This Privacy and Personal Data Protection Policy (the “Policy”) describes the framework applicable to the personal data collected by ATP Trucks Automobile in Romania, respectively by the following companies, each of which has the status of operator individually and separately:

ATP Trucks Automobile SRL is a limited liability company under Romanian law, having its registered office in Baia Mare, b-dul Bucuresti no. 65, Maramures County, registered with the ORC with registration number J24 / 712/2019, unique registration code 40723236, called “Operator”, including the provisions of the General Regulation on Data Protection (“GDPR”).    

Personal data operator

ATP Trucks Automobile is the Personal Data Operator. 

The personal data collected will be controlled and processed by ATP Trucks Automobile. Also, personal data can be processed or controlled jointly by ATP Group affiliates (ATP Exodus SRL, ATP AUTOMOTIVE RO SRL, ATP Transit SRL, ATP Motors RO SRL, ATP SMART 4US).

This Policy applies to: (1) the beneficiaries of our services for the sale of car parts and accessories, vehicle sales, transportation services, vehicle maintenance and repair services, (2) our employees, (3) users of the sites and applications listed here (The “sites”), (4) the representatives of our business partners, customers and suppliers, and (5) our candidates / applicants.

This Policy describes the categories of personal data or personal information we collect, how we use the information, how and for what purposes we process and protect the data we collect, the duration of storage, the situations in which we transfer data and recipients, such as and the rights and options that individuals have with regard to the use of personal data. We also describe how you can contact us about our privacy and data protection policies and how you can exercise your rights. Our privacy and data protection policies may vary depending on the jurisdictions in which we operate, to reflect local practices and legal requirements, and you may review specific local provisions by accessing local websites.

The personal data we collect

We collect personal data about you in a variety of ways, including by accessing and visiting our sites, including by creating and updating the account you register through the use of the sites, as well as through various channels. social media; at our events; by telephone and fax; through applications for different jobs; in connection with different types of services provided by us; or in connection with our service providers or business partners. We may collect various types of personal data depending on the nature of the relationship, including, but not limited to (according to applicable law):

• identification or contact details (such as name, surname, home address, business address, e-mail address, telephone number, job title);
• username and password when you register on our sites;
• the information you provide about other people you want to contact;
• other information you may provide to us, such as in surveys, follow-ups or through the “Contact Us” feature on our sites.

In addition, if you are a candidate / applicant, an employee, submit your CV for a job or create an account to submit your CV for a job, we may collect the following types of personal data ( according to local legislation):

• data on education and professional experience;
• known foreign languages ​​and other professional skills;
• personal numerical code or other personal data having an identification function;
• date of birth;
• sex;
• citizenship and work permits;
• benefit information;
• references about you;
• any other data contained in your CV that you provide regarding the areas of interest regarding your career and other data about your qualifications for employment;

And when required by law, based on the express consent provided by you:

• information about your disability and health;

In addition, we may collect information you provide to us about other people, such as information about people we may contact in an emergency.

If you visit us at our headquarters or our local offices or if you write to us or call us about various requests or issues of interest to you, we may collect your name and contact details, as well as other personal data that you you provide them to us directly.

Employee (hereinafter referred to individually as “Employee” and collectively “Employees”), as applicable, understands and acknowledges that ATP Trucks Automobile, as an employer, collects, processes and stores personal data of the employee and his dependents in order to conclude and execute his employment contract with ATP Trucks Automobile.

How we use the personal data we collect

The operator collects and uses the data collected for the following purposes (as permitted by applicable law):

1. a) managing relationships with our customers and suppliers;
2. b) creation and management of online accounts;
3. c) processing of guarantees, financing applications;
4. d) issuing insurance policies;
5. e) to the extent permitted by applicable law, communication and management of participation in events

specials, promotions, programs, offers, surveys, contests and market research;

1. f) providing answers to people’s questions and requests;
2. g) managing, evaluating and improving our business (including development, analysis and

improving our services; communications management; performing data analysis and performing

accounting, auditing and other internal activities);

1. h) protection against fraud, identification and monitoring of the prevention of fraud and other illegal activities; and
2. i) compliance with and application of applicable legal requirements, applicable service standards, contractual obligations and our policies.

All processing will be carried out on the basis of appropriate legal grounds which could be included in several categories, including:

1. a) the consent or express consent of the data subject, if required by applicable law;
2. b) to ensure that we comply with a legal or contractual requirement or a requirement to conclude / amend / terminate a contract (for example, the processing of your personal data to ensure that your salaries and taxes are paid).
3. c) the legitimate interest of the Operator (for example, to allow the customer to benefit from the services we offer).

