"This regulation shall apply from May 25, 2018. This regulation is binding in its entirety and directly applicable in all Member States," as stated in the legal text. Unlike European directives, which must be transposed into national legislation to take effect, EU regulations are directly applicable in all member states without the need for any formal action by national authorities.
Moreover, it should be emphasized that there will be no national implementation norms for this regulation, as is sometimes the case in Romania for laws or ordinances.
In practice, the GDPR's entry into force coincided with the repeal of Law no. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data.
Please note that this Notice does not apply to our processing of personal data on behalf of third parties and under their instructions, such as airlines, car rental companies, other service providers, vacation package providers, marketing partners, or corporate clients.

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
SC BSW Metals SRL, Registered with the Trade Registry under no.: J32 / 698 / 2007, VAT ID: RO 21589449, str. Săcel no. 15, 550075 Sibiu, Sibiu County

CONTACT DETAILS OF THE DATA PROTECTION OFFICER
All requests to exercise data subject rights shall be addressed to the Data Protection Officer at the following email address: contact@bswmetals.ro.
For additional information regarding our processing of personal data, please contact the Data Protection Officer at the same email address (contact@bswmetals.ro).

PERSONAL DATA WE COLLECT
We may collect personal data during each meeting or interaction with all customers, as well as in other aspects of our business. Such personal information may include: your identification data; your contact details; participation in a membership or loyalty program; information related to the purchase and receipt of products or services; personal characteristics, as well as authentication details and other related information; advertising and communication preferences; information about vehicles you may bring to our properties, and other types of information you choose to provide or that we may obtain about you.

-Website/web portal: Through the contact form, we collect personal and contact information: name, surname, email, phone number. BSW Metals SRL processes your personal data for contractual and legal purposes and, if you have given your consent upon form submission, we may inform you, depending on your preferences and where required, about our products and services or invite you to events via email, online advertising, social media, phone, text messages (including SMS and MMS), push notifications, in-app alerts, postal mail, our customer support center, and other means.
In addition to the information we collect directly from you, we may infer information about you based on the information you provide or other data we receive.

USE OF PERSONAL DATA COLLECTED ABOUT YOU
We use your personal information for various purposes, including to provide and personalize the services you request and expect from BSW Metals SRL, to deliver the level of service you expect, and for direct marketing and promotional activities, as detailed below:
Service Administration: We use your personal data to manage the programs in which you participate, including to provide access to your account information, such as reward status and offers for which you are eligible, and to fulfill services that are part of such programs.
Marketing and Communication: We may use your personal data to send you newsletters, promotions, and recommended special offers, as well as other advertising messages according to your stated communication preferences. These communications may be sent via email, postal mail, online advertising, social networks, phone, text messages (including SMS and MMS), or notifications.
Service Improvement: We may use your personal information to improve BSW Metals SRL services and ensure our website, products, and services are of interest to you.

PERSONAL INFORMATION WE TRANSFER
We do not transfer the collected information to third parties.

PERSONAL INFORMATION ABOUT MINORS
We do not knowingly collect personal information from individuals under the age of 18. As a parent or guardian, please do not allow children to submit personal data without your permission.

LINKS TO THIRD-PARTY WEBSITES AND SERVICES
Our website and mobile applications may contain links to third-party websites. Please note that we are not responsible for the collection, use, retention, sharing, or disclosure of data or information by such third parties. If you use or provide information on third-party sites, their terms and privacy policies apply. We advise you to read the privacy policies of the websites you visit before submitting personal data.

PROTECTING PERSONAL DATA
BSW Metals SRL will take all reasonable steps to: (i) protect personal data from unauthorized access, disclosure, or destruction, and (ii) maintain accurate and up-to-date personal data as needed. To protect your privacy, we recommend not sending credit card numbers or any other sensitive personal information via email.
We will not contact you via text messages or emails to request confidential information or credit card details.

INTERNATIONAL TRANSFERS OF PERSONAL DATA
We do not transfer your personal data outside the country or the European Union.

MODIFYING AND ACCESSING YOUR PERSONAL DATA
According to the applicable law, you have the right to access, rectify, object to, delete, and port your data, to object to automated individual decisions, and to address the courts. You may ask us to inform you about the personal data we hold about you, and when necessary, request that we update, correct, and/or delete your personal data stored in our active database. We will make all necessary updates and changes within the timeframe required by law and, where permitted, we may charge an appropriate fee to cover the cost of responding to your request. Please send such requests to: contact@bswmetals.ro.
To protect your privacy, we may respond to such requests only via the email address you registered or provided by other means. Please note that if you request data deletion, we may no longer be able to provide the quality and variety of services you are used to.

RETENTION OF PERSONAL DATA
We retain your personal data for the period necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by applicable law.
We will destroy your personal data as soon as possible and in a way that prevents recovery or reconstruction.
If personal data is printed on paper, it will be securely destroyed by shredding, burning, or other methods. If stored electronically, it will be destroyed by technical means to ensure it cannot be recovered or reconstructed.

CHOICES – MARKETING COMMUNICATIONS
If you have provided your contact details (postal address, fax number, email address, or phone number), we may inform you—based on your preferences and, where required, your consent—about our products and services or invite you to events via email, online advertising, social media, phone, text messages (including SMS and MMS), or notifications.
If you no longer wish to receive marketing materials via email, you can unsubscribe by using the unsubscribe link included in the email you receive from us. Unsubscribe requests may take up to ten business days to take effect. If there is no unsubscribe link in the email, you may reply to the message with the word “STOP.”
To unsubscribe from text messages, you can contact us using our contact information or reply to the message with the word “STOP.”

DATA SUBJECT'S RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Data subjects who believe their rights have been violated may contact the
National Supervisory Authority for Personal Data Processing

CHANGES TO THIS NOTICE
We may revise this Notice from time to time. If we make significant changes, we will post a link to the revised Notice on our homepage, and if you are registered for any of our products or services, we will notify you through a communication channel related to the provision of those services. You can find the date of the last update of this Notice by checking the link and date at the top. Any changes to this Notice will take effect upon posting on the website.