The parties undertake to comply with the legal provisions in force concerning the protection of personal data.

1. The parties do not foresee that personal data other than the contact information of the persons involved in the performance of the contract, the parties’ legal representatives/ legal agents, their affiliates or subcontractors (to the extent that their affiliates, subcontractors and representatives are involved in the performance of the contract), i.e. name, position, business address, telephone number and business email, will be transmitted under the contract. Personal data of any party, its affiliates or subcontractors, to which the other party, as data controller, or its processors processing personal data on its behalf and for its account as well as its employees will have access in the performance of the contract concluded, will be processed under the conditions of Regulation (EU) 2016/679 – on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

2. Thus, each party receives from the other party the right to process the personal data of itself, its affiliates, its subcontractors and their legal representatives/proxy holders (subject to the reservation made above in respect of affiliates and subcontractors) for the sole and limited purpose of performing the subject matter of the contract.

Each part:

(i) will collect, manage and store personal data received from the other party in strict confidence, using due diligence required by its obligations under the Contract and applicable law, avoiding unauthorized access, use, disclosure, or loss of such data;

(ii) will use the personal data received from the other party only for the performance of the subject matter of the Contract;

(iii) will not sell, alienate, transfer, distribute, rent or otherwise dispose of personal data received for personal purposes for the benefit of himself or others.

3. Each party acting as a controller of personal data for the purposes specified in the above article shall process the personal data of the other party, its affiliates, its subcontractors and their representatives/processors (subject to the reservation made above in respect of affiliates and subcontractors) for the purposes of the performance of the contract, to fulfil its obligations under applicable law, and for legitimate purposes such as fraud prevention, internal reporting, customer due diligence measures under applicable law, etc., subject to the General Data Protection Regulation.

4. Each party is under an obligation to inform directly, in accordance with Art. 12 and 13 of the General Data Protection Regulation, its representatives and employees authorised in relation to the other party and shall require the fulfilment of this obligation by each party’s affiliates and subcontractors in relation to their representatives and employees (subject to the reservation made above in relation to affiliates and subcontractors), of the processing of their data by the other party, for contract management purposes, for checks and reports required by applicable law, for the fulfilment of a legal obligation, such as Law 129/ 2019 for the prevention and combating of money laundering and terrorist financing, and for the amendment and completion of certain regulatory acts, and for other legitimate purposes depending on the contractual relationship.

5. All communications between the parties relating to the protection of personal data will be made to the following addresses or other addresses to be communicated in advance:

a) For the Beneficiary – details specified by the Beneficiary;
b) For the Supplier Q and Q Info Consult SRL (QQinfo), registered office/ correspondence address: 11, Maior Alexandru Câmpeanu St., Flat No. 10, 3rd Floor, District 1, Bucharest, e-mail address: office@qqinfo.ro.