{"id":15437,"date":"2026-07-02T17:37:06","date_gmt":"2026-07-02T14:37:06","guid":{"rendered":"https:\/\/beta.kreston.ro\/prelucrarea-datelor\/"},"modified":"2026-07-03T10:31:16","modified_gmt":"2026-07-03T07:31:16","slug":"policy-on-personal-data-processing","status":"publish","type":"page","link":"https:\/\/kreston.ro\/en\/policy-on-personal-data-processing\/","title":{"rendered":"Policy on personal data processing"},"content":{"rendered":"

[vc_row el_class=”gdpr-container”][vc_column][vc_column_text css=””]<\/p>\n

\n
\n

Policy on personal data processing<\/h2>\n<\/div>\n<\/div>\n
\n
\n

Last updated: 01 September 2021<\/span><\/strong><\/p>\n

The General Data Protection Regulation (GDPR) has been applied throughout the European Union since May 25, 2018.<\/p>\n

The protection of your personal data is important to us, therefore we pay special attention to protecting the privacy of all those who have made their data available by participating in our campaigns, personally to process a request, as well and those whose personal data have been provided to us by a third party or accessed from another source in accordance with European Parliament Regulation (EU) 2016\/679 and the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter referred to as \u201cGDPR\u201d).<\/p>\n

Please pay special attention to observing the following Policy to understand how your personal data will be processed.<\/p>\n

This Policy explains the practices of KRESTON ROMANIA SRL (hereinafter referred to as \u201cKRESTON\u201d), concerning the application of GDPR provisions, as well and the rights you receive on how your information is processed by KRESTON ROMANIA SRL.<\/strong><\/p>\n

The processing of personal data by\u00a0KRESTON<\/span><\/strong>\u00a0will always be executed in accordance with GDPR and other personal data protection regulations.\/p><\/p>\n

By the means of this Policy,\u00a0KRESTON<\/span><\/strong>\u00a0wishes to inform the data subjects about the nature of the personal data we collect and process, as well as about the purposes of the processing. In addition, the data subjects are informed through the Policy and on the rights they have.<\/p>\n

 <\/p>\n

WHO WE ARE?<\/strong>
\nWe are\u00a0KRESTON ROMANIA SRL<\/span><\/strong>, a Romanian legal person having its registered office in 165 Splaiul Unirii, TN Offices 1, Floor 7, Office no. 2, Sector 3, Bucharest, Romania, registered at the Trade Register Office at Bucharest Tribunal under no. J40\/17\/1996, having fiscal code no. 8025280.<\/p>\n

 <\/p>\n

THE DATA PROTECTION OFFICER (DPO)<\/strong>
\nKRESTON ROMANIA SRL<\/span><\/strong>, acting as a personal data controller, has appointed BATTLEGROUP SRL as Data Protection Officer (hereinafter referred to as \u201cDPO\u201d), having the obligation to verify compliance with the GDPR provisions in the data processing operations performed by the operator and representing the operator in relation to the data subjects and the Supervisory Authority.<\/p>\n

Interested individuals have the opportunity to address the DPO directly at any time in any matter related to this Policy using the contact details below:<\/p>\n

DPO name: BATTLEGROUP SRL<\/strong>
\nDPO Email:\u00a0dpo@battlegroup.ro<\/strong>
\nWeb: www.battlegroup.ro<\/strong><\/p>\n

DPO mailing address: Splaiul Unirii nr. 165, TN Offices 1, Etaj 7, Biroul nr. 2, Sector 3, Bucuresti, Romania<\/p>\n

 <\/p>\n

WHAT MEANS PERSONAL DATA?<\/strong>
\n\u201cPersonal data\u201d means any information or information that can identify you directly (for example, your name) or indirectly (for example, by pseudonymised data such as a unique identifier). This means that personal data includes things like email address, home address, mobile phone, username, profile photos, personal preferences and shopping habits, user-generated content, financial information, and financial status information. This could include unique numeric identifiers, such as your computer\u2019s IP address or the MAC address of your mobile device, as well as cookies.<\/p>\n

