PRIVACY POLICY

ASOCIEREA COBUILD

Data Protection and Security for Our Contractual Partners/Members and Consumers

Protecting and securing the data of our contractual partners, members, and consumers is a top priority for ASOCIEREA COBUILD. Therefore, the protection of your personal data is very important to us and is a special concern.

We collect, store, and use personal data in accordance with the General Data Protection Regulation (GDPR), EU Regulation 679/2016 of the European Parliament and the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and in accordance with current legislation. In this statement, we want to inform you about the types of data and the purposes for which we process them, as well as your rights.

Who We Are

The data operator is ASOCIEREA COBUILD.

Email: [email protected]

In the context of AC’s current activities, including conducting commercial/contractual activities, participating in fairs, exhibitions, conferences and/or other specialized events organized by AC, involving the acquisition of AC services offered on the website, purchasing online tickets, registration for free access ticket, or subscribing to the newsletter, as well as in the context of fulfilling legal obligations, we may ask you for certain personal data.

In this regard, AC will process, among others, the following personal data: name and surname, phone, home/residence address, email, profession, etc.

Who Are the Data Subjects?

The persons (data subjects) whose data can be processed by AC, exclusively for the purposes mentioned below, are:

AC’s individual clients (current, former, or potential), visitors, the general public, their representatives/authorized persons, whether legal or conventional;
Representatives/authorized persons/business contacts (business/contractual partners, exhibitors, co-exhibitors, organizers, co-organizers, suppliers, service providers, etc. – current, former, or potential) and public authorities/institutions.

To offer you certain specific services of AC (e.g., but not limited to, exhibition registration, space rental), AC will request the necessary personal data to provide those services, and refusal to provide such data may make it impossible to provide AC’s services.

When you purchase a service provided by AC, as well as when you participate in fairs/exhibitions organized by AC, we collect personal data related to the provision of those services. Also, as a visitor to AC’s exhibitions/fairs/conferences, we collect personal data (image, data processed through video surveillance systems, etc.) to fulfill legal obligations and carry out regular activities (legitimate interest).

What Types of Personal Data Do We Process, for What Purposes, and on What Legal Basis?

In the process of operating this website, AC collects certain information (“personal data”) about identified or identifiable individuals, data provided by users of this website directly (e.g., name, surname, postal address, email address, phone number) or indirectly (e.g., IP address). Below you will find information related to certain purposes for which we process personal data on the legal basis indicated for each:

Your personal data is used only for the following purposes:

• Organizing fairs, exhibitions, conferences, and other specialized events/activities;
• Responding to inquiries, complaints, or requests via electronic correspondence (email) or phone;
• Surveys or market studies, customer satisfaction evaluation studies, or providing feedback on our products and services;
• Marketing activities, commercial communication, promotion, advertising, organization of promotional campaigns and/or contests, processing of promotional campaign winners’ data for awarding prizes, loyalty programs, including sending general or personalized commercial offers; development and improvement of services;
• Conclusion and execution of contracts, customer/visitor/supplier management, and conducting AC’s commercial/contractual activities;
• Billing and collecting for AC’s services;
• Fulfilling incident legal obligations;
• Communicating with public bodies/authorities/institutions or public interest entities;
• Audit and control/supervision activities;
• Archiving, statistical purposes.

2.1. Browsing the Website. Use of Cookies

When you visit our website, we use cookies to automatically collect technical information for identifying the user, such as IP address, type of internet browser used to navigate our site, operating system, name, or host domain through which the user navigates the site.

The main purpose of cookies is to provide you with a better browsing experience, but also for advertising purposes, to offer you content adapted to your interests and preferences. Therefore, we use cookies to provide you with a personalized and relevant browsing experience on our website and to understand how you interact with our advertising content.

For more information on the use of cookies on this website and the purposes for which they are used, as well as the possibilities to control and/or deactivate these modules, please consult our cookie policy.

