On May 25, 2018, Regulation (EU) 2016/679 on the protection of persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), known as GDPR, became applicable. Thus, any operator/entity processing personal data must comply with these new requirements and transparently provide information on how the data is processed.
Essensys complies with national and international regulations regarding the protection of personal data. Below is a description of how we collect and process personal data.
Lawfulness of processing
According to Article 6 of Regulation (EU) 2016/679, processing is lawful only if and to the extent that at least one of the following conditions applies:
- The data subject has given consent for the processing of their personal data for one or more specific purposes;
- Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract;
- Processing is necessary for compliance with a legal obligation to which the controller is subject;
- Processing is necessary to protect the vital interests of the data subject or another person;
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, especially when the data subject is a child.
Categories of personal data that may be processed
- Personal identification data (name, surname, address, age, date of birth, gender, phone number, email, national identification number, nationality, handwritten signature, and digital signature).
- Personal data related to family, lifestyle, and social circumstances (marital status, details about family/spouse/partner/dependents, hobbies, sports practiced).
- Personal data related to education and professional experience (education and training history, qualifications, certifications).
- Personal data related to professional or business activities carried out by an individual (occupation, job position, professional history).
- Personal data related to health (data concerning physical and mental health status or declared medical conditions included in specific medical documents voluntarily provided by the employee or as a result of a legal obligation or occupational health examinations/SSMS procedures).
- Personal financial details (bank account information, income, tax benefits, or social benefits, tax obligations).
- Information regarding location, image, and audio-video recordings of individuals.
Collection and use of personal data
By using the website www.essensys.ro visitors may provide personal data by filling out various forms, including newsletter subscriptions, whitepaper downloads, or other informational materials, as well as contact forms.
These data are stored in our database or in the database of our marketing service provider and are used exclusively for the purposes for which they were provided, such as sending relevant information and updates about our products and services.
Data storage period
Personal data will be kept as long as necessary for the purposes for which they were collected or until you request their deletion. In the case of legal obligations, data may be retained for a longer period, in accordance with applicable regulations.
Categories of recipients to whom collected personal data may be disclosed
Essensys may disclose personal data to the following categories of recipients:
- State authorities (including tax authorities), as a result of a legal obligation of the controller;
- Service providers directly/indirectly involved in managing the company’s operations (e.g., IT service developers, accounting service providers, banking institutions, partner medical clinics, etc.);
- The company’s partners or collaborators for legitimate purposes strictly related to the company’s business activities;
- Judicial or arbitration courts, public notaries, lawyers, judicial executors, translation offices, other authorized services, expert evaluators.
Right to Data Erasure (“Right to Be Forgotten”)
The data subject has the right to request the erasure of personal data without undue delay in the following cases:
- The data is no longer necessary for the purposes for which it was collected;
- The data subject withdraws consent, and there is no other legal basis for processing;
- The data subject objects to processing for direct marketing purposes;
- The data has been processed unlawfully;
- Erasure is necessary to comply with a legal obligation.
For exercising your rights regarding Essensys or for additional information, you can contact us:
- Email at office@essensys.ro,
- By mail or courier at Bd. Iancu de Hunedoara no. 8, 5th floor, Sector 1, Bucharest, Romania, 011742, or
- By submitting a signed notification in person at any Essensys office in Bucharest or across the country.