 <\/p>\n

WHAT DOES THE PROCESSING OF PERSONAL DATA MEAN?<\/strong>
\n\u201cProcessing\u201d means any operation or set of operations performed on personal data or on personal data sets with or without the use of automated means such as collecting, recording, organizing, structuring, storing, adapting or modifying, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.<\/p>\n

 <\/p>\n

WHAT TYPES OF PERSONAL DATA WE PROCESS?<\/strong>
\nThe personal data processed by us belong to two categories of natural persons: the employees of the company, situation in which we will be the personal data controller , and the employees of the companies with which we have concluded service contracts, in which case we will have the quality of processor of personal data on behalf of the controller.<\/p>\n

 <\/p>\n

A. For company employees<\/span><\/strong>,we process the following personal data categories as controller:
\n(i) name and surname;
\n(ii) personal identification number;
\n(iii) Series and number of the identity card\/passport;
\n(iv) address of domicile and \/ or residence;
\n(v) date of birth; (vi) signature;
\n(vii) contact details (phone number, e-mail address);
\n(viii) copies of identity and civil status documents;
\n(ix) copies of studies and qualifications documents;
\n(x) data on health status;
\n(xi) bank account number.<\/p>\n

B. For the employees of the companies with which we have concluded service contracts<\/span><\/strong>, we process as the processor of the controller one or more of the following categories of personal data:
\n(i) name and surname;
\n(ii) personal identification number;
\n(iii) series and number of the identity card\/passport;
\n(iv) address of domicile and \/ or residence;
\n(v) data on current employment \/ occupied position\/function;
\n(vi) data on the history of the professional activity, studies and qualifications obtained
\n(vii) data on health status;
\n(viii) financial data;
\n(ix) bank account number.
\nIn the event of labor accidents involving employees of companies with whom we have concluded service contracts, in addition to the items in point B above, we will also process data on civil status, contact details (telephone number and e-mail) as well as data on the family situation of the individuals concerned.<\/p>\n

 <\/p>\n

PERSONAL DATA CONTROLLER<\/strong>
\nThe Personal Data Controller (hereinafter referred to as the \u201ccontroller\u201d) is\u00a0KRESTON<\/span><\/strong>.<\/p>\n

 <\/p>\n

PRINCIPLES ON DATA PROCESSING<\/strong>
\nKRESTON<\/span><\/strong>\u00a0is obliged to comply with the principles of personal data protection (hereinafter referred to as the \u201cPrinciples\u201d) provided by GDPR to ensure that all data is:<\/p>\n

1. processed lawfully, fairly and in a transparent manner in relation to the data subject (\u2018lawfulness, fairness and transparency\u2019);<\/p>\n

2. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;<\/p>\n

3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (\u2018data minimisation\u2019);<\/p>\n

4. accurate and, where necessary, kept up to date;<\/p>\n

5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;<\/p>\n

6. processed in regard to the natural person\u2019s rights, in a manner that ensures appropriate security of the personal data, in order for the data keep its integrity, confidentiality and availability .<\/p>\n

 <\/p>\n

THE LEGAL GORUND AND THE PURPOSE OF PERSONAL DATA PROCESSING<\/strong>
\n1. For the purpose of concluding and executing contracts \u2013 According to art. 6 par. 1 lit. b) GDPR, personal data may be processed for the purpose of concluding or executing the contract. In order to be able to offer you our products and services, we need to process personal data that you own.<\/p>\n

2. For the purpose of fulfilling legal obligations \u2013 According to art. 6 par. 1 lit. c) GDPR, we may process personal data for the purpose of fulfilling legal obligations. We request a series of personal data, including, in some cases, the personal numeric code, in order to meet the tax authorities\u2019 obligations regarding invoicing and reporting to tax authorities.<\/p>\n

3. For marketing purposes \u2013 According to art. 6 par. 1 lit. a) GDPR may process personal data if the data subject has given his \/ her consent to the processing of his \/ her personal data for one or more specific purposes. Thus, in some situations, your personal data will be used to send you marketing messages, offers, news, upcoming campaigns, or invitations to various events.<\/p>\n

4. In order to exercise a legitimate interest of the personal data controller \u2013 According to art. 6 par. 1 lit. f) GDPR, for conducting the economic activity of the company, as processor for the personal data controllers.<\/p>\n

