GDPR Policy

SC DP COWORKING SRL. referred to generically in the following as Devplant and, as the author, owner, and administrator of the devplant.ro platform, we respect the privacy and security of the information provided by you when you use this application, including personal data, for which purpose this Privacy Policy was created.

Your access/visit to this application is subject to the terms and conditions of use and privacy policy, implies your explicit acceptance of them, and represents the entire understanding (contract) between the parties.

Our company reserves the right to change and update the content of the devplant.ro platform at any time, as well as this Personal Data Protection Policy and the Terms and Conditions of Use, without any prior notification. Therefore, please visit this section periodically.

In this document, singular words include the plural, plural words include the singular, masculine words include the feminine, and feminine words include the masculine.

This Policy states the following:

1. what personal data we collect and process about you concerning your relationship with us as a user and through your use of our application and online services;
2. where we get the data from;
3. what we do with this data;
4. how we store data;
5. to whom we transfer/disclose this data;
6. how we deal with your data protection rights;
7. how we comply with data protection rules;
8. the term of storage of personal data.

All personal data are collected and processed following the data protection legislation in Romania and the European Union.

Our company (hereinafter referred to as "we", "our" or "Devplant" in this policy) refers primarily to the company DP COWORKING SRL. The company is registered in Romania at the Timiș Trade Registry Office with no. J35/4053/2019 having fiscal code RO41826000 and registered office in Timișoara, Str. Proclamația de la Timișoara, Nr. 5, Timișoara, Timiș county. The company DP COWORKING SRL. is the "data operator" of all personal information collected and used in relation to customers/users of the devplant.ro platform within the meaning of the provisions of Law 190/2018, on measures to implement Regulation (EU) 2016/679 and EU Regulation 679/2016 regarding the processing of personal data.

Personal data means any information about you that enables us to identify you, such as your name, ID card series and number, ID card issuing body and date of issue, personal identification number, contact details, payment details, your image from workspace access zone records, and information about your access to our application.

We collect personal data from you when you create an account on the Platform to evaluate our offers or purchase a service, when you use the Website or other applications accessible through the Website, when you participate in a survey or contest, or when you contact us.

Specifically, we may collect the following categories of information:

1. Name and surname, picture, home address, e-mail address, telephone number, Facebook profile and the data contained, payment details, personal numerical code;
2. Detailed information about the services provided, the location selected for the performance of the activity, date of birth, and gender;
3. Information about your use of our application;
4. Communications you make with us or direct to us through letters, emails, chat services, calls, and social media.

We will process any other kind of data only if you have given your explicit consent or this is required by the laws in force at that time, or you have deliberately made this data public.

We will only process your personal data where we have a legal basis. The legal basis will depend on the reasons for which we collected and the need to use the data. Your data may be used for the following purposes:

1. For the provision of the products and services you request: we use the information you provide us to perform the services you requested in connection with your activity, i.e. renting a space to carry out your activity in the property located in the use of our company — legal basis: art. 6 para. 1 letters a and b Reg. (EU) 2016/679; The duration of data storage required for the provision of services is equal to the duration of maintaining the user account on the platform;
2. To contact you in case of a change in terms of purchasing our services. This information has no commercial purpose and you cannot unsubscribe from it — legal basis: art. 6 para. 1 letters a and b Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
3. To verify billing or payment data, if applicable: we use your payment information for accounting, billing, and auditing purposes and to detect and/or prevent any fraudulent activities — legal basis: art. 6 para. 1 letter c Reg. (EU) 2016/679; The duration of the storage of the billing data is equal to the duration of the maintenance of the user account on the platform, but the personal data may be used during the maintenance of the company's obligation to archive the accounting records, in the situation where these data are requested from us by the authorities;
4. For administrative purposes: we use your data for statistical and marketing analysis, system testing, customer satisfaction studies, maintenance, and development. Our company performs data profiling based on the data we collect from you for statistical analysis and marketing purposes. By adhering to this data protection policy you unequivocally and expressly give your consent to the collection of data for profiling. We assure you that this will be done in compliance with the relevant national and European regulations. legal basis: art. 6 para. 1 letter f Reg. (EU) 2016/679; The duration of storage of this data is a maximum of 3 years from the date of closing the user account on the platform;
5. Security, health, administration, crime prevention/detection: we may pass your data to state authorities or law enforcement bodies to comply with legal requirements — legal basis: art. 6 para. 1 letters c and e Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
6. For Customer Service communications: we use your data to manage our relationship with you as a customer and to improve our services and your experience with us — legal basis: art. 6 para. 1 letters a and b Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
7. To provide personalized services: we use your data to provide information that we think is of interest to you before, during, and after your purchase and to personalize the services we provide to you, such as special offers, etc. — legal basis: art. 6 para. 1 letters a and b Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
8. To comply with a legal obligation (for example, fiscal obligations, obligations arising from special fire protection legislation, etc.) — legal basis: art. 6 para. 1 letter c Reg. (EU) 2016/679; The duration of the storage of this data is equal to the duration of maintaining the user account on the platform; your data can be used to protect legitimate interests of the company, in case of litigation before the courts or to comply with tax legislation or other legal provisions, for a maximum of 5 years from the date of closing the user account;
9. Marketing: from time to time, we may contact you with information about promotional offers and ancillary products through online communications. You will have the option to subscribe or unsubscribe from such communications when creating your account on the Platform. Also, with any online communication from us, you will have the opportunity to indicate that you no longer wish to receive our direct marketing materials — legal basis: art. 6 para. 1 lit. a, b, and f Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
10. You have given us your consent for the use of your personal data (e.g. for use for commercial purposes) — legal basis: art. 6 para. 1 letter a Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
11. To protect your vital interests or those of another person — legal basis: art. 6 para. 1 letter d Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;
12. It is part of our legitimate interests in the operation of the company as a commercial company (for example, for administrative purposes) — legal basis: art. 6 para. 1 letter f Reg. (EU) 2016/679; The duration of storage of this data is equal to the duration of maintaining the user account on the platform;

