Last updated: September 22, 2026<\/strong><\/em><\/p> Through this Policy we inform you about how we collect, use, transfer and protect your personal data. We carry out this processing in accordance with the provisions of Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (the “General Data Protection Regulation”, hereinafter “GDPR”) and the relevant national legislation on the protection of personal data.<\/p> GHENCEA RESIDENTIAL PROJECT S.R.L.<\/strong>, a limited liability company of Romanian nationality, having the unique registration code 43525764 and registration number in the Trade Register J2021000027053, hereinafter the Company<\/em> or We<\/em>.<\/p> Our contact details are:<\/strong><\/p> Registered office address: Pia\u021ba Nucetului no. 12, bl. A3, ground floor, commercial space no. 2, office no. 14, Oradea municipality, Bihor county, postal code 410491, Romania<\/p> E-mail address: sales@prima-astera.ro<\/a><\/p> Phone no.: 0310 052 061<\/p><\/section> The Company, in its capacity as Controller, processes the personal data of candidates applying for available positions, employees, individual clients, representatives of corporate clients, contractual partners and collaborators, and the data of other individuals who interact with the Company and\/or are involved in contractual relationships with it.<\/p> Personal data is:<\/p> In the context of staff recruitment<\/strong>, we process the following types of personal data: name, surname, address, date of birth, citizenship, gender, phone no., e-mail address, data on professional and\/or social experience, education and professional training, skills, and other personal data resulting from the information contained in the CV and cover letter submitted, and, as applicable, during discussions held during the job interview.<\/p> For the conclusion and performance<\/strong> of service provision<\/strong> and partnership\/collaboration<\/strong> contracts, we mainly process the following types of personal data: name, surname, ID card\/passport series and number, gender, home\/residence address, bank account number, e-mail address, phone no.<\/p> For the purpose of completing and submitting the contact form<\/strong> (“Contact”) and the request-a-quote form<\/strong> (“Request a quote”) on the Company’s website – www.prima-astera.ro<\/a> (hereinafter “the website”), we process the following types of personal data: name, surname, e-mail, phone number and, as applicable, any other data provided at the data subject’s own initiative in the “Message” section.<\/p> For website visitors<\/strong>, we may collect data through cookies or other similar technologies, such as: IP address, internet browser, location, web pages accessed on our website, time spent on the website, internet network, device used. For more details on this, please see our Cookie Policy<\/strong>, available at https:\/\/www.prima-astera.ro\/cookie-policy-eu\/<\/a>.<\/p> The Company manages official pages on the Facebook, Instagram and LinkedIn platforms. With regard to aggregate statistics on visitors to these pages, the Company holds the status of joint controller together with the platform operator, pursuant to Article 26 of the GDPR and the CJEU ruling in Case C-210\/16 (Wirtschaftsakademie Schleswig-Holstein). Processing carried out by the platforms for their own purposes is governed by their respective privacy policies.<\/p> We do not use your personal data to send you marketing communications<\/strong>, such as newsletters, commercial messages via e-mail and SMS, unless you give your express consent for such communications, by checking a consent box to that effect. For this purpose, we process your e-mail address and, for SMS messages, your phone number, and we ensure that you have a simple option to unsubscribe at any time, i.e. to withdraw your consent regarding the receipt of these types of communications.<\/p> If you provided us with your contact details when purchasing a product or service, we may send you communications about similar products and services, pursuant to Article 12(2) of Law no. 506\/2004, with the possibility of objecting at any time, free of charge. To send these communications, we may use specialized platforms acting as processors, and any technologies used to measure interaction with the messages are used only with your consent.<\/p><\/section> Your personal data is processed for the purpose of:<\/p> Marketing communications via e-mail and SMS are based on consent (Article 6(1)(a) of the GDPR and Article 12(1) of Law no. 506\/2004), while for clients, for similar products and services to those purchased, they are based on the Company’s legitimate interest (Article 6(1)(f) of the GDPR and Article 12(2) of Law no. 506\/2004).