In addition to the activities listed above, if you are a person applying for a position or creating an account to apply for a position, to the extent permitted by applicable law, we use the information described in this Policy for the following purposes:

1. a) providing employment and work opportunities; and
2. b) assessing your skills and qualifications for different jobs;

We may also use the data for other purposes, in which case we will provide you with specific information at or before the time of collection.

If you are an Employee, ATP Trucks Automobile processes your personal and dependent data, if any, for the following purposes:

1) In order to conclude and execute the employment contract to which the Employee is a party, as well as to modify or terminate the employment contract of the Employee.

2) In order to pay the salary to the Employee, as well as other bonuses, compensations, bonuses, vouchers

meal, other benefits, etc. from which the Employee could benefit.

3) In order to fulfill the obligations of ATP Trucks Automobile in the field of employment and social security and social protection, as well as in order to fulfill the obligations of ATP Trucks Automobile of occupational health and safety, emergencies, occupational medicine, including capacity assessment of the Employee.

4) In order to provide training sessions, including e-learning / online.

5) In order to keep records of all employees in the REVISAL register, including the Employee, according to the labor law obligations of the employer.

6) In order to submit declarations, applications, documents to the competent authorities, including ANAF, the Labor Inspectorate, the General Inspectorate for Immigration, the General Inspectorate for Emergency Situations, the Pension House, the Health Insurance House, for compliance with the employer’s legal obligations .

7) In order to issue certificates at the request of the Employee.

8) In order to recover any claims owed by the Employee to the employer or to recover any claims owed by the Employee to third parties (under the seizure procedure).

9) In order to prepare certain reports to companies in the ATP Exodus Group of Companies, for administrative purposes.

10) In order to monitor the location of the equipment used by the Employee in the performance of his duties.

11) In order to maintain the security of the computer system and to prevent the transfer of data which is the property of ATP Trucks Automobile / ATP Exodus Group or is a business secret of ATP Trucks Automobile / ATP Exodus Group, outside the company (security incidents) with ATP Trucks Automobile policies and procedures. 

12) For the purpose of accessing location data via remote internet connection to ensure the security of the company’s IT system.

Legitimate interest

The operator may process personal data for certain legitimate purposes in the course of his business, which include some of the following:

• if the process allows us to improve, modify, customize or otherwise improve our services / communications for the benefit of our customers, candidates and employees;
• to identify and prevent fraud;
• to increase the security of our network and computer systems;
• to better understand how people interact with our sites;
• for direct marketing purposes;
• to provide you with communications by mail / e-mail, which we consider of interest to you;
• to determine the effectiveness of promotion and advertising campaigns.

Whenever we process data for this purpose, we will ensure that we pay special attention to your rights. You have the right to object to such processing and, if you wish to do so, please write to us at datepersonale@atp-exodus.com.

How we process and protect personal data

We also process personal data that we collect by automatic means, for the purposes defined above and for a certain period of time, which complies with our internal retention policy, to ensure that personal data is not stored more than required.

We maintain the administrative, technical and physical protection guarantees intended to protect the personal data you provide against the destruction, loss, alteration, access, disclosure or accidental, illegal or unauthorized use. In order to ensure the appropriate security and confidentiality of personal data, we apply the following security measures:

• Data encryption;
• Appropriate user authentication measures;
• Secure network infrastructure;
• Network monitoring solutions. 

The duration of the processing of personal data that we collect

We store in our systems the personal data that we collect in a way that allows the identification of data subjects limited to the time for which it is necessary in light of the purposes for which the data were collected or for which these data are further processed.

We determine this specific period of time taking into account:

• The need to keep personal data stored in order to provide our services;
• To protect the legitimate interests of the Operator, in accordance with this Policy;
• Existence of specific legal obligations that make it necessary to process and store the storage for a certain period of time;

Regarding Employees, personal data will be stored and stored by ATP Trucks Automobile as follows:

1. a) Personal Data necessary for the achievement of the purposes mentioned in point II, 10), until the date of withdrawal of consent for data processing by the Employee;
2. b) Personal Data necessary for the achievement of the purposes mentioned in points II 9), 11), 12) above, until the termination of the legitimate interest of the employer or until the exercise by the Employee of the right of objection;
3. c) Personal Data necessary for the achievement of the purposes mentioned in points II 3), 4), 6), 7), until the termination of the employment contract with the Employee;
4. d) The Personal Data necessary for the achievement of the purposes mentioned in point II 1) above, shall be kept in the personnel files, for a period of 75 years from the elaboration of the personnel file, according to the Law on National Archives no. 16/1996;
5. e) The Personal Data necessary to achieve the purpose mentioned in point II 5) above, shall be kept for a period of 75 years, according to the Law on National Archives no. 16/1996;
6. f) The Personal Data that are found in any supporting documents that are the basis of the records in the accounting records are kept in the Employer’s archive for 10 years, according to the provisions of the Accounting Law no. 82/1991;
7. g) The Personal Data that are found in the salary statements of the Employer (according to point II 2) above), are kept for 50 years, according to the provisions of the Accounting Law no. 82/1991.

