I.                           IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

 

Tennis Management and Development S.R.L., (hereinafter referred to as the “Company,” the “Controller,” or”TMD”), with its registered office in Bucharest, District 1, 24–26 Nordului Road, 5th Floor, Room 3, registered with the Trade Register Office under no. J2023021765406, tax code 49132055 in its capacity as Controller, manages the website https://tiriacopen.ro/  and its connected subdomains (”the Website”), as well as its social media pages (hereinafter referred to as the “social media pages”).

 

This Privacy Notice details how the Company collects and processes your personal data, as well as the rights you have as a data subject and how you can exercise them, in accordance with Regulation (EU) No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as national legislation (hereinafter referred to as the “GDPR”), and legislation concerning the protection of privacy in the electronic communications sector.

 

For any information or requests regarding the processing of personal data, or for exercising your rights as a Data Subject in relation to TMD, please contact us using the following contact details:

 

·     by mail, at the address: 24–26 Șoseaua Nordului, Sector 1, Bucharest

·     by e-mail, at the address: [email protected]

·     by phone, at: 004 021 4312149

 

 II.                           THIS PRIVACY NOTICE IS ADDRESSED TO

This Privacy Notice is addressed to visitors of the Website and Social media pages, as well as to individuals who contact us using other available means of communication, such as by phone or email.

 

      III.                  SOURCE OF PERSONAL DATA

We collect your personal data when you interact with our Website and social media pages (for example, when you fill out a form available on our Websites /social media pages), or when you contact us by phone or email.

 

To ensure that the data collected is accurate and up to date, please notify us of any changes you are aware of regarding the personal information you have provided to us or that has been provided by third parties. We also recommend that you limit the data you submit strictly to what is necessary for the stated purposes.

 

      IV.                  PERSONAL DATA PROCESSED, THE PURPOSE AND THE LEGAL BASIS OF THE PROCESSING

We collect the personal data described below exclusively for the purposes and on the legal grounds specified in this Privacy Notice. If we intend to process this data for other purposes, we will inform you in advance accordingly and take all necessary actions to comply with the personal data protection regulations.

 

The aforementioned data will be processed for:

 

A.                           MANAGEMENT OF REQUESTS SUBMITTED BY YOU

 

When you choose to complete the contact form available on our Website or to contact us through our social media pages, by e-mail, or by phone, we will process your identification data (last name, first name, username – if the request is submitted via the social media pages), your contact details (e-mail address, phone number), data regarding the subject of the request, request-related data (date and time), data regarding the language spoken, as well as any other information included in the message submitted, which, by association, may represent personal data, for the purpose of managing requests and communicating with you.

The legal basis is our legitimate interest in responding to the request addressed to us, in accordance with article 6(1)(f) of the GDPR.

 

B.                           INTERACTIONS THROUGH SOCIAL MEDIA PAGES

 

In the context of using social media platforms, we process your data for the purposes described below.

 

1.         When managing the TMD pages created on these platforms, we process the interactions of individuals interested in our activities (such as comments, likes, tags, reposts, etc.), as well as the identification data of followers (e.g., name, surname, username).
The legal basis for this processing is our legitimate interest in using such pages to ensure our visibility and presence in the online environment, in accordance with Article 6(1)(f) of the GDPR.

 

2.         In order to conduct analyses and statistics regarding general public opinion, we process the feedback expressed on these platforms or in other publicly available online environments by individuals interested in TMD activity.

The legal basis for this processing is our legitimate interest in improving the experience of customers and potential customers, in order to better meet their needs, in accordance with Article 6(1)(f) of the GDPR.

 

C.                          STATISTICAL ANALYSES AND IMPROVEMENT OF THE WEBSITE NAVIGATION EXPERIENCE"

 

When you visit our website, we will process personal data through cookies and other similar technologies. For more details, please refer to the Cookie Policy available on the website.

 

D.                           OTHER PURPOSES

 

In addition, we will process your personal data for the purpose of satisfying our legitimate interests, namely:

1.         The preparation of statistics and aggregated reports aimed at developing and improving our activities and services, increasing the efficiency of how activities are managed, optimizing processes, centralizing operations, and maintaining an internal database, as well as analyzing and minimizing financial and reputational risks to which we are exposed in connection with our operations.

The legal basis is the legitimate interest of ensuring proper business management, in accordance with Article 6(1)(f) of the GDPR.

In this case, the data is processed in anonymized form, and only exceptionally and when necessary, in identifiable (clear) form.

2.         Ensuring the security of the systems, networks, and equipment used, as well as their maintenance.

The legal basis is our legitimate interest in ensuring the security and proper functioning of systems, equipment, and networks, in accordance with Article 6(1)(f) of the GDPR.

3.         Compliance with the legal obligations imposed on us by law (for example, obligations under tax legislation, archiving requirements, data protection obligations, etc.), including reporting to certain institutions and/or public authorities.

The legal basis is the fulfillment of our legal obligations, under Article 6(1)(c) of the GDPR.

4.         The defense, exercise, or establishment of rights, as well as the resolution of disputes.

The legal basis for processing is our legitimate interest in requesting the establishment of rights, exercising or defending our rights, in accordance with Article 6(1)(f) of the GDPR.

 

     V.                      USE OF THE WEBSITE AND THIRD-PARTY PLUG-IN/WEBSITES TECHNOLOGIES

 

The website contains links to social media networks or third-party websites that you can access directly (ex: ATP, the ticket provider Entertix).

In this case, the respective social media networks or third-party websites may carry out personal data processing activities that are not under our control. Thus, the operators of the social media networks and third-party websites act as independent controllers and have their own policies regarding how they process personal data, including through cookies.

