Dear Partners/Clients,
Starting May 25th, 2018, the provisions of the European Regulation on the protection of personal data (“General Data Protection Regulation – GDPR”) have become applicable. These provisions ensure enhanced security and protection regarding your personal data. We kindly ask for your assistance and consent so that we may properly implement these provisions.
As of May 25th, 2018, in order for us to continue providing our services to you, including sending you offers regarding apartments for sale, as well as any other form of real estate transactions that may be of interest to you, along with news, campaigns, and event invitations, we must obtain your explicit consent.
You may later exercise your right to withdraw this consent by submitting a request to that effect.
PERSONAL DATA PROTECTION POLICY – GDPR POLICY
The new European Union law on the protection of personal data, GDPR (“General Data Protection Regulation”), entered into force on May 25th, 2016, but became applicable starting May 25th, 2018.
The protection of your personal data is important to us; therefore, we pay special attention to safeguarding the privacy of visitors who access the website www.residence5.ro, as well as those whose personal data have been provided to us by a third party, or which we have obtained from another source, in accordance with Regulation (EU) 2016/679 of the European Parliament and Council of April 27th, 2016, concerning the protection of natural persons regarding the processing of personal data and the free movement of such data (hereinafter referred to as “GDPR”).
Please carefully read the following Policy (hereinafter referred to as the “GDPR Policy”) to understand how your information (“personal data”) will be processed.
The GDPR Policy explains the practices of Multiprest Habitat S.R.L. (hereinafter referred to as “Multiprest” or “Residence5”) regarding the application of GDPR provisions, as well as your rights concerning how your information is processed by Multiprest.
The processing of personal data by Multiprest will always be carried out in accordance with the provisions of the GDPR, as well as applicable data protection regulations.
Through this GDPR Policy, Multiprest seeks to inform data subjects about the nature of the personal data we collect and process, as well as the purposes of such processing. In addition, data subjects are informed of their rights under this Policy.
WHO WE ARE
We are MULTIPREST HABITAT S.R.L., a Romanian legal entity with registered office in Bucharest, Aleea Privighetorilor no. 86C, ground floor, room 5, ap. 5, registered with the Trade Register under no. J40/20440/2007, fiscal registration code RO22664689. Our legal representative is the administrator Ion Barbu.
Multiprest acts in its own name and enters into direct commercial relationships with individuals seeking to purchase real estate properties.
Multiprest carries out its activities through various external collaborators (real estate agents) who act as authorized representatives or sub-agents.
WHAT IS PERSONAL DATA?
“Personal data” means any information that can identify you directly (for example, your name) or indirectly (for example, through pseudonymized data such as a unique identification number). This includes your full name, email address, home address, mobile number, identity card details, marital status, username, profile photos, personal preferences, purchasing habits, user-generated content, financial information, and financial situation. It may also include unique numerical identifiers such as your computer’s IP address or your mobile device’s MAC address, as well as cookies.
WHAT DOES PERSONAL DATA PROCESSING MEAN?
“Processing” means any operation or set of operations performed on personal data or on sets of personal data, with or without automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
WHAT PERSONAL DATA DO WE PROCESS?
The personal data we process may include: name, surname, residence, ID series and number, marital status, personal identification number (CNP), age, citizenship, date of birth, phone number, email address, and property ownership data.
PERSONAL DATA CONTROLLER
The personal data controllers (hereinafter referred to as “controllers”) are the real estate partners, with Multiprest, in most cases, acting in its own name.
PRINCIPLES OF DATA PROCESSING
Multiprest commits to respecting the principles of personal data protection (hereinafter referred to as “the Principles”) as provided by the GDPR, ensuring that all data are:
- Processed lawfully, fairly, and transparently;
- Collected for specified, explicit, and legitimate purposes;
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and kept up to date;
- Stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
- Processed in a manner that ensures appropriate security, integrity, and confidentiality.
LEGAL BASIS AND PURPOSES OF PROCESSING
For contract conclusion and execution: Under Art. 6(1)(b) GDPR, personal data may be processed for concluding or executing a reservation contract, preliminary sale-purchase agreement, or final sale-purchase agreement, as well as other real estate transactions. To provide our services, we must process your personal data.
For legal obligations: Under Art. 6(1)(c) GDPR, personal data may be processed to fulfill legal obligations, including fiscal reporting and invoicing duties imposed by authorities.
For marketing purposes: Under Art. 6(1)(a) GDPR, personal data may be processed based on your explicit consent, to send marketing messages, offers, news, future campaigns, or event invitations.