Our offer contains links to third-party websites, over which we have no influence. Therefore, we decline any responsibility for this external content. The respective provider or manager of the internet pages always bears the permanent responsibility for the content of the pages linked by the link. At the time of establishing the link, the respective pages were checked for possible violations of the law. At that time, no illegal content was found.

In any case, permanent control over the content of the pages to which the links lead is not reasonable in the absence of concrete evidence of a violation of the law. If we become aware of a legal violation, we will immediately remove such links.

2.2. Responding to Inquiries, Requests, or Complaints

We process your personal data, such as name and surname, email address, phone number, and any other information or details you communicate in correspondence with the purpose of responding to your inquiries, complaints, or requests, depending on the communication channel you contact us through.

Legal basis: legitimate interest, which allows us to provide responses to inquiries, complaints, or requests.

2.3. Promotional Campaigns

We process personal data collected by completing participation forms on the Site for the purpose of organizing promotional campaigns or contests, awarding prizes won, and also to analyze the effectiveness of campaigns. Participation in these campaigns is not mandatory, you are the one who requests registration and provides the respective data.

Legal basis: legitimate interest, consent

2.4. Direct Marketing Communications

We may process personal data to inform you about products and services, promotional offers, or for subscribing to newsletters.
For the purposes mentioned above (at point 2), we may send your personal data to:

Our service providers;
Advertising and marketing agencies;
Digital or social media agencies;
Survey or market study providers;
Authorized persons.

Collection and Processing of Anonymized Data on This Website

On our server, log file data is automatically collected and stored in an internal journal file, transmitted to us via your browser. The data includes:

• Your browser type and version;
• Your operating system type and version;
• The URL of the page through which you reached us;
• Search words you used to find our internet page;
• The date and time of your access to our internet page;
• The names of subpages you accessed.

These are the data we collect and process in anonymized form, meaning they cannot be attributed to a specific individual. The collection and processing of data serve for statistical evaluations and internal system purposes.

Collection and Processing of Data on This Website

If you have registered on our website, we collect and store the data you provide, to the extent that you do not object to this process.

Various technologies are used on our website for the collection and storage of data necessary for marketing and optimization purposes. These data are used to create user profiles under a pseudonym. In this context, cookies can be used (see below). Collected data are not used – without the express consent of the interested person – for the personal identification of the website visitor and are not combined with the personal data of the bearer of the pseudonym. This form of data collection and storage can be objected to at any time, with future effect, by sending an email to [email protected].

This website also uses Google Analytics, an internet analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transferred and stored on a Google server in the USA. In the case of IP anonymization activation on this website, your IP address will be shortened beforehand by Google within the member states of the EU or in other states party to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the website operator, Google will use this information to evaluate your use of the site, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=en.

Our pages also integrate remarketing tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit our pages, a direct connection is established between your browser and the Facebook server through the remarketing tags. Facebook thus receives the information that you have visited our page with your IP address. This allows Facebook to associate your visit to our pages with your user account. We can use the information obtained in this way for the display of Facebook ads. Please note that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please see Facebook’s privacy statement at www.facebook.com/about/privacy/. If you do not want data to be collected via Custom Audience, you can deactivate this function at https://www.facebook.com/ads/website_custom_audiences/.

Cookies

We use “cookies” on our internet pages. Cookies are small text files stored on your computer, recorded by your browser. By installing cookies, our web server can recognize your browser, your individual settings on our internet pages, and possibly some parts of the connection data in encrypted form, facilitating the use of our pages and automatic connection.

Through your browser settings, you have the option to refuse cookies, delete them from your computer, block them, or be alerted before setting up a cookie.

ASOCIEREA COBUILD collaborates with a group of marketing specialists. Pseudonymous usage data are collected in cookies in the form of cookie identifiers and advertising identifiers without an IP address. Cookie ID and Advertising ID without an IP address are not sufficient to identify a physical person behind a browser/user.

