Privacy policy

Introduction

This website is owned, managed and maintained by Admiral Leisure S.R.L. (hereinafter referred to as ”Company”, respectively “Controller”), a limited liability company, established and operated in compliance with the Romanian law, with office at nr. 275-277 Calea Bucurestilor, 1^st floor, rooms 5-7, Otopeni, Ilfov County, under the Trade Register number J23/4225/2017, with sole registration number (CUI) 38078686 and hosted by the Novomatic AG servers.

Pursuant to the provisions of the EU Regulation no. 679/2016, the processing of personal data of natural persons, as necessary for the Operator to develop their business, is conducted with observance of the legal provisions, in which sense the Operator is acting as required for implementing the proper technical and organizational measures for prevention of unauthorized or illegal processing of your personal data. The most important thing to the Operator is protection of the users’ data privacy. In order to fulfil this purpose, the Operator observes the principles of personal data processing as laid down in the EU Regulation no. 679/2016, making sure that the personal data they process are adequate, relevant and limited to what is necessary for the purposes of processing.

The Operator understands to protect and respect their users.

What Kind of Personal Data Does the Operator Collect?

Whenever you visit the website www.admiralromania.ro, we automatically collect the following data:

technical data. Such data may include, for instance, the Internet Protocol address (IP, a code number for identifying your device, which may provide information about the country, the region or the city where you are) which is used for connecting your computer to the internet, connection data, name of the requested data file, including the parameters, the browser language, type and versions of the browser plug-ins, the operation system and platform, type of the device and the mobile device brand. These data are collected and processed via cookies and further details can be found by accessing the Cookies Policy.
data on your visit. For instance, this may include URL data, sequence of clicks to, via and from the website www.admiralromania.ro (date and time included), information or products of third-party websites that you viewed or reached by accessing the menus on our website.
as a result of reporting by using the Company’s internal reporting channel, as an Operator processes the whistleblower’s personal data: name, surname, email, phone number, as well as the information contained in his report; The purpose of the processing is to verify the reported aspects and the legal basis is to fulfill the legal provisions (Law no. 361/2022). The data will be kept for the duration necessary to achieve the purpose for which they were collected; Personal data is transmitted to the authorities, partners and to NOVOMATIC AG which owns the internal reporting platform and where you can find further details about the processing of personal data.

3. About Cookies

The website www.admiralromania.ro uses cookies to allow the users vary the way the web pages are displayed according to personal preferences, which are retained between logins. Thus aspects may be varied and retained in relation to both the functionality and the graphical display of pages. More information on the use of cookies can be found on the dedicated page named ”Cookies Policy”.

Should you disagree that such data may be collected in relation to your website logins, please set up your web browser so as to refuse these type of cookies. For this purpose you may use the settings on your web browser preferences. Usually, the browser settings related to cookies can be found in the menus “Options”, “Tools” or “Preferences” of the web browser that you use to access our website. According to the available web browsers, various means may be used to disable the cookies. For more info on how to do this, please read the “Cookies Policy”. Cookie disabling might impair the website functionality.

4. What are the purposes of personal data processing and what are the legal grounds of processing?

We process your personal data for various technical, administrative and operational reasons, such as:

in order to make sure that the website content is presented as efficiently as possible for you;
in order to improve the website www.admiralromania.ro, including the functionality thereof;
in order to administrate the website www.admiralromania.ro;
for statistical assessment purposes and for analysing the performance of the website and of the applications and understanding how the users use them;
for in-house operations, including troubleshooting, data analysis, testing, for keeping the website www.admiralromania.ro in safe conditions;
for advertising and marketing, including specific marketing purposes, so as to provide content to you, including customized content, which might be of higher interest to you.

In some cases, we will process your personal data only subject to your consent (e.g. in cases of advertising and marketing). In such cases, when you provide personal data, we will ask your consent separately, in a transparent manner. Later on, you may withdraw your consent any time by submitting a request on the e-mail gdpr@admiralromania.ro . Withdrawal of consent will not affect the lawfulness of the processing that took place before it.

We collect the personal data you provided on our website and use them for the purpose of sending customized newsletters, namely:

For sending the newsletter, we process the data offered directly by the subscribers, such as:

last name and first name;
the email address;
preferences related to the newsletter content.

We process the data as necessary for sending the newsletter pursuant to article 6(1)(f) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. In this case, the legitimate interests of Admiral Leisure S.R.L. consist in direct promotion of our products and services.

We send the newsletters only upon receiving your free consent.

You may withdraw any time your consent on receiving the Admiral Leisure S.R.L. newsletter by accessing the relevant link in the footer.

