Privacy policy and personal data protection / en

Privacy policy and personal data protection

In this Privacy Policy and the protection of personal data, hereinafter referred to as the Policy, you will find concrete answers about how your personal data is collected and processed through the website www. http://gr.mrcharge.eu/.

If you have a question or concern, related to the aspects presented, you can send us your questions to the address info@gr.mrcharge.eu or to the contact details provided below.

The objectives of our approach, in order of importance, regarding this Policy are the following:

respecting your fundamental right to the protection of personal data and privacy;
compliance with the legal provisions regarding the protection of personal data;
your full and correct information about who?, what?, why?, where?, until? and how? your personal data is processed, so that you have, at all times, control over the personal data that you entrust to us for processing in order to achieve our purposes.

This is the current and valid version at the moment, being updated on October 15, 2022.

Privacy policy and personal data protection

If you have a question or concern, related to the aspects presented, you can send us your questions to the address info@gr.mrcharge.eu or to the contact details provided below.

The objectives of our approach, in order of importance, regarding this Policy are the following:

respecting your fundamental right to the protection of personal data and privacy;
compliance with the legal provisions regarding the protection of personal data;
your full and correct information about who?, what?, why?, where?, until? and how? your personal data is processed, so that you have, at all times, control over the personal data that you entrust to us for processing in order to achieve our purposes.

This is the current and valid version at the moment, being updated on October 15, 2022.

Privacy policy and personal data protection

If you have a question or concern, related to the aspects presented, you can send us your questions to the address info@gr.mrcharge.eu or to the contact details provided below.

The objectives of our approach, in order of importance, regarding this Policy are the following:

respecting your fundamental right to the protection of personal data and privacy;
compliance with the legal provisions regarding the protection of personal data;
your full and correct information about who?, what?, why?, where?, until? and how? your personal data is processed, so that you have, at all times, control over the personal data that you entrust to us for processing in order to achieve our purposes.

This is the current and valid version at the moment, being updated on October 15, 2022.

Privacy policy and personal data protection

If you have a question or concern, related to the aspects presented, you can send us your questions to the address info@gr.mrcharge.eu or to the contact details provided below.

The objectives of our approach, in order of importance, regarding this Policy are the following:

respecting your fundamental right to the protection of personal data and privacy;
compliance with the legal provisions regarding the protection of personal data;
your full and correct information about who?, what?, why?, where?, until? and how? your personal data is processed, so that you have, at all times, control over the personal data that you entrust to us for processing in order to achieve our purposes.

This is the current and valid version at the moment, being updated on October 15, 2022.

How to contact us?
What does our Policy cover?
What personal data do we collect from you, why and how do we process it?
Which are the purposes we process your personal data for, and how do we process the data collected online, over the phone or directly from you?
From whom and how do we collect your personal data?
Which are the legal grounds we rely on to process your personal data?
Do we process your personal data for profiling or decision-making through an automated process?
For how long do we keep your personal data?
Who do we disclose to your personal data?
Is your personal data safe?
Are we certified and have we adhered to a code of conduct?
What are your rights guaranteed by the GDPR?
How can you exercise these rights?

1) How to contact us?

The data are collected and processed by Mr. CHARGE SRL, based in Bucharest, Sector 3, 46 Eufrosina Popescu Street, Postal Code 031682, unique registration code: RO 45710504, registered at the Trade Registry Office under no. J40/3690/25.02.2022, represented by Victor Josan, contact email: info@gr.mrcharge.eu.

For any issues related to the protection of personal data, as well as for the exercise of your rights guaranteed by the General Data Protection Regulation no. 679/2016 and the national legislation in force, you can contact the designated Personal Data Protection Officer: info@gr.mrcharge.eu.

2) What does our Policy cover?

This Policy: takes effect from the date of the last update.

The last update of the Policy takes effect from: 15.10.2022.
Our policy applies to http://gr.mrcharge.eu/.

3)What personal data do we collect from you, why and how do we process it?

To carry out our current activity, through the Mr. CHARGE website we collect and process the following personal data:

personal data processed through cookies installed on the site
personal data processed through the contact forms (Franchise and Install Mr.Charge in the location) – for the data of the representatives of the legal entities that contact us
personal data processed when you contact us directly
personal data (e-mail address) when subscribing to the newsletter

4)Which are the purposes we process your personal data for, and how do we process the data collected online, over the phone or directly from you?

