Privacy Policy

The objectives of our approach, in order of importance, regarding this Policy are as follows:

• Respecting your fundamental right to personal data protection and privacy.
• Complying with legal provisions concerning personal data protection.
• Providing complete and accurate information about who, what, why, where, until when, and how your personal data is processed, so you always have control over the personal data you entrust to us for achieving our purposes.

This is the current version and is valid at this moment, updated on March 20, 2024.

How to Contact Us? What does our Policy cover? What personal data do we collect from you, why, and how do we process it? For what purpose and how do we process the data collected online, by phone, or directly from you? Who is responsible for collecting and processing your personal data? From whom and how do we collect your personal data? What are the legal grounds we rely on for processing your personal data? Do we process personal data for profiling or automated decision-making? How long do we keep your personal data? To whom do we disclose your personal data? Is your personal data safe? Are we certified and have we adhered to a code of conduct? What are your rights guaranteed by the GDPR? How can you exercise these rights? How to contact us?

Data is collected and processed by S.C. HOUSE 3000 REAL ESTATE INVESTMENT S.R.L., headquartered at Str. Publicist Constantin N Sarry 8, Constanta, registered with the Trade Registry Office under no. J13/1710/28.05.2003, CUI RO 15469588, email: info@house3000realestate.ro

What Does Our Policy Cover? This Policy: takes effect from the date of the last update. The last update of the Policy takes effect from: March 20, 2024. Our policy applies to the website https://www.santamariabay.com/, https://www.lerosedellago.com/.

What Personal Data Do We Collect from You, Why, and How Do We Process It? For conducting our current activities through the website https://www.santamariabay.com/, https://www.lerosedellago.com/, you may complete various online forms, such as:

In the “Contact” section, you can communicate with us and request any information and clarifications related to us and our main activity. When you communicate with us, we process your name, email address, phone number, and any other data you provide in the message content to appropriately respond to your requests or inquiries. For promoting our activity and/or our clients on our website or social media accounts, we create a portfolio of photo/video images and testimonials. To achieve this purpose, we process your images and the personal data you provide when writing a testimonial: Name and surname, residence, image, voice. To promote our activity and stay in touch with you, we have created presentation pages on social media (Facebook) and professional platforms (LinkedIn) where you can contact us through messages, likes, comments. When you communicate with us, we process your online identity and any other data you provide in the message content to appropriately respond to your requests or inquiries. This website uses cookies, both proprietary and third-party cookies, to provide visitors with a better browsing experience and services tailored to each one’s needs and interests. The cookies used provide us with valuable feedback and help us improve the online experience. For What Purpose and How Do We Process the Data Collected Online, by Phone, or Directly From You? We process your personal data for:

Sending real estate offers requested by you. Creating a portfolio of images/testimonials for promoting our activity to other interested parties. Who Is Responsible for Collecting and Processing Your Personal Data? HOUSE 3000 REAL ESTATE INVESTMENT SRL is the operator responsible for collecting and processing personal data through the websites mentioned above.

From Whom and How Do We Collect Your Personal Data? We collect your personal data directly from you, either through the forms you complete on the site, through the emails you send us, or through any other means of remote communication (mail, courier, etc.), by phone, or directly at our headquarters.

What Are the Legal Grounds We Rely on for Processing Your Personal Data? Execution of orders/sales contracts of properties (processing is necessary for the execution of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract) – Art. 6, para. 1, lit. b) of Regulation 679/2016 (contract). Carrying out direct marketing activities based on the legitimate interest of HOUSE 3000 REAL ESTATE INVESTMENT SRL and improving relationships with clientele (processing is necessary for the purposes of the legitimate interests pursued by the operator or by a third party) – Art. 6, para. 1, lit. f (legitimate interest). Processing personal data through cookies is based on the consent of website visitors – Art. 6, para. 1, lit. a) (consent). Do We Process Personal Data for Profiling or Automated Decision-Making? We do not process your personal data to create a profile, nor do we use an exclusively automated process, without human intervention, to make decisions regarding you.

How Long Do We Keep Your Personal Data? We store personal data in accordance with the applicable legislation for each purpose of processing and limit it to what is strictly and legally necessary.

Data processed for creating a portfolio of images/testimonials for promoting our activity is stored for the strictly necessary period to achieve the purposes for which they were collected or until you withdraw your consent. Data processed for sending personalized offers requested by you is kept together with the sales file if the sale contract is finalized, and in case it is not finalized, for a maximum period of 6 months for the eventuality that you reconsider your decision.

Personal data that has become unnecessary or has reached its deadline, according to the law, is irreversibly deleted/destroyed from any databases and storage/archive media used.

Personal data processed based on your consent is irreversibly deleted/destroyed from any databases and storage/archive media used immediately after you submit a consent withdrawal request under Article 7, para. 3 of GDPR: “(3) The data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Before giving consent, the data subject is informed thereof. Withdrawal of consent is made as easily as the giving of consent.”

Exceptionally, personal data that has become unnecessary or has reached its deadline, according to the law, may be stored for longer periods if necessary for defending a right in court for the data subject or us.

To Whom Do We Disclose Your Personal Data? Depending on the purposes for which we process your personal data, we disclose data to authorized persons who manage client data processing (management, IT, accounting) and to notary offices or other collaborators involved in the property contracting situation.

We do not disclose/transmit your personal data to third countries or international organizations except for cookies for which you consent when entering the site.

