I. General Information

KSB Comserv is aware of the importance of protecting the information collected about you, especially that information capable of identifying you as an individual (“personal information”). This document governs how we collect and use this information. According to the requirements of Law no. 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data, amended and supplemented, KSB Comserv has the obligation to manage in safe conditions and only for the specified purposes, the personal data that you provide us about you, a member of your family or another person. The purpose of data collection is: invoicing the requested products, sending them to the address(es) specified by you and sending, by e-mail only with your consent, information about the products found on the website www.ksbcomserv.ro.

According to Law no. 677/2001, you benefit from the right of access, intervention on the data, the right not to be subject to an individual decision and the right to appeal to justice. At the same time, you have the right to object to the processing of personal data concerning you and to request the deletion of the data.

If some of the data about you are incorrect, please inform us as soon as possible.

This document is intended to inform you about the processing of your personal data, in the context of using the ksbcomserv.ro page. (the “Site”)

II. Categories of personal data processed

II.1. If you are a customer of the Website, KSB Comserv will process your personal data, such as name and surname, telephone, e-mail address, data related to how you use the Website, for example your behavior/preferences/ your habits within KSB Comserv, as well as any other categories of data that you provide directly in the context of using the Site.

II.2. If you are a visitor to the Site, KSB Comserv will process your personal data that you provide directly in the context of using the Site, such as the data that you provide in the contact / questions / complaints section, in the extent to which you contact us in this way.

III. Purposes and grounds of processing

III.1. If you are a customer of the Website, KSB Comserv processes your personal data as follows:

• for the fulfillment of the legal obligations incumbent on KSB Comserv in the context of the services provided through the Site, including obligations in fiscal matters, as well as in matters of archiving.

Grounds: The processing of your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusal to provide data may result in the impossibility of KSB Comserv to comply with its legal obligations and therefore in the impossibility of offering you services through the Site.

• for marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms), of commercial communications regarding the products and services offered by KSB Comserv, through the Site.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by checking the appropriate box at the time of account creation, or after account creation, in the My Account Information section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications. Additionally, you can unsubscribe by going to the My Account Information section.

Providing your data for this purpose is voluntary. The refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

• for the purpose of carrying out various analyses, reports on the operation of the Website, creating profiles of consumer preferences, mainly in order to improve the experience offered on the Website.

Basis: The processing of your data for this purpose is based on the legitimate interest of KSB Comserv to permanently improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

III.2. If you are a visitor to the Site, KSB Comserv processes your personal data as follows:

• for marketing activities, respectively for the transmission, by means of remote communication means (e-mail, sms), of commercial communications regarding products and services

IV. The duration for which we process your data

As a matter of principle, KSB Comserv will process your personal data as long as it is necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and thereafter according to the legal obligations falling under the responsibility of KSB Comserv (e.g., in the case of financial and accounting supporting documents for which the retention period provided by law is 10 years from the end of the financial year during which they were drawn up).

If you withdraw your consent for data processing for marketing purposes, KSB Comserv will stop processing your personal data for this purpose, but without affecting the processing carried out by KSB Comserv on the basis of the consent expressed by you before its withdrawal.

V. Disclosure of personal data

In order to fulfill the processing purposes, KSB Comserv may disclose your data to partners, to third parties or entities that support KSB Comserv in carrying out its activities through the Site (for example, courier companies, IT service providers), or to central public authorities /locale, in the following exemplary cases listed:

• for the administration of the Site;

• in situations where this communication would be necessary for awarding prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by KSB Comserv through the Site;

• for maintaining, customizing and improving the Site and the services provided through it;

• to perform data analysis, testing and research, monitoring usage and activity trends, developing security features and user authentication;

• for the transmission of commercial marketing communications, under the conditions and limits provided by law;

• when the disclosure of personal data is provided by law, etc.

VI. Transfer of personal data

The personal data provided to KSB Comserv can be transferred outside of Romania, but only to countries in the European Union.

VII. Your rights

Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:

• the right to information, respectively the right to receive details regarding the processing activities carried out by KSB Comserv, as described in this document;

• the right to access data, respectively the right to obtain confirmation from KSB Comserv regarding the processing of personal data, as well as details regarding processing activities such as the manner in which the data are processed, the purpose for which the processing is done, the recipients or categories of data recipients, etc.;

• the right to rectification, respectively the right to obtain the correction, without justified delay, by KSB Comserv of inaccurate/unjustified personal data, as well as the completion of incomplete data; The correction/completion will be communicated to each recipient to whom the data were sent, unless this proves impossible or involves disproportionate efforts.

• the right to delete data, without undue delay, (“the right to be forgotten”), if one of the following reasons applies:

• they are no longer necessary to fulfill the purposes for which they were collected or processed;

• if consent is withdrawn and there is no other legal basis for processing;

• if the data subject objects to the processing and there are no legitimate reasons to prevail;

• if the personal data were processed illegally;

• if personal data must be deleted to comply with a legal obligation;

• personal data were collected in connection with the provision of information society services according to Union law or internal law under which the operator is subject.

It is possible that, following the data deletion request, KSB Comserv will anonymize this data (thereby depersonalizing it) and continue the processing for statistical purposes under these conditions;

• the right to restrict processing to the extent that:

• the person contests the accuracy of the data, for a period that allows us to verify the correctness of the data;

• the processing is illegal, and the data subject opposes the deletion of personal data, requesting instead the restriction of their use;

• the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or

• the data subject has objected to the processing (other than those for direct marketing), for the time interval in which it is checked whether the legitimate rights of the operator prevail over those of the data subject.

• the right to data portability, respectively (i) the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as (ii) the right to have this data transmitted by to KSB Comserv to another data operator, to the extent that the conditions provided for by law are met;

• the right to opposition – regarding processing activities can be exercised by sending a request as indicated below;

• at any time, for reasons related to the particular situation in which the data subject is, that the data concerning him/her be processed on the basis of the legitimate interest of KSB Comserv or on the basis of the public interest, except in cases where KSB Comserv can demonstrate that it has legitimate and compelling reasons that justify the processing and that prevail over the interests, rights and freedoms of the data subjects or that the purpose is to ascertain, exercise or defend a right in court;

• at any time, free of charge and without any justification, that the data concerning it be processed for direct marketing purposes.

• the right not to be subject to an automated individual decision, respectively the right not to be the subject of a decision taken solely on the basis of automated processing activities, including the creation of profiles, which produce legal effects that concern the data subject or affect him in a similar way to a significant extent;

• the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider necessary.

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact the email address: office@ksbcomserv.ro