Personal Data Processing Policy

Our Commitment Regarding Your Personal Data

Our fundamental values are defined by total protection and transparency regarding the processing of your personal data within our activities.

The Personal Data Processing Policy describes the categories of your personal data that we process, the ways and purposes for which we collect them, the situations in which we transfer personal data, as well as the rights and options you have in this regard.

At the same time, the Personal Data Processing Policy details how we process personal data in managing our relationship with you, most often to keep you updated with the latest developments regarding the activity of DIGITAL DATA CAPITAL SRL. Please also refer to the Terms and Conditions and the Cookie Policy available at www.ddc-corp.com, which detail how we use cookies and other similar technologies through our website.

Your Personal Data Controller

The controller regarding your personal data is the Platform DIGITAL DATA CAPITAL SRL, hereinafter referred to as "DIGITAL DATA CAPITAL SRL".

Categories of Processed Personal Data

As a visitor, you do not have to submit personal data to use this Website. However, personal data expressly and voluntarily provided by visitors may be collected through this Website. If applicable (e.g., the website hosts any systems or applications used for processing personal data for various purposes, such as recruitment), your consent regarding the processing of personal data that will be collected by the respective data controller in accordance with personal data protection legislation and specific information regarding the collection and processing of personal data will be provided before any personal data is collected and processed. The personal data we process may include:

Contact information, such as your name, job title, photo, postal address, including your home address if provided to us, business address, phone number, mobile phone number, fax number, and e-mail address;
Additional information processed in the context of a contractual relationship with DIGITAL DATA CAPITAL SRL;
We will not collect and process special categories of personal data;
Details of your visits to the site or any other details regarding how you interact with us;
Data resulting from your browsing on our website collected via cookies and similar technologies.

Our sites and applications may occasionally contain links to and from the websites of our partner networks as well as other third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we are not responsible and cannot be held liable for these policies. Please check these policies before submitting personal data to these websites.

There is also the possibility that the website connects you to social networking sites or other communication and sharing platforms. If such connections exist, please be aware that you share your profile information based on your social media platform settings. Access the relevant social platform and review its privacy policy to understand how your personal data is shared and used in this context.

When you visit a website, regardless of the device used, you disclose certain information about yourself, such as your IP address, the time of your visit, the place from which you entered our website, the pages visited. It is possible that DIGITAL DATA CAPITAL SRL records this information for a determined period of time. DIGITAL DATA CAPITAL SRL uses external traffic analysis services, including but not limited to Google Analytics. These data are used exclusively by DIGITAL DATA CAPITAL SRL to improve our site and services, but also to ensure the security of our site. Under no circumstances does DIGITAL DATA CAPITAL SRL use traffic data to identify the individuals behind IP addresses.

Legal Bases for Processing Personal Data

Any operation processing your personal data will be carried out based on one of the legal bases below:

Processing is necessary for the conclusion or performance of a contract to which you are a party;
Processing is necessary for compliance with a legal obligation of the controller;
Processing is carried out based on your consent;
Processing is necessary to protect the vital interests of yourself or of another natural person;
Processing relates to public personal data, news, reports or other press releases, biography, or well-known information.

For What Purposes Do We Process Your Personal Data?

We may use your personal data for the following purposes ("Permitted Purposes"):

Providing services, partnerships, information, news, as well as any other reasonable purposes related to the activity of DIGITAL DATA CAPITAL SRL;
Managing and administering the contractual relationship with our partners;
Complying with our legal obligations (such as anti-money laundering and counter-terrorism financing obligations, reporting obligations to tax authorities);
Managing security and access to our premises, managing the use of IT systems used by DIGITAL DATA CAPITAL SRL (e.g., website, data management platforms, communication systems used), including preventing and detecting security threats, fraud, or other unauthorized or malicious activities;
For the purpose of exercising and/or defending our rights and interests;
Analyzing and improving our services and communications to you, including (as we have a legitimate interest in continuously improving our services) conducting surveys among partners regarding the level of satisfaction with the activities of DIGITAL DATA CAPITAL SRL;
For any purpose related to and/or auxiliary to any of the above, or for any other purpose for which your personal data were provided to us, in compliance with applicable legislation.

