Personal data processing policy

Who we are?

The Easy Credit 4 ALL IFN S.A. company, a Romanian legal entity with its registered office in the Municipality of Constanta, B-dul Alexandru Lapusneanu no. 82, block LE31, ground floor, Constanta County, with Unique Registration Code 25613809, order number in the Trade Register J13/1318/2009, registered in the General Register of the BNR under no. RG-PJR-14-110261/26.06.2009 and in the Special Register of the NBR under no. RS-PJR-14-110077/07.08.2017, registered with no. 11857 in the General Register of personal data processing records, through the secondary offices, as an „operator”, process personal data in good faith, in a fair and transparent manner, for specific and legitimate purposes, in accordance with the provisions of Regulation (EU) 2016/679 on the protection of natural persons with regard to processing of personal data and regarding the free circulation of these data.

What are personal data?

According to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free circulation of such data „personal data” means any information regarding an identified or identifiable natural person („data subject”) ; thus, an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as a name, an identification number, location data, an online identifier, or to an or more specific elements, specific to his physical, physiological, genetic, psychological, economic, cultural or social identity. The aforementioned regulation does not present a list of personal data and does not impose a list, taking into account that a date can become in a certain context personal data, and in another context simply be worthless information for a personal date.

We exemplify such personal data: name, surname, address, e-mail address, number and series of bulletin/passport/identity card, location data, an IP address, a cookie, etc.

Thus, personal data means those data that refer to a living person who can be identified using the data exemplified above or starting from these data corroborated with additional information that may come into the possession of the data operator.

The information we collect:

The information is provided directly by you, through the „Apply Now” forms (as a result of your request to provide information on our products and services);

The information we obtain when we use our services (for example, we process the history of your interactions through our newsletters in order to be able to understand and limit the information transmitted to those that interest you).

To whom we transfer this information:

We will transmit your personal data only for the purposes and to those third parties listed below, taking appropriate measures to ensure that the personal data is processed in an appropriately secure manner and transferred in accordance with applicable law.

Disclosure to third parties

Your personal information can be communicated to any agency on the territory of Romania, which is part of our Easy Credit 4 ALL IFN S.A. group, for administrative purposes to offer you our products and services, responding to your requests as soon as possible depending on your location.

Access to your information is limited to employees of Easy Credit 4 ALL IFN S.A.

Restrictions on the use of information by third parties

In any situation where we disclose your personal data to third parties, these disclosures will be made in accordance with the purposes identified above, ensuring that these third parties are subject to confidentiality and security obligations in accordance with the contracts signed with them and with the applicable laws.

We assure you that we will never disclose, sell or rent your personal information to a third party, without notifying you or, if necessary, without your express consent.

Transfer of information outside the European Union:

If we transfer your information to a country outside the EEA, we will ensure that your information is properly protected. The EEA is made up of the countries of the European Union, Switzerland, Iceland, Liechtenstein and Norway: they are considered to have equivalent laws regarding the protection of data and private life. The transfer of data within the EEA could be due to the performance of part of the activity (for administrative, organizational or technical reasons), while a transfer of data outside the EEA may

take place if our servers (respectively, the place where we store the data) or our suppliers and service providers are based outside the EEA. We will always ensure that there is an appropriate legal contract covering the transfer of data, in accordance with the standards approved by the European Commission.

What rights do you have?

As a „data subject”, you can exercise the rights provided by the Regulation, as follows:

– The right to be informed – the right to be informed about the identity of the operator, the purposes for which the data is processed and the legal basis of the processing, the legitimate interests of the operator, the recipients or categories of recipients of the data, the intention of the operator to transfer data with personal character to a third country, the period for which the data will be stored, the existence of the rights provided by the Regulation and the conditions under which they can be exercised;

– The right of access of the data subject – the right to obtain, upon request and free of charge, confirmation of the fact that the data concerning you are or are not processed and, if so, access to the respective data and to the information provided by the Regulation and to obtain a copy of the personal data that are the object of processing, additional copies may be charged according to the actual costs of the Company;

– The right to rectification – the right to obtain, upon request and free of charge, the rectification and/or completion of incomplete or inaccurate data concerning you;

