S U P R E M O T I O N

Events

Book Now

GDPR Policy

Supremotion Events > GDPR Policy

Introduction

The purpose of this Privacy Policy is to explain to you what data we process, why we process it and what we do with it. We take your privacy seriously and never sell lists or email addresses. Being fully aware that your personal information belongs to you, we do our best to store it securely and process it carefully. We do not provide information to third parties without informing you.

Other services

This Privacy Policy does not cover the applications and websites of other third parties that you can reach by accessing the links on our website. This is beyond our control. We encourage you to review the Privacy Policy on any site and/or application before providing personal data.

Who are we?

SUPREMOTION EVENTS SRL., with headquarters in Bucharest, SUPREMOTION EVENTS SRL 94A Șoseaua Nordului 014104, Bucharest Sector 1, Unique Registration Code: 49819971 (hereinafter referred to as “SUPREMOTION EVENTS SRL”) is responsible for processing your data with personal information they collect directly from you or from other sources.

According to the legislation, our company is a personal data operator. In order for your data to be processed securely, we have made every effort to implement reasonable measures to protect your personal information.

Who are you?

Under the law, you, the natural person who is the beneficiary of our products or the person in any kind of relationship with us, is a “data subject”, that is, an identified or identifiable natural person. In order to be completely transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us, the data controller, and you, the data subject.

Change

We may change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notification, which we will provide by posting on the Site and/or email notification.

Questions and requests

If you have any questions or concerns about the processing of your data, or wish to exercise your legal rights in relation to the data we hold, or if you have concerns about how we handle any privacy issue, you can write to us at email contact@supremotionevents.com

Our commitment

The protection of your personal information is very important to us. That is why we are committed to complying with the following principles:

Legality, fairness and transparency – We process your data legally and fairly. We are always transparent about the information we use, and you are properly informed.

You’re in control – To the extent permitted by law, we give you the ability to review, modify, delete the personal data you’ve shared with us, and exercise your other rights.

Data integrity and purpose limitation – We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that personal data is accurate, complete and up-to-date.

Security – We have implemented reasonable security and encryption measures to best protect your information. However, keep in mind that no website, app, or internet connection is completely secure.

What kind of information do we collect about you?

You can use the Platform without disclosing your personal data. However, if you wish to benefit from our services, you will be asked to provide your details during a registration process.

The requested data may include: full name, telephone number, e-mail address, home address.

We may collect data through cookies or other similar technologies, such as your IP address, your Internet browser, the ads you clicked, your location, the web pages you access on our site.

Why do we collect this information?

We collect your information for specified and legitimate purposes which include but are not limited to the following:

  • In order to enter into or perform a contract between you and us;
  • To respond to your questions and requests;
  • For marketing purposes, but only if we have your prior consent;
  • To provide and improve the services and products we offer;
  • To diagnose or fix technical problems;
  • To provide you with advertising and personalized content;
  • To defend against cyber attacks;
  • To create and/or maintain accounts;
  • To comply with legislation;
  • To establish or claim a right in court.

What are the legal grounds for data collection?

  • You have given your consent for the processing of personal data – Remember that you can withdraw your consent at any time by following the unsubscribe instructions in each email or by sending a written request to the email address contact@supremotionevents.com
  • The processing is necessary for the conclusion or execution of a contract between you and us – Such as the execution of a Contract regarding the sale or purchase of one or more services, or to take measures, at your request, before concluding a Contract .
  • The processing is necessary in order to fulfill a legal obligation – For example, keeping accounting documents for a period of 10 years.

How do we disclose your data?

  • SUPREMOTION EVENTS SRL may transfer the Data, by disclosing or granting remote access rights, only through secure applications, to third parties, such as affiliated entities and other commercial partners of SUPREMOTION EVENTS SRL, acting as authorized, processing personal data for and on behalf of SUPREMOTION EVENTS SRL (for example, storage of Data on “cloud” type servers, legal and financial consultants, technical service providers or shipping assistance service providers), with which SUPREMOTION EVENTS SRL has concluded the necessary contractual agreements in accordance with EU and national regulations.
  • We may also disclose your data to business partners as a result of a joint effort to provide a product or service.
  • We will transfer Data to third parties only to the extent necessary to fulfill the applicable Processing Purposes for which your data is collected and processed.
  • The personal data collected and processed in the Processing Purposes described in this Privacy Policy may be stored on servers located abroad or transferred to affiliated entities based outside the territory of the European Union. In the case of Data transfer to third countries, SUPREMOTION EVENTS SRL will communicate the intention of the transfer as well as the targeted third countries, the purpose of the transfer and the request for consent, when such consent is required according to the legal provisions in force.
  • SUPREMOTION EVENTS SRL may disclose Data to comply with legal provisions or in response to a request from a court or other public authority.

How long do we store the data?

The personal data collected by SUPREMOTION EVENTS SRL will be stored for a period of 5 years from the termination of contractual relations or any other longer period imposed by law, regulations or applicable norms regarding obligations to keep accounting documents or requests from the authorities public.

Immediately after the end of the applicable storage period, the data will be:

  • deleted or destroyed; or anonymized; or transferred to an archive (unless prohibited by applicable records retention law or regulation).

To ensure that the Data is not kept longer than necessary, SUPREMOTION EVENTS SRL will periodically review the Data and, if necessary, delete it.

What security measures have I taken?

As part of the administration of the Platform, we have taken technical and organizational measures to ensure a level of security corresponding to the risks involved in the processing of Data, in particular through improper use, accidental destruction, illegal or unauthorized access, loss, alteration, disclosure, intentional manipulation or accidental, third party access, deletion and modification. To this end, we have developed and implemented data security policies and other privacy practices. In addition, our security procedures are constantly revised based on new technological developments.