Also, based on your consent, we may send you various communications through the channels you have approved to keep you updated on the latest developments in advertising as well as any other areas of interest, announcements, and other information regarding the services, products, events, and projects of DIGITAL DATA CAPITAL SRL or other promotional events and/or for marketing purposes.

We want to keep you updated regarding the best offers for the products/services that interest you. In this regard, we may send you any type of message (such as: email/SMS/phone/mobile push/webpush/etc.) containing general and thematic information, information regarding the activities of DIGITAL DATA CAPITAL SRL.

Also, when you register for our newsletter, receive a certain report, or fill out a form on our site, we ask you to provide both an email address and a name, and sometimes other necessary information to personalize our communication to you. These data are kept until the withdrawal of consent or until your activity shows us that you are no longer interested in our communication.

Regarding the communications received from us, you can also withdraw your consent at any time simply by accessing the "unsubscribe" link at the bottom of each message received via email from us.

In certain situations and considering the object of activity and purposes of DIGITAL DATA CAPITAL SRL, we may base our marketing and promotional activities on our legitimate interest to promote and develop our business. In any situation where we use information about you for our legitimate interest, we take care and take all necessary measures so that your fundamental rights and freedoms are not affected. However, you can ask us at any time, through the described means, to stop processing your personal data for this purpose.

Storage and Protection of Personal Data

The collected personal data is recorded, used, stored, and organized on protected servers, where the site itself is hosted, as well as on any other media that allow such operations, under optimal security conditions, by appropriate means. You should bear in mind that data transmission over the internet cannot be guaranteed to be 100% secure. The causes can be numerous, such as, but not limited to: your insecure wi-fi connection, viruses or trojan/malware programs, direct access by other people, etc. Consequently, despite our efforts to protect your personal information, DIGITAL DATA CAPITAL SRL cannot ensure or warrant the security of the information you transmit to DIGITAL DATA CAPITAL SRL through any communication channel.

Once we receive the information you transmit, we guarantee that we will make every effort to ensure its security in our systems by implementing measures to prevent unauthorized access, improper use, modification, unlawful or accidental destruction, and accidental loss.

Disclosure of Your Data

We may disclose your personal data to consultants or experts or other entities in the context of providing DIGITAL DATA CAPITAL SRL activities (such as: professional training service providers, cloud service providers, telephony, e-mail, members of DIGITAL DATA CAPITAL SRL, partners of DIGITAL DATA CAPITAL SRL, courier service providers, payment/banking service providers, marketing/telemarketing service providers, market research service providers, insurance companies, IT service providers, other entities with which we can develop joint activity programs, etc.).

If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third-party private legal entities is carried out in accordance with legal provisions regarding data protection and information confidentiality, based on contracts concluded with them.

Transfer of Your Personal Data Abroad

We may transfer your personal data to states that are part of the European Economic Area or to states that have been recognized by the European Commission as ensuring an adequate level of personal data protection, if this transfer is necessary for processing according to the Permitted Purposes described above. In exceptional situations, if necessary for the Permitted Purposes, we may transfer your personal data to third countries that have not been recognized by the European Commission as ensuring an adequate level of protection. We will ensure that these international transfers are carried out subject to appropriate safeguards (such as, based on Standard Contractual Clauses approved by the European Commission) as required by the General Data Protection Regulation (EU) 2016/679 or other applicable legal provisions. You can contact us at any time, using the contact details below, if you want additional information regarding these safeguards.

Updating Your Personal Data

If any of the personal data you have provided to us changes, for example, if you change your first name, last name, or e-mail address, or if you wish to cancel any request addressed to us, or if you become aware that we hold any incorrect personal data about you, please contact us via the page https://www.ddc.ro/contact.

