This website is operated by SC Lami Ing Eur SRL (hereinafter referred to as “We”), located in Timișoara, Gheorghe Doja Street 11, registered with the ONRC under no. J35/1929/2016, having CUI RO 36262363, a Romanian limited liability company.

We collect and process various categories of personal data from you as a user of www.lami-ingeur.ro, hereinafter referred to as the “website” and in accordance with EU Regulation 2016/679 on personal data protection, we act as a personal data controller.

The protection of your personal data is very important to us!

This Information Notice describes the methods used by us to collect and use your personal data. Thus, you will learn what data is collected, how and for what purpose, and you will be informed about the rights you have regarding personal data.

This information notice is version V_01 and is in force until it is modified and a new version is published.

Principles of Personal Data Processing

We adhere to the principles of personal data processing established by EU Regulation 2016/679, namely:

1. Lawfulness, fairness, and transparency – we process personal data lawfully, fairly, and transparently in relation to you;
2. Purpose limitation – personal data is collected only for specific, legitimate, and explicitly communicated purposes and is not further processed in a manner incompatible with

these purposes; further processing for public interest archiving, scientific or historical research, or statistical purposes is not considered incompatible with the initial purposes;

3. Data minimization – personal data collected is adequate, relevant, and limited to what is necessary for the purposes for which it is processed;
4. Data accuracy – we ensure that personal data is accurate and up-to-date, taking all necessary measures to ensure that personal data that is inaccurate, considering the purposes for which it is processed, is erased or rectified without delay;
5. Storage limitation – we comply with the legal deadlines for data retention, or we retain it only until the purpose of collection is fulfilled, having established deadlines for this purpose through internal procedures, and then we delete it;
6. Integrity and confidentiality – we take appropriate technical and organizational measures for the security of personal data, including protection against unauthorized or unlawful processing, against accidental loss, destruction, or damage.

How We Collect your Personal Data and What Kind of Data We Collect

Personal data is collected:

• directly from you, through:

• filling out the online contact form on our website;
• emails you send to us at one of the addresses indicated on the pages
  • through cookies when you browse our website

All personal data is processed by us for specific and well-defined purposes, described in the forms through which you give your prior consent, for the conclusion or proper performance of a contract, to fulfill a legal obligation, or to defend a legitimate right in court.

In the online process of providing personal data to us, although we make sustained efforts to protect the information you provide to us, the exchange of information via an internet connection is not 100% secure, therefore, we cannot guarantee the security of personal data transmitted in this way. Once we have received the data, we use strict procedures and security methods to prevent unauthorized access to this information.

Through this website, we do not collect or process special categories of personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor do we process genetic data, biometric data for the unique identification of a natural person, data

regarding health or data regarding a natural person’s sexual life or sexual orientation. Any such personal data that you communicate to us, accidentally or intentionally, will be immediately deleted.

Minors’ Personal Data. Parental Consent.

This website is intended for use by adults aged 18 and over. However, in certain cases, our services may also be accessed by minors. Their personal data will be stored and processed by us only with the prior, explicit, and written consent of the parent or legal guardian. In the absence of this consent, any personal data from a minor will be immediately removed from our database. As parents, we recommend that you actively participate in your children’s online exploration and use the parental control options offered by the computer system you own, the programs you use, and/or the internet service provider. Limiting minors’ online access is very beneficial for their mental and physical integrity.

What Happens if You Do not Provide Us with your Data

If you do not provide us with the requested personal data, or provide it partially, we may find ourselves in a situation where we cannot provide the requested product or service. The personal data collection form is configured to request the minimum amount of information we need to identify you, to be able to contact you and fulfill your requests, to fulfill the contract or to meet our legal obligations. In these situations, we will inform you, if possible, so that you can make an informed decision.

Access to Personal Data and Protection Measures

The personal data in our database is processed by our own staff, who are periodically trained to comply with GDPR procedures, drawn up according to the requirements of EU Regulation 2016/679.

We may disclose some personal data to trusted third parties for the established purposes. We require them to have appropriate technical and operational security measures to protect your personal data, in accordance with personal data protection legislation. Personal data will also be transmitted if we must comply with a legal obligation, at the request of government or executive authorities, to meet certain national security or law enforcement requirements, or to prevent certain illegal activities.