Based on the browsing behavior through the browser (pages visited, categories, product pages) of the user, there is an interest in the specific B2B sector, and these information are used for ASOCIEREA COBUILD, to ensure better targeted and usage-based online advertising. Cookies can be synchronized with other platforms through “cookie matching”. This Matching can be done for, for example: Google, Doubleclick, Adition, Appnexus, Mediamath, The Trade Desk, Adform, Active Agent, yieldlab.

In this way, an opt-out cookie is defined. This exclusion cookie assumes that a browser setting does not prevent the storage of cookies or their deletion. After deleting some opt-out cookies, the user must reiterate their objection. Alternatively, the user can delete cookies directly in the browser, set their browser settings to do-not-track, or manage their cookie preferences. If you want to get details about the information stored in your cookie, send us your cookie ID.”

Transfer of Personal Data Abroad

Transferring to AC’s companies/organizations in third countries, outside the EU, is only carried out after ensuring a level of protection corresponding to that in the EU. To guarantee the level of protection, we use the EU’s standard contractual clauses. We inform you that any transfer made by the Company in an EU member state complies with the requirements set out by the GDPR.

Your personal data obtained on this website are stored centrally in an AC database. Here, we determine the category to which your data belongs, based on the information you provide, for an automatic classification based on interests/needs (automated decision-making). We use your data to send you the NEWSLETTER you ordered, to carry out/organize/administer this NEWSLETTER (Art. 6 para. 1 lit. b GDPR), or to send you informational and advertising mailings from AC, as well as invitations to AC’s events (“legitimate economic interest” as an advertising company, Art. 6 para. 1 lit. f GDPR). According to European directive regulations on data deletion, data is only stored as long as necessary to serve its storage purpose.

All the information you provide us by accessing these internet pages is stored on a server located in a European Union (“EU”) country and transmitted to the competent entities of AC and its affiliated companies/organizations in the country and abroad, to address your requests and wishes. Transmission to third parties occurs only within legal obligations or to our service providers, in processing data for others (Art. 4 No. 9 GDPR).

Transferring to AC’s companies/organizations in third countries, outside the EU, is only carried out after ensuring a level of protection corresponding to that in the EU. For guaranteeing the level of protection, we use the EU’s standard contractual clauses.

We use your data to send you the NEWSLETTER you ordered, to carry out/organize/administer this NEWSLETTER (Art. 6 para. 1 lit. b GDPR), or to send you informational and advertising mailings from AC, as well as invitations to AC’s events (“legitimate economic interest” as an advertising company, Art. 6 para. 1 lit. f GDPR).

You have the right to request the deletion, rectification, or limitation of the processing of your data. You can also request information about the content and volume of your recorded data. Moreover, you have the right to recover your personal data, in an appropriate format, or through its transmission by AC. You have the possibility, at any time, to object to the storage and processing of your data, as well as to an individual automated decision, with future effect. These rules also apply if you have given us a declaration of consent for the use of your data (Art. 6, para. 1, lit. a). Objections can be addressed informally, by mail or email, without the need to state reasons. You also have the right to complain to the data protection authority.

Retention Period of Personal Data

We will retain your personal data only for the time necessary for the processing purposes presented above and in compliance with the legal provisions in force.

For data processing for the purpose of browsing the Site and using cookie modules, the retention duration will be in accordance with the cookie policy.

In case the data processing is no longer necessary for providing a service, for fulfilling a legal obligation, and is not justified by a legitimate interest of AC, you can refuse such processing or withdraw your previously given consent, the refusal will have effects for the future. For example, Data Subjects can withdraw their consent for data processing for direct marketing, personalized offers, at any time and without having to indicate a reason. Following the resolution of the request to withdraw consent, the data subject will no longer receive commercial information regarding the events/fairs/services offered by AC.

For data processing for the purpose of responding to inquiries, requests, or complaints, the data retention duration will be during the management of the complaint and then in accordance with archiving rules and to protect legitimate interests.

AC’s newsletters are sent through specialized and approved partners of AC. Thus, confidentiality and security of information are ensured.