– The right to delete data („the right to be forgotten”) – the right to obtain, upon request and free of charge, the deletion of personal data concerning you in any of the cases expressly provided by the Regulation (especially in the case of withdrawal of consent or in the event that it is found that the processing of personal data was not legal ). Following one such requests, the Company can anonymize the data, depriving them of their personal character and thus continue processing for statistical purposes;

– The right to restriction of processing/ The notification obligation regarding the rectification or deletion of personal data or the restriction of processing – the right to obtain, upon request and free of charge, the restriction of processing, total or for a period of time, of the data concerning you, in the situations expressly provided by the Regulation (especially if the accuracy of the respective data is contested for the period necessary to determine this inaccuracy or if the processing is illegal, and the deletion of the data is not desired, but only the restriction), as well as the right to be informed before lifting the processing restriction;

– The right to data portability – the right to receive, upon request and free of charge, the personal data concerning you, in a structured format, currently used and which can be read automatically, as well as the right to transmit this data to another operator without obstacles from the Company, under the conditions provided by the Regulation, namely that the data be transmitted by the Company directly to another operator when this is technically possible. This right can only be exercised for the personal data provided to the Company by you, if the processing of personal data is carried out by automatic means and if the processing has as a legal basis either the execution of a contract or the consent of the concerned person;

– The right to opposition – you have the right to oppose at any time, for reasons related to your particular situation, that the data concerning you to be the subject of processing, including the creation of profiles, with the exception of cases in which the Company demonstrates that it has solid and compelling reasons that justifies the processing and that prevails over your interests, rights and freedoms or that the purpose is to ascertain, exercise or defending a right in court.

– The right not to be part of the automated individual decision-making process, including the creation of profiles – you can request the withdrawal, cancellation or re-evaluation of any decision that produces legal effects regarding you, adopted exclusively on the basis of a processing of personal data, carried out by automatic means, intended to evaluate some aspects of your personality, such as professional competence, credibility, behavior or other such aspects.

– The right to withdraw consent – in cases where the processing is based on your consent, you can withdraw it at any time. The withdrawal of consent will only have effects for future processing made before the withdrawal still remains valid

– The right to file a complaint with the National Supervisory Authority a Personal Data Processing (ANSDCP) and to address the courts of court – you can file a complaint against the method of data processing personal data at the National Data Processing Supervisory Authority with Personal Character

Security:

The company Easy Credit 4 ALL IFN S.A. pay special attention to protection your personal data against improper use, disclosure, modification, loss, unauthorized access or destruction of this data and take all appropriate precautions to protect their privacy data, by using appropriate organizational and technical measures.

We exemplify among the organizational measures the control of physical access to our headquarters, staff training and document archiving in conditions of safety in the cabinets specially designed for their storage, and with a view for technical measures, we inform you that we use message encryption, passwords for access within the platforms used in carrying out the activity as well as SSL type security certificates.

I agree that EASYCREDIT 4 ALL IFN S.A. is authorized to process my data personal information entered in the apply now form (Name, Phone, Email Address), as well as the data that are collected as part of the information regarding the company’s credit offer, for the following purposes:

Providing information through via e-mail, SMS, telephone, social media platforms regarding marketing campaigns and/or other forms of advertising, as well as contacting in order to carry out surveys of customer opinion.

 

The consent regarding the processing of personal data, as well as the provision of the data mentioned below, are voluntary. This consent can be revoked at any time, with subsequent effect by a free notification to EASY CREDIT 4 ALL IFN S.A.. The consent revocation notification can be made for example by e-mail to dpo@easycredit.ro or at any secondary office of the company. Please keep in mind that the revocation of consent does not affect the legality of the use of data before the withdrawal of consent (the notification has no retroactive impact). If consent is not granted or has been revoked, personal data will not be used for the above purposes. If you have questions related to this declaration of consent or data protection by EASY CREDIT 4 ALL IFN S.A. in general, please do not hesitate to contact our data protection officer at the e-mail address: dpo@easycredit.ro

 

Contact information:

The contact details of the data protection officers are:

 – For Easy Credit 4 ALL IFN S.A. -email address: dpo@easycredit.ro

 – For the National Data Processing Supervisory Authority with Personal Data (ANSDCP) – e-mail address: anspdcp@dataprotection.ro