General:

Thank you for visiting the website of SC SUN CONSULTING SRL. When you visit https://www.sunconsulting.ro, when you contact us or when you use our services, you entrust us with your information.

SC SUN CONSULTING SRL, as a Personal Data Controller, respects the privacy and security of the processing of personal data of each person with whom it comes into contact.

The purpose of this Privacy Policy is to explain what data we process, why we process it and what we do with it. Access to the SC SUN CONSULTING SRL website is free and open to all interested parties.

By browsing the website https://www.sunconsulting.ro, by contacting us through the contact form, or by reading this document, called "Privacy Policy", you declare that you have been adequately informed about data processing.

If you have any questions or requests regarding the Terms and Conditions and the Privacy Policy, the use of the website and the information posted on the website, please contact us using the Contact page.

In accordance with the provisions of the GDPR and the Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, SC SUN CONSULTING SRL, has the obligation to manage securely and only for the purposes specified below, the personal data you provide us about yourself, a member of your family or another person.

Any information provided by you will be considered and will represent your express consent for your personal data to be used by SC. SUN CONSULTING SRL in accordance with the purposes stated in this document.

Please note the following information:

• Time period: we will try to respond to your request within 30 days. However, the deadline may be extended for specific reasons related to the specific legal right or complexity of your request.
• Restriction of access: In certain situations, we may not be able to provide you with access to all or some of your personal data due to legal provisions. If we refuse your request for access, we will inform you of the reason for refusal.
• Inability to identify you: In some cases, we may not be able to find your personal data because of the identifiers you provide in your request. An example of personal data that we cannot see when you provide us with your name and email address is data collected through browser cookies. In such cases, if we are unable to identify you as a data subject, we are unable to comply with your request unless you provide additional identifying information.
• SSC SUN CONSULTING SRL, will not need to seek explicit approval or consent to process personal data as it has a legal basis for processing data (GDPR) although the concept of consent in relation to some of the company's activities will remain important - for example, for sending newsletters, video editing.

According to the provisions of Law No 188/1999 on the status of civil servants:

• Art. 26 para. (4) - persons who have access to the data contained in the national register of civil servants and public officials, as well as to the professional file of the public official are obliged to keep personal data confidential, under the terms of the law;
• Art. 46 - Civil servants are obliged to maintain state secrecy, service secrecy, as well as confidentiality in relation to the facts, information or documents of which they become aware in the exercise of their public office, under the conditions of the law, except for information of public interest;

Definitions:

When we say "GDPR" we mean Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data. According to the GDPR, SC SUN CONSULTING SRL, Constanta county is a Personal Data Controller.

"Personal data" means any information relating to an identified or identifiable natural person ("data subject");

According to the law, you, as a visitor to the website or a recipient of a service provided by SC SUN CONSULTING SRL, are a "data subject", i.e. an identified or identifiable natural person.

An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity.

Legal terms for data processing:

With regard to data you voluntarily provide to us by completing and submitting the related form or by contacting us in any way, the legal basis is "to take steps at the request of the data subject prior to entering into a contract" (Art. 6 para. (1) lit. b of the GDPR.

With regard to the data you volunteer to us by posting a comment on a blog post, the basis for processing is our legal obligation to support the exercise of the right to information, but also our legitimate interest in providing blog readers with transparency and information.

With regard to data that we collect automatically through the use of cookies or other similar technologies, the basis for processing is consent. By accessing the site, by accepting the Privacy Policy, you validly consent to the processing.

What information we collect:

a) Information you voluntarily provide to us:

• When you use the contact form on the site, contact us by phone or email or communicate with us in any way, you are voluntarily giving us the information we process. This information includes your first name, last name, home address, email address and phone number.
• By giving us this information, we keep it secure and confidential in our database. We do not disclose or transfer information to third parties except to state institutions that have this right by law.

b) Information we collect automatically

• When you access and browse the SC SUN CONSULTING SRL, we may collect information about your visit to the site. Whenever you access the site from a computer/laptop/mobile phone or any other electronic/smart communication device there is also the possibility of collecting and storing information including IP address information, search engine type and/or location from which the site is accessed, as well as information related to the sections you consult. This Privacy Policy applies to all activities and information that are related to/contained on our site. We may collect this information through the use of cookies or other similar technologies.

For what purposes is data collected:

• to take the necessary steps to enter into a contract, collaboration or purchase of services/products we offer/request;
• to respond to queries and requests;
• to defend against cyber attacks;
• for marketing purposes, but only where you have given your prior consent;
• to provide and improve the services we offer;
• to provide and improve our website.

How long data is stored:

We store personal data only for as long as necessary to fulfil the purposes, but no longer than 5 years from the last visit to the website or as required by the law governing our joint activity as Operator - Data Subject.