When the visitor registers on the Site, they have the possibility to express their consent to receive Newsletters. The visitor can change their option regarding the consent issued to AC at any time by contacting AC in this regard or by accessing the unsubscribe link displayed in the commercial messages received from AC. Renouncing receiving Newsletters does not imply renunciation of consent given for this Document.

Access to the contact list in the mobile application
In the mobile application, the recommendation module can be activated through which the Partner can offer customers a benefit if they recommend the mobile application to other people. On this page, the application requests access to the contact list only to complete the recommendation form. The contact list is not sent to the Administrator’s servers, being used exclusively for completing the recommendation form.

Legal basis: legitimate interest, consent

2.5. Surveys, Customer Satisfaction Evaluation Studies, and Customer Feedback

We will process your personal data when you decide to participate in our surveys or market studies, customer satisfaction evaluation studies, or when you provide feedback on our products and services. These personal data will be processed for the above purpose only with your consent, considering our legitimate interest in understanding the needs and expectations of customers regarding our products and services. Your participation in these studies is voluntary. Therefore, it is up to you to provide us with personal data (name and surname, information about shopping preferences and habits, or other personal data you may provide) by completing the participation forms on our website or similar forms provided for the respective surveys or studies.

Legal basis: consent, legitimate interest

2.6 Conclusion and Execution of Contracts

AC processes your personal data provided for the conclusion and execution of the contract with you or with the AC of which you are a representative/contact person. Also, during the contractual relationship, we communicate with you to ensure the smooth running of the commercial relationship.

Legal basis: The legitimate interest in carrying out our commercial activity in relation to the conclusion and execution of contracts and communication with the contractual partner for this purpose, when the contractual relationship is established with the AC of which you are a representative/contact person.

To Whom Do We Disclose Your Personal Data?

To fulfill the purposes described above, AC uses the services of several contractors. Some of these are individual data operators, such as Google or Facebook. Another category of contractors are third parties who do not process the data, but may access it in fulfilling their own duties or in relations with AC, such as maintenance, financial, or audit service providers.

All the information you provide us by accessing these internet pages is stored on a server located in a European Union (“EU”) country. Transmission to third parties occurs only within legal obligations or to our service providers, in processing data for others (Art. 4 No. 9 GDPR).

The above-mentioned personal data may also be made available to third parties in the following situations: (a) public authorities, auditors, or competent institutions with the competence to inspect the Company’s activities or assets, which require the Company to provide information under its legal obligation. Such public authorities or institutions can be; (b) to fulfill a legal requirement or to protect the rights and assets of our Company or other entities or persons, such as courts; (c) to third-party acquirers, to the extent that the Company’s activity is (totally or partially) transferred, and the data of the persons concerned will be part of the assets representing the subject of the transaction.
For data processing in the context of organizing promotional campaigns, the retention period will be throughout the campaign, and subsequently, the data will be stored in accordance with archiving rules and for protecting legitimate interests.

For data processing for direct marketing communication, the retention period of data will last until the withdrawal of consent or unsubscription.

For conducting opinion surveys, market studies, customer satisfaction evaluation studies, or obtaining feedback on our products and services, the data will be retained for the duration necessary to achieve the purpose of the survey.

For the conclusion and execution of contracts, personal data will be retained for the duration of the contract’s execution and subsequently in accordance with archiving rules and for the duration of the statute of limitations of the right to action.

Data Processing Security

AC will maintain the confidentiality of any information you provide. Disclosure of the provided information will only be made under the conditions stated in this Document.

AC constantly evaluates and updates the security measures implemented to ensure a secure and protected processing of personal data.

