Datenschutzhinweise für Business Partner

Click here for Romanian version

Thank you for visiting our website.

We take the protection of your personal data very seriously and strive to provide you with comprehensive information about the processing of your personal data. The following privacy policy applies to you if you contact us, if you enter into contract negotiations with us and/or if there is a contract in place between us and yourself or the company you are connected with, provided that data of individual is processed in that context. At the same time, this privacy policy applies if you are an associate/shareholder and/or real beneficiary of the company we are negotiation/cooperating with. The specific legal bases are the EU General Data Protection Regulation (GDPR) and Law 190/2018 for implementing GDPR provisions. Which data is processed in the individual case depends primarily on the agreed services. As a result, not all of this information will be relevant to you.

1. General information

As a rule, the personal data of yours that we collect is obtained directly from you or from the company you are connected with and that intends to be our partner/it is our partner.

However, it may also be necessary to process personal data that we obtain from other companies as well as from authorities or public institutions, such as Trade Register (portal.onrc.ro), Ministry of Finance (mfinante.ro), National Agency for Fiscal Administration (anaf.ro), Ministry of Justice (portal.just.ro ), Electronic Archive of Real Movable Guarantees (aegrm.ro/romarhiva.ro), Romanian Official Gazette, Romanian Government Portal (data.gov.ro).. At the same time, we may obtain public data by searching the Internet or from other third parties. This may include personal data that we obtain through our whistleblower channels about potential compliance violations or in the context of compliance investigations.

Relevant personal data may include: personal details (e.g., first name, last name, address and other contact details, date and place of birth and nationality), identification and authentication data (e.g., commercial register excerpts, I.D. data, specimen signature), signature (handwritten or electronic), data within the scope of our business relationship (e.g., payment data, data on orders), creditworthiness data, data on corporate and ownership structure, data relevant to compliance (e.g. politically exposed person, publicly available articles, official public data on convictions / investigations related to the company's activity or other similar activities, data regarding your position within the company, your department and your superior), photos and videos (e.g., with deliveries of goods) and other data comparable to the aforementioned categories.

You may elect to communicate with us by e-mail or mail. For technical reasons, e-mail communications may be unencrypted.

2. "Controller" within the meaning of Article 4(7) GDPR

The controller responsible for data processing within the meaning of Article 4(7) GDPR is Schwarz Global Services SCS, Bulevardul Dimitrie Pompeiu 6 E, Bucureşti, România.

3. Purposes and legal bases of processing

a) Visiting this website

When you visit this website, log files are generated containing the following information:

  • the website from which you visit our site;
  • the IP address;
  • the date and time of access;
  • the user request;
  • the http response code;
  • the data volume transmitted;
  • information about the type of browser and operating system you are using.

Recipients/categories of recipient

Each time that a user accesses this website and each time a file is accessed, we, and in some cases, third parties save log files documenting this process; this serves exclusively to protect our systems and to prevent improper and/or fraudulent behavior.

Storage time/criteria for determining storage time:

Storage time is 7 days.

b) For the performance of contractual obligations (Article 6(1)(b) GDPR)

If you are our business partner (as an individual), the purposes of processing follow from the need to take steps prior to entering into the contract, in advance of the contractual business relationship and to perform obligations under the contract.

c) For compliance with a legal obligation (Article 6(1)(c) GDPR)

The purposes of processing follow from the statutory requirements. Such legal obligations include, for example, complying with identification and retention obligations, e.g., in the context of anti-money laundering requirements, tax monitoring, reporting requirements and data processing in the context of requests from authorities.

d) For the purposes of legitimate interests (Article 6(1)(f) GDPR)

It may be necessary to process personal data based on our legitimate interests, such as the legitimate interest of selecting suitable business partners, negotiating the contract with the representatives of our business partners, as well as concluding and carrying out the contract, conducting checks on the identity of our business partners representatives, asserting legal claims, defending against liability claims, fraud prevention, protecting our IT infrastructure, managing system access authorizations, physical and data access controls, entering your contact details in our global Schwarz Group user directory, clarifying potential compliance violations, preventing crimes and settling claims arising out of the business relationship,     invitation to business events, other internal administrative purposes, such as user and contract management, billing, process and workflow optimization.

If you accept our offer