5. To Whom Does the Controller Share the Personal Data?

We will not disclose your personal data to third parties to be used for individual marketing or trading purposes thereof without your consent.

However we might disclose your data to such entities as:

IT service providers. We may disclose your information to other companies that provide to use services and act as attorneys, such as the companies helping us to provide internet services or various web design services for the website that you browse as user;
State authorities or other European authorities with control and surveillance powers, upon legitimate request thereof.

The private entities providing services to us are carefully selected so as to make sure that they meet the specific requests on personal data protection.

Such entities have a limited capacity of using your data for other purposes than to provide services to us.

We will not disclose such personal data to any recipients in a country outside the European Union or any international organization. There is no automatic decision-making process.

6. What Are Your Rights as Data Subject?

The protection of natural persons in terms of personal data processing is a fundamental right. Article 8 (1) of the Charter of Fundamental Rights of the European Union and article 16 (1) of the Treaty on the Functioning of the European Union (TFEU) provide that everyone has the right to the protection of personal data concerning him or her.

The rights of the data subjects in terms of personal protection in relation to personal data processing and the free movement of such data:

– the right of access to your personal data – you may obtain from the Controller the confirmation that they process your personal data, as well as info on the specific processing;

– the right to rectification – you may ask the Controller to modify your personal data if wrong or to supplement the incomplete data or the data that changed in time;

– the right to erasure of personal data – you may ask the Controller to erase your personal data when: (i) they are no longer necessary in relation to the purposes for which they are collected or otherwise processed; (ii) you withdrew your consent for data processing and the Controller has no further legal grounds to process the same; (iii) your data are processed against the law; respectively (iv) the data must be deleted according to the relevant legislation;

– the right to restrict the processing of personal data – you may obtain from the Controller a restriction of processing when any of the following situations apply:

– the accuracy of the personal data is contested by the data subject, for a period enabling the Controller to verify the accuracy of the personal data;

– the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

– the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;

– the data subject has objected to processing pursuant to article 21(1) of the European Regulation 679/2016 pending the verification whether the legitimate grounds of the controller override those of the data subject.

– the right to be notified regarding the rectification or erasure of the personal data or restriction of processing;

– the right to data portability – insofar as the Controller processes the data via automatic means, the data subject may request under the law that the Controller shall provide such data in a structured, commonly used and machine readable format. If the data subject so requests, the Controller may transmit such data to another entity if feasible in technical terms;

– the right to object – you are entitled to object to processing of your data, including profiling, based on a particular situation related to you;

– the right not to be subject to a decision based solely on automated processing, including profiling which produces legal effects concerning yourself or similarly significantly affects you.

We inform you hereby that you are entitled to complain with the data processing supervisory authority when you consider that your rights were infringed. Romanian National Supervisory Authority for Personal Data Processing: 28-30 G-ral Gheorghe Magheru Blavd., 1st district, postal code 010336 Bucharest, Romania, e-mail address: anspdcp@dataprotection.ro.

7. For How Long the Controller Keeps Your Personal Data

We keep your personal data as long as necessary so that the Controller may provide services to you and other persons and as long as they are in line with the Controller’s legal obligations. If you want that the Controller cease using your personal data, please contact them at the address provided below. Please consider that should you ask the erasure of your personal data, the Controller will keep only such data as necessary for their legitimate interest, for situations of legality, for fraud prevention and for settlement of disputes. Such data will be processed in compliance with the Privacy policy of the website www.admiralromania.ro.

8. Requests on the Personal Data Processing of Contacts

According to the law, the Controller processes any personal data-related request that is submitted in writing.

In order to exercise your rights as data subject you may contact the Controller via written request using the following contact details:

(a) e-mail, on the address: gdpr@admiralromania.ro;

(a) mail, on the address: Otopeni town, 275-277 Calea BUCUREŞTILOR, 1^st floor, rooms 5-7, Ilfov County.

The time of response to your petition/request is one month from the entry of the written petition/request, either at the Controller office, or via e-mail on such address as shown above. Considering the nature of the processed personal data, the 30-day term may be extended if the information requested by the Controller and provided by you does not suffice to identify you as user in the database and to provide you the information requested or meet any other petition from you.

For the purposes of the European Regulation 679/2016, should the claims of the data subject be obviously unfounded or excessive, particularly for being repeated, the Controller may either charge a fee or decline the petition.

9. Privacy Policy Updating

This privacy policy will be updated whenever it is needed in order to comply with the current legal requirements and any change in the administration of personal data privacy.

When the Controller varies this policy they will let you know about such variations. There will be an updated copy of the policy permanently on the webmail page.

Personal Data Controller

Admiral Leisure S.R.L.

August 2020