Only children at least 16 years of age can give valid consent to the storage/use of personal data. For children under this age, the consent of the children's parents or legal guardians is required.

When the aforementioned periods expire, we will delete or securely destroy your personal data. We will make every effort to comply with the principle of data minimization, as well as to ensure the security and confidentiality of personal data processing, according to the provisions of art. 32 of the General Data Protection Regulation.

Our company does not transfer the collected personal data to other countries, regardless of whether they are EU member states or from outside the European Economic Area.

Your personal data is not communicated to other partner or associated companies.

However, exceptionally, we may share your personal data with the following third parties for the purpose described in this Privacy Policy:

1. State authorities, law enforcement bodies, and regulatory authorities to comply with legal requirements;
2. Credit and debit card companies that facilitate your payments to us and for anti-fraud screening, who may require information about your payment method and product delivery to process your payment or ensure the security of your payment transaction;
3. Legal and other professionals, courts, and law enforcement agencies in all areas where we operate, to enforce our legal rights in relation to our contract with you.

All data collected when registering in the My Account section will be processed following this Privacy Policy.

We understand the importance of taking extra steps to protect children's privacy and safety. Thus, children under the age of 16 will not be able to open an account on the devplant.ro platform. We will delete any account created by a child under the age of 16 as soon as it is brought to our attention.

When the use of your personal data is based on your consent, you have the option to withdraw your consent to the processing and delete your personal data at any time within the platform.

If you have any questions about this policy or how we handle your personal information, please contact the DPO at the following email address: dpo@devplant.ro.

In certain circumstances, by law, you have the right to:

1. Request information about whether we hold personal information about you and, if so, what information it is and why we hold/use it.
2. Request access to your personal information (known as a "data subject access request"). This allows you to receive a copy of the personal information we hold about you and check whether we are processing it lawfully.
3. Request the correction of personal information we hold about you. This allows you to correct any incomplete or inaccurate data we hold about you.
4. Request deletion of your personal information. This allows you to ask us to delete or remove personal information where there are no good reasons to continue processing it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
5. Object to the processing of your personal information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object if we process your personal information for direct marketing purposes.
6. Object to automated decision-making, including profile analysis, i.e. refuse to be subject to an automated decision using your personal information or profile analysis.
7. Request restrictions on the processing of your personal information. This allows you to ask us to suspend the processing of personal information about you, for example, if you want us to establish the accuracy or reason for processing it.
8. Request the transfer of your personal information in an electronic and structured form to you or another party (commonly known as the right to "data portability"). This allows you to retrieve your data from us in an electronically usable format and transfer it to another party.
9. Withdraw your consent to the use of your personal data. In the limited circumstances where you have given your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent at any time. Once we receive notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes for which you initially consented, unless we have another legitimate basis to do so.
10. Lodge a complaint at any time with a supervisory authority. The National Authority for the Supervision of Personal Data Processing is the main data protection supervisory authority in Romania.

If you wish to exercise any of these rights, please send an e-mail to: dpo@devplant.ro or contact us by post at our company address, mentioned in the introductory part of this Policy.

You will not have to pay any fee to access your personal information (or to exercise any of your other rights). However, we may charge a reasonable fee if your access request is manifestly unfounded or exaggerated. We may also refuse to process the request in such situations.

We may need to request specific information to confirm your identity and ensure your right to access information (or to exercise your other rights). This is a security measure to ensure that personal information is not disclosed to anyone who is not entitled to receive it.

Our privacy policy may change from time to time. Any changes will be communicated to you by email or by a notice on our platform.