To whom we disclose your data:

We will not disclose your information to third parties for their own marketing or commercial purposes without your consent. However, we may disclose your information to the following entities:

• Service Providers - We may disclose your information to other companies that provide services to us and act as our proxies, such as the company that helps us with hosting our website. These entities are selected with special care to ensure that they meet specific personal data protection requirements. These entities have a limited ability to use your information for purposes other than providing services to us;
• Courts, prosecutors or other public authorities to comply with the law or in response to a compulsory legal process (such as a search warrant or court order);
• To other parties with your consent. In addition to the disclosures described in this Privacy Policy, we may disclose information to third parties to whom you consent or request that we make such a disclosure.

Do we transfer data to third countries?

We do not currently transfer your data to countries inside or outside the European Union. If this policy changes, we will inform you accordingly and ask for your consent.

Lawfulness of processing:

Processing is lawful only if and to the extent that at least one of the following conditions applies:

a) the data subject has consented to the processing of his or her personal data for one or more specific purposes;
b) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except where the interests or fundamental rights and freedoms of the data subject require the protection of personal data, in particular where the data subject is a child.
Point (f) shall not apply to processing carried out by public authorities in the performance of their tasks.

What are your rights:

• Right to withdraw consent - Where processing is based on consent you may withdraw your consent at any time and free of charge unless otherwise provided by law;
• The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing;
• The right to take legal action;
• Right of access - You have the right to obtain confirmation from us as to whether or not personal data relating to you are being processed and, if so, you have the right of access to that data;
• Right to rectification - You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data have been processed, you have the right to obtain the completion of personal data that are incomplete, including by providing an additional statement;
• Right to erasure of data ("right to be forgotten") - In situations where the data is no longer necessary for the purposes for which it was processed, consent has been withdrawn and there is no other legal basis for the processing, you object to the processing and there are no compelling legitimate grounds for the processing or the personal data has been unlawfully processed, you have the right to obtain the erasure of data relating to you without undue delay;
• Right to restriction of processing - You have the right to obtain from us the restriction of processing if one of the following applies:

(a) you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data;

(b) the processing is unlawful and you object to the erasure of the personal data and instead request restriction of its use;
(c) we no longer need the personal data for the purpose of the processing, but you request it from us for the establishment, exercise or defence of legal claims;
(d) you have objected to the processing in accordance with Article 21(1) of the GDPR, for the period of time during which it is verified whether our legitimate rights prevail over your rights.
• Right to data portability - You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another controller without hindrance from us if:
  
  

(a) the processing is based on consent under Article 6(1)(a) or Article 9(2)(a) of the GDPR or a contract under Article 6(1)(b) of the GDPR; and
(b) the processing is carried out by automated means.


• The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent.
  
  

You do not have this right if the decision:

(a) is necessary for the conclusion or performance of a contract between you and a data controller;
(b) is authorised by Union or national law applicable to the controller which also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or
(c) is based on your explicit consent.

Information about Cookies

What are Cookies?
A cookie is a small file of letters and numbers that will be stored on a user's computer, mobile device or other equipment from which the internet is accessed. The cookie is installed by a request issued by a web-server to a browser (e.g. Internet Explorer, Chrome, Firefox) and is completely "passive" (contains no software, viruses or spyware and cannot access information on the user's hard drive).

What are Cookies used for?
These files make it possible to recognise the user's terminal and display content in a relevant way, tailored to the user's preferences. Cookies ensure users a pleasant browsing experience and support the company's efforts to provide convenient services to users: e.g. online privacy preferences, shopping cart or advertising relevance. They are also used in the preparation of aggregated anonymous statistics that help us understand how a user benefits from our web pages, allowing us to improve their structure and content, excluding personal identification of the user.

What Cookies do we use?
We use two types of cookies: per session and fixed. The latter are temporary files that remain on the user's terminal until the session ends or the application (web browser) is closed. Fixed files remain on the user's terminal for a period of time in the Cookie settings or until they are manually deleted by the user.

How are cookies used by our website?
A visit to this site may place cookies for the following purposes: site performance cookies, visitor analytics cookies, geotargeting cookies, registration cookies.

Do Cookies contain personal data?
Cookies themselves do not require personally identifiable information in order to be used and, in most cases, do not personally identify Internet users. Personal data collected through the use of Cookies may only be collected to facilitate certain functionalities for the user. Such data is encrypted in a way that makes it impossible for unauthorised persons to access it.

Deleting Cookies
In general, an application used to access web pages allows cookies to be saved on the terminal by default. These settings can be changed in such a way that the automatic management of Cookies is blocked by the web browser or the user is informed each time Cookies are sent to his/her terminal. Detailed information about the possibilities and modes of Cookie management can be found in the settings area of the application (web browser). Limiting the use of Cookies may affect certain functionalities of the website.

