GDPR Policy

 

Effective from 11.11.2024

Updated on 21.02.2025

 

  1. General Information

 

Mazilu&Partners pays close attention to the protection of your personal data and aims to safeguard your confidentiality during their processing in our information system. When you visit our website, we may request, among other things, personal data in accordance with applicable EU legal provisions.

  • Website usage https://linktoride.com/

 

You can use our website almost entirely without us requesting your personal data. We only learn the names of your internet service providers, the website from which you navigated to ours, and the individual pages you visit on our site. Downloading and installing the "linktoride" application requires providing information to open your account, as detailed in the privacy policy. 

  • Collection and Processing of Personal Data

 

When you download our "linktoride" application, you are asked in various stages to provide personal data, as these are used to create an account in the application.

These include details such as name, email address, phone number, and workplace.

  • Definitions

In the content and application of the General Personal Data Protection Policy, the following terms are defined as follows:

  • “Regulation“ or “Regulation (EU) 679/2016“ “GDPR“ means REGULATION No. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

  • "Controller" means a personal data controller, which, according to Regulation (EU) 679/2016 on personal data protection, is a natural or legal person, public authority, agency, or other entity which, alone or jointly with others, determines the purposes and means of processing personal data.

  • "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;

  • "Processing" means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure or destruction;

  • "Restriction of processing" means marking personal data stored for the purpose of limiting their future processing;

  • "Data Protection Officer" means the person designated by the controller or empowered by the controller who is responsible for advising and maintaining compliance in the field of personal data protection.

  • "Person Authorized by the Controller" means the natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the controller;

  • "Recipient" means a natural or legal person, public authority, agency or another body to whom personal data are disclosed, whether a third party or not. However, public authorities to which personal data may be communicated in a particular investigation in accordance with Union law or national law are not considered recipients; the processing of such data by the respective public authorities complies with the applicable data protection rules in line with the purposes of the processing;

  • "Third Party" means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

  • "Consent" of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

  • "Personal data breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data transmitted, stored, or otherwise processed;

  • "Health Data" means personal data related to the physical or mental health of an individual, including the provision of medical services, revealing information about the person's health status;

  • "Representative" means a natural or legal person established in the Union, designated in writing by the controller or the processor in accordance with Article 27, representing the controller or processor regarding their respective obligations under this regulation;

  • "The Company" means the legal entity MAZILU AND PARTNERS CONSULTING SRL;

  • "Employee" means an individual who has concluded an individual employment contract with the company MAZILU AND PARTNERS CONSULTING SRL, in accordance with labor legislation;

  • "Collaborator" means a legal entity or an authorized individual who has entered into a collaboration contract with the company MAZILU AND PARTNERS CONSULTING SRL, either a service provision contract or a copyright assignment contract;

  • "Supplier" means a legal entity that delivers certain services or products to the company MAZILU AND PARTNERS CONSULTING SRL based on a contract;

  • "Client" means a legal entity or an authorized individual for which the company MAZILU AND PARTNERS CONSULTING SRL provides services, services that are part of the company's business, according to the specifics of each concluded contract;

  • "DPO" means Data Protection Officer or translated as the Data Protection Officer within the company MAZILU AND PARTNERS CONSULTING SRL;

  • "Security Breach" or "Security Incident" means a breach of personal data security, more precisely an unforeseen situation that affects the security of the data processed by the company MAZILU AND PARTNERS CONSULTING SRL, which leads, accidentally or unlawfully, to the destruction, loss, alteration, or unauthorized disclosure of personal data transmitted, stored, or processed in another way, or to unauthorized access to them.

  • "Supervisory Authority" means the National Authority for Personal Data Processing Surveillance, which monitors and controls the legality of personal data processing, having responsibilities such as:

  • receiving and analyzing notifications regarding the processing of personal data;

  • authorizing data processing in certain situations provided by the law;

  • informing individuals and/or legal entities about the necessity of complying with legal obligations and following the procedures provided by the Law, receiving and resolving complaints, notifications, or requests from individuals and communicating the provided solution, or the actions taken;

  • performing prior checks in situations where the controller processes personal data that are likely to present special risks to the rights and freedoms of individuals;

  • conducting investigations on its own or upon receiving complaints or notifications.

Through this policy, the company provides an essential guarantee of compliance, namely the guarantee of the existence of procedures within the company, mechanisms to comply with the Regulation and conform to it, as well as evidence of the knowledge of these procedures by competent persons to apply them.

Additionally, by informing employees and collaborators, the Company demonstrates diligence in complying with the Regulation by informing its team members about its provisions and the obligations they have under the rules contained in the Regulation, as well as the rights that GDPR confers on them as data subjects.

  • Transmission of Personal Data to Third Parties

 

We store and use the data provided solely for internal purposes and for the functioning of the application.

We do not sell or pass on this data to third parties. The situation is different if we are obliged to publish and transmit the data for legal reasons or following court decisions. The data is transmitted to business and service partners only for the purpose of processing requests. In such cases, the volume of data transferred is reduced to the minimum necessary.

  • Data Protection Officer

 

Please contact our Data Protection Officer if you have questions regarding data protection at Mazilu&Partners.

Email: [email protected]

  • Cookie Modules and IP Addresses

 

We use cookie modules on some sections of our website. A cookie module is a small text file sent from a website and stored locally on the visitor's hard drive. We never use cookie modules to store personal information about you. We use them exclusively to simplify your navigation and to identify the number of users on our site.

This technical access data cannot identify a specific person, and this means that each user remains anonymous. Personal data that falls outside this framework, such as name, address, telephone number or email address, are not recorded unless you voluntarily provide them when opening an account in the application.

Each visit to the linktoride.com website is automatically recorded, in which case the user's IP address or domain name, as well as the name of the page visited, is recorded.

An IP address is a number assigned to your computer to access the internet. Each computer is identified on the internet through an IP address; this allows the computer and servers to recognize and communicate with each other in the network.

If you wish to be informed about the use of cookie modules by your browser, activate the appropriate browser settings. However, you can also configure the browser to no longer receive cookie modules.

Please note it's possible that you may not be able to use all website functions in this case.

 

Mazilu&Partners uses technical and organizational security measures to protect the data we manage against random or deliberate manipulation, loss, destruction, or unauthorized access by unauthorized persons. Our security measures are continuously improved considering technological developments. Please contact our Data Protection Officer if you have questions regarding personal data protection.

en_USEnglish