Informative translation. In case of any discrepancy, the Romanian version prevails. Read the official version
Information notice on the processing of personal data of legal entities' representatives
SELLER notice
INOVUM S.R.L., registered with the Trade Register under number J2011000660055, tax identification code RO28310745, represented by Mr Dieter Koteles, Eng., as administrator, hereinafter “the Company”, wishes to inform you about the processing of your personal data in the context of certain operations relating to communication between companies, hereinafter “the Partner”.
Personal data are processed by INOVUM SRL under the conditions specified below:
1. Purpose and grounds of processing
This notice concerns your capacity as representative/contact person/employee of the contractor/service provider/agency and/or supplier with which the Company has a business relationship.
The Company processes the personal data mentioned in Section 2 below for the following purposes, on the legal grounds indicated for each of them:
| Purpose | Legal ground | |
| 1 | Concluding and performing the contract between the Company and the Partner whose representative/contact person/employee you are, and maintaining an ongoing business relationship intended to resolve any problem that may arise in performing the contract and providing the services undertaken by the Company and the Partner | The common legitimate interest of the Company in conducting a business relationship through their representatives and employees, with a view to implementing the services contract. |
| 2 | Transmitting/disclosing personal data to public institutions or authorities, to the extent required by law | Legal obligation |
| 3 | Organising the recovery of debts and equipment and resolving any legal matters connected with the performance of the contract | The legitimate interest of the Company in protecting its financial position and its assets. The legal obligation to provide the data for the purpose of conducting legal or judicial proceedings or out-of-court formalities in connection with the performance of the contract. |
2. Categories of personal data
The personal data that will be processed by the Company for the purposes mentioned above will cover the following:
| Purpose | Categories of data processed | |
| 1 | Concluding and performing the contract and conducting the business activity | Surname, first name, telephone number, e-mail address, home/registered office address, delivery address, account and branch, personal identification number/tax identification code, Trade Register number, representative and position. |
| 2 | Transmitting/disclosing personal data to public institutions or authorities, to the extent required by law | Surname, first name, telephone number, e-mail address and/or any other identification data made available to the Company during the performance of the contract, to the extent that disclosure of such identification data is required by law. |
| 3 | Organising the recovery of debts and equipment and resolving any legal matters connected with the performance of the contract | Surname, first name, e-mail address, telephone number and/or any other identification data made available to the Company during the performance of the contract, to the extent that disclosure of such identification data is necessary on the basis of the Company's legitimate interest or, as the case may be, required by law. |
3. Collection of personal data
The Company collected the personal data, when the contract was signed or during its performance, from the legal representative or the project holder of the Partner whose employee/representative/contact person you are.
4. Recipients of personal data
To fulfil the purposes mentioned above, the Company uses the services of several contractual partners (e.g. providers of logistics services, outsourced accounting services, security services, IT). These contractual partners carry out their business in Romania, and your personal data may be provided to them for use within the limits of the obligations they have undertaken towards the Company.
The personal data we disclose to the processors acting on our behalf are limited to the minimum personal data needed to provide the services concerned, and we also ask them not to use the personal data for any other purpose. We make every effort to ensure that all the entities we work with store your personal data safely and securely.
Some of our contractual partners are third parties whose role is not to process personal data, but who may have access to it in order to fulfil their obligations or in their interaction with the Company, such as technical maintenance companies, financial auditors or providers of legal services.
The personal data mentioned above may be made available or transmitted to third parties in the following situations:
- public authorities, auditors or institutions with powers of control over the Company's activities or assets, which ask the Company to provide information on the basis of the legal obligations incumbent on the Company;
- to comply with a legal requirement or to protect the rights and assets of our Company or of other entities or persons, such as the courts;
- acquiring third parties, to the extent that the Company's business is (wholly or partly) transferred and the personal data of the data subjects form part of the assets that are the object of the transaction.
5. Transfer of personal data outside the country
In the context of the operations described above, your personal data are not transferred outside the country to states of the European Union (“EU”) or of the European Economic Area (“EEA”).
