GDPR Privacy Policy

Dear Visitors,

We inform you that your personal data will be processed by BlueSpark Technologies S.R.L., a Romanian legal entity, headquartered in Cluj-Napoca, Vasile Stoica Street, no. 3, 2nd floor, ap. 6, Cluj County, Romania, registered under Trade Registry no. 2024033452009 dated 21.10.2024, Tax ID (CUI) 50741922, legally represented by Camelia Diana Topan and Horațiu Măiereanu, the owner of the website www.bluespark.ro, in accordance with the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data no. 679/2016 (hereinafter GDPR), as well as the applicable national legislation (Law no. 190/2018 and related data protection regulations) and European data protection laws.

I. Definitions:

• Website means www.bluespark.ro, owned by the data controller BlueSpark Technologies S.R.L., a Romanian legal entity, headquartered in Cluj-Napoca, Vasile Stoica Street, no. 3, 2nd floor, ap. 6, Cluj County, Romania, registered under Trade Registry no. 2024033452009 dated 21.10.2024, Tax ID (CUI) 50741922, legally represented by Camelia Diana Topan and Horațiu Măiereanu;

• Visitor means any natural person who accesses the Website, visits the premises of BlueSpark Technologies S.R.L., or is interested in or requests information regarding the Operator’s products;

• Client means the natural person to whom the Operator provides services, either via the Website or through other means;

• Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, by reference to identifiers such as name, surname, photograph, age, gender, nationality, ethnicity, home/residence address, email address, IP address, occupation, bank account, political orientation, religion, signature, etc.;

• Special categories of personal data means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data used for unique identification, data concerning health, or data concerning a natural person’s sex life or sexual orientation;

• Personal data relating to criminal convictions and offences means a special category of personal data regarding criminal convictions, offences committed by the data subject, or related security measures;

• Processing means any operation or set of operations performed on personal data or on sets of personal data, with or without automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;

• Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing personal data; in this case, BlueSpark Technologies S.R.L., including via the Website www.bluespark.ro, acts as the controller;

• Data subject means the natural person whose personal data is processed;

• Processor means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;

• GDPR means EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;

• Supervisory authority means an independent authority established in an EU Member State, responsible for monitoring the application of the GDPR;

• EEA means the European Economic Area (including EU Member States, Iceland, Norway, and Liechtenstein).

II. Your rights and our obligations regarding the processing of personal data:

1. You have the right to request from the Controller (BlueSpark Technologies S.R.L.) access to your personal data. This means you have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to details regarding how your data is processed (purposes, categories of data, recipients, storage period, or criteria used to determine that period, etc.).

2. You have the right to request the rectification without undue delay of inaccurate personal data concerning you, as well as the completion of incomplete personal data, including by providing a supplementary statement.

3. You have the right to request the erasure of personal data concerning you where one of the following grounds applies:
   a) The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
   b) You withdraw your consent, where consent was the legal basis for processing, and there is no other legal ground for processing;
   c) You object to the processing pursuant to Art. 21(1) of Regulation 679/2016 and there are no overriding legitimate grounds, or you object pursuant to Art. 21(2) of EU Regulation 679/2016;
   d) The personal data has been unlawfully processed;
   e) The personal data must be erased for compliance with a legal obligation under EU or national law to which the Controller is subject;
   f) The personal data has been collected in relation to the provision of information society services referred to in Art. 8(1) of the GDPR.

4. The right to restrict processing may be exercised if the accuracy of the data is contested for a period enabling verification, if the processing is unlawful but erasure is not desired, if the Controller no longer needs the data but you require it for the establishment or defense of legal claims, or if you have objected to processing pending verification of whether our legitimate interests override yours.

5. You have the right to object to processing where it is carried out in the public interest or in our legitimate interest, or where your data is processed for direct marketing purposes.

6. The right to data portability entitles you to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another Controller, where technically feasible. This applies when processing is based on consent or contract and is carried out by automated means.

7. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where such processing is necessary for a contract, permitted by law, or based on your explicit consent.

8. Where processing is based on consent or takes place during the contract, you have the right to withdraw your consent at any time.

9. You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing or with the competent courts if you believe any of your rights regarding your personal data have been infringed.

You may exercise all these rights by submitting a written, dated, and signed request to BlueSpark Technologies S.R.L., communicated either:

• By post at: Cluj-Napoca, Vasile Stoica Street, no. 3, 2nd floor, ap. 6, Cluj County, to the attention of BlueSpark Technologies S.R.L.;

• Or by email to: data-protection@bluespark.ro.

We will respond within one month of receiving your request. This period may be extended by up to two months, in which case you will be notified within the first month of the extension.

We also undertake to take all necessary technical and organizational measures to secure your personal data and to inform you immediately in case of destruction, loss, alteration, unauthorized disclosure, or unauthorized access to personal data.

III. Personal data processed by the Controller:

Website visitors:

The personal data of visitors to www.bluespark.ro is processed upon accessing the Website. In this case, the following data is collected through the cookie policy used by www.bluespark.ro via Google Analytics: IP address, location, preferences, and visited pages.

This data is processed for marketing purposes, as well as to ensure you have the best possible online experience.

The legal basis for processing is both the Visitor’s consent, according to the cookie policy accepted by you on www.bluespark.ro (consent that may be withdrawn at any time without any negative consequences, including by adjusting your browser settings), and our legitimate interest in ensuring the proper functioning of the Website.

IV. Duration and conditions of processing. Data security

The personal data indicated above will be processed only for the period necessary to achieve the purposes for which it was collected, which shall not exceed one year.

We specify that your personal data will not be subject to automated decision-making.

Furthermore, BlueSpark Technologies S.R.L. undertakes to guarantee the security of your personal data by implementing appropriate technical and organizational measures for processing security, in accordance with the GDPR.