For business operations: Based on Art. 6(1)(a) GDPR, we may process your data to carry out our business activities, contact you, or share data for legitimate operational purposes.
For fraud prevention: Multiprest records video footage inside and outside its offices for security purposes, without disclosing these recordings except to competent state authorities.
CONTACT FORM PROCESSING
Multiprest will use the information you provide in the contact section of the website solely for processing your request.
By providing any personal data via www.residence5.ro, you acknowledge and agree that your data will be processed in accordance with this GDPR Policy.
To process your requests, it may be necessary to disclose your data to our business partners or third-party service providers collaborating with Multiprest.
Multiprest has implemented appropriate technical and organizational measures to ensure the secure transfer and GDPR-compliant processing of your data by such entities.
Multiprest commits not to process your personal data for any purpose other than that for which it was provided, unless you give explicit consent for additional use.
Multiprest may also access other personal data obtained through communication channels such as phone calls, emails, or in-person visits to our office.
By contacting Multiprest in any such way, you agree that your data will be processed in accordance with this GDPR Policy.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Personal data processed by Multiprest may be disclosed and/or transferred to third parties only with your explicit consent, unless a legal or contractual obligation requires such disclosure.
Multiprest may transmit your personal data to notary offices, banking and non-banking institutions, credit intermediaries, public authorities, judicial bodies, external consultants providing outsourced services, and other recipients located exclusively in Romania.
DATA PROCESSING BY THIRD PARTIES, OTHER WEBSITES AND SPONSORS
The Multiprest website may contain links to other websites whose data processing policies differ from ours. Please review those sites’ privacy policies, as Multiprest assumes no responsibility for information sent to or collected by these third parties.
AUTOMATED DATA PROCESSING. COOKIES
The website www.residence5.ro uses Cookie identifiers. Please consult our Cookie Policy available on the site for more details and to exercise your right to disable cookies.
DATA RETENTION PERIOD
Multiprest may retain processed data for reasonable periods depending on the purposes described above. We keep your data only as long as necessary to achieve the purpose for which we hold it or to meet legal obligations.
- For property transactions, data are retained during the contractual relationship and for 10 years thereafter per accounting regulations;
- For promotional offers, data are kept for the duration of the campaign;
- For inquiries, data are kept for the period necessary to process your request, but no longer than 10 years from the last correspondence;
- For marketing consent, data are kept until you unsubscribe or request deletion, or after 10 years of inactivity;
- For cookies, data are stored only as long as necessary for their intended purposes and up to 10 years per consent.
DATA SUBJECT RIGHTS
Under GDPR, you have several rights concerning your personal data processed by Multiprest Habitat S.R.L., including access, rectification, erasure (“right to be forgotten”), restriction, portability, objection, withdrawal of consent, complaint submission, and the right to disable cookies. These may be exercised by submitting a simple request to Multiprest’s Data Protection Officer (DPO), accompanied by proof of identity.
LEGAL REQUESTS
We access, retain, and share your information with authorities when required by law, to detect or prevent fraud, misuse, or illegal activities, and to protect our rights, property, and safety as well as yours and others’.
RELATIONSHIPS WITH OTHER CONTROLLERS
Depending on the context, we may need to share data internally or externally with partners and data recipients within or outside the EU, in compliance with GDPR and European Commission adequacy decisions, to provide professional services at the highest level.
DATA SECURITY
Multiprest has implemented updated technical and organizational data protection measures in compliance with GDPR to prevent unauthorized access, misuse, alteration, disclosure, or destruction of your data. All employees and partners of Multiprest are required to maintain confidentiality and comply with GDPR provisions.
DISCLAIMER
The Multiprest website may contain links to other websites that are not owned by Multiprest. We are not responsible for the content or data processing practices of those websites and cannot be held liable for any personal data loss, harm, or damages resulting from accessing such websites.
UPDATING THE GDPR POLICY
Please note that this Policy may be periodically updated on the Residence5 website. Do not continue using the site if you do not agree with such updates. We recommend checking this page periodically.
The terms of this GDPR Policy shall be interpreted in accordance with applicable law.
CONTACT
If you have any questions or concerns regarding how we handle and use your personal data or wish to exercise any of your rights, please contact us using the details available on our website.
You may also submit complaints to the National Supervisory Authority for Personal Data Processing (ANSPDCP) at: Bd. G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, postal code 010336, phone +40.318.059.211, email: anspdcp@dataprotection.ro