How we process personal data, in line with Regulation (EU) 2016/679 (GDPR).
1. Data controller
RH ACTIVITIES & WORKERS SOLUTIONS SRL, Romanian tax ID 43945288, Trade Register no. J2021000395107, registered office at [registered office address], e-mail contact@rhactivities.com, phone +40 763 609 683.
2. What data we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, phone, e-mail, location, job description, photos (quote form) | Replying to your quote request | Pre-contractual steps — Art. 6(1)(b) | 12 months from the last contact if no contract is signed |
| Job application data: name, phone, e-mail, location, experience, CV | Recruitment for positions in the company | Steps prior to an employment contract and consent — Art. 6(1)(b) and (a) | Up to 12 months from submission, then deleted |
| Contract and invoice data | Carrying out the job, accounting and tax obligations | Contract and legal obligation — Art. 6(1)(b) and (c) | As required by accounting law |
| IP address, browser, time of submission | Website security, spam prevention | Legitimate interest — Art. 6(1)(f) | Up to 12 months |
| Visit statistics (only with your consent) | Improving the website | Consent — Art. 6(1)(a) | See the cookie policy |
3. Who has access to the data
We do not sell or rent your data. Access is limited to what is strictly necessary: our hosting and e-mail providers, our accountant and the authorities, as required by law. If you message us on WhatsApp, messages are also processed by WhatsApp / Meta under their own policy.
4. Your rights
- the right of access and to receive a copy;
- the right to rectification and erasure;
- the right to restrict processing and to object;
- the right to data portability;
- the right to withdraw consent at any time;
- the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) — dataprotection.ro.
To exercise your rights, write to contact@rhactivities.com. We reply within one month.
5. Data security
The website uses an encrypted connection (HTTPS). Photos attached to requests are stored in a private area accessible only to administrators.