Qfin Advisory SRL (hereinafter referred to as the "Company"), with registered office in Aleea Cricovul Dulce 2-4, Block 17-18, Stair G, Floor P, Apartment 93, registered at the Trade Register under no. J40/18013/2008, CUI 24637338, Phone: +40729880294, E-mail: andreea.popa@qfin.ro, as a personal data operator, processes the personal data provided by you in order to provide reliable services , in accordance with the provisions of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR")

Section 1. Purpose and basis of personal data processing

The purposes of processing your personal data are:

• compliance with the legal obligations of the Data Operator
• the transmission of newsletters, promotional materials, marketing communications, commercial offers or any other relevant information regarding the company's products and services if you have given your consent in this regard according to art. 6 (1) (a) GDPR;
• to pursue the legitimate interests of the Data Operator or a third party such as for the operator's internal reporting or to streamline processes

Section 2. Categories of personal data that we process

Your personal data that we process are, as the case may be, the following:

• the name, the first name
• phone number, email address,
• the IBAN code, as the case may be
• logs, IP
• holographic signature
• the quality of designated person

Section 3. Use of personal data and the consequences of not providing them

The processing of personal data is mainly necessary for the signing of contractual documents as well as for pursuing the legitimate interests of the company in the execution of its contractual or legal obligations, as well as, as the case may be, based on consent for the transmission of marketing and promotional information.

The personal data mentioned above are processed directly by the company.

The refusal to provide the data necessary for the provision of services by the company leads to the impossibility of providing promotional information or services.

Section 4. Duration of personal data processing

The data may be processed until the fulfillment of the processing purpose indicated above or until the fulfillment of the company's legal obligations,

Also, if you no longer wish to receive newsletters, promotional materials, marketing communications, commercial offers or any other relevant information regarding our products and services, the company will no longer process your data for this purpose.

Section 5. Recipients of personal data

Your personal data may be disclosed: to you for the exercise of the rights you have in accordance with the GDPR, to the authorities according to the applicable legislation, to lawyers to represent us in the event of a possible litigation or for consultancy, to bailiffs for contractual communications or putting in execution of possible court decisions, debt recovery companies, the company's contractual partners for the conclusion and execution of the contract. Also, personal data can be disclosed to third parties with whom the company enters into contractual relations for the provision of services and the development of its activity

Section 6. Data transfer outside the European Union

The company does not transfer your personal data outside the European Union/European Economic Area.

Section 7. Rights of the data subject

As a data subject, you have the following rights provided by the General Regulation on data protection (art. 13 – 22 of the GDPR):

• The right to information: the right to be informed about the processing operations of your personal data according to art. 13 and 14 of the GDPR;
• The right of access to data: the right to obtain from the data operator confirmation of the fact that the personal data concerning you are or are not processed by it, as well as information on the processing operations of your data according to art. 15 of the GDPR;
• The right to rectification: the right to obtain the rectification of inaccurate data concerning you, as well as the completion of incomplete data according to art. 16 of the GDPR;
• The right to delete data under the conditions of art. 17 of the GDPR;
• The right to restrict the processing of your personal data under the conditions regulated by art. 18 of the GDPR;
• The right to obtain notification by the company of the recipients whose personal data has been disclosed of any deletion, rectification or restriction of the processing of personal data carried out in accordance with art. 16, 17 para. (1) and 18 of the GDPR, with the exception of the case where this proves impossible or involves disproportionate efforts (art. 19 of the GDPR);
• The right to opposition for reasons related to your particular situation on data processing carried out for the purpose of pursuing the legitimate interests of the company or of third parties, according to art. 21 of the GDPR;
• The right not to be subject to a decision based exclusively on automatic processing, including the creation of profiles, which produces legal effects that concern the data subject or similarly affects him to a significant extent, in accordance with art. 22 of the GDPR;

Also, you, as the data subject, have the right to withdraw your consent at any time, to the extent that the data processing operation is based on your consent without the legality of the processing carried out on the basis of the consent before its withdrawal being affected ( art. 7 (3) of the GDPR).

At the same time, we inform you that you have the right to address the National Supervisory Authority for the Processing of Personal Data - ANSPDCP for the defense of any rights granted by the applicable legislation in the field of personal data protection, which have been violated, as well as to appeal to the competent courts.

To exercise the rights provided by art. 13-22 and art. 7 (3) of the GDPR, as presented above, you can apply with a written, dated and signed request, sent to: andreea.popa@qfin.ro