Personal Data Processing Policy

Taxgate follows the necessary steps to ensure the protection of personal data, in accordance with the principles set out in the legislation on the processing of personal data applicable in Romania, including Regulation no. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC („GDPR”).

This policy summarises Taxgate’s approach to personal data processing activities through the website and provides information on:

• Categories of personal data processed and data subjects
• Legal basis and purposes of processing
• Duration of data processing
• Security
• Recipients
• Rights of data subjects

For specific information regarding personal data processing activities, please refer to the privacy policies implemented at the level of each TAXGATE entity with which you interact.

Taxgate does not require registration for access or does not require any other processing of personal data to access the website. However, if you participate in one of the activities or request certain services provided by Taxgate, it may collect your personal data necessary for this purpose. Failure to provide this information may result in Taxgate preventing or delaying the provision of these services.

Taxgate may process personal data in relation to the data subjects, namely:

• name, surname, e-mail address, telephone number, city, company, when the data subject fills in the contact form on the website;
• name, surname, e-mail address, telephone number, date of birth, gender, when the data subject fills in the career form (application for functions within Taxgate) on the website;

The data subjects in relation to whom Taxgate may process personal data are: customers and potential customers, representatives/employees of customers/potential customers, users who access the Taxgate website, applicants for various functions within Taxgate.

Personal data processing activities involve data collection, access, use, storage, updating or deletion, as appropriate.

The information will be processed according to the principle of minimisation, so as to allow Taxgate to solve your request.

We process personal data for the following purposes:

• To follow the necessary steps (from a legal and commercial/internal point of view, of the company) in view of a potential contract concluded with a potential customer/supplier;
• To carry out recruitment processes;
• To ensure the appropriate response to data subjects’ requests in relation to their data processed by Taxgate.

Through the website, we process personal data on the basis of the following legal bases:

• Conclusion and execution of the contract, when the data subject is a Taxgate customer;
• Legitimate interest in recruitment procedures and contact with potential clients
• Consent, when expressly requested, the aforementioned legal grounds not being applicable.

Taxgate will retain personal data for as long as required by applicable law or as necessary in Taxgate’s legitimate interest. As personal data is processed by Taxgate for different purposes and/or on different legal grounds, the retention periods for personal data are different.

After the data retention period expires, Taxgate will ensure that it is securely deleted and/or destroyed.

Taxgate has implemented generally accepted standards of technology and operational security, to prevent the loss, alteration, unauthorised use or destruction of personal data. All Taxgate partners, employees or representatives are obliged to keep personal data confidential and only authorised persons have access to personal data („need to know”).

Taxgate will only transfer personal data in accordance with the GDPR principles.

Taxgate may transfer personal data to service providers (IT providers, archiving service providers, etc.) as well as to relevant authorities (money laundering authorities, tax authorities, etc.).

• Right of access: through which the data subject can obtain a confirmation regarding the processing or not by Taxgate of personal data and if so, the right to obtain information regarding the personal data processing activities
• Right to rectification: through which you can obtain the correction of inaccurate personal data
• Right to erasure: through which you can obtain the deletion of personal data, in certain cases; Taxgate cannot comply with this request if the law requires the retention of such personal data or if the data is necessary for a legitimate interest of Taxgate.
• Right to restriction of processing: by which the use of personal data can be restricted, until another request from the data subject is resolved.
• Right to object: through which the data subject can oppose the processing of personal data, according to the law.
• Right to portability: by which the personal data held by Taxgate concerning the data subject can be obtained in a structured, commonly used and machine-readable format or by which this data can be transmitted to another data controller.
• The right to file a complaint with A.N.S.P.D.C.P., based in Bucharest, Sector 1, Bld. Gheorghe Magheru 28-39, 010336, Romania.

The request to exercise the above rights must be addressed in writing to the respective TAXGATE entity. We will ensure that all measures will be taken to resolve the request without delay.

Requests for access, rectification, restriction of processing or deletion of personal data are subject to applicable legal restrictions.