 <\/p>\n

PROCESSING THE CONTACT FORM<\/strong>
\nKRESTON<\/span><\/strong>\u00a0will use the information you provide to us in various ways (by telephone, fax, e-mail, website or mail) solely for the purpose of meeting your request.<\/p>\n

By providing any personal data for commercial purposes, you understand and you agree that your data will be processed in accordance with the provisions of this policy.<\/p>\n

Please note that in order to be able to process your requests submitted by any of the contact methods, it is possible that under certain circumstances, we will have an obligation to disclose your data to our partners and \/ or other any third party service providers of\u00a0KRESTON<\/span><\/strong>.<\/p>\n

However,\u00a0KRESTON<\/span><\/strong>\u00a0has adopted technical measures and organizational tools to ensure the security of data transfer, as well as for processing in accordance with the GDPR requirements of your data by the abovementioned entities.<\/p>\n

KRESTON<\/span>\u00a0<\/strong>undertakes not to process personal data provided for purposes other than the one for which they were transmitted, except where your express consent to use them and for other purposes.<\/p>\n

It is also possible for\u00a0KRESTON<\/span><\/strong>\u00a0to have access to other personal data, obtained by your interactions with\u00a0KRESTON<\/strong>, for example by processing the data communicated by telephone conversations, e-mail conversations, visits at our headquarters to obtain information, etc.<\/p>\n

By contacting\u00a0KRESTON<\/span><\/strong>\u00a0in any way specified above, or any other method that involves a mediated or direct communication between you and\u00a0KRESTON<\/span><\/strong>, you understand and agree that your data will be processed in accordance with the provisions of this Policy.<\/p>\n

 <\/p>\n

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES<\/strong>
\nPersonal data processed by\u00a0KRESTON<\/span><\/strong>\u00a0will be disclosed and \/ or transferred to third parties only if your express consent to doing so exists, except where there is a legal \/ contractual obligation to\u00a0KRESTON<\/span>\u00a0to do so.<\/p>\n

Please be aware that it is possible under certain circumstances for\u00a0KRESTON<\/span><\/strong>\u00a0to be obliged under law to disclose your personal data to public\/state authorities, partners of\u00a0KRESTON<\/span><\/strong>\u00a0and \/ or other third party service providers of\u00a0KRESTON<\/span><\/strong>.<\/p>\n

 <\/p>\n

DURATION OF DATA STORAGE<\/strong>
\nKRESTON<\/span><\/strong>\u00a0will store the data processed for different periods of time deemed reasonable for the purposes indicated above. We keep your data only for the period necessary to reach the purpose for which we hold the data, to meet your needs or to fulfill our statutory obligations.<\/p>\n

To set the duration of data storage, use the following criteria:<\/p>\n

1. When acting as processor for the personal data controllers, we will retain personal data according to the instructions of the personal data controller, but always for the duration of the service contract ; we can also store personal data after termination of the service contract when we have a legal obligation to store the data;<\/p>\n

2. If you contact us for a request, we retain your personal data for the duration of the processing of the request you.<\/p>\n

3. If you have given us consent to process data for marketing purposes, we keep your personal information until you withdraw your consent or ask us to delete the data.<\/p>\n

 <\/p>\n

THE RIGHTS OF DATA SUBJECTS<\/strong>
\nAccording to GDPR, data subjects have a series of rights with respect to the personal data that\u00a0KRESTON<\/span><\/strong>\u00a0processes:<\/p>\n

1.\u00a0Right of access to processing data<\/span><\/strong>\u00a0\u2013 You have the right to access our personal data. The first information will be provided without any charge. If you will need copies of the information already provided, it is possible we charge you a reasonable fee, taking into account the administrative costs of providing the information. All manifestly unreasonable, excessive or repeated requests may not receive an answer.<\/p>\n

2.\u00a0Right to data rectification<\/span><\/strong>\u00a0\u2013 You have the right to ask for your data to be rectified if it is inaccurate or obsolete and \/ or you can request to complete the data if it is incomplete.<\/p>\n

3.\u00a0Right to erasure of data (\u201cthe right to be forgotten\u201d)<\/span><\/strong>\u00a0\u2013 In some cases, you have the right to obtain the deletion or destruction of your data. This is not an absolute right, because sometimes we may be obliged to keep your data for legal reasons.<\/p>\n