After the expiration of the above terms, personal data are deleted and / or destroyed from the records / databases of ATP Trucks Automobile.

People to whom we may transfer your personal information and data

We do not disclose personal data we collect about you, except as described in this Policy or in separate notices provided in connection with certain activities. We may share personal data with providers who provide services on our behalf based on our instructions. We do not authorize these providers to use or disclose the information unless it is necessary to perform services on our behalf or to comply with legal requirements. We may also share your personal data (i) with our affiliates; and (ii) our employees Mercedes Benz Romania (Daimler AG), Magyar Suzuki Ltd., Opel Southeast Europe LLC, Mazda Austria GmbH, AIC TRUCKS, MHS Truck & Bus.

In addition, we may disclose personal data about you (i) if we are required to do so by law; (ii) law enforcement authorities or other officials on the basis of a request for legal disclosure; and (iii) where we consider that disclosure is necessary or appropriate to prevent physical injury or financial loss or in connection with an investigation of suspected or actual fraudulent or illegal activity. We also reserve the right to transfer the personal data we hold about you if we sell or transfer all or part of our business or assets (including reorganization, dissolution or liquidation).

With regard to our Employees, in the context of processing operations carried out for the purposes mentioned in points II 1) -12) above, the Personal Data of the Employee will be transferred to the following third parties, as follows:

(a) service providers used by ATP Trucks Automobile, including: the provider of occupational medicine and medical subscription services; the provider of meal vouchers and gift vouchers; banks, in order to pay the salary by bank transfer; the courier service provider with which ATP Trucks Automobile collaborates, only when there are documents to be transmitted involving the Employee and only the minimum Personal Data necessary for the delivery services (name, surname, telephone, address);

(b) training service providers and other similar services;

(c) external consultants;

(d) other companies in the ATP Exodus group, in the reporting / administrative activities of ATP Trucks Automobile.

(e) authorities, including: (i) the National Agency for Fiscal Administration, for the submission of various declarations in accordance with the applicable legal provisions; (ii) the Territorial Labor Inspectorate and the General Inspectorate for Emergency Situations, for fulfilling the obligations of keeping records of employees, as well as for fulfilling the legal requirements of health and safety at work and for preventing and extinguishing fires / emergencies;

(iii) the Health Insurance House and the Pension House, for submitting various applications and forms; (iv) The General Inspectorate for Immigration, in order to fulfill the obligations of keeping records of employees for foreign nationals, (v) as well as other authorities for fulfilling other legal obligations.

All data transfers mentioned above are carried out in compliance with ATP Trucks Automobile’s principles related to the processing of personal data, in particular the principle of minimization of personal data – ATP Trucks Automobile transmits to third parties only personal data that are strictly necessary for the purposes mentioned.

Data transfers

We may also transfer the personal data we collect about you outside the country where the initial information was collected. Those countries may not have the same data protection laws as the country where you originally provided your personal data. When we transfer your personal data to other countries, we will protect those data described in this Policy and such transfers will be in accordance with applicable law.

The countries to which we may transfer your personal data that we collect may be: 

• Within the European Union;
• Outside the European Union.

When we transfer personal data from within the European Union to countries or international organizations outside the European Union, the transfer takes place on the basis of:

1. a) The decision of the European Commission regarding the degree of adequacy;
2. b) in the absence of a decision on the adequacy, on the basis of other permitted legal grounds: (i) a legally binding and enforceable instrument between public authorities or entities; (ii) mandatory corporate rules; (iii) the standard data protection clauses (formerly called standard clauses) adopted by the Commission, etc.

