GENERAL PRIVACY & CONFIDENTIALITY POLICY
within NOVATIK S.R.L.
regarding to UE 2016/679 Regulation on the protection of individuals regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/CE.

NOVATIK S.R.L. (hereinafter referred to as “Company” or “Society”) align with UE 2016/679 Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/CE (hereinafter referred to in this plan as “the Regulation” or “the GDPR”) which will become applicable since 25 May 2018.

This Policy applies to:

• Head quarters and workstations belonging to NOVATIK S.R.L.
• All departments and all personnel belonging to NOVATIK S.R.L.
• All contractors, suppliers and other persons that are working on behalf NOVATIK S.R.L.

Glossary of Regulatory Terms:

• Operator – entity – in this case – NOVATIK S.R.L., or another legal entity, public authority, nongovernmental, that process or establishes purposes and means of the processing of personal data.
• Personal data - any information concerning an independent person identifiable; an identifiable person is that person that can be identified– direct or indirect, by referring to an identifing element: name/surname, address, ID, e-mail, phone number, salary, biometrics, photo, IP address or by referring to medical database, ethical or racial data, political beliefs, philosophical, cultural or trade union affiliation.
• Data subject / person concerned – any independent person whose personal data may or may be proceed by the operator.

GENERAL INFORMATIONS:

NOVATIK S.R.L., located in Baicoi, 9 Mai Street, no. 75, Prahova County, registered at Trade Register Office, near by Prahova Courthouse under number J29/1144/2004, processing your personal data that we collect directly from the independent persons concerned or from other legal sources.

Our company – NOVATIK S.R.L. the position of operator in accordance with the provisions of the new Regulation. In order for data subjects to be processed safely, we have made every effort to implement reasonable measures to protect their personal information.

When the independent person concerned enters into any kind of relationship with us, he shall entrust his information to us.

The purpose of this general privacy & confidentiality policy is to explain to concerned independent persons what personal data we process, why we process and what we do with this information – as professionals. We take privacy seriously and never sell lists or email addresses. Fully aware that personal information belongs to every individual, we do our best to store it safely and to process it carefully. We do not provide information to third parties without informing the data subjects beforehand. This information is important. We hope that they will be read carefully.

This general privacy Policy does not cover applications and sites of other third parties to which individuals can reach by accessing links on our website. This is beyond our control. We encourage everyone to examine the privacy Policy on any site and/or application before providing personal data.

This general privacy Policy also covers the process of recruiting and selecting candidates for posts offered by the company (e.g. – the company obtains personal data following a request to complete a form in an application or by sending a CV – via e-mail). The company informs the applicants about the personal data to be collected, the purpose for which they are collected and how they will be used, in close connection with the existence Of the Privacy Policy specific to the recruitment of the company (there is a link to the Privacy Policy in the e-mail recruitment operation).

According to the legislation, the natural person who is the recipient of our services or the person in a relationship of any kind with us, is a ‘data subject’, i.e. an identified or identifiable natural person. In order to be fully transparent about the processing of data and to allow it to exercise its rights easily at any time, we have implemented measures to facilitate communication between us, the data controller and the data subject.

THE BUSINESS OF NOVATIK S.R.L.:

The protection of personal information of data subjects is very important to us. That is why we have committed ourselves to respecting the new Regulation (EU) 2016/679, the applicable national law, but also the following principles:

• Legality, fairness and transparency:

We are working on legal and fair personal data. We are always transparent about the information we use and the data subject is informed accordingly.

• Control belongs to the natural person concerned

Within the limits of the law, we give it the opportunity to examine, modify, delete the personal data that it shared with us and to exercise its other rights.

• Data Integrity and purpose limitation:

We use the data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our aims are compatible with the legislation. We take reasonable steps to ensure that personal data are accurate, complete and up-to-date.

• Security:

We have implemented reasonable security and encryption measures so as to protect information as well as possible. However, it is worth nothing that no website, application or internet connection is completely secure.

QUESTIONS:

Whether there are questions or concerns about the processing of data subjects' data or whether they wish to exercise their legal rights in relation to the data we have or whether there are concerns about how we deal with any privacy issues, any person concerned may write to us at the following e-mail address: office@novatik.ro.

We can change this general privacy Policy at any time. All updates and changes to this Policy shall be valid immediately after their notification, which we shall make by displaying on the site and/or notify by email.

INFORMATION OF DATA SUBJECTS:

When data subjects interact in any way with us, it is possible to provide or obtain information from other sources such as:

• Name/Surname
• Address
• Email
• Telephone
• Social media
• Interests and preferences
• ID data
• Information about purchased products and services
• Banking information
• Photo
• Skills
• Study Papers
• Date of birth
• Serial number
• Signature
• Birth certificates

WHY COLLECTS NOVATIK S.R.L. THIS DATA:

We collect data subjects` information for specified and legitimate purposes which include, but are not limited to, the following:

• In order to be able to communicate with the candidates for the positions offered by the company;
• To take the appropriate decision to engage them;
• For the conclusion and performance of a contract of employment according to the specialization/qualification of the candidates;
• With a view to concluding or executing/amending a contract between the data subject and the company;
• To answer questions and requests of data subjects;
• For marketing purposes, but only if we have the data subject`s prior consent;
• To provide and improve the services and products the company offers;
• To diagnose or repair technical problems;
• To offer advertising and personalized content;
• To defend the company against cyber attacks;
• For the creation and/or maintenance of accounts;
• To comply with the company legislation;
• For the purposes of establishing or claiming a legal right in court;
• For the issue of guarantee certificates

WHAT IS THE LEGAL BASIS FOR PROCESSING:

1. The data subject has given his consent to the processing of personal data: It should be noted that the data subject may at any time withdraw his consent by following the instructions for unsubscribe ('unsubscribe') from each e-mail or by sending a written request to the e-mail address: office@novatik.ro

2. Processing is necessary for the conclusion or performance of a contract between the data subject and the company:

• Service contract
• Sales contract