Data Privacy Policy

The confidentiality and protection of your personal data is one of our commitments at 4ENVIGO S.R.L., a Romanian legal entity, with its registered office located in the municipality of Bucharest, sector 1, str. Rotașului no. 14, bl. B3, sc. 2, et. 1, ap. 3212, room 1, registered in the Trade Register under no. J40/2208/2023, with the unique registration code 47587859, hereinafter referred to as 4Envigo.

Therefore, we strive to process your personal data in accordance with the principles defined in the data protection legislation applicable in Romania, including Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”). The terms used in this privacy policy that are not defined shall have the meaning given by the GDPR.

Personal data is any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to the physical, psychological, mental, economic, cultural or social identity of the person.

This privacy and personal data protection policy concerns the data of our customers, business partners, other persons who contact us, as well as their representatives, potential employees, collaborators, etc. and applies to data collected through our website, www.4Envigo.com, hereinafter referred to as “Website“, as well as all other personal data collected by e-mail or other off-line contacts.

The Privacy and Personal Data Protection Policy describes:

  • the purposes for which we collect and use your personal data;
  • the reasons for processing the data for these purposes;
  • the categories of personal data that we process;
  • the duration of the processing of this data;
  • your rights as data subjects and how you can exercise them;
  • to whom we may disclose your personal data,

information that we hope to provide to you in a transparent and easy-to-read manner, so that you understand what we want to communicate to you.

You will also find out how you can contact us if you have any questions regarding your personal data, questions that we will be happy to answer. Please also read our cookie policy, from which you will learn how 4Envigo uses cookies and other similar technologies.

1. Purposes, grounds for processing and categories of personal data processed

In the context of interaction with 4Envigo, we may subject you – as a natural person – to the data processing activities we carry out. Therefore, we use your personal data in the following cases:

1.1 If you are the representative or contact person, employee or other collaborator of a customer or potential customer of 4Envigo or of a business partner of 4Envigo

1. Provision of Services

We use your relevant personal data to prepare and provide the Services requested from us. We rely in this case on the legitimate interest in providing the Services and on the execution of the contract.

2. Communication with you

We use the contact data you provide to communicate with you, in connection with your requests and with any other relevant aspects related to the business relationship. Also in this case, we rely on the legitimate interest in providing our services in our field of activity and in managing the relationship with our customers as the basis for the processing of personal data.

  1. Data processing as an obligation imposed by law, in general, and in relation to our obligations as a service provider, in particular

We may process some of your personal data in the context of providing the Services based on the legal obligations governing the activity of service providers. In this case, the reasons for processing relate to the legal obligation we have.

Sending promotional offers and packages, news about 4Envigo services and products

We may also use your contact details to provide you in the form chosen by you (electronically via e-mail, SMS, on paper) – our offers and other information or seasonal news about 4Envigo services and products, promotions, etc., but only if you have expressly requested such a service and, therefore, have previously expressed your explicit consent for such processing of your data. You may at any time withdraw your consent by expressing your option not to receive such information in the following ways:

  1. E-mail către dpo@4Envigo.com
  2. Letter with acknowledgement of receipt sent to the address in Bucharest, sector 1, str. Anton Pavlovici Cehov no. 2, Tanora building, floor 3, office no. 8.

In all cases, the data is provided either directly by you or by the client/partner. The categories of data processed in the context of our relationship with you are the name, surname, e-mail address, telephone, fax, position within the company, as well as other personal data provided to 4Envigo, usually by you, as necessary to fulfill the above purposes.

1.2 If you are an applicant for a job/internship

We use the personal data contained in the CVs we receive to assess the qualifications of applicants for a position within 4Envigo, including for a position within our internship programs. We base the processing of personal data on your consent expressed upon submitting your CV and, subsequently, on the conclusion and execution of the individual employment contract.

The categories of data processed in the context of our relationship with you are your name, surname, e-mail address, telephone, fax, address, personal data included in CVs, details of education and training, professional qualifications, as well as other personal data that you may provide directly to us.

1.3 Information that we collect automatically. Cookies

By visiting the website
www.4Envigo.com
, it is possible that we automatically collect certain information through cookies. Please review the Cookie Policy.

1.4 Information that we collect from third parties

We may also receive your personal data through other sources, even if you do not provide it to us directly, from third parties who have the right or legal obligation to share your data with us. These may include business partners and public authorities. When you use or benefit from some of the 4Envigo Services, you provide details to our business partners, who direct your details to us.

1.5 Processing for other purposes

We do not process your personal data for secondary purposes other than those for which it was initially collected, without prior consent, without a legitimate interest or without a legal basis.

2. Do we disclose your personal data to third parties?

In certain circumstances, we will share your personal data with third parties:

  • Third party service providers – we may use service providers to process your personal data on our behalf. We assure you that we have signed personal data processing agreements and confidentiality clauses with all third party service providers in order to protect them and we do not allow them to use them for other purposes.
  • Competent authorities – in the event of requests based on legal provisions, we provide your data to the competent authorities, when this is strictly necessary for the detection of fraud, criminal acts and, in general, when legal provisions require us to comply with such a requirement.
  • When you expressly request this or expressly authorize us to disclose your data.
  • In the event of urgent situations or cases of force majeure.
  • If disclosure is necessary to resolve disputes, to ascertain or exercise a right in court.

We assure you that we do not alienate or sell your personal data to any other entity, natural or legal person.

3. How long do we keep your personal data?

We limit the storage period of your personal data to what is necessary for the processing purposes that have been made known to you.

