INFORMATION CLAUSE OF PUMA Sports Romania SRL

Pursuant to Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR"), we would like to inform you that:

  1. The Controller of your personal data is PUMA Sports Romania SRL with its registered office at Pipera Street 46D-46E-48, Oregon Park B, 6th Floor, 020309 District 2, Bucharest.
  2. In matters related to the protection of personal data, including in order to exercise your rights, contact with the Controller is possible via e-mail address: data.protection.ro@puma.com or in writing to the above address.
  3. Your personal data is processed by the Controller:

a. on the basis of Article 6(1)(f) of GDPR – for the purposes of:

  • conducting communications and correspondence, 
  • possible establishment, investigation, defense against claims.

Processing for the aforementioned purposes is aimed at realizing the legitimate interests of the Controller consisting of maintaining relations with the senders and recipients of e-mail correspondence, conducting ongoing communication within the Controller's activities, as well as establishing, investigating and defending against claims.

b. on the basis of Article 6(1)(b) of GDPR – in order to take action before concluding a contract, as well as for the purpose of executing the concluded contract

c. on the basis of Article 6(1)(c) of GDPR– for the purpose of fulfilling the Controller's legal obligations, the source of which are, in particular, the relevant tax and accounting regulations 

  1.  Personal data will be processed for the time necessary to achieve the above-mentioned purposes, i.e. they will be stored until the correspondence is completed or for the duration of the contract to which the correspondence relates, and after that time, in accordance with the purpose of processing, for the period required by law, including tax and accounting law, the period of limitation of possible claims or the investigation or defense before a given court or authority.
  2. Your personal data may be transferred to our IT, archiving and document destruction service providers, entities providing consulting, financial, accounting, auditing, courier services, law firms and public authorities authorized by law.  As part of the Controller's legitimate purpose, for internal administrative purposes, the Controller may share personal data with PUMA group companies outside Romania, in particular PUMA Polska Sp. z o. o. , PUMA Czech Republic s.r.o., Austria PUMA Dassler GmbH and PUMA SE.
  3. Your personal data will not be transferred outside the EEA or to an international organization.
  4. You have the right to object to processing based on the legitimate interest of the Controller. We will stop processing your data for these purposes unless we can demonstrate that there are compelling legitimate grounds for the Controller to do so that override your interests, rights and freedoms, or the data are necessary for us to possibly establish, assert or defend claims.

  5. You also have the right to request from the Controller:

    a) access to the content of your data, rectification, restriction of processing, data portability, and data erasure,

    b) lodge a complaint to the supervisory authority in case the data processing is performed in violation of the GDPR (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal, headquartered in B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, cod postal 010336, Bucuresti).

  6. In connection with the processing of your personal data, you shall not be subject to decisions that are based solely on automated processing, including profiling.
  7. Provision of data is voluntary, but necessary to fulfill the purposes of communication with us or to take steps to conclude or perform a contract. For the implementation of public law obligations, providing data is mandatory.