The following information is aimed to clarify the processing of personal data of Promenada Mall Targu Mures customers who wish to be entered in the Customer Database by the Controller.
Who is the Controller of your personal data?
The Controller of your personal data is: ERP TARGU MURES SRL, with its registered office at Targu Mureș, 243 Gheorghe Doja Street, Mureș County, registered with the Bucharest Trade Register under No. J26/828/2011, having Sole Registration Code no. RO-17454877 (hereinafter referred to as the “Controller“).
What data will be processed?
In order to be entered in the Customer Database, you are requested to provide your email, telephone number, residential address (optional), and, mandatorily, your postcode, name, age and sex, as well as your interests. The provision of the aforementioned data is voluntary, but it is required in order to be entered in the Customer Database.
What provisions govern personal data processing?
Since 25 May 2018, processing of personal data has been governed by the provisions of the so-called GDPR or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
What is the purpose and the basis for your data processing?
Your data will be processed for marketing purposes, for information purposes in connection with the current offer of the mall and accompanying events. Phone numbers will also be processed to remind customers about their appointments with consultants. The data are processed on the basis of Article 6(1)(a) of the GDPR, i.e. your consent.
Who will have access to your data?
Your personal data will be disclosed to entities which provide email marketing services for us, our disk space providers, and the entity which manages Promenada Mall Targu Mures
How long will we store your data?
We will store your data until you withdraw your consent for the processing of your personal data or until we stop our marketing activities (whichever occurs earlier).
In order to comply with the accountability obligation, data will be stored for a period in which
the Controller is obliged to keep data or documents.
What rights do you have?
You have the right to access, rectify and erase your personal data, as well as to request that the processing be restricted and the right to data portability.
You may also withdraw your consent at any time. However, this will not affect the legality of the processing made on the basis of the consent prior to its withdrawal. You may submit any requests and questions related to the processing of personal data via email: email@example.com
You may also at any time object to the processing of your personal data for direct marketing purposes, to the extent that such processing is connected with direct marketing.
If you believe that the processing of personal data is unlawful, you may lodge a complaint with the President of the Personal Data Protection Office.
Will your data be transferred outside the EEA?
Because we use virtual disks, the data may be transferred outside the European Economic Area. The transfer is based, in all cases, on the European Commission decision of 12 July 2016 confirming adequate protection of data in the”Privacy Shield“ programme.
Currently, we are not planning to otherwise transfer data outside the European Economic Area. Should this change, you will be notified thereof via email.
Will automated decision making take place during the processing?
In the course of data processing, no automated decision making will take place which would result in any legal consequences for you or which would otherwise affect you significantly.
Contact in cases related to the processing of personal data
You may submit any requests and questions related to the processing of personal data via email: firstname.lastname@example.org