This Policy was last updated on November 1st, 2022.

We consider the right to protection of personal data a fundamental commitment, so we will devote all resources and efforts to process your data in full compliance with Regulation (EU) 679/2016 ("GDPR"), as well as any other applicable romanian legislation. Since one of the key principles of this legal framework is transparency, we have prepared this document through which we want to inform you on how we collect, use, transfer and protect your personal data when interacting with us through our website.

Who we are and how you can contact us

According to the Regulation (EU) 679/2016, GOLDFISH PROJECT SRL is an operator when processing your personal data.

GOLDFISH PROJECT SRL is an advertising agency with offices located in Bucharest, RO.

We are always open to your feedback and willing to provide you with any additional information you may need regarding the processing of your data, so we encourage you to contact our Data Protection Officer (DPO) at the e-mail address office@goldfishproject.ro.

How do we use your information?

The legal basis of data collection and processing

The legal basis for collecting personal data is Article 6 of the EU General Data Protection Regulation 679/2016.

The personal data that we process through our website are mainly your identification and location.

We collect and process, with your consent, strictly the information or personal data that is required to be collected and / or processed to meet the purpose for which they were collected, to meet customer requirements and provide the best quality of services.

Our employees who process personal data have explicit personal data protection clauses in the individual employment contract and in the job description.

We expressly state that, in accordance with the Personal Data Processing Regulation, our website does not collect and process data relating to: religious confession or philosophical beliefs, trade union membership, racial or ethnic origin, political opinions, genetic data, biometric data, health data, sexual life or sexual orientation.

When using our website

Our website is addressed to people who are at least 18 years old, so we do not willingly process child's data.

When you visit our website to inquire about our services and to view the information we provide, a number of cookies are used by us (first party cookies) and by others (third parties cookies) in order to allow the site to function, to collect useful information about visitors and to provide you with the best experience in using our website.

Some of the cookies we use are strictly necessary for our site to work. For those cookies that are useful but not strictly necessary, we will always ask for your consent before placing them. More information about cookies will be found in the Cookie Policy.

When you submit a request through our website

When you submit a request through email or using a contact form, we will process your name and e-mail address.

We use this information for responding to your querries, inclusively for providing information about our services, and request your consent for this in accordance with Article 6, paragraph 1 (a) of EU Regulation 679/2016. We can send you an email several times after you have made a request to ensure that we have answered your question and in order to improve your experience as a user. If we want to use your personal data in a way that we have not previously identified, we will contact you to provide you with information about it and, if necessary, to request your consent.

Your request is stored and processed by our employees and we do not use the information you provide to make automated decisions that may affect you. Your information is stored on our website and on our cloud server, both located within the European Union.

How we protect the security of your personal data

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to industry standards.

We implement technical and organizational measures to ensure data protection against accidental or unauthorized destruction, loss and processing. We use secure SSL sessions to transfer data between you and us through the website and our security measures are constantly updated to meet the highest standards of data protection.

We keep your personal data on secure servers, ensuring redundancy of storage.

Despite the steps taken to protect your personal data, we would like to draw attention to the fact that the transmission of information via the Internet in general or through other unsecured public networks is not completely secure, with the risk that data may be seen and used by third unauthorized parties. We can not be responsible for such vulnerabilities of systems that are not under our control.

Your rights as a data subject

Right of access (ART 15 of EU Regulation 679/2016) - you have the right to be informed about everything that happens with your personal data, what it is used for. You have the right to modify it and even revoke your consent to a specific organization. At the same time, you have the right to access your personal data whenever you want, within reasonable limits.

Right to rectification (ART 16 of EU Regulation 679/2016) - The person concerned has the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data relating to him. Taking into account the purposes for which data was processed, the data subject has the right to obtain the completion of personal data that is incomplete by providing an additional statement.

Right to be forgotten (right to erasure)  (ART 17 of EU Regulation 679/2016) - you can obtain data deletion, the general principle being that a person has the right to request the deletion of personal data. This right is not an absolute one, meaning that there are circumstances in which the data will not be erased at the request of the data subject, circumstances deriving from national legislation and which will be documented in the case of a request for deletion of the data.

Right to restriction of processing (ART 18 of EU Regulation 679/2016) - According to EU Regulation 679/2016, a person has the right to restrict the processing of personal data in various circumstances. For example, a person may restrict the processing of personal data when he believes they are not accurate. In this case, the person will be able to restrict data processing until their accuracy is verified. Another case in which data processing may be restricted is when the data subject objects to the processing.

Right to data portability (ART 20 of EU Regulation 679/2016) - you may request, under certain conditions, the personal data you have provided us in a format that can be automatically read, or you may request that the data be transmitted to another operator if technically feasible .

Right to object (ART 21 of EU Regulation 679/2016) - You can oppose the processing of your personal data.

Right to withdraw consent - in cases where processing is based on your consent, you can withdraw it at any time.

Additional rights related to automated decisions (ART 22 of EU Regulation 679/2016) - you can request and obtain human intervention regarding data processing, you can express your point of view.

More informations about your rights can be found here:

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

https://eur-lex.europa.eu/eli/reg/2016/679/oj

You can send a request regarding your personal data by e-mail at office@goldfishproject.ro.

If we receive a request from you to exercise any of the rights above, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Your right to file a complaint

You have the right to file a complaint with the supervisory authority about the processing of your personal data. In Romania, the contact information of the data protection supervisory authority is as follows:

Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal

B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod postal 010336, Bucuresti, Romania

Telefon: +40.318.059.211 sau +40.318.059.212;

E-mail: anspdcp@dataprotection.ro

Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance and we promise that we will make every effort to resolve any issues amicably.  

We remind you that you can contact the Data Protection Officer (DPO) at any time at office@goldfishproject.ro.

Updates to this confidentiality policy

This Privacy Policy will be regularly amended to reflect any changes in the way we process your personal data or any changes to your legal requirements. In the event of any such change, we will display the modified version of the Privacy Policy on our website, so please periodically review its contents.