We review the need to continue to keep your personal data. Every 2 years we analyze the data collected and processed, in order to filter, sort and maintain the processing only for data for which the purpose of the processing is current. If, following the periodic review, it appears that you have not used the Services in the last two years, 4Envigo will send you an email to reactivate the commercial relationship. If you do not respond to 4Envigo’s request, we will proceed to delete both the processed personal data.

Regardless of your connection to 4Envigo or with our customers/suppliers/collaborators, we will delete your personal data immediately, following a request sent by you, with the exception of data whose processing/supply is required by a legal provision, in which case the retention period will be that provided for in the applicable mandatory legislation.

At the same time, we may retain personal data in the event of the establishment, exercise or defense of a right in court.

If the retention of your personal data is necessary for purposes specified by law, we may continue to retain this data.

4. How do we ensure the security of personal data? Are they safe?

We want to keep your personal data safe by implementing appropriate technical measures and appropriate organizational measures.

In accordance with applicable law, we have defined and use internal procedures to prevent unauthorized access and inappropriate use of personal data.

We use appropriate systems and procedures to protect and secure personal data, specifically aimed at preventing unauthorized/illegal processing, accidental or unlawful loss, accidental or unlawful destruction.

We have implemented measures to prevent and/or discover security breaches, to document security incidents, data affected by such incidents, to remedy security incidents, and to recover personal data.

We have also implemented measures and procedures to comply with our obligations under applicable law in the event of a security incident, including our obligations to notify the competent supervisory authority and to notify and inform you, as appropriate.

In the case of our employees, contractors, suppliers and 4Envigo collaborators, we limit and restrict their access to the personal data we process to what is strictly necessary, on the one hand, and on the other hand, imposing strict confidentiality obligations.

We have also implemented and are conducting a policy of continuous training of our staff in relation to the processing of personal data.

Annually, we conduct an audit of the management system in order to improve the protection and security of the personal data we process.

5. Do we transfer personal data outside the EU or EEA?

We do not transfer your personal data to countries outside the European Economic Area or to international organizations.

6. How can you control your personal data? What are your rights?

As a data subject, the GDPR provides you with a number of rights, including:

  1. Access to data: you can obtain information regarding the processing of your personal data and a copy of this personal data.
  2. Rectification of data: if you consider that your personal data is inaccurate or incomplete, you can request the appropriate modification of this personal data.
  3. Erasure of data: you can request the erasure of your personal data, to the extent provided by law.
  4. Restriction of processing: you can request the restriction of the processing of your personal data.
  5. Object to processing: you can contest the processing of your personal data, for reasons related to your particular situation.
  6. Data portability: you have the right to request that the personal data you have provided to us be returned to you or, where possible, transferred to a third party.

We are happy to provide you with all our assistance in exercising these rights.

You can exercise these rights mentioned above and learn more about them by submitting a written request to us, as data controller, at: 4Envigo SRL, Bucharest, sector 1, str. Anton Pavlovici Cehov no. 2, Tanora building, 3rd floor, office no. 8, or by e-mail at dpo@4Envigo.com. You also have the right to file a complaint with the National Supervisory Authority for Personal Data Protection (ANSPDCP) [http://dataprotection.ro/].[http://dataprotection .ro /]

All Requests will be treated seriously and will receive a response from 4Envigo, even if they are unfounded. The response will be adapted depending on the measures taken, and if the request cannot be fulfilled, the refusal will be motivated.

4Envigo will not charge any fee or other material benefit for the exercise of the rights conferred by the GDPR. The exception will be repetitive or excessive requests, in which case we may charge a reasonable amount, but we will inform you of this before resolving the request.

The response to the requests will be sent within a maximum of 30 days from its receipt. If the complexity or excessive volume of information requires a longer period of time, we will send you this within 30 days, with the actual response being communicated within a maximum of 60 days.

If the request concerns personal data for which 4Envigo is the data processor, the respective request will be sent within 3 working days to the controller responsible for the respective processing. Under no circumstances will 4Envigo respond to the data subjects in situations where it acts as a data processor, but it will assist in formulating the response, if the controller requests it to do so and will take all necessary steps to ensure that the response reaches the data subject.

Do not provide your personal data to 4Envigo through other communication channels, except for those mentioned in this policy, namely by e-mail to office@4Envigo.com, regardless of the person or company requesting it on our behalf, including employees or former employees of 4Envigo that you have previously known. Personal data transmitted through any other communication channels except for those mentioned in the policy to any third party, for any purpose, is not the responsibility of 4Envigo, the latter being unable to ensure their security. In this regard, we recommend that you carefully study the privacy policies of such third parties.

7. Who is responsible for the processing of personal data? Contact.

4Envigo controls the processing of personal data, being the data controller. For any questions or concerns regarding this policy or the processing of personal data, please write to us at: dpo@4Envigo.com

This privacy policy is effective from [ 07/04/2023 ]. It may be subject to subsequent changes. Any updates will be effective upon their publication on the website www.4Envigo.com.

By any subsequent changes and updates to this policy, we undertake not to prejudice in any way your rights mentioned in this version. If such changes could have a major direct or indirect impact on your rights in relation to your personal data, we undertake to explicitly inform you of this and request your consent, if necessary, in accordance with the applicable legal provisions.

In any case, all subsequent changes will be presented on this page, and if they are significant, we will highlight them. Also, all versions of this privacy policy are kept in the 4Envigo archive for consultation.