BRANDIS SRL Brașov (hereinafter referred to as the "Company" or "We") is an independent and qualified working group, specialized in scalable brand services. Leveraging exceptional talent, our strength lies in the fact that the team itself is here with a single goal: in a dynamic online world, we build efficient and highly reputable brands, starting with the basics: hands-on. BRANDIS' services and competencies include: Brand Consultancy, Brand Strategy, Brand Positioning, Brand Communication, as well as Brand Audits, Brand Transformation, Brand Research, and Brand Naming.

Our contact details are:

Office Address: Brașov, Mureșenilor Street 27, postal code 500026, Brașov County, Romania.

Email Address: gdpr@brandis.ro

Phone Number: +40.746.213.091 

The Company, in its capacity as Data Controller, processes the personal data of candidates applying for available positions, employees, corporate clients, participants/collaborators/representatives of corporate partners, contractual partners, as well as other individuals who interact with the Company and/or are engaged in contractual relationships with it.

Personal data is:

• processed lawfully, fairly, and transparently in relation to the data subject;
• collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
• adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
• accurate and, where necessary, kept up to date;
• retained in a form which permits the identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
• processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

In the context of personnel recruitment, we process the following types of personal data: name, surname, address, date of birth, nationality, gender, phone number, email address, data regarding professional and/or social experience, education and professional training, skills, and other personal data contained in the CV and cover letter submitted, and, where applicable, resulting from the discussions during the job interview.

For the conclusion and execution of service contracts and partnership/collaboration agreements, we mainly process the following types of personal data: name, surname, ID card/passport series and number, gender, home/residence address, bank account number, email address, phone number.

For completing and submitting the Contact form for any information related to the services provided by the Company on the website www.brandis.ro (by clicking the button = on the top right of the main page - "Contact " section), we process the following personal data: name and surname, email address, phone number, as well as any other data provided at the initiative of the data subject in the "Your subject " field. You must check the box stating "I have read and agree to the Privacy Policy," and then click the "Send" button.

You may also contact the Company's representatives directly by calling the mobile number +40.746.213.091 and/or emailing gdpr@brandis.ro (as indicated in section 1 of this document).

For website visitors, we may collect data through cookies or similar technologies, such as: IP address, web browser, location, web pages accessed on our website, time spent on the website, internet network, and device used. For more details, please consult our Cookie Policy.

We do not use your personal data to send you marketing communications, such as newsletters, unless you expressly consent to such communications by checking a consent box. In this case, we process only your email address and ensure that you have a simple option to unsubscribe at any time, or to withdraw your consent regarding receiving such communications. 

Your personal data is processed for the following purposes:

• for the conclusion and execution of various contracts;
• for fulfilling our legal obligations;
• based on consent requested and/or previously provided (in the context of personnel recruitment, for sending marketing communications, etc.);
• for the legitimate interests pursued by the Company (e.g., implementing protection and security measures for our employees, exercising the Company's legitimate rights and interests in contentious or non-contentious proceedings, etc.).

Personal data is stored and processed for the time necessary to achieve the processing purposes mentioned in this Policy or for the duration required by law (e.g., for archiving, accounting purposes, etc.). 

We will not disclose or transfer any of the personal data collected from or about you to any third party, except for:

• Public authorities and institutions – when there is a legal obligation to do so or for a legitimate interest (e.g., defending the Company's rights in contentious or non-contentious proceedings, etc.).
• Contractual partners or collaborators of the Company who provide us with web hosting services (Romarg), website development (Programator Web).
• Any third party – if you have explicitly and specifically consented to it for that particular situation and for the respective data.

If the personal data processed by the Company is transferred by the Company, either directly or through its contractual partners/collaborators, outside the European Economic Area, we ensure that such transfers are carried out in compliance with the GDPR (in particular, Article 46 of the GDPR), the applicable legal provisions, based on appropriate safeguards (standard data protection clauses adopted by the Commission), and provided that enforceable rights and effective legal remedies for data subjects are in place. 

The Company implements appropriate technical and organizational measures to ensure a high level of security and protection for personal data. We use security methods and technologies, along with internal work policies and procedures, including control and audit measures, to protect the personal data collected in accordance with the relevant legal provisions on personal data protection. 

Any data subject can exercise the following rights as provided by the General Data Protection Regulation:

• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restrict processing;
• The right to data portability;
• The right to object to processing;
• The right not to be subject to a decision based solely on automated processing, including profiling;
• The right to address the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) and the courts.

For any questions, concerns, or to exercise these rights, you can contact us by email at: gdpr@brandis.ro, or by post or courier at the following address: Brașov, Mureșenilor Street 27, postal code 500026, Brașov County, Romania.