Please consult the privacy policies of the social media networks, as well as those of the third-party websites, for complete information regarding their processing of your personal data.

 

  VI.                      DATA RECIPIENTS

 

Personal data may be disclosed, strictly to the extent necessary for the purposes detailed above or in cases where this is required by law or when we have a legitimate interest that is well justified, to the following categories of recipients who may act as independent controllers/joint controllers or processors, as follows:

 

1.         Service providers

a)         business management and consultancy services;

b)         personal data protection services;

c)         IT system development, technical support, and maintenance services;

d)         cybersecurity services;

e)         electronic communications services;

f)           archiving services;

g)         audit services;

h)         software solutions, platforms, or other IT systems, such as those used to manage information collected through Websites, marketing platforms, etc.;

i)            cloud/hosting services;

j)            social media platforms, where applicable, such as Facebook and Instagram (in this case, please consult their data processing policies available as follows:

·       https://www.facebook.com/privacy/explanation

·       https://help.instagram.com/519522125107875.)

k)         external consultants we engage in specific situations (e.g., lawyers, advisors, experts);

2.         Public authorities and bodies, including investigative authorities, courts of law, or institutions with powers to carry out inspections and audits of the operator’s activities and assets, to the extent that the transfer of data to them is required by law and/or necessary in the event of litigation or dispute resolution, as well as in cases of audits where we are obliged to provide such data (for example, the National Supervisory Authority for Personal Data Processing);

3.         Persons expressly designated by you;

4.         Third-party acquirers, to the extent that our business is transferred (in whole or in part), and the data of the Data Subjects is inherently linked to the assets that are the subject of such a transaction.

 

   VII.                  TRANSFERS OF PERSONAL DATA

 

As a rule, we will not transfer your personal data outside the European Economic Area. In exceptional situations, and only if necessary, the transfer of your personal data outside the European Economic Area will be carried out only with the implementation of appropriate safeguards in accordance with the specific legal provisions on personal data protection and with proper prior notice to you.

 

VIII.                  DURATION OF THE PROCESSING OF YOUR PERSONAL DATA

 

The personal data mentioned in the sections above will be processed only for the period necessary to fulfill the purposes mentioned in this Privacy Notice.

Subsequently, we will remove or delete personal data from our systems and records and/or take steps to anonymize it so that you can no longer be identified. We will also take all reasonable steps to ensure that personal data transmitted to third parties or made public for the purposes mentioned above is deleted.

 

Thus, the periods for processing personal data are as follows:

 

1.         If you submit a request to us, we will process your data throughout the period of resolving your request, as well as for a period of 3 years from the date of the last interaction, both for statistical analysis and reporting purposes and to defend ourselves in the event of disputes

2.         When you interact with our social media pages, interactions, posts, and comments on our page will be retained until you exercise your option to delete them.

3.         Regarding the data collected through cookies, they are retained for the duration defined, in each case, in the Cookies Policy section.

4.         Personal data processed in the context of disputes, litigations, or conciliations will be retained until their resolution, and also afterwards, in accordance with the applicable limitation periods.

 

IX.                             YOUR RIGHTS REGARDING PERSONAL DATA

1.         Right to be informed, according to art. 13 and art. 14 of the GDPR, as per this document.

2.         Right of access, according to art. 15 of the GDPR.

3.         Right to rectification, according to art. 16 of the GDPR.

4.         Right to erasure/right to be forgotten, according to art. 17 of the GDPR.

5.         Right to restriction of processing, according to art. 18 of the GDPR.

6.         Right to data portability, according to art. 20 of the GDPR.

7.         Right to object, according to art. 21 of the GDPR.

When you send us a request to exercise this right, please also mention the grounds related to your particular situation. We will no longer process your personal data, unless we demonstrate that (i) we have legitimate grounds for processing your data that override your interests, rights, and freedoms or that (ii) the purpose of the processing is the establishment, exercise, or defence of legal claims.

8.         Right not to be subject to a decision based solely on automated processing, including profiling, according to art. 22 of the GDPR. The personal data referred to in this Privacy Notice is not subject to automated decision-making processes.

9.         The right to lodge a complaint with the supervisory authority, in accordance with Article 13(2)(d) and Article 14(2)(e) of the GDPR.

Without prejudice to your right to contact the supervisory authority at any time, we kindly ask that you contact us first regarding the exercise of the above-mentioned rights.

If you believe that we have not fully addressed your requests or you are not satisfied with our responses, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) to file a complaint using the following contact details:

• address: 28–30 General Gheorghe Magheru Blvd., Sector 1, Postal Code 010336, Bucharest, Romania
• phone:  +40.318.05.92.11
• fax:  +40.318.05.96.02
• email: [email protected]  
• website: : www.dataprotection.ro

or you may file a complaint with the competent court of law.

 

Please note the following in relation to the exercise of your rights as data subject:

·       How to exercise: you can contact the Data protection officer using the contact details available above.

·       The period of time for providing a response: we will try to resolve the request within one month, which may be extended with two months for specific reasons related to the complexity of the request. In all cases, if this time limit is extended, we will inform you of the length of the extension and the reasons for it.

·       Identification: please provide us with the data necessary to identify you (name, surname, e-mail address), with the understanding that, to the extent that we cannot identify you on the basis of this information alone, we will ask you to provide additional information that will allow us to identify you.

If necessary, we will update this Privacy policy to reflect any changes in the way we process your personal data. In the event of any such update, we will publish the new version of the Privacy policy and indicate the update by modifying the date on which the revised Privacy policy is displayed.