Except for the above cases, we will never disclose, sell, or lend any of your personal data to any third party without your prior consent.

We are committed to protecting personal data against any loss, misuse, disclosure, alteration, unavailability, unauthorized access, and destruction and take all reasonable measures to ensure the confidentiality of this data. We also continuously assess the risks that may arise during personal data processing activities and update work procedures.

How Long We Keep Personal Data

We will only retain personal data for as long as necessary to fulfill the purpose for which it is processed. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the purposes for which we process it, and whether we can achieve these purposes by other means. Some personal data is retained for necessary and specific periods, expressly provided by law, to fulfill our legal obligations.

When we no longer need personal data, we will delete or destroy it safely, or, if such a measure involves disproportionate costs, we will anonymize or encrypt it so that it becomes inaccessible. We will also consider the possibility of ensuring the anonymization of personal data so that it can no longer be associated with an identifiable person, in which case we can use that information for statistics, studies, evaluations, and the like, without further notifications.

Your Rights

EU Regulation 2016/679 grants you a series of rights that we respect and commit to responding to your requests with maximum promptness.

1. Right of access: the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed and, if so, access to that data, including information related to the categories of data held, the purpose of their use, the source of collection, etc. Upon your request, we will provide you, free of charge, with a copy of your personal data. Requesting multiple copies of your personal data may incur a reasonable fee, based on administrative costs.
2. The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

3. The right to rectification of personal data concerning you that is Taking into account the purposes for which the data was processed, you have the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.
4. The right to restrict the processing of your personal data, in the event that:
   • you contest the accuracy of your personal data, for the period we need to verify the accuracy;
   • the processing is unlawful, if you request the restriction of processing instead of erasure;
   • we no longer need your personal data but you request it for the establishment, exercise, or defense of a legal claim;
   • you have objections related to processing while we verify whether our legitimate grounds override yours.
5. The right to erasure, or “the right to be forgotten,” under which you can request the deletion of personal data processed about you. We must comply with this

request, without undue delay, with the following exceptions where the data is necessary:

• for the exercise of the right to freedom of expression and information;
• to comply with a legal obligation we have;
• for public interest archiving, scientific, historical research, or statistical purposes;
• for the establishment, exercise, or defense of a legal claim.

6. The right to data portability ensures that you have the right to receive personal data concerning you and to transmit it to another personal data controller. If technically feasible, you can request that we transmit your personal data (which you have provided to us) to another organization.

You have this right if, cumulatively:

• We process your personal data by automated means,
• We rely, in processing your personal data, on your consent or our processing of your personal data is necessary for the conclusion or execution of a contract to which you are a party;
• Your personal data is provided to us by you and the transmission of your personal data does not negatively affect the rights and freedoms of other persons.

7. The right to object, under which you can object, at any time, to the processing of your personal data, provided that the processing is not based on consent but on the legitimate interests of the controller or a third party. In this case, we will no longer process your personal data, except where legitimate and compelling reasons can be demonstrated that justify the processing and that prevail over your interests, rights, and freedoms or if the purpose of the processing is the establishment, exercise, or defense of a legal claim. You can always object to the processing of your personal data for direct marketing purposes, regardless of the reason.

Communication Methods

We will communicate to each recipient to whom personal data has been disclosed any rectification or erasure of personal data, or restriction of processing, unless this proves impossible or involves disproportionate effort. All your requests will be fulfilled within the legal term of 30 days.

To exercise your rights, please send a written request to SC Lami Ing Eur SRL, Gheorghe Doja Street 11, Timisoara. You can also submit the request in person, at our headquarters, or by email at info@lami-ingeur.ro.

Any communication and measures taken as a result of your exercise of the rights you have are offered to you by Us free of charge. However, if you make unfounded, excessive, or repetitive requests, we have the legal option to refuse to comply with the request or to charge a fee in accordance with the administrative costs necessary to fulfill your request.

If you are not satisfied with the response received, you have the option to contact The National Authority for Supervision of Personal Data Processing. Dataprotection.ro

This information notice may be modified by us at any time, without prior notice, when it can be improved or when practices and/or legislation in the field of personal data protection are updated. For this reason, we invite you to visit this page periodically, as your personal data will be treated according to the information notice under which they are collected, unless we have your consent to treat them otherwise.