4.\u00a0The right to restrict the processing \u2013 You have the right to request restriction of your data processing. This means that your data processing is limited, so we can keep the data, but without the possibility for us process it. This right applies in the specific circumstances provided for in the General Data Protection Regulation, namely:<\/span><\/strong><\/p>\n

\u2013 the accuracy of the data is contested by the data subject (ie by you) for a period which allows the controller (ie\u00a0KRESTON<\/span><\/strong>) to verify the accuracy of the data;<\/p>\n

\u2013 Processing is illegal and the person concerned (ie you) opposes the deletion of the data and requests the restriction of their use;<\/p>\n

\u2013 the operator (for example,\u00a0KRESTON<\/span><\/strong>) no longer needs data for processing, but they are requested by the data subject (ie by you) for the establishment, exercise or defense of legal claims;<\/p>\n

\u2013 the person concerned (ie you) raised objections to the underlying processing on legitimate grounds on the part of the controller (in this case\u00a0KRESTON<\/span><\/strong>) under the verification whether the legitimate rights of the controller (KRESTON<\/span><\/strong>) exceed those of the data subject (ie you).<\/p>\n

5.\u00a0Right to data portability<\/span><\/strong>\u00a0\u2013 You have the right to move, yes copy or do transfer the data that you interested from our base data into another. This applies only the data you provided when processing is based on your consent or based on a contract and is implemented by automatic means.<\/p>\n

6.\u00a0The right to object<\/span><\/strong>\u00a0\u2013 You you may at any time oppose the processing of your data when such processing is based on a legitimate interest of the controller.<\/p>\n

7.\u00a0The right to withdraw your consent at any time<\/span><\/strong>\u00a0\u2013 You may withdraw consent to the processing of your data when such processing is based on consent. The withdrawal of consent does not affect the lawfulness of processing on the basis of consent prior to its withdrawal.<\/p>\n

8.\u00a0The right to lodge a complaint with the competent supervisory authority<\/span><\/strong>\u00a0\u2013 You have the right to file a complaint with the data protection authority of your country residence or domicile to challenge the data protection practices offered by\u00a0KRESTON<\/span>.<\/p>\n

9.\u00a0The right to oppose processing of your data for direct marketing purposes<\/span><\/strong>\u00a0\u2013 You can give up our communication for direct marketing at any time.<\/p>\n

10.\u00a0The right not to be subject to a decision based solely on automated processing, including profiling<\/span><\/strong>\u00a0\u2013 You you may at any time oppose the processing of your data by means of automated processing and\/or profiling. At the present time,\u00a0KRESTON<\/span><\/strong>\u00a0does not process your data by automated means and does not use tour data for profiling.<\/p>\n

You can exercise any of these rights as regards the personal data that\u00a0KRESTON<\/span><\/strong>\u00a0processes by making a simple request to\u00a0KRESTON<\/span><\/strong>\u00a0DPO. In such a situation, it is very possible to request proof of your identity.<\/p>\n

 <\/p>\n

LEGAL REQUESTS<\/strong>
\nWe access, keep and provide your information to regulators, law enforcement authorities or other entities:<\/p>\n

1. In response to a legal request, when we consider in good faith that the law requires us to do so. We may also respond to legal claims when we consider in good faith that the response required by the laws of that jurisdiction affects users in that jurisdiction and is in line with internationally recognized standards.<\/p>\n

2. When we believe, in good faith, that it is necessary to: detect, prevent and to respond to acts of fraud, unauthorized use of any material belonging to us, violations of our terms or policies or other harmful or unlawful activities to protect us (including our rights, property or materials), you and others, including judicial investigations or investigations by regulatory authorities, or to prevent imminent death or injury. For example, if relevant, we provide information to and we receive information from third parties about the reliability of your account, to prevent fraud, abuse and other harmful activities within and beyond our materials.<\/p>\n

The information we receive about you can be accessed and stored for a longer period of time when subject to a legal request or legal obligation, a government inquiry, or investigations into possible violations of our terms or policies, or in other cases to prevent damage.<\/p>\n

