GENERAL CONFIDENTIALITY POLICY

Within the INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L.

On EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC

The company INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. (hereinafter referred to as "the Company" or "the Company") is in line with Regulation (EU) 2016/679 of the European Parliament and of the Council - on the protection of individuals with regard to the processing of personal data and on the free movement of such data and Repeal of Directive 95/46 / EC (hereinafter referred to as the "Regulation" or "GDPR" plan) which will become applicable from May 25, 2018.

This Policy applies:

• The premises and work sites belonging to INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L.
• To all departments and all personnel belonging to INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L.
• To all contractors, suppliers, customers, potential employees and other persons working on behalf of INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L.

TERMS OF REGULATION:

• Operator - the entity - in this case - INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L., or any other legal person, public authority, agency or non-governmental organization that processes or establishes the purposes and the means of processing personal data;
• Personal data - any information regarding an identified or identifiable natural person; an identifiable person is that person who can be identified - directly or indirectly, by reference to an identification element: name / surname, address, personal numeric code, e-mail, telephone, income, biometric data, image, IP address or by referring to medical, genetic data, ethical or racial origin data, political, religious, philosophical, cultural or trade union beliefs;
• The data subject - any natural person whose personal data can be or are processed by the operator;

GENERAL INFORMATION:

INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L., based in Ploiesti, Str. Mihai Bravu, no. 206, bl.25B, sc.A, ap.3, Prahova registered at the Trade Register Office of the Prahova Tribunal under no. J29 / 109/1994, having fiscal code RO5122017, e-mail: office@irs.ro, is responsible for processing your personal data that we collect directly from the targeted individuals or from other legal sources.

Our company - INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. quality of operator according to the provisions of the new Regulation In order for the data of the data subjects to be processed safely, we have made every effort to implement reasonable measures to protect their personal information.

When the data subject enters into a relationship of any kind with us, he entrusts us with his information.

The purpose of this General Privacy Policy is to explain to the data subjects what data we process, why we process them and what we do with them - in our capacity as an operator. We take privacy seriously and never sell lists or email addresses. Being fully aware of the fact that personal information belongs to each individual, we do our best to store it securely and process it carefully. We do not provide information to third parties without first informing the data subjects. This information is important. We hope the readings are carefully read.

This General Privacy Policy does not cover the applications and sites of other third parties that people may reach by accessing the links on our site. This is beyond our control. We encourage everyone to review the Privacy Policy on any site and / or application before providing personal data.

This General Privacy Policy also covers the process of recruiting and selecting candidates for positions offered by the company (eg - the company obtains personal data as a result of requesting the completion of a form in an application or by sending a CV - by e- mail). The company informs the applicants of the personal data that will be collected, the purpose for which they are collected and how they will be used, in close connection with the existence of the specific Privacy Policy for the recruitment formulated by the company. According to the legislation, the natural beneficiary of our services or the person in a relationship of any kind with us, is a "data subject", that is, an identified or identifiable natural person. To be completely transparent about data processing and to allow it to easily exercise its rights, at any time, we have implemented measures to facilitate communication between us, the data operator and the data subject.

COMMITMENT INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. :

The protection of the personal information of the data subjects is very important for us. Therefore, we are committed to respecting the new Regulation (EU) 2016/679, the applicable national legislation in this area, but also the following principles:

• Legality, fairness and transparency:

We process personal and legal data correctly. We are always transparent about the information we use, and the data subject is properly informed.

• The control belongs to the natural person concerned:

Within the limits of the law, we offer it the possibility to examine, modify, delete the personal data that it has shared with us and to exercise its other rights.

• Data integrity and purpose limitation:

We use the data only for the purposes described at the time of collection or for new purposes compatible with the initial ones. In all cases, our goals are compatible with the law. We take reasonable steps to ensure that your personal data is accurate, complete and up to date.

• Security:

We have implemented reasonable security and encryption measures to protect the information as best as possible. However, it should be remembered that no website, no application and no internet connection is completely secure.

• QUESTIONS:

If there are any questions or concerns regarding the processing of the data of the data subjects or they wish to exercise their legal rights in relation to the data we have or if there are any questions about how we treat any confidentiality issue, any interested data subject can write to us at the e-mail address: office@irs.ro

We may change this General Privacy Policy at any time. All updates and changes to this Policy are valid immediately upon notification, which we will make by posting on the site and / or email notification.