6. Duration of processing
We will store your personal data only for the period needed to achieve the purposes of the processing, as mentioned above, and in compliance with the legal regulations in force. Should the Company establish that it has a legitimate interest or a legal obligation to continue processing your personal data for other purposes, you will be duly informed in advance.
We estimate that the processing activities detailed above will require your personal data to be stored for the following periods:
| Purpose | Duration | |
| 1 | Concluding and performing the contract between the Company and the Partner whose representative/contact person/employee you are, and maintaining an ongoing business relationship intended to resolve any problem that may arise in implementing the contract | 3 years from the termination of the contract concluded with the Partner, and for the period needed to protect the Company's rights in view of the law applicable to the contract, including the limitation period and the time limits laid down by tax and accounting legislation/the storage period set by the Company. |
| 2 | Transmitting/disclosing personal data to public institutions or authorities, to the extent required by law | 5 years from the termination of the contract concluded with the Partner, and for the period needed to protect the Company's rights in view of the law applicable to the contract, including the limitation period and the time limits laid down by tax and accounting legislation/the storage period set by the Company. |
| 3 | Organising the recovery of debts and equipment and resolving any legal matters connected with the performance of the contract | 3 years from the termination of the contract concluded with the Partner, and for the period needed to protect the Company's rights in view of the law applicable to the contract, including the limitation period and the time limits laid down by tax and accounting legislation/the storage period set by the Company. |
7. What happens to your personal data after processing ends
Once the processing period mentioned above has expired and the Company no longer has legal grounds or a legitimate interest in processing your personal data, the personal data will be deleted in accordance with the Company's procedures, which may involve anonymisation or destruction.
8. Automated decision-making and profiling
The personal data mentioned herein are not subject to automated decision-making processes, including profiling.
9. Security of the processing of personal data
The Company informs you that it constantly assesses and improves the security measures implemented to ensure that personal data are processed safely and securely.
10. The data subject's rights regarding the processing of personal data
In the context of the processing of your personal data, you have the following rights:
- The right of access to the personal data processed: you have the right to obtain confirmation as to whether or not your personal data are being processed and, where that is the case, to have access to the type of personal data and the conditions under which they are processed, by sending a request to that effect to the data controller;
- The right to request rectification or erasure of personal data: you may request, by sending a request to that effect to the data controller, the rectification of inaccurate personal data, the completion of incomplete data or the erasure of your personal data where (i) the data are no longer necessary for the original purpose (and there is no new lawful purpose), (ii) the legal basis for the processing is the data subject's consent, the data subject withdraws consent and there is no other legal ground, (iii) the data subject exercises the right to object and the controller has no overriding legitimate grounds to continue the processing, (iv) the data have been processed unlawfully, (v) erasure is necessary for compliance with EU or Romanian law, or (vi) the data were collected in connection with information society services offered to children (where applicable), when specific consent requirements apply;
- The right to request restriction of processing: you have the right to obtain restriction of processing where: (i) you consider that the personal data processed are inaccurate, for a period enabling the controller to verify the accuracy of the personal data; (ii) the processing is unlawful but you do not want us to erase your personal data, only to restrict their use; (iii) the data controller no longer needs your personal data for the purposes mentioned above, but you need the data to establish, exercise or defend a legal claim; or (iv) you have objected to the processing, for the time it takes us to verify whether the data controller's legitimate grounds override the data subject's rights;
- The right to withdraw your consent to processing, where the processing is based on consent, without affecting the lawfulness of the processing carried out up to that point;
- The right to object to the processing of your personal data on grounds relating to your particular situation, where the processing is based on legitimate interest, and to object at any time to the processing of data for direct marketing purposes, including profiling;
- The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
- The right to data portability, meaning the right to receive the personal data you have provided to the data controller in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller, where the processing is based on your consent or on the performance of a contract and is carried out by automated means;
- The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, with its office at B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania) and the right to apply to the competent courts.
The rights mentioned above may be exercised at any time.
To exercise these rights, we recommend that you send a request to gdpr@inovum.ro.
09/02/2026 – Oradea