INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA
dollytrans.ro

This website is operated by SC Dolly Trans Company SRL (hereinafter referred to as “We”), headquartered in Arad, Str. Horia no. 9, ap. 5, with a working point in Arad, North Ring Road DN7 km 541+150, registered at ONRC under no. J02/514/2003, with CUI RO 15388289, a Romanian limited liability company.

We collect and process different categories of personal data from you as a user of dollytrans.ro, (hereinafter referred to as the “website”), and in accordance with EU Regulation 2016/679 on personal data protection, we act as the data controller.

Protecting your personal data is very important to us!

This Information Notice describes the ways in which we collect and use your personal data online. This way, you know what data is collected, how and for what purpose, and you are informed about the rights you have regarding personal data.

This Information Notice is version V_01 and remains in force until modified and replaced by a new version.

Principles of Personal Data Processing

We comply with the principles of personal data processing established by EU Regulation 2016/679, namely:

1. Lawfulness, fairness, and transparency – We process personal data lawfully, fairly, and transparently in relation to you.
2. Purpose limitation – Personal data is collected only for specific, legitimate, and explicitly stated purposes and is not further processed in a manner incompatible with those purposes. Further processing for public interest archiving, scientific or historical research, or statistical purposes is not considered incompatible with the initial purposes.
3. Data minimization – The personal data collected is adequate, relevant, and limited to what is necessary for the purpose of processing.
4. Accuracy – We ensure that personal data is accurate and up to date. We take all necessary measures to ensure that inaccurate data, considering the purposes for which they are processed, is erased or rectified without delay.
5. Storage limitation – We respect the legal retention periods for data or keep them only until the purpose of collection is fulfilled. These periods are set through internal procedures, after which the data is deleted.
6. Integrity and confidentiality – We take appropriate technical and organizational measures to secure personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

How We Collect Your Personal Data and What Kind of Data We Collect

Personal data is collected:

• Directly from you, through:
• The online contact form on our website;
• Emails you send to the addresses provided on our website.
  Through cookies when you browse our website.

All personal data is processed for specific and well-determined purposes: to provide requested information, to conclude or properly perform a contract, to fulfill a legal obligation, or to defend a legitimate right in court.

Although we make every effort to protect the information you provide, online data transmission is not 100% secure, so we cannot guarantee the security of personal data transmitted in this way. Once we receive the data, we apply strict procedures and security methods to prevent unauthorized access.

We do not collect or process special categories of personal data, such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data regarding a person’s sex life or sexual orientation. Any such personal data that you accidentally or intentionally provide will be immediately deleted.

Personal Data of Minors – Parental Consent.

This website is intended for adult users, aged 18 and over. However, minors may accidentally access this page. In such cases, their personal data will be immediately removed from our database.
As parents, we recommend that you actively participate in your children’s online exploration and use parental control options available in your operating system, software, or internet service provider. Limiting online access for minors is essential for their psychological and physical well-being.

What Happens If You Do Not Provide Your Data

If you do not provide the requested personal data or provide it only partially, we may be unable to deliver the requested information. Our data collection forms are configured to request the minimum amount of information necessary to identify you, contact you, fulfill your requests, execute a contract, or meet legal obligations.
In such situations, we will inform you, if possible, so you can make an informed decision.

Access to Personal Data and Protection Measures

Personal data in our database is processed by our own personnel, who receive regular training on GDPR compliance procedures, established according to EU Regulation 2016/679.
We may disclose certain personal data to trusted third parties for established purposes. These entities are required to have appropriate security measures in place to protect your personal data, in compliance with data protection regulations.
Personal data may also be disclosed when required by law, at the request of government or law enforcement authorities, to meet national security or law enforcement requirements, or to prevent illegal activities.
Except for the above situations, we will not disclose, sell, or lend your personal data to any third party without your prior consent.
We are committed to protecting personal data against any loss, misuse, disclosure, modification, unauthorized access, or destruction and take all reasonable measures to ensure its confidentiality. Additionally, we continuously assess potential risks related to personal data processing and update our security procedures accordingly.

How Long We Retain Personal Data

We will keep personal data only as long as necessary to fulfill the purpose for which it was processed. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the purposes of processing, and whether those purposes can be achieved by other means.
Some personal data must be retained for specific periods required by law.

Once we no longer need the data, we will delete or securely destroy it. If deletion is not feasible due to excessive costs, we will anonymize or encrypt the data to make it inaccessible. In certain cases, anonymized data may be used for statistical, research, or evaluation purposes without further notice.

Your Rights

Under EU Regulation 2016/679, you have several rights that we respect and are committed to fulfilling promptly:

1. Right of access – You can obtain confirmation of whether we process your personal data and access the data if applicable.
2. Right to withdraw consent – You can withdraw consent at any time, without affecting prior lawful processing.
3. Right to rectification – You can request correction of inaccurate personal data.
4. Right to restrict processing – You can request restriction of processing under specific conditions.
5. Right to erasure (“right to be forgotten”) – You can request deletion of your personal data under certain conditions.
6. Right to data portability – You can receive your personal data and transmit it to another data controller.
7. Right to object – You can object to data processing under certain circumstances, particularly for direct marketing.

How to Contact Us

Noi vom comunica fiecărui destinatar căruia i-au fost divulgate datele cu caracter personal orice rectificare sau ștergere a datelor cu caracter personal, sau restricționare a prelucrării, cu excepția cazului în care acest lucru se dovedește imposibil sau presupune eforturi disproporționate. Toate cererile dumneavoastră vor fi îndeplinite în termenul legal de 30 de zile.

To exercise your rights, please send a written request to SC Dolly Trans Company SRL, Str. Horia 9, ap. 5, Arad. You can also submit your request in person at our working point in Arad, North Ring Road DN7 km 541+150, or via email at office@dollytrans.ro

All communications regarding your rights are free of charge. However, if requests are unfounded, excessive, or repetitive, we may charge an administrative fee or refuse the request.

If you are not satisfied with our response, you may contact the National Authority for the Supervision of Personal Data Processing.

We may update this Information Notice at any time without prior notice. We encourage you to periodically visit this page for any updates.