By this Information Notice, the undersigned RA - RA HOTELS S.R.L., with registered office in Brasov, Bulevardul Eroilor, nr. 23, jud. Brașov, tel. 0372885000, email: [email protected]as a service provider and personal data controller, hereby informs you how it processes personal data in accordance with the provisions of the Regulation of the European Parliament and of the Council of the European Union 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (ʺGDPRʺ) and the national legislation on the protection and security of personal data in force, namely Law no. 190/2018 on measures implementing Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 [...], as amended.

In its relationship with you, RA - RA HOTELS S.R.L. is the controller of personal data and you are the data subject.

Types of personal data subject to processing

a) Your image in photos and video footage.

Purposes and legal basis of the processing

Purposes of processing personal data:

- publication on the website www.aurumexperience.ro, on the Facebook and Instagram accounts of RA - RA HOTELS S.R.L. of the photos and videos taken at the events organized by it in the Radisson Blu Aurum Brasov Hotel,

- to deal with your requests, complaints, referrals and claims.

The basis for processing personal data:

- your consent to the processing of personal data, when given expressly, freely and unconditionally, in specific situations - Chapter II, Art. 6 para. (1) lit. a) of the GDPR.

Categories of recipients of personal data

Your personal data is intended for use by RA - RA HOTELS S.R.L. for publication on the website www.aurumexperience.ro, on Facebook and Instagram accounts but, where appropriate, subsequently communicated to entities exercising public authority (courts, public authorities, prosecution bodies or the like), within the limits of the law.

Storage period of personal data

Your personal data is stored for as long as necessary to achieve the purposes for which it was collected or until consent is withdrawn.

Measures adopted on the protection of personal data

Personal data shall be processed under secure conditions and the controller shall take appropriate technical and organisational measures against unauthorised processing or alteration, loss or destruction, as well as against unauthorised disclosure of or access to personal data processed. Thus, we take all measures to ensure the integrity, availability, confidentiality and authenticity of personal data. We assure you that we make every reasonable effort to protect the personal data we hold, we review new technologies in the field and, where appropriate, apply them to upgrade our security systems. We have also implemented appropriate technical and organisational measures to ensure that only personal data necessary for the specified purposes are processed (increasing staff awareness and involvement in personal data protection activities, ensuring individual staff authentication, allowing access only to the categories of personal data that staff need for the performance of their duties, reinforcing security measures applied to servers and websites, ensuring data integrity by backing up personal data, archiving data, ensuring the physical security of premises housing servers and network equipment or where personal data are processed, etc.).

Rights of data subjects

According to the legal provisions you have the right of access, the right to rectification, the right to erasure of data, the right to restriction of processing, the right to data portability, the right to object and automated individual decision-making.

Thus, if you do not want your image to be published in the photos and video footage on the website www.aurumexperience.ro, on the Facebook and Instagram accounts of RA - RA HOTELS S.R.L. to communicate this to our representative when you enter the event organized at the Radisson Blu Aurum Brasov Hotel.

Right to withdraw consent at any time: Given that this processing is based on Art. 6(6) of the Data Protection Directive, the right to withdraw consent at any time is not required. 1, lit. a of the GDPR "the data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes", you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of consent prior to the withdrawal of consent. Thus, you may withdraw or modify your consent at any time and we will act immediately accordingly, unless there is a legal reason or legitimate interest not to do so.

The right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint about the processing of personal data by controllers as follows: National Supervisory Authority for Personal Data Processing, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro.

Contact details of the data controller

In order to exercise one or more of these rights, if you have any questions regarding data protection, you are welcome to contact us at any time: the company RA - RA HOTELS S.R.L. with the correspondence address mun. Brasov, B-dul Eroilor, nr. 23, jud. Brașov, with e-mail [email protected], phone 0740090411.