Rights of Data Subjects

Regarding the processing of your personal data, you have the following rights:

1. The right to access processed personal data: you have the right to obtain confirmation if your data is processed and, if so, to access the type of personal data and the conditions of processing, by submitting a request for this purpose to the data operator;
2. The right to request rectification or deletion of personal data: you can request, by submitting a request to the data operator, the correction of incorrect personal data, the completion of incomplete data, or the deletion of personal data in the following cases: (a) the data are no longer necessary for the original purpose (and there is no new legal purpose), (b) the legal basis for processing is the consent of the data subject, the data subject withdraws consent, and there are no other legal grounds, (c) the data subject exercises their right to object, and the data operator has no other reasons to continue processing, (d) the data has been processed unlawfully, (e) deletion is necessary for compliance with EU or Romanian law, or (f) the data were collected in connection with information society services offered to children (as applicable), which have specific requirements regarding consent;
3. The right to request restriction of processing: you have the right to obtain restriction of processing in cases where: (a) you consider the processed personal data to be inaccurate, for a period that allows the operator to verify the accuracy of the personal data; (b) the processing is unlawful, but you do not want us to delete your data, only to restrict their use; (c) if the data operator no longer needs your data for the above purposes, but you need them to establish, exercise, or defend a legal right, or (d) you have objected to processing pending verification whether the legitimate reasons of the data operator prevail over those of the data subject;
4. The right to withdraw consent for processing when the processing is based on consent, without affecting the legality of the processing carried out until that moment;
5. The right to object to data processing for reasons related to your specific situation when processing is based on legitimate interest, and to object at any time to data processing for direct marketing purposes, including profiling;
6. The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning the data subject or similarly significantly affects them;
7. The right to data portability, meaning the right to receive the personal data you have provided to the operator in a structured, commonly used, and machine-readable format, and the right to transmit this data to another operator, if the processing is based on your consent or a contract and is carried out by automated means;
8. The right to file complaints with the data protection authority and the right to address a competent court.

These rights can be exercised at any time. To exercise your rights, we suggest you send a detailed email to the email address mentioned below, under the “Contact” section.

According to the General Data Protection Regulation No. 679/2016 (GDPR), your request must be fulfilled by the operator within a maximum of one month. However, this period may be extended considering justified circumstances, as provided in the applicable regulations. Also, if the information you initially provide is not sufficient to identify you or if we need you to better detail your request, the deadline for responding to your request will begin from the moment all these steps are taken. In any case, we will notify you as soon as possible after registering your request if we need such information. Please note that if you do not provide us with the information that allows us to process your request, while we will make reasonable efforts in accordance with applicable rules, we will not record your request as valid and will assume in good faith that you have abandoned it.

If you wish to withdraw your consent granted for direct marketing purposes, you can use the “Unsubscribe” option available in marketing/ commercial communication messages or respond with “NO”.

Modification of This Privacy Policy

AC reserves the right to modify at any time and in any way any of the provisions in the Terms and Conditions or the entire Terms and Conditions without any prior notice and without being obliged to perform any other formalities towards users. Any modification is fully and unconditionally accepted by the users of the Site by simply using or accessing any facility offered by the Site, or by accessing the Site, at any time after the modification is made, and non-acceptance of any modification obliges the respective user to cease accessing the Site immediately.

You agree that AC, at its choice, may terminate or interrupt your use of the Site for non-compliance with the Terms of Use. At the time of suspension or termination, you must (a) cease using the Site and (b) destroy any copies made after any part of the Content. You will not hold AC responsible for any damages, costs, liabilities, expenses (including attorney’s fees), and amounts for agreements related to any process, claim, or action brought by a third party against the Company as a result of (a) your negligence, misrepresentation, error, or omission or (b) your violation of the Terms of Use and applicable laws or regulations.

Use this Site at your own risk. Neither AC, nor its affiliated companies, employees, nor agencies or third parties involved in creating, producing, or delivering the Site, are liable for any direct, indirect, punitive, incidental, special, consequential, or other damages related to the use of this Site or the Content, whether based on a contract, strict liability, or other methodology, even with warning of the possibility of such damages.

Contact

To exercise the above rights, you can address the responsible person within AC with a written, dated, and signed request to the email address: [email protected]. Please attach to the request a legible copy of the identity document of the signatory.

These provisions may undergo occasional modifications/updates. We recommend that you check these provisions each time you use the AC-owned websites, to always be informed about them. By accessing the AC-owned websites or using the AC services through the mentioned websites, following the modifications, the new provisions will be considered accepted.