Privacy Policy

Who Are We?

Eric Bioremediation Oil SRL, located in Prahova County, Ploiești City, East Beltway Street, No. 119, registered with the Trade Registry under J29/1707/2011, having the tax identification number 13621689, is responsible for processing your personal data that we collect directly from you or from other sources.

According to the legislation, our company is a personal data controller. To ensure that your data is processed securely, we have made every effort to implement reasonable measures to protect your personal information. We are responsible for processing your personal data that we collect directly from you or from other sources.

Who are you?

According to the legislation, you, as the individual beneficiary of our services and/or products, the representative or contact person of a company, or a person in any relationship with our company, are a “data subject,” which means an identified or identifiable natural person. To be completely transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us, the data operator, and you, the data subject.

Our commitment

Protecting your personal information is very important to us. Therefore, we are committed to complying with European and national legislation on personal data protection, especially Regulation (EU) 679/2016, also known as the GDPR.

Changes

We may change this Privacy Policy at any time. All updates and amendments to this Policy are effective immediately upon notification, which we will accomplish by posting on the site and/or via email notification.

What kind of information do we collect about you?

When you browse our website, fill out the contact form, send us a request by email, or contact us for any other purpose and through any other communication channel, you will share the following personal data, which we collect directly from you or from other sources, such as:

  • Your first and last name
  • Email address
  • Phone number
  • The company you represent
  • Orders placed
  • Your position within the company
 

We may also collect data through cookies or other similar technologies, such as:

  • IP address
  • Internet browser
  • Location
  • The web pages you access on our site
  • Your information
 

See our Cookies Policy for more information.

What is the legal basis for processing you data?

  • You have given your consent to the processing of your personal data.
  • The processing is necessary for the conclusion or execution of a contract between you and us, such as a service provision contract or a sales contract.
  • The processing is necessary to protect your vital interests or those of another natural person.
  • The processing is necessary for the purposes of our legitimate interests or those of a third party.

How long do we store the data?

We store personal data only for the period necessary to fulfill the purposes, but not more than 5 years from the termination of the contract or the last interaction with us.

After the end of the period, the personal data will be destroyed or deleted from the computer systems or transformed into anonymous data to be used for scientific, historical, or statistical research purposes.

Please note that in certain expressly regulated situations, we store the data for the period imposed by law.

How do we share your information with others?

We may disclose your data, in compliance with applicable law, to business partners or third parties. We consistently make reasonable efforts to ensure that these third parties have implemented adequate protection and security measures. With these third parties, we have contractual clauses in place so that your data is protected. If the law requires, we will inform you about the identity of these companies before transferring or within a reasonable time and we will ensure that any transfer is legitimate, based on your consent or another legal basis.

For example, we might provide your data to other companies, such as IT or telecommunications service providers, accounting, legal services, and other third parties with whom we have a contractual relationship. These third parties are selected with particular care so that your data is processed only for the purposes we indicate.

We might also share your data with business partners as a result of a joint effort to offer a product or a service.

Although unlikely, we could in the future sell the business or a part of the business, which will include the transfer of your data.

We may also transmit data to other parties with your consent or according to your instructions.

We may also provide your personal information to the prosecutor’s office, the police, the courts, and other authorized state bodies, based on and within the limits of legal provisions and as a result of expressly formulated requests.

We will ensure, to a reasonable extent, that your data does not leave the European Economic Area, however, to the extent that we will transfer data to states outside the EEA, we will ensure, in all cases, that the transfers are legitimate, based on your explicit consent or another legal basis.

What are your rights?

Your rights under the GDPR regulation are as follows:

  • The right to withdraw consent
  • The right to be informed about the processing of your data
  • The right of access to data
  • The right to rectify inaccurate or incomplete data
  • The right to erasure (“the right to be forgotten”)
  • The right to restrict processing
  • The right to portability of the data we have about you to another operator
  • The right to object to data processing
  • The right not to be subject to a decision based solely on automated processing, including profiling
  • The right to seek judicial remedy
  • The right to lodge a complaint with a Supervisory Authority

Please note that:

  • If you wish to exercise your rights, you can do so by sending a written request, signed and dated, to the email address: “email address”
  • The rights listed above are not absolute. There are exceptions, so each request received will be analyzed to determine whether it is justified or not. To the extent that the request is justified, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and about the rights to lodge a complaint with the Supervisory Authority and to seek judicial remedy.
  • We will try to respond to your request within 30 days. However, the period can be extended depending on various aspects, such as the complexity of the request, the large number of requests received, or the impossibility of identifying you in a timely manner.
  • If, despite all our efforts, we cannot identify you, and you do not provide us with additional information to manage to identify you, we are not obliged to comply with the request.