Privacy Policy

Last Update: 21.10.2024

Through this Policy, we inform you about how we collect, use, transfer, and protect your personal data. We process it in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive No. 95/46/EC (“General Data Protection Regulation”, hereinafter “GDPR”), as well as relevant national data protection legislation.

1. WHO ARE WE?

Dux MD Pharma Solutions (hereinafter “the Company” or “We”)

Our contact details are:

  • Address: Bd. Timișoara, No. 94, 2nd Floor, Room 6, Sector 6, Bucharest
  • E-mail: gdpr@duxmd.ro
  • Phone: +40 727 038 389 / +40 769 954 577

2. HOW DO WE PROCESS YOUR PERSONAL DATA?

The Company, as Data Controller, processes personal data of candidates applying for available positions, employees, individual clients, representatives of legal entity clients, contractual partners and collaborators, as well as other individuals interacting with the Company and/or involved in contractual relationships with it.

Personal data are:

  • processed lawfully, fairly, and transparently in relation to the data subject;
  • collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
  • adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
  • accurate and kept up to date;
  • stored in a form which permits identification of data subjects for no longer than necessary for the purposes of processing;
  • processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

3. WHAT TYPES OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?

For completing and submitting the contact form (“Contact”) on the Company’s website – https://duxmd.ro/ (hereinafter “the website”), we process the following personal data: name, surname, email, and, where applicable, any other data voluntarily provided in the “Your message” section.

For website visitors, we may collect data through cookies or similar technologies, such as: IP address, internet browser, location, pages accessed, time spent on the website, internet network, and device used. For more details, please consult the Cookie Policy.

For the “Request a meeting” form, we process: name, surname, phone number, appointment date, appointment time, and the subject of interest (information / commercial offer / partnership).

For posting photos/video/audio materials or testimonials on the website and social media, we process: image, voice, name, surname, position, or other personal data provided voluntarily by data subjects.

For job applications via the website, we process:

  • Key Account position: name, surname, email, requested minimum net salary, SMART objective creation, motivation, availability period, questions or other data from the CV attached;
  • Medical Representative position: name, surname, skills/abilities, benefits brought to the team, requested minimum net salary, motivation, availability period, questions or other CV data.

We do not use your personal data for marketing communications (such as newsletters) unless you explicitly consent by ticking the relevant box. In this case, we process only your email address and ensure you can unsubscribe at any time.

4. LEGAL BASIS FOR PROCESSING PERSONAL DATA

Your personal data are processed for:

  • conclusion and performance of contracts;
  • compliance with legal obligations; care ne revin;
  • consent-based processing (recruitment, marketing communications);
  • legitimate interests of the Company (e.g., security measures, legal defense in disputes).

5. HOW LONG DO WE STORE PERSONAL DATA?

Personal data are stored for the duration necessary to achieve the purposes described in this Policy or as required by law (e.g., archiving, accounting, etc.).

6. WHO DO WE SHARE PERSONAL DATA WITH?

We do not disclose or transfer your personal data to third parties except:

  • Public authorities and institutions, where legally required or for legitimate interests;
  • Contractual partners or collaborators providing hosting services (Hostvision), website development (CLOUD EXPERT SRL), website maintenance, online marketing, and marketing communication services;
  • Any third party, if you have given explicit consent.

If data are transferred outside the European Economic Area, we ensure GDPR compliance (especially Article 46), using appropriate safeguards such as standard contractual clauses and effective legal remedies.

7. SECURITY MEASURES AND SