MIRCEA PAUL. ALEXANDRU PFA - as a national and mountain guide, manages all personal data received during the use of the website www.onadventure.ro and the Facebook page OnAdventure in accordance with the provisions of the legislation in force on the protection of personal data as an Operator.

As of 25.05.2018, Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data entered into force.

1. PURPOSE

The purpose of this policy is to inform the data subjects whose personal data are processed by MIRCEA PAUL. ALEXANDRU PFA and applies to the following people • Clients • Potential customers • Representatives or proxies of potential customers • Visitors to the site and the OnAdventure Facebook page

2. DEFINITIONS

Relevant definitions in the context of personal data protection

Personal data = any information concerning an identified or identifiable natural person;

Target person = a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity;

Processing of personal data = any operation or set of operations performed on personal data or personal data sets, with or without the use of automated means, such as: collection, registration, organization, structuring, storage, adaptation or modifying, extracting, consulting, using, disclosing to third parties by transmission, dissemination or in any other way, joining or combining, blocking / restricting, deleting or destroying;

Right to information = the data subject's right to be informed about the identity and contact details of the controller and the Data Protection Officer, the purposes for which the data are processed, the categories of personal data concerned, the recipients or categories of recipients of the data data, the existence of the rights provided for by the legislation on the protection of personal data for the data subject and the conditions under which they may be exercised;

Right of access to data = the right of the data subject to obtain from the data controller upon request and free of charge, confirmation that the personal data concerning him or her are processed or not by him or her;

  Right to rectification = the right of the data subject to obtain, on request and free of charge, the rectification of inaccurate data concerning him or her and the completion of incomplete data;

Right to erasure of data ("right to be forgotten") = the right of the data subject to obtain, upon request and free of charge, to the extent that the conditions laid down by law are met, the erasure of personal data concerning that person;

Right to restrict processing = the right of the data subject to obtain, on request and free of charge, to the extent that the conditions provided by law are met, marking of stored personal data, in order to limit their further processing;

The right to data portability = the right of the data subject to receive, upon request and free of charge, personal data in a structured, commonly used and easy-to-read format, as well as the right to have such data transmitted by MIRCEA PAUL. ALEXANDRU PFA to another data controller, insofar as the conditions provided by law are met;

Right to object = the right of the data subject to object at any time, for good and legitimate reasons related to the particular situation, to the personal data concerning him to be processed, provided that the conditions provided by law are met ;

The right not to be subject to an individual decision = the right of the data subject to request and obtain the withdrawal, cancellation or re-evaluation of any decision based exclusively on processing by automatic means (including profiling) which produces legal effects on the data subject or it affects it in a similar way to a significant extent;

The right to go to court or to the National Supervisory Authority for Personal Data Processing = the right of the data subject to complain to the National Supervisory Authority for Personal Data Processing, respectively to go to court to defend any rights guaranteed by applicable legislation in the field of personal data protection, which have been infringed.

3. Obligation to provide information on the processing of personal data of data subjects

Information regarding the processing of the personal data of the Client (even after the termination of the contractual relationship), of the potential clients, of the persons with whom MIRCEA PAUL. ALEXANDRU PFA organizes trips or snowboard lessons, to the legal or conventional representatives of the Client, in order to provide the services contracted by the client, in accordance with the applicable legal provisions in the field of personal data protection, respectively the General Regulation on Data Protection no. 679/2016;

In certain situations, in order to fulfill the processing purposes mentioned in this document, MIRCEA PAUL. ALEXANDRU PFA may process personal data belonging to certain categories of data subjects (for example, Real Beneficiaries, minors over 16 years of age) without benefiting from the practical way to directly inform these categories of persons. In this context, the Operator provides you with information at the earliest opportunity.

4. Purposes of personal data processing MIRCEA PAUL. ALEXANDRU PFA processes personal data for the following purposes, as follows:

A) In order to fulfill the legal obligations, MIRCEA PAUL. ALEXANDRU PFA processes personal data for: execution of the contract, according to the applicable legal requirements; administrative-financial management; management of controls performed by authorities; for the development of the contractual and pre-contractual relationship between the data subjects and MIRCEA PAUL. ALEXANDRU PFA, respectively for taking over and invoicing the provision of services according to the offers placed on the Site, informing your persons on the status of the order, the information about the services provided; storage, storage (prior to archiving) and archiving of documents, implementation of personal data security measures.

In order to fulfill the previously mentioned purposes, the processing performed by the Operator has as legal basis art. 6 letter b) of the Regulation, respectively, the conclusion of a contract or pre-contract, respectively letter c), the fulfillment of a legal obligation of the operator.

B. In order to conclude and execute the contract between the Client and MIRCEA PAUL. ALEXANDRU PFA, it processes personal data for: the development and management of the contractual relationship (order) with the Customer, in order to provide products and services; the smooth running of commercial transactions; making or processing payment transactions; data quality management; ascertaining, exercising or defending certain rights of MIRCEA PAUL. ALEXANDRU PFA in court; management of complaints and notifications received regarding the contracted products and / or services.

C. In order to fulfill the legitimate interests of MIRCEA PAUL. ALEXANDRU PFA, in the context of carrying out its object or activity, the operator may process certain personal data for: improving the products and services provided, analysis, statistics and for advertising purposes, on the website or Facebook page of the operator. In order to fulfill the processing purposes mentioned above, MIRCEA PAUL. ALEXANDRU PFA processes the personal data that are provided to him directly, as well as the data that MIRCEA PAUL. ALEXANDRU PFA generates them based on them, respectively: trading data, information resulting from non-conformities reported by any person. Refusal to provide personal data may make it impossible to provide commercial services and / or fulfill the other processing purposes of the Operator.

5. Disclosure of personal data

For the purposes of processing, MIRCEA PAUL. ALEXANDRU PFA may disclose personal data to the following categories of recipients: Data subject, legal or conventional representatives of the data subject, MIRCEA PAUL representatives. ALEXANDRU PFA, other natural or legal persons who process personal data on behalf of MIRCEA PAUL. ALEXANDRU PFA, contractual partners / proxies of MIRCEA PAUL. ALEXANDRU PFA regarding the processing of personal data, the judicial authority, central public authorities, local public authorities, providers of services and goods, professional organizations. 6. Duration of processing In order to achieve the mentioned processing purposes, MIRCEA PAUL. ALEXANDRU PFA will process personal data during the performance of commercial services, as well as subsequently, when there is a legal obligation to do so (for example, to provide you with the requested information or to comply with our legal, tax or accounting obligations) or a legitimate interest. It is possible that, following the fulfillment of the legal archiving deadlines, MIRCEA PAUL. ALEXANDRU PFA to order the anonymization of data, thus depriving them of personal character and to continue the processing of anonymous data for statistical purposes.

7. Transfer of personal data Currently, MIRCEA PAUL. ALEXANDRU PFA does not transfer personal data outside Romania, in EU or non-EU states or in states that do not provide adequate conditions for the processing of personal data.

In order to achieve the above-mentioned goals it is possible that in the future MIRCEA PAUL. ALEXANDRU PFA to transfer certain categories of data. For transfers outside the EU, MIRCEA PAUL. ALEXANDRU PFA will base the transfer of his personal data on the standard contractual clauses adopted at the level of the European Commission or other guarantees recognized by law. The list of states where the data will be transferred will be displayed (updated) on the MIRCEA PAUL website. ALEXANDRU PFA in the context of this policy. 8 Rights of data subjects Data subjects enjoy the following rights in the context of the processing of personal data: the right to information, the right to access data, the right to rectification, the right to delete data ("right to be forgotten"), the right to restrict processing , the right to data portability, the right to object, the right not to be subject to an automatic individual decision, and the right to apply to the National Supervisory Authority for Personal Data Processing or to the competent courts, to the extent deemed necessary. It is possible that, following the request to delete the data, the Operator will anonymize this data (thus depriving it of personal character) and continue in these conditions the processing for statistical purposes. For additional details on the processing activities performed by MIRCEA PAUL. ALEXANDRU PFA, as well as regarding the rights you enjoy in this context, please send us the request by e-mail to MIRCEA PAUL. ALEXANDRU PFA in this sense, at the following address: onadventure.ro@gmail.com.

Information on the processing of personal data of the Client (even after the termination of the contractual relationship), potential clients, legal or conventional representatives of the Client, the real Beneficiaries, as well as their family members (if applicable).

Relationship with Clients, legal entities Information on the processing of personal data of contact persons, legal or conventional representatives, collaborators, employees and / or individuals designated by a Client Legal Entity (even after termination of the contractual relationship) of MIRCEA PAUL. ALEXANDRU PFA shall be made under the same conditions as in point 2.

  The Supplier will take steps to ensure that such disclosure is made in accordance with any applicable requirements, so that the Supplier may process Personal Data for the purposes set out in the Contract in accordance with the provisions of the Regulation. The Supplier shall comply with the instructions that may be periodically sent by the Operator in writing, in electronic format or on paper, regarding the information to be provided to those individuals in order to comply with the provisions of this clause.

9. The categories of personal data processed

In order to fulfill the processing purposes mentioned above, MIRCEA PAUL. ALEXANDRU PFA processes the data you provide us directly, the data provided by the contractual partner of MIRCEA PAUL. ALEXANDRU PFA in order to conclude and execute the concluded contract (including, but not limited to: name, surname, e-mail address, telephone number), as well as data that MIRCEA PAUL. ALEXANDRU PFA generates them based on them, respectively: information resulting from non-conformities reported by any person, data resulting from the use of applications provided by MIRCEA PAUL. ALEXANDRU PFA (if applicable).

10. Categories of recipients

In the context of fulfilling the processing purposes mentioned above, MIRCEA PAUL. ALEXANDRU PFA may disclose your personal data to the following categories of recipients: you, insofar as you exercise your right of access under the relevant legislation, local / central public institutions / authorities, proxies (entities assisting MIRCEA PAUL ALEXANDRU PFA in processing activities) and / or contractual partners.

11. Processing time

Your personal data will be processed by MIRCEA PAUL. ALEXANDRU PFA during the execution of the contract, as well as subsequently in order to fulfill the legal obligations of the Operator, including the archiving obligations. After meeting the archiving times, the Operator may anonymize the data, thus depriving it of personal character, in order to further perform various statistical processing.

12. Categories of personal data MIRCEA PAUL. ALEXANDRU PFA collects and processes the following categories of personal data: name, surname, sex, date and place of birth, citizenship, signature, telephone, e-mail, address, user ID, image, series and bulletin / passport number, numeric code personal data, health data as well as any other categories of data that data subjects provide directly or indirectly to the Operator. MIRCEA PAUL. ALEXANDRU PFA respects the rights that the applicable legislation in the field of personal data protection confers on the data subject, namely the right to information, the right to access data, the right to rectification, the right to delete data ("right to be forgotten"), the right to to the restriction of processing, the right to data portability, the right to oppose data processing, the right not to be subject to an automatic individual decision, the right to apply to the National Supervisory Authority for Personal Data Processing or the competent courts, as well as the modalities of exercise them to the extent deemed necessary. The above rights may be exercised by sending a written request, dated and signed, to the headquarters of MIRCEA PAUL. ALEXANDRU PFA or by sending an e-mail to the Company, to the following e-mail address: onadventure.ro@gmail.com

For additional details on the processing activities performed by MIRCEA PAUL. ALEXANDRU PFA, as well as regarding the rights of the data subject, the data subjects can be addressed by a request (on paper / in electronic format, by e-mail) to: onadventure.ro@gmail.com sua at the address Șoseaua Unirii no. . 194, Balotești, Ilfov County.

13. Data confidentiality

The confidentiality of personal data and compliance with applicable legal rules in the field is one of the main concerns of MIRCEA PAUL. ALEXANDRU PFA, constantly aiming to ensure data security and compliance with relevant requirements. Consequently, the confidentiality and security of personal data is one of the main concerns of MIRCEA PAUL. ALEXANDRU PFA and, for this reason, all personal data are processed in accordance with the applicable legal provisions in the field of data protection. Monitoring compliance with these requirements is also ensured by the Data Protection Officer appointed by MIRCEA PAUL. ALEXANDRU PFA, who can be contacted at the contact address: onadventure.ro@gmail.com.

The contractual partners also have the obligation to take all necessary technical and organizational measures to ensure the protection of personal data collected, stored, used or processed by him in any other way. In particular, they have the obligation to protect the personal data to which they have access and the Personal Data Processing systems that they use in order to fulfill the obligations assumed by the contract concluded with MIRCEA PAUL. ALEXANDRU PFA against unauthorized access, as well as against attacks of any kind by employees or third parties, as well as against the deliberate or accidental destruction or loss of personal data. the contractual partner guarantees that it can subsequently verify and establish whether and by whom the personal data have been entered, modified and deleted in / from the data processing systems they use in order to fulfill the obligations assumed by the contract. When MIRCEA PAUL. ALEXANDRU PFA initiates data processing that may pose a high risk to the rights and freedoms of data subjects, taking into account the nature, scope, context and purposes of the processing, especially when using new technologies, perform a data protection impact assessment with personal character before processing.

Contact - Data Protection To the extent that, in addition to the information presented above, you consider that you need additional clarifications, you can contact us at the email address: onadventure.ro@gmail.com