 <\/p>\n

PROCESSING SECURITY<\/strong>
\nKRESTON<\/span><\/strong>\u00a0has adopted technical and organizational measures for data processing, updated in accordance with GDPR requirements, in order to protect your personal data against any unauthorized access, improper use or disclosure, unauthorized modification, accidental destruction or loss. All\u00a0KRESTON<\/span><\/strong>\u00a0employees and collaborators, as well as any third parties acting on their or\u00a0KRESTON<\/span><\/strong>\u00a0behalf, are required to respect the confidentiality of your information and the GDPR requirements, in accordance with the provisions of this policy.<\/p>\n

 <\/p>\n

UPDATING THE POLICY ON PROCESSING OF PERSONAL DATA<\/strong>
\nPlease note that this policy may be subject to periodic content alterations.<\/p>\n

Should this Policy be modified, you will be able to identify the timing of its update by the date mentioned at its beginning, under the Last Updated paragraph; please review the Revised Policy before choosing to continue using our materials.<\/p>\n

The terms of this Policy are interpreted in accordance with applicable law.<\/p>\n

 <\/p>\n

CONTACT<\/strong>
\nIf you have questions or concerns about how we treat and use your personal data or you want to exercise yourself any of your rights, please contact us by accessing our DPO contact details.<\/p>\n<\/div>\n<\/div>\n

[\/vc_column_text][vc_column_text css=”” el_class=”acp-b”]<\/p>\n

Responsabil cu protec\u021bia datelor personale Data protection officer (DPO):<\/h3>\n

Battlegroup SRL<\/strong><\/p>\n

dpo@battlegroup.ro<\/a><\/p>\n

www.battlegroup.ro<\/a>[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”slider-services”][vc_column]

<\/i><\/div>
<\/div>
Audit<\/h5>

Audit financiar, audit intern, servicii de revizuire, servicii conexe, raportari internationale, due diligence.<\/p><\/div><\/a><\/div><\/div><\/div>

<\/i><\/div>
<\/div>
Contabilitate<\/h5>

Contabilitate externalizata, situatii financiare, fuziuni si achizitii, analiza financiara, expertize contabile, servicii aditionale.<\/p><\/div><\/a><\/div><\/div><\/div>

<\/i><\/div>
<\/div>
Taxe<\/h5>

Impozit pe profit, TVA, consultanta fiscala, administrare fiscala, imputernicit, rambursari, inspectii fiscale, investitii imobiliare.<\/p><\/div><\/a><\/div><\/div><\/div>

<\/i><\/div>
<\/div>
Consultanta<\/h5>

Consultanta in legatura cu impozite directe si indirecte, planificare fiscala internationala, facilitati fiscale pentru investitii, asistenta pe durata inspectiilor fiscale<\/p><\/div><\/a><\/div><\/div><\/div>

<\/i><\/div>
<\/div>
Salarizare<\/h5>

Intocmirea contractelor de munca, evidenta dosarelor personal, calculul salarial si intocmirea statului de plata, intocmirea declaratiilor fiscale si transmiterea on-line<\/p><\/div><\/a><\/div><\/div><\/div>

<\/i><\/div>
<\/div>
Legal support<\/h5>

Suntem alaturi de dumneavoastra inca de la inceput prin infiintarea societatii comerciale, schimbarea sediului social, inregistrare punct de lucru, cesiune parti sociale sau modificare capital social.<\/p><\/div><\/a><\/div><\/div><\/div><\/div>

<\/div>
<\/div><\/div>[\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row el_class=”gdpr-container”][vc_column][vc_column_text css=””] Policy on personal data processing Last updated: 01 September 2021 The General Data Protection Regulation (GDPR) has been applied throughout the European Union since May 25, 2018. The protection of your personal data is important to us, therefore we pay special attention to protecting the privacy of all those who have made […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-15437","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/pages\/15437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/comments?post=15437"}],"version-history":[{"count":4,"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/pages\/15437\/revisions"}],"predecessor-version":[{"id":15504,"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/pages\/15437\/revisions\/15504"}],"wp:attachment":[{"href":"https:\/\/kreston.ro\/en\/wp-json\/wp\/v2\/media?parent=15437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}