Your rights and options

Where required by applicable law, a data subject may exercise, under Articles 15 to 22 of the GDPR, the following specific rights:

1. a) Right to information: the right of the data subject to receive information on the processing of Personal Data. Compliance with this right by ATP Trucks Automobile is hereby notified.
2. b) Right of access: The data subject has the right to obtain from the company a confirmation that personal data concerning him are being processed or not and, if so, access to those data and the provision of information on data processing.
3. c) Right to rectification: The data subject has the right to obtain from the controller the rectification of any inaccurate or incomplete personal data concerning him, in order to ensure the accuracy of such information and to ensure proper processing.
4. d) Right of deletion: The data subject has the right to obtain from the controller the deletion of personal data concerning him, and the controller has the obligation to delete personal data.
5. e) Right to restrict processing: The data subject has the right to request the Operator to limit the processing of his data.
6. f) Right to data portability: The data subject has the right to request data portability, which means that the data subject may receive the personal data originally provided in a structured and commonly used format or that the data subject may request the transfer of data to a another Operator.
7. g) The right to object: The data subject who provides personal data to an Operator has the right to object at any time to the processing of data for several reasons provided in the GDPR, without having to justify his decision.
8. h) Right not to be subject to an automated individual decision: The data subject has the right not to be subject to a decision based exclusively on automatic processing, including the creation of profiles, if this creation produces a legal effect on the data subject or significantly affects it. similar way.
9. i) Right to lodge a complaint with a supervisory authority: Every data subject has the right to lodge a complaint with a supervisory authority, in particular in the EU Member State in which he or she has his or her habitual residence, place of work or employment. which is presumed to have been breached, if the data subject considers that the processing of personal data concerning him violates the provisions of the GDPR.

Whenever the processing is based on consent, according to art.7 of the GDPR, the data subject may withdraw his consent at any time.

If you need more information about the processing of your personal data, please see the “How to contact us” section below.

Updating our Policy

This Policy (including any annexes) may be updated periodically to reflect changes in our privacy practices and legal updates. For significant changes, we’ll notify you by posting a visible notice on our sites, indicating at the top of each notification when the last update was made.

How can you contact us

If you have any questions or comments regarding this Policy or if you wish to exercise your rights, please email us at the following address: datepersonale@atp-exodus.com or you may mail a written request to the following address: B-dul Bucuresti no. 65, Baia Mare, Maramures County, Romania. 

As you normally practice on almost all professional sites, this site uses cookies. Cookies are small files that are downloaded to your computer to enhance your experience. This page describes the information we collect, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent the storage of these cookies, but this may downgrade or “break” certain elements of the functionality of the sites.

For more general information about cookies, see the Wikipedia article on HTTP cookies.

How we use cookies

We use cookies for several reasons, which we detail below. Unfortunately, in most cases, there are no standard options for disabling cookies without completely disabling the features and functions they add to this site. It is recommended that you leave out all cookies if you are not sure if you need them or not, if they are used to provide a service that you use.

Disabling cookies 

You can prevent cookies from being set by adjusting your browser settings (see your browser’s help to do this). Please note that disabling cookies will affect the functionality of this site and many other sites you visit. Disabling cookies will usually lead to disabling certain features and functions of this site. Therefore, it is recommended that you do not disable cookies.

The cookies we have set:

Account cookies

If you create an account with us, then we will use cookies to manage the registration process and general administration. These cookies will usually be deleted when you log out, but in some cases they may remain later to remind you of your site preferences when you log out.

Associated cookies

We use cookies when you are logged in, so we remember this. This prevents you from logging in every time you visit a new page. These cookies are generally removed or deleted when you log out, to ensure that you can only access features and restricted areas when you are logged in.

Newsletters

This site offers newsletter or e-mail subscription services, and cookies can be used to remind you if you are already registered and if you want to display certain notifications that may only be valid for subscribers.

The order of processing the associated cookies

This site offers e-commerce or payment services, and some cookies are essential to ensure that your order is retained between pages so that we can process it properly.

Cookie surveys

From time to time, we conduct user surveys and questionnaires to provide you with interesting information, useful tools or to better understand our user base. These surveys may use cookies to remind you who has already participated in a survey or to give you correct results after you change the pages.

Formation of associated cookies

When you send data to a form, such as those found on contact pages or comment forms, cookies can be set to remind you of the user’s details for future correspondence.

Third-party cookies

In some special cases we also use cookies provided by trusted third parties. The next section details which third-party cookies you may encounter through this site.

This site uses Google Analytics and Hubspot, some of the most widespread and secure analytics solutions on the web, to help us understand how you use the site and how we can improve your experience. These cookies can track things like the time spent on the site and the pages you visit, so that we can continue to produce interesting content.

For more information about Google Analytics and Hubspot cookies, see the official Google Analytics and Hubspot pages.

From time to time, we try new features and make subtle changes to the way the site is delivered. When you continue to test new features, these cookies may be used to ensure that you have a consistent experience while you are on the site, while ensuring that we understand what optimizations our users appreciate most.