Is Your Personal Data Safe? To process your personal data in safe conditions for your fundamental rights and freedoms, we have taken appropriate technical and organizational measures for data protection, including but not limited to:

All our employees/representatives/authorized persons sign a confidentiality agreement regarding the protection of personal data processed by them to fulfill their job/contractual obligations. We use only external services provided by suppliers who demonstrate they ensure a high level of security for personal data processed on our behalf. We implement technical and organizational security measures to protect the physical locations where we process personal data and the devices we use in our current activity.

All technical and organizational measures we implement aim to protect your personal data against unauthorized or illegal processing and against accidental loss, destruction, or damage.

Are We Certified and Have We Adhered to a Code of Conduct? In Romania, as of the date of updating this Policy, no authorized certification body has been established to certify that we comply with the applicable legislation regarding personal data protection, nor has a Code of Conduct been developed and approved to which we can adhere. Therefore, we adopt, including as best practice measures, any possible security means to ensure a high level of protection for the personal data we process.

What Are Your Rights Guaranteed by GDPR? To comply with the provisions of Regulation 679/2016, we guarantee you the following rights:

The right to withdraw consent at any time for the processing of personal data. The withdrawal of consent does not affect the lawfulness of data processing carried out before its withdrawal. The right to access your personal data that we process, and we will provide you with a confirmation whether we process your personal data or not and, if affirmative, provide you with all the mandatory information stipulated by Art. 15 GDPR, as well as a copy of these data, if you request this, in the format you request and via the communication method specified by you in the request. The right to obtain the rectification of inaccurate personal data that concerns you, without undue delay, as well as the completion of incomplete personal data, including through the provision of an additional statement. We must communicate the rectification of your personal data to the recipients of your personal data (if any). The right to request the erasure of personal data that we process.

We are obliged to erase your personal data and will do so without undue delay if the following conditions stipulated by Art. 17, para. 1 and 2 of GDPR are met:

The personal data is no longer necessary for the purposes for which they were collected or processed. You withdraw your consent on which the processing is based, and there is no other legal ground for processing. You object to the processing for reasons related to your particular situation, and there are no overriding legitimate grounds for processing (Art. 21, para. 1 GDPR), or you object to processing for direct marketing purposes (Art. 21, para. 2 GDPR). The personal data has been unlawfully processed. The personal data must be erased for compliance with a legal obligation under the Union or Member State law to which we are subject. The personal data has been collected in relation to the offer of information society services directly to a child.

If we have made personal data public and are obliged to erase it, considering the available technology and the cost of implementation, we will take reasonable steps, including technical measures, to inform operators processing your personal data that you have requested the erasure by these operators of any links to, or copies or replications of, that personal data.

We will refuse to erase your personal data under the following conditions expressly provided by Art. 17, para. 2 GDPR:

If processing the personal data is necessary for exercising the right to freedom of expression and information. If processing the personal data is necessary for compliance with a legal obligation that requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, if applicable. If processing the personal data is necessary for reasons of public interest in the area of public health, in accordance with Article 9, para. 2, letters (h) and (i) and with Article 9, para. 3 GDPR. If processing the personal data is necessary for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, in accordance with Article 89, para. 1, as far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing. If processing the personal data is necessary for the establishment, exercise, or defense of legal claims. Right to Restriction of Processing

You have the right to request the restriction of processing in the following cases:

You contest the accuracy of the data, and we will restrict the processing for a period that allows us to verify the accuracy of the data. The processing is unlawful, and you oppose the erasure of the personal data, requesting instead the restriction of its use. We no longer need the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims. You have objected to processing pursuant to Article 21 para. 1 GDPR, for the period during which we verify whether our legitimate grounds override your rights.

If processing has been restricted for the reasons stated above, your personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

If you have obtained a restriction of processing from us, we will inform you before lifting the restriction.

Right to Data Portability

You have the right to receive the personal data that concerns you and that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit those data to another operator without hindrance from us where:

The processing is based on consent. The processing is based on a contract to which you are a party. The processing is carried out by automated means.

In exercising your right to data portability, you have the right to have the personal data transmitted directly from one operator to another, where technically feasible.

Exercising your right to data portability does not affect your right to erasure of personal data, as stipulated by Article 17 GDPR, as the respective right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Your right to data portability does not adversely affect the rights and freedoms of others.

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6, para. 1, letters (e) or (f) of GDPR, including profiling based on those provisions.

We will cease processing the personal data in the event of an objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing, and we will immediately cease the processing of your personal data for direct marketing purposes.

In the context of using information society services, you may exercise your right to object by automated means using technical specifications.

If we process your personal data for scientific or historical research purposes or statistical purposes, you may, on grounds relating to your particular situation, object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This right does not apply if the decision:

Is necessary for entering into, or performance of, a contract between you and us. Is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests. Is based on your explicit consent.

In the cases mentioned in letters (a) and (c), we will implement suitable measures to safeguard your rights, freedoms, and legitimate interests, at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with the ANSPDCP. The contact details of the National Supervisory Authority for Personal Data Processing are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, Email: anspdcp@dataprotection.ro, Phone: +40.318.059.211, +40.318.059.212, Fax: +40.318.059.602.

How to Exercise Your Rights?

You can exercise all your rights by submitting a request at our headquarters or by email, using the contact details in this privacy policy.