For additional information regarding our security practices, please complete the contact form in the Contact section of the Platform.

You will be notified of a data security breach within a reasonable time after discovery of such breach, unless a competent public body determines that notification would impede a criminal investigation or harm national security. In such event, notification shall be deferred as directed by such body. We will promptly respond to your questions regarding such a data breach.

What are your rights?

Right to withdraw consent

The data subject has the right to withdraw his consent when the consent is used as a legal basis for the processing ( eg when the processing is not based on a different justification allowed by the GDPR such as a legal or contractual obligation).

Before we exclude the data subject from processing, we must confirm that the request for consent is indeed the legal basis for the processing. If not, the request may be rejected on the grounds that the processing does not require the data subject’s consent. Otherwise, the request should be granted.

In many cases, giving and withdrawing consent will be available electronically – online, and this procedure will not be necessary.

When the consent concerns a child (defined by the GDPR Regulation as a person with a maximum age of 16), the expression and withdrawal of consent must be authorized by the holder of parental responsibility for the child.

  • The right to be informed about the processing of your data

When personal data is collected from the data subject or obtained from other sources, there is a requirement to inform the data subject about the purpose of using this data and about the rights he/she has over it.

  • Right of access to data

The data subject has the right to ask the company what data it processes about him, to have access to said data, as well as to the following information:

  • Purpose of processing;
  • Categories of personal data involved;
  • Recipients or categories of data recipients if any, in particular third countries or international organizations;
  • Duration of storage of personal data (or the criteria used to establish this period);
  • The data subject’s rights to rectification or deletion of his personal data and limitation or opposition to its processing;
  • The data subject’s right to lodge a complaint with a supervisory authority
  • Information on the source of the data, if not obtained directly from the data subject, if the personal data will be subject to automatic processing, including profiling and, if so, the possible consequences involved.

If the data is transferred to a third country or an international organization, information on the safeguards that apply.

In most cases, the decision-making process for such requests will be straightforward unless the request is found to be manifestly unfounded or excessive. However, compiling the information may require the help of data owners.

  • The right to rectify inaccurate or incomplete data

If the personal data is inaccurate, the data subject has the right to request the correction and completion of incomplete personal data based on the information they provide.

If necessary, we will take steps to validate the information provided by the data subject to ensure that it is correct before changing it.

• Right to erasure (“right to be forgotten”)

We give the data subject the right to ask us to delete personal data without delay in relation to one of the following situations:

➢ personal data are no longer necessary to fulfill the purposes for which they were collected or processed;

➢ the data subject withdraws his consent on the basis of which the processing takes place and there is no other legal basis for the processing;

➢ the data subject objects to the processing and there are no legitimate reasons that prevail with regard to the processing;

➢ personal data were processed illegally;

➢ personal data must be deleted to comply with the law;

➢ personal data were collected in connection with the provision of online services to children.

We will make a decision in each case of such requests as to whether the request can or should be rejected for one of the following reasons:

➢ the data are necessary for the exercise of the right to free expression and information;

➢ the data are necessary to fulfill a legal obligation;

➢ for reasons of public interest in the field of public health;

➢ for archiving purposes in the public interest;

➢ for establishing, exercising or defending a right in court.

The right to restriction of processing

The data subject can exercise the right to restrict processing in the following situations:

➢ the data subject contests the accuracy of the data, for a period that allows the operator to verify the accuracy of the data;

➢ the processing is illegal, and the data subject opposes the deletion of personal data, requesting instead the restriction of their use;

➢ the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or

➢ the data subject objected to the processing for the period of time in which it is checked whether the legitimate rights of the operator prevail over those of the data subject.

If the data will be restricted, it will remain stored, but cannot be processed without the person’s consent. As an exception, they may be processed for the establishment, exercise or defense of a right in court or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a member state ( provided that the person concerned is informed about this ). Other organizations that process personal data on our behalf must also be informed of the restriction.

  • The right to transmit the data we hold about you to another operator

The data subject has the right to request that personal data be provided in a ” structured, commonly used and machine-readable ” format (Article 20 of the GDPR Regulation) and to transfer that data to another party, for example a other service provider. This applies to personal data for which the processing is based on the consent of the data subject, on the legal basis of the contract or in the situation where the processing is carried out by automatic means.

  • The right to object to data processing

The data subject has the right to object to processing based on the following legal justifications:

➢ To fulfill a task of public interest or in the exercise of the public authority of the operator

➢ For the purpose of the legitimate interests of the operator

Once the objection has been made, the organization must justify the grounds on which the processing is based and suspend the processing until the decision has been made (rule). The organization will no longer process personal data, unless it demonstrates that it has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the data subject, or that the purpose is to ascertain, exercise or defend a right in court.

If personal data is used for direct marketing, the organization will stop processing.

  • The right to go to justice

The data subject also has the right to go to court when he/she considers that his/her rights have been violated.

  • The right to lodge a complaint with a Supervisory Authority

It is important to know that:

  • If you have given your consent to direct marketing, you can withdraw it at any time by following the unsubscribe instructions in each email/text or other electronic message.
  • If you want to exercise your rights, you can do so by sending a written, signed and dated request to the email address contact@supremotionevents.com
  • The rights listed above are not absolute. There are exceptions, therefore each request received will be analyzed in order to decide whether it is justified or not. To the extent that the request is justified, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to file a complaint with the Supervisory Authority and to go to court.
  • We will try to respond to your request within 30 days. However, the deadline can be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility of identifying yourself within a useful period.
  • If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to identify you, we are not obliged to comply with the request.

Questions, requests and exercise of rights

If you have questions or concerns regarding the processing of your information or wish to exercise your legal rights or have any other concern regarding confidentiality, you can write to us at the e-mail address: contact@supremotionevents.com

×