We also use social media buttons and / or plugins on this site that allow you to connect to the social network in different ways. For them to work the following social media sites including; {facebook, twitter, youtube} will set cookies through our site, which can be used to improve your profile on their site or to contribute to the data they hold for various purposes presented in their policy privacy.

More information

We hope we have clarified things for you and as mentioned earlier, if there is something and you are not sure if you need it or not, it is recommended to leave cookies enabled if they do not interact with one of the functions you use on our site.

However, if you want more information, then you can contact us: Email: info@atp-exodus.com 

GENERAL:
Use (visiting or ordering products) of this site implies acceptance of these terms and conditions. In order to use the site in good conditions, it is recommended to read the terms and conditions carefully. ATP Trucks Autmobile SRL assumes the right to make changes to these provisions, without prior notice. By accessing the Terms and Conditions page, you can always read the latest version of these provisions.

DEFINITIONS:
This site is maintained and managed by SC ATP Trucks Automobile SRL (legally registered), which will be hereinafter referred to as the Company. 

COPYRIGHT:
The entire content of the site www.atp-trucks.com is the property of the Company and its suppliers, and is protected by law for the protection of copyright (Law No. 8/1996). The use without the consent of the Company, of any of the elements listed above, is punished in accordance with the laws in force (administrative, civil or criminal). Thus, it is expressly forbidden to: access the site by automated devices or programs, or manually copy the content, as well as read or publish the content by other companies or sites, to make a comparison or analysis in any way.

PROCESSING OF PERSONAL DATA:
Considering the entry into force, starting with May 25, 2018, of Regulation no. 679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (called the General Regulation on data protection, in short RGPD) and having Whereas both parties have an obligation to comply with the provisions of this Regulation,

The parties agree to comply with these clauses, respecting them with respect to all personal data processed.

(1) The parties agree that during the collaboration they will take all the reasonable measures necessary to prevent the disclosure of some information that they receive, from each other or that they can obtain in other ways during the performance of the contract. If the parties do not comply with the obligations assumed regarding the confidentiality of the information by disclosing them to third parties, the party considered responsible will pay damages to the other party.

(2) By accessing these terms and conditions, the representatives of the parties take note of the processing of their personal data by the other party and express their consent freely, expressly and unequivocally regarding such processing for the development of cooperation and for fulfilling legal obligations , in accordance with the provisions of EU Regulation 2016/679.

(3) “Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity.

(4) The parties become aware through these clauses of the rights they enjoy as a data subject, respectively:

– right of access;

– the right to rectify or delete personal data;

– the right to request the restriction of the processing of personal data;

– the right to data portability;

– the right to oppose the processing of personal data concerning her;

– the right to address to the National Authority for the Supervision of Personal Data Processing and / or justice;

– the right not to be the object of an automated decision-making process (creation of profiles).

The parties also acknowledge that in order to exercise these rights they may submit a written request, dated and signed for the attention of the personal data protection officer of the other party.

(5) Obligations of the parties regarding the conformity of the processing

The parties will not take, with regard to personal data, any measures that could result in any violation of the law. With regard to the authorization that each of the parties makes regarding the access to personal data, this will be done in a controlled, confidential way and following the application of the necessary measures for data protection according to the legal provisions applicable to the respective authorization.

In this regard, each party declares that, prior to the transfer of personal data of data subjects to the other party, it has complied with all mandatory provisions governing such transfer ensuring the other party that there is no impediment of any kind regarding the transfer and processing of such data. transmitted for the purpose of fulfilling its contractual obligations.

Each party will process the personal data provided by the buyer / visitor only limited to what is necessary in relation to the purposes stated above, and will take the necessary measures to provide the data subjects with any information that they will be entitled to receive in the consequence of the processing performed by the parties.

Each Party shall implement appropriate technical and organizational measures to protect personal data against unauthorized or illegal processing and against accidental loss, destruction or damage, which shall provide an appropriate level of security, including the security of electronic communications.

The Parties shall ensure that access to personal data is limited to personnel directly involved in the completion of the requested services.

Also, the parties will seek to reduce the volume of data processed only to those data strictly necessary for each specific purpose of processing.

(6) Either party shall notify the other party in writing, as soon as possible in the circumstances, and in any case within 24 hours, of any destruction, loss, alteration, disclosure or access to accidental, unauthorized or illegal personal data. The notification shall mention (i) the details of the security breach, (ii) the type of data that was the subject of the security breach and (iii) the identity of each person affected (or, if not possible, the approximate number of data subjects and data records personal data subject). For the companies from ATP Exodus Group, the communication is made by email: datepersonale@atp-exodus.com.