Personal data is specifically processed only to the extent necessary and considering the following purposes:

offering phone recharging services through external mobile batteries
contacting in order to contract a franchise
contacting in order to install Mr.Charge in a location
Direct telephone contact
Newsletter transmission
Direction to the Mr.Charge mobile application

The processing will respect the principle of purpose limitation, respectively the data will be collected for specific, explicit, and legitimate purposes and are not subsequently processed in a way incompatible with these purposes; further processing for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered incompatible with the initial purposes.

The mobile application will be distributed through the application stores of Google and Apple.

5) From whom and how do we collect your personal data?

We collect your personal data directly from you through the forms you fill out on the site. Some data, such as IP or geolocation, we receive from your phone or laptop/computer.

6) Which are the legal grounds we rely on to process your personal data?

According to article 6 (1) of European Regulation no. 679/2016 data processing is necessary:

for the execution of a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract;
in order to fulfill a legal obligation incumbent on the controller;
processing is necessary for the purposes of the legitimate interests pursued by the controller (interpretation of statistical data).
the consent of the data subject (in the case of subscribing to the newsletter and accepting cookies from the website).

7) Do we process your personal data for profiling or decision-making through an automated process?

We do not use an exclusively automated process without human intervention to make decisions about you.

8)For how long do we keep your personal data?

Until the withdrawal of your consent when this is the legal basis of the processing.

According to the legal provisions regarding the preservation of financial-accounting documents.

For the rest of the documents, the retention period is established by the Archival Nomenclature.

9) Who do we disclose to your personal data?

Depending on the purposes for which we process your personal data, we disclose data to state institutions and bodies, in accordance with the law (ITM, ANAF) or to judicial / criminal investigation bodies, in accordance with the law.

Under the conditions of the Investigation Procedure of October 9, 2018, approved by Decision no. 161 of October 9, 2018, regarding the approval of the Procedure for carrying out investigations by the National Authority for the Supervision of the Processing of Personal Data, ANSPDCP receives full and immediate access to any personal data processed by us and to any information we hold about you, without being able to oppose their confidential nature.

Data is also sent to the Legal Department (the company’s lawyer), in case of damage caused by customers or incidents involving employees. Also, the data is transmitted to the associated operators and to the authorized persons of the operator (eg: IT service provider, website maintainer).

10) Is your personal data safe?

For the safe processing of your personal data for your fundamental rights and freedoms, we have taken appropriate technical and organizational measures for the protection of personal data, including but not limited to:

All our employees sign a confidentiality agreement regarding the protection of personal data processed by them for the performance of their job duties;
All employees are properly trained on the security measures implemented by us and which they must comply with for the protection of personal data;
We only use external services provided by providers who demonstrate that they ensure a high level of security of personal data processed on our behalf;
We implement technical and organizational security measures for the physical protection of the locations where we process personal data and the devices we use in our current activity.

All technical and organizational measures implemented by us are intended to protect your personal data against unauthorized or illegal processing and against accidental loss, destruction, or damage.

11) Are we certified and have we adhered to a code of conduct?

In Romania, until the date of updating this Policy, an authorized certification body has not been established to attest to the fact that we comply with the legislation in force regarding the protection of personal data, nor has a Code of Conduct been developed and approved to which we can adhere to, which is why we adopt, including as good practice measures, any possible security means to ensure the highest degree of protection for the personal data we process.

12) What are your rights guaranteed by the GDPR?

In accordance with the provisions of Regulation 679/2016, we guarantee compliance with the following rights:

You have the right to withdraw, at any time, your consent regarding the processing of personal data (in the situation where the processing is based on your consent). Withdrawal of consent does not affect the legality of personal data processing carried out before its withdrawal. Withdrawing consent is as easy as giving it, by sending an email to info@gr.mrcharge.eu or to our headquarters.
You have the right to receive access to your personal data that we process, and we offer you a confirmation that we process your personal data or not, and, if so, we provide you with all the mandatory information provided by art. 15 GDPR, as well as a copy of this data, if you request it, in the format requested by you and on the communication path specified by you in the request.
You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay, as well as the completion of personal data that is incomplete, including by providing an additional statement. We must communicate the rectification of your personal data to the recipients of your personal data (if any).
You have the right to request the erasure of personal data that we process.

We are obliged to delete your personal data and will do so without undue delay, if are fulfilled the following conditions provided for in art. 17, paragraph 1 and 2 of the GDPR:

personal data are no longer necessary to fulfill the purposes for which they were collected or processed;
you withdraw your consent on the basis of which the processing takes place and there is no other legal basis for the processing;
you object to the processing for reasons related to the particular situation in which you are and there are no legitimate reasons that prevail with regard to the processing (art. 21, paragraph 1 GDPR) or you object to the processing for direct marketing purposes (art. 21 , para. 2 GDPR);
your personal data has been processed illegally;
your personal data must be erased to comply with a legal obligation incumbent upon us under Union law or the domestic law to which we are subject;
personal data were collected in connection with the provision of information society services directly to a child.

