profiling.

Briefly, these are your rights:

The right to be informed means that you are entitled to be informed on the manner in which your data are processed and the reason for which they are processed.
The right of access means that you were entitled to obtain a confirmation from us as to whether we process the personal data concerning you, and if we do, you are entitled to access the respective data and the information on the manner in which the data are processed.
The data portability right concerns the right to receive the personal data in a structured format, currently used and machine readable and to have this data directly sent to another operator, if technically feasible.
The right to object concerns the right to oppose personal data processing if such processing is required for the fulfilment of a task that serves a public interest or if it concerns the operator’s legitimate interest. If the personal data processing has as a purpose direct marketing, you may object to the processing at all times, free of charge, and without any justification, using, if required, the unsubscribe option available in the marketing materials.
The right to rectification concerns the correction of inaccurate personal data, without undue delay. The rectification shall be communicated to each recipient to whom the data were sent in case this proves to be impossible or supposes disproportionate efforts.
The right to erasure (“the right to be forgotten”) means that you are entitled to require us to erase your personal data, without undue delays, in case one of the following reasons applies: they are no longer required for the purpose for which they were collected or processed; you withdraw your consent and there are no other legal grounds for processing; you object to the processing and there are no prevailing legitimate interests; the personal data was illegally processed; the personal data needs to be erased in order to abide by a legal obligation; the personal data were collected in connection with the provision of information society services.
The right to restrict processing may be exerted in case the person challenges the accuracy of the data, for a period of time that allows us to check the accuracy of the data; the processing is illegal and the person objects to the erasure of personal data, requesting, instead, the restriction; if S.C. SMART TOURS SRL no longer requires the personal data for processing purposes, but the party requests them in order to have their rights acknowledged, to enforce or defend their rights in court; if the party objected to the processing over a period of time during which it is checked whether the operator’s legitimate rights prevail over the respective person’s rights.
Rights concerning the individual automated decision-making process, including profiling. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The aforementioned provisions do not apply in case the decision:

1. is required for the conclusion or performance of a contract between the data subject and a data controller;

1. is authorized under the EU law or under the domestic law governing the controller, and which also stipulates suitable measures for the safekeeping of the rights, freedoms, and legitimate interests of the data subject;
2. relies on the express consent of the data subject.

In case you decide to enforce, directly or through a representative, the aforementioned rights, in an obviously groundless or excessive manner, especially due to the repetitive nature, S.C. SMART TOURS SRL may:

• – either charge a reasonable fee considering the administrative fees for the provision of the information or communication or the implementation or the requested measures;
• – or refuse your request.

You are further entitled to submit a complaint before a supervisory authority and to initiate legal proceedings in court.

How can you enforce your right?

To enforce these rights, you can submit a written, dated and signed request with S.C. SMART TOURS SRL’s Personal Data Officer, at e-mail: dpo@smarttours.ro or by sending it to the following mailing address: S.C. SMART TOURS SRL, Brasov, Str. 13 Decembrie 31, Post Code 500199

By filling out and signing this document, you confirm that you have read, you have been correctly, accurately informed, you have acknowledged, you fully understand and agree to:

– the fact that personal data processing, as stipulated under the laws in force and herein shall be carried out for the purpose of the reservation, intermediation, offering and/or sale of the travel services and/or packages, other tourism services, the development of cultural events, the leisure or business travels; advertising, marketing (direct marketing), publicity, promotion/service appraisal, promotion of events and cultural/sports or other manifestations, development of promotional campaigns, competitions, advertising baffles, loyalty campaigns, transmission of newsletters, performance of commercial communications regarding S.C. SMART TOURS SRL‘s services, including the ones developed together with one of  S.C. SMART TOURS SRL’s partners, via any communication means, including the electronic communication services, based on your express, unequivocal, free and informed consent;

– the fact that S.C. SMART TOURS SRL shall not process your personal data unless this is required for the purpose mentioned herein, in compliance with the legal data security and privacy measures.

By filling out and signing this document, you confirm that you have read, you have been correctly, completely and precisely informed and you fully understand your rights according to the applicable laws, i.e.: the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and the individual automated decision-making process, including profiling.