We will not be liable for any loss arising from incorrect, unauthentic, insufficient, or incomplete personal data that you provide to us.

How Long Do We Keep Your Personal Data?

DIGITAL DATA CAPITAL SRL has implemented technical and organizational measures to organize the process and specific criteria for retaining your personal data (including according to our archiving procedures).

We will stop processing personal data when they are no longer reasonably necessary for the Permitted Purposes, or when you withdraw your consent (if applicable) and (i) there are no longer legitimate and compelling reasons justifying the continued processing by DIGITAL DATA CAPITAL SRL (including the legal obligation of DIGITAL DATA CAPITAL SRL to continue storing the respective data) and which prevail over your interests, rights, and freedoms or (ii) if they are no longer necessary for us to establish, exercise, or defend a legal claim.

Your Rights Regarding the Processing of Personal Data

The General Data Protection Regulation grants you a series of rights regarding your personal data. You can request access to your data, correction of any mistakes in our files, and/or object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or to seek judicial remedy. Where applicable, you can also benefit from the right to request the deletion of your personal data, the right to restrict the processing of your data, and the right to data portability.

Subject to certain legal conditions, you have the following rights regarding the processing of your personal data:

The right to request a copy of the personal data concerning you that we hold;
The right to rectification of any incorrect or incomplete personal data;
The right to object to or restrict our use of your personal data;
The right to withdraw your consent for processing carried out on the basis of consent;
The right to the erasure of your personal data, in situations where you have withdrawn your consent, processing is no longer necessary, or the respective processing is contrary to the law;
The right to data portability which allows you to receive a copy of the processed data we received from you or to transmit them to another entity indicated by you;
The right to withdraw your consent for processing carried out on the basis of consent. The withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

In cases where you withdraw your consent, DIGITAL DATA CAPITAL SRL will no longer process your personal data and will take the appropriate measures to erase your personal data. DIGITAL DATA CAPITAL SRL may, however, process your personal data if there is another legal basis for such processing.

If you wish to exercise the rights mentioned above, please contact us using the following contact details: https://www.ddc.ro/contact

We are not obliged to comply with your request for the erasure of your personal data if the processing of your personal data is necessary: for compliance with a legal obligation or for the establishment, exercise, or defense of a legal claim. There are certain other circumstances in which we are not obliged to comply with your data erasure request, although these two are the most likely circumstances in which we might refuse this request.

Identity Verification & Timelines

To comply with our legal data security and confidentiality obligations, when you exercise one of the rights you have as a data subject, we may ask you to prove your identity by providing us with a copy of an identification document or any other necessary information to verify that the request comes from the relevant data subject.

We will not charge a fee for you to exercise any right regarding your personal data, unless your request for access to information is unfounded, repetitive, or excessive, in which case we will charge a reasonable amount under such circumstances. We will inform you of any applied fees before resolving your request.

We aim to respond to any valid requests within a maximum of one month, unless it is particularly complicated or if you have made several requests, in which case we will respond within a maximum of two months. We will notify you if we need more than one month. We might ask you if you can tell us exactly what you want to receive or what concerns you. This will help us act faster and shorten the response time to your request.

We will consider any requests or complaints we receive and will send you a response in compliance with the terms provided by law. If you are not satisfied with our response or believe that the processing is carried out in violation of applicable legislation, you can file a complaint with the data supervisory authority in Romania: National Supervisory Authority for Personal Data Processing (ANSPDCP) – headquartered at Bd. Gheorghe Magheru nr. 28-30, Bucharest, Romania.

Updates to this Personal Data Processing Policy

We reserve the right to periodically update and modify this Personal Data Processing Policy to reflect any changes in how we process your personal data or any changes in legal requirements. In the event of any such modification, we will display the modified version of the Personal Data Processing Policy on our website and/or make it available to you in another way, at your request.