If we have made public your personal data and we are obliged to erase it, considering the available technology and the cost of implementation, we take reasonable measures, including technical measures, to inform the contorllers processing your personal data that you have requested the erasure by these operators of any links to said data or any copies or reproductions of such personal data.

We will refuse to erasure of your personal data under the following conditions expressly provided by art. 17, para. 2 GDPR:

if the processing of personal data is necessary for the exercise of the right to free expression and information;
if the processing of personal data is necessary to comply with a legal obligation that provides for the processing under Union law or the internal law that applies to us or for the performance of a task performed in the public interest or in the exercise of an official authority with which we are vested, if be the case;
if the processing of personal data is necessary for reasons of public interest in the field of public health, in accordance with Article 9 paragraph (2) letters (h) and (i) and Article 9 paragraph (3) GDPR;
if the processing of personal data is necessary for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in accordance with Article 89 paragraph (1), to the extent that the exercise of your right to erasure of personal data is likely to make impossible or seriously affect the achievement of the objectives of the respective processing;
if the processing of personal data is necessary for establishing, exercising, or defending a right in court.
You have the right to request the restriction of processed data in the following cases:

you dispute the accuracy of the data, and we will restrict its processing for a period that allows us to verify the accuracy of the data;
the processing is illegal and you object to the erasure of personal data, requesting instead the restriction of their use;
we no longer need the personal data for the purpose of processing, but you request them to establish, exercise or defend a right in court;
you object to the processing in accordance with art. 21 para. 1 GDPR, for the time period in which we check whether our legitimate rights prevail over your rights.

If processing has been restricted on the grounds set out above, your personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of a right in court or for the protection of rights to another natural or legal person or for reasons of important public interest of the Union or a member state.

If you have obtained from us the restriction of processing, you will be informed by us before the lifting of the restriction of processing.

You have the right to data portability. You may at any time request to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and you have the right to transmit this data to another controller without obstacles from our side, if:

processing is based on consent;
the processing is based on a contract concluded between us and you.
the processing is carried out by automatic means.

In exercising your right to data portability, you have the right to have your personal data transferred directly from one controller to another where this is technically feasible.

Exercising your right to data portability does not affect Article 17 of the GDPR (the right to erasure of personal data), since that right does not apply to processing necessary for the performance of a task performed in the public interest or in the exercise of an official authority vested with the operator.

Your right to data portability is without prejudice to the rights and freedoms of others.

You have the right to object, at any time, for reasons related to your particular situation, to the processing of personal data carried out pursuant to art. 6, para. 1, lit. e) or f) of the GDPR, including the creation of profiles based on those provisions.

We immediately stop the processing of personal data if you object to the processing, unless we demonstrate that we have legitimate and compelling reasons that justify the processing and that prevail over your interests, rights, and freedoms, or that the purpose is to establish, exercise or defend a right in court.

When the processing of personal data is aimed at direct marketing, you have the right to object at any time to the processing of personal data concerning you for this purpose, including the creation of profiles, insofar as it is related to the respective direct marketing, and we will immediately stop processing your personal data for direct marketing purposes.

In the context of using information society services, you can exercise your right to object to the processing of personal data by automatic means that use technical specifications.

If we process your personal data for scientific or historical research purposes or for statistical purposes, you may, for reasons related to your particular situation, object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task for reasons of public interest.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that concern or similarly affect you to a significant extent.

Dreptul dvs. de a nu face obiectul unei decizii bazate exclusiv pe prelucrarea automată nu se aplică în cazul în care decizia:

it is necessary for the conclusion or execution of a contract between you and us;
it is authorized by Union law or domestic law which applies to us, and which also provides for appropriate measures to protect your rights, freedoms and legitimate interests;
if based on your explicit consent.

In the cases referred to in letters (a) and (c), we implement appropriate measures to protect your rights, freedoms and Legitimate interests and guarantee you at least your right to obtain human intervention from us to express your point of view view and appeal the decision.

You have the right to file a complaint with ANSPCP. The contact details of the National Supervisory Authority for the Processing of Personal Data are B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, Email: anspdcp@dataprotection.ro, Landline: +40.318.059.211, +40.318.059.212, Fax +40.318.059.602.

13) How can you exercise these rights?

You can exercise all your rights by submitting a request to our office or by e-mail using the contact details in the preamble.