INFORMATION OF THE PERSONS VISITED:

When the data subjects interact in any way with us it is possible to provide us or obtain information from other sources such as:

• Name surname
• Address
• Age
• E-mail
• Phone
• sex
• Socialization profile
• Interests and preferences
• CNP
• Information about the products and services purchased
• Banking information
• The picture
• competences
• studies
• CNP
• citizenship

WHY COLLECT INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. THESE DATA:

We collect the information of the data subjects for certain and legitimate purposes that include, but are not limited to, the following:

• In order to be able to communicate with the candidates at the positions offered by the company;
• To make the right decision to hire them;
• In order to conclude and execute a work contract according to the specialization / qualification of the candidates;
• In order to conclude or execute / modify a contract between the data subjects and the company;
• To answer the questions and requests of the data subjects;
• For marketing purposes, but only if we have the prior consent of the data subject;
• To offer and improve the services and products the company offers;
• To diagnose or remedy technical problems;
• To provide customized advertising and content;
• To defend the company against cyber attacks;
• To create and / or maintain accounts;
• To comply with company law;
• To establish or claim a right in court;

WHICH IS THE LEGAL BASIS FOR PROCESSING:

1. The data subject has given his consent for the processing of personal data:

It is important to remember that the data subject can withdraw his consent at any time by following the unsubscribe instructions in each e-mail or by sending a written request to the e-mail address: office@irs.ro

2. The processing is necessary to conclude or execute a service / sale contract between the data subject and the company;

3. The processing is necessary in order to fulfill a legal obligation of the organization;

4. Processing is necessary for the purposes of our legitimate interests or that of another party.

DATA STORAGE WITHIN INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L.

We store personal data only for the period necessary to achieve the goals, but not more than 10 years after the termination of the contract or the last interaction of the natural person concerned with the company. After the end of the period, the personal data of the data subjects will be destroyed or deleted from the information systems or transformed into anonymous data to be used for scientific, historical or statistical research purposes.

It is important to remember that in certain explicitly regulated situations, we store data for the period required by law.

SHARING YOUR INFORMATION WITH THIRD PARTIES:

INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. will not disclose data obtained from data subjects during the recruitment stages, to other third-party companies without having previously obtained express and separate consent in this regard.

The company confirms that the personal data obtained from the recruitment process are securely stored or destroyed, meaning that we inform the targeted platforms that there are data processing agreements with the software provider / providers that they have secured in turn. the company that complies with GDPR.

INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. may disclose the data of the natural persons concerned, observing the applicable law, to business partners or other third parties, such as their own authorized persons.

We are constantly making reasonable efforts to ensure that these third parties have implemented adequate protection and security measures. We have contractual terms with these third parties so that your data is protected. We will inform the data subjects every time about the identity of these companies before the transfer or within a reasonable time and we will ensure that any transfer is legitimate, based on their consent or other legal basis.

For example, we may provide personal data to other companies, such as IT or telecommunications service providers, accounting, legal services and other third parties with whom we have a contractual relationship. These third parties are selected with special care so that these data are processed only for the purposes we indicate.

Also, the company could share the data of the individuals targeted to business partners as a result of a joint effort to provide a product or service.

Although unlikely, the company could sell the business or part of the business in the future, which will include the transfer of this data.

It could also transmit the data to other parties with the consent or according to the instructions of the data subject.

Personal information may also be provided to the prosecutor's office, the police, the courts and other authorized bodies of the state, based on and within the limits of the legal provisions and as a result of expressly formulated requests. Within reasonable limits, the company will ensure that the data of the data subjects do not leave the European Economic Area, but, insofar as it will transfer data to non-EEA countries, it will, in all cases, ensure that the transfers are legitimate, based on the consent. explicitly of the data subject or other legal basis.

RIGHTS OF THE PERSON VISITED IN THE LIGHT OF THE NEW REGULATION:

• The right of withdrawal of the consent where the processing is done based on the consent;
• The right to be informed about the processing of your data;
• The right of access to data;
• The right to rectify inaccurate or incomplete data;
• The right of erasure ("the right to be forgotten");
• The right to restrict processing;
• The right to transmit the data we have about the data subject to another operator;
• The right to oppose data processing;
• The right not to be the subject of a decision based solely on automatic processing, including profiling;
• The right to seek justice;
• The right to file a complaint with the Supervisory Authority.

INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L. informs any natural person concerned that:

• It may withdraw its consent to the processing of sensitive data and / or for direct marketing at any time by following the unsubscribe instructions from each e-mail / sms or other electronic message.
• If you wish to exercise your rights, you can do so by sending a written, signed and dated request to the email address office@irs.ro
• The rights listed above are not absolute. There are also exceptions, which is why each request received will be analyzed so that it can be decided whether it is well founded or not. To the extent the claim is well founded, the company will facilitate the exercise of rights. If the request is unfounded, it will reject it, but it will inform the data subjects about the reasons for the refusal and their rights to file a complaint with the Supervisory Authority and to address the justice.
• The company will try to respond to its request within 30 days. However, the deadline can be extended depending on different aspects, such as the complexity of the request, the large number of requests received or the inability to identify you in a timely manner.
• If, despite all efforts, the company fails to identify the data subject, and the company does not provide additional information to identify it, the company will not be obliged to comply with the request.

APPLICATIONS AND EXERCISE OF RIGHTS:

If there are any questions or concerns regarding the processing of the information of the data subject or he wants to exercise his legal rights or has any other concerns regarding confidentiality, he can write to us at the e-mail address office@irs.ro.

INTERNATIONAL ROMEXPRESS SERVICE Ltd. S.R.L.

By Administrator / General Manager