<\/p> Specifically, in the case of submitting a request, inquiry or quote through the Contact form or the “Request a quote” form, the processing is based on Article 6(1)(b) of the GDPR \u2013 steps taken at the data subject’s request prior to entering into a contract \u2013 and, respectively, on Article 6(1)(f) of the GDPR \u2013 the Company’s legitimate interest in responding to commercial requests, particularly relevant in a B2B context. The placement of cookies that are not strictly necessary for the website’s operation is carried out exclusively on the basis of prior, freely given consent, pursuant to Article 6(1)(a) of the GDPR and Article 4(5) of Law no. 506\/2004.<\/p><\/section> Personal data is stored for processing for as long as is necessary to achieve the processing purposes mentioned in this Policy or for the period required by law (e.g. for archiving, accounting purposes, etc.).<\/p> As a general guide, we apply the following retention periods:<\/p> We will not disclose or transfer any of the personal data collected from you or about you to any third party, except<\/strong>:<\/p> Where personal data processed by the Company is transferred<\/strong> by it, directly or through its contractual partners\/collaborators, outside the European Economic Area<\/strong>, we ensure that such transfers take place in compliance with the GDPR (in particular Article 46 of the GDPR), applicable legal provisions in this area, on the basis of appropriate safeguards (standard data protection clauses adopted by the Commission), and provided that enforceable rights and effective remedies are available for data subjects.<\/p> Specifically, for the operation of the website and for online communication and marketing activities, the Company uses services provided by: Google Ireland Limited and Google LLC (Google Analytics, Google Ads, Google AdSense, Google Tag Manager, Google Maps, Google Fonts, YouTube), Meta Platforms Ireland Limited (Facebook, Instagram, WhatsApp), LinkedIn Ireland Unlimited Company, TikTok Technology Limited, Adobe Systems Software Ireland Limited (Adobe Fonts), Vimeo.com, Inc., Mixpanel, Inc., as well as web hosting, website development and maintenance providers.<\/p> Some of these providers may transfer personal data to the United States of America. These transfers are carried out pursuant to the European Commission’s adequacy decision of 10 July 2023 on the EU\u2013US Data Privacy Framework, for certified entities, or, as applicable, pursuant to the standard contractual clauses adopted through Commission Implementing Decision (EU) 2021\/914, accompanied by supplementary measures established in accordance with Recommendations 01\/2020 of the European Data Protection Board.<\/p><\/section> The Company implements appropriate technical and organizational measures to ensure a high level of security and protection for personal data. We use security methods and technologies, together with internal work policies and procedures, including control and audit procedures, to protect the personal data collected in accordance with the legal provisions in force relevant to the protection of personal data.<\/p><\/section> Any data subject may exercise the following rights, as provided for by the General Data Protection Regulation:<\/p> The Company does not use automated decision-making processes, including profiling, that produce legal effects concerning you or that similarly significantly affect you.<\/p> To exercise these rights, or for any questions related to the processing of your personal data, please contact us at the e-mail address: sales@prima-astera.ro<\/a>\u00a0or by phone at: 0365401269, contact person Ionel Orza. Data Protection Officer (DPO<\/a>) services are outsourced and provided by GDPRComplet<\/a>.<\/p> You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The contact details of the supervisory authority are: National Supervisory Authority for Personal Data Processing, B-dul G-ral. Gheorghe Magheru no. 28-30, sector 1, 010336 Bucharest, e-mail: anspdcp@dataprotection.ro<\/a>, tel.: +40.318.059.211.<\/p><\/section><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t1. Who are we?<\/h3>
2. How do we process your personal data?<\/h3>
3. What types of personal data do we process and for what purpose?<\/h3>
4. What legal grounds does the processing of personal data rely on?<\/h3>
5. For how long do we process your personal data?<\/h3>
6. Who do we share your personal data with?<\/h3>
7. What protection measures and safeguards do we take?<\/h3>
8. What are your rights as a data subject?<\/h3>