AD AUTO TOTAL S.R.L. (hereinafter referred to as the “Operator”), with its registered office in Bucharest, 8 Tincani Street, Block Z18, Staircase A, 10th Floor, Apartment 66, Sector 6, Commercial Register number J1994029340409, CUI RO 6844726, with a mailing address at its Bucharest office, 96 Splaiul Unirii, Sector 4—entrance via 16 Verzisori Street, is a personal data controller.
The processing of personal data is carried out in accordance with and in compliance with the provisions of applicable legislation, and in particular Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
The data subject is the foreign national who submits a report or complaint to the Controller using the online form or any other means of communicating the report or complaint to the Controller.
The Controller processes personal data for the purpose of recording and resolving reports and complaints submitted by foreign employees of the Controller.
The Controller processes personal data collected from data subjects pursuant to Article 6(1)(c) of the GDPR: “processing is necessary for compliance with a legal obligation to which the controller is subject,” namely the obligation to resolve complaints and reports submitted by foreign employees, in accordance with the provisions of Government Emergency Ordinance 32/2026.
The Controller processes the following personal data: the data subject’s first and last name, email address, and/or phone number, if provided.
In addition, the Controller may process any other personal data contained in the report or complaint submitted by the data subject via the complaint form or through any other means of communication used to submit the report or complaint.
The data will be collected directly from the data subject, namely the foreign employee who submits the report through one of the channels made available by the Controller.
The personal data collected from the data subject is intended for the Controller. The data may be transmitted to the Controller’s collaborators (e.g., affiliated attorneys) or authorized institutions if the reported situation requires legal or other actions on the part of the Controller.
The retention period for the collected personal data will be in accordance with the provisions of Government Emergency Ordinance 32/2026, namely: 5 years from the termination of the employment relationship of the employee filing the complaint or report; for anonymous reports that cannot be linked to an employment relationship, the documents are retained for 5 years from the closure of the case. The retention period may be extended if there is an investigation, a legal dispute, or another legal obligation to retain the data.
Data subjects have the following rights:
i. the right to be informed and to access the data being processed;
ii. the right to request the correction of such data when it is inaccurate;
iii. the right to request the erasure of the data and/or the restriction of the processing of such data, under the conditions provided by applicable law;
iv. the right not to be subject to a decision based solely on automated processing—the Controller does not carry out operations involving automated decision-making, whether or not this includes profiling.
Furthermore, data subjects have the right to file a complaint with the supervisory authority—the National Supervisory Authority for the Processing of Personal Data (ANSPDCP).
These rights may be exercised in the cases and under the conditions established by the GDPR. To exercise their rights, data subjects may submit a written, dated, and signed request to the email address: gdpr@autototal.ro or to the Controller’s mailing address mentioned above.
To learn more about exercising the aforementioned rights, the data subject may access the link below, which contains the General Information on the Processing of Personal Data.
Societatea AD AUTO TOTAL S.R.L. (denumit in continuare „Operatorul”), cu sediul in Bucuresti, str. Tincani nr. 8, bl. Z18, sc. A, et. 10, ap. 66, sector 6, numar de ordine in Registrul Comertului J1994029340409, CUI RO 6844726, cu adresa pentru corespondenta la punctul de lucru din Bucuresti, Splaiul Unirii nr. 96, sector 4 – intrarea prin str. Verzisori nr. 16, este operator de date cu caracter personal.
Prelucrarea datelor personale se realizeaza in temeiul si cu respectarea prevederilor legislatiei aplicabile, si in special ale Regulamentului 679/2016 privind protectia persoanelor fizice in ceea ce priveste prelucrarea datelor cu caracter personal si libera circulatie a acestor date (GDPR).
Persoana vizata este cetateanul strain care comunica Operatorului o sesizare / reclamatie utilizand formularul online sau orice alta modalitate de comunicare a sesizarii / reclamatiei catre Operator.
Operatorul prelucreaza datele cu caracter personal in scopul inregistrarea si solutionarea sesizarilor si reclamatiilor transmise de angajatii cetateni straini angajati ai Operatorului
Operatorul prelucreaza datele cu caracter persoanl colectate de la persoanele vizate in temeiul Art 6 alin 1 litera c) din GDPR: „prelucrarea este necesara in vederea indeplinirii unei obligatii legale care ii revine operatorului”, respectiv obligatiei de a solutiona reclamatiile si sesizarile salariatilor cetateni straini, in conformitate cu dispozitiile OUG 32/2026.
Operatorul prelucreaza urmatoarele date cu caracter persoanal: numele si prenumele persoanei vizate, adresa de mail si/sau numar de telefon, in cazul in care acestea sunt comunicate.
De asemenea, Operatorul poate prelucra si orice alte date cu caracter personal cuprinse in sesizarea / reclamatia formulata de persoana vizata prin formularul de reclamatie sau prin orice alte mijloace de comunicare utilizate pentru comunicarea sesizarii / reclamatiei.
Datele vor fi colectate direct de la persoana vizata, respectiv angajatul strain care depune sesizarea printr-unul din canalele puse la dispozitie de catre Operator.
Datele cu caracter persoanl colectate de la persoana vizata sunt destinate Operatorului. Datele pot fi transmise catre colaboratori ai Operatorului ( de exemplu avocati colaboratori ) sau institutii abilitate, daca situatia reclamata este de natura a necesita actiuni legale sau de alta natura din partea Operatorului.
Durata de stocare a datelor cu caracter personal colectate va fi conform dispozitiilor OUG 32/2026, respectiv: 5 ani de la incetarea raportului de munca al salariatului care formuelaza reclamatia / sesizarea; pentru sesizarile anonime care nu pot fi asociate unui raport de munca, documentele se pastreaza 5 ani de la inchiderea cazului. Termenul de pastrare poate fi prelungit daca exista o investigatie, un litigiu sau o alta obligatie legala de pastrare.
Persoanele vizate beneficiaza de urmatoarele drepturi:
i. dreptul de informare si de acces la datele prelucrate;
ii. dreptul de a solicita rectificarea acestora atunci cand sunt inexacte;
iii. dreptul de a solicita stergerea datelor si/sau restrictionare prelucrarii acestor date, in conditiile prevazute de legislatia in vigoare;
iv. dreptul de a nu face obiectul unei decizii bazate exclusiv pe prelucrarea automata – Operatorul nu realizeaza operatiuni care sa presupuna existenta unui proces decizional automatizat, incluzand sau nu crearea de profiluri.
De asemenea, persoanele vizate au dreptul de a depune o plangere in fata autoritatii de supraveghere – Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP).
Aceste drepturi pot fi exercitate in cazurile si conditiile stabilite de GDPR. Pentru exercitarea drepturilor persoanelor vizate, acestea se pot adresa cu o cerere scrisa, datata si semnata la adresa de email: gdpr@autototal.ro sau la adresa de corespondenta a Operatorului mentionata mai sus.
Pentru a afla mai multe detalii privind exercitarea drepturilor sus-mentionate, persoana vizata poate accesa linkul alaturat care contine Informarea generala privind prelucrarile de date cu caracter personal.