Why are cookies important for the Internet?
Cookies are at the heart of the efficient functioning of the Internet, helping to generate a friendly browsing experience tailored to each user's preferences and interests. Refusing or disabling cookies may make some sites unusable. Denying or disabling cookies does not mean that you will no longer receive online advertising - just that it will no longer be able to take into account your preferences and interests as evidenced by your browsing behaviour.

Examples of important uses of cookies (which do not require a user to log in via an account):

• Content and services tailored to user preferences - product and service categories.
• Offers tailored to user interests - password retention.
• Retention of child protection filters on Internet content (family mode options, safe search functions).
• Limiting the frequency of ads - limiting the number of times an ad is shown to a particular user on a website.
• Providing more relevant advertising to the user.
• Measuring, optimising and analytics features - such as confirming a certain level of traffic to a website, what type of content is being viewed and how a user gets to a website (e.g. via search engines, directly, from other websites etc). Websites run these usage analytics to improve their sites for the benefit of users.

Security and privacy issues - Cookies are NOT viruses! They use plain text formats. They are not made up of pieces of code so they cannot be executed or run themselves. Consequently, they cannot be duplicated or replicated on other networks to run or replicate themselves again. Because they cannot perform these functions, they cannot be considered viruses.

Cookies can however be used for negative purposes. Because they store information about users' preferences and browsing history, both on a particular site and on several other sites, cookies can be used as a form of Spyware. Many anti-spyware products are aware of this fact and consistently flag cookies for deletion as part of anti-virus/anti-spyware deletion/scanning procedures.

Browsers generally have built-in privacy settings that provide different levels of cookie acceptance, validity period and automatic deletion after the user has visited a particular website.

Other security issues related to cookies:

As identity protection is very valuable and is every internet user's right, it is good to know what possible problems cookies can create. Because cookies constantly transmit information back and forth between the browser and the website, if an attacker or unauthorised person intervenes in the data transmission path, the information contained in the cookie can be intercepted.

Although very rare, this can happen if the browser connects to the server using an unencrypted network (e.g. an unsecured WiFi network).

Other cookie-based attacks involve wrong cookie settings on servers. If a website does not require the browser to use only encrypted channels, attackers can use this vulnerability to trick browsers into sending information through unsecured channels. Attackers then use the information to gain unauthorised access to certain websites. It is very important to be careful in choosing the most appropriate method of protecting personal information.

Tips for safe and responsible browsing based on cookies

Due to their flexibility and the fact that most of the most visited and largest sites use cookies, they are almost unavoidable. Disabling cookies will not allow the user access to the most popular and used sites including Youtube, Gmail, Yahoo and others.

Cookies are everywhere and cannot be avoided if you want to enjoy access to the best and biggest sites on the Internet - local or international. With a clear understanding of how they work and the benefits they bring, you can take the necessary security measures so you can surf the internet with confidence.

How can I stop cookies?

All modern browsers offer the possibility to change cookie settings. These settings are usually found in the "options" or "preferences" menu of your browser.
It is possible to set the browser to stop accepting cookies, or you can set the browser to accept cookies from a specific site. But, for example, if you are not registered using cookies, you will not be able to leave comments.
Disabling and refusing to receive cookies may make certain sites unusable or difficult to visit and use. Also, refusing to accept cookies does not mean that you will no longer receive/see online advertising.

Confidentiality of information

SC SUN CONSULTING SRL undertakes to make every effort to ensure the confidentiality of the relationship with you. The confidentiality of the information held on our website and its security, including the technical basis used, is a basic principle that is important to us.

SC SUN CONSULTING SRL will monitor the service provided in order to ensure its optimal functioning and to improve the quality of the service, whenever necessary. As such, certain necessary and sufficient information, including personal data, may be stored and disclosed in order to comply with the legislation in force, to fulfil legal obligations towards public authorities and institutions and/or bodies with investigative powers, including to properly administer the service provided and/or to protect itself.

Users, as owners, are the only persons who decide on the processing of their data and information, when they have been registered through the website.

SC SUN CONSULTING SRL will process this personal data/information only for specified, explicit and legitimate purposes.

SC SUN CONSULTING SRL has taken appropriate measures, in accordance with Law 190/2018 on measures implementing Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, to prevent unauthorised access to personal data.

Links to third parties

The https://www.sunconsulting.ro website, may include links to third-party websites, plug-ins and applications. By clicking on those links or enabling those links, you may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our site, we encourage you to read the Privacy Policy of each site you visit.

Changes

We reserve the right to change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notice, which we will provide by posting on the Site. Please review this site's Privacy Policy periodically.

We take your privacy seriously and never sell lists or email addresses. Fully aware that your personal information belongs to you, we do our best to store it securely and to carefully process the information you share with us. We do not provide information to third parties without informing you. This information is important. We hope you have read them carefully.

How do you exercise your rights?

To exercise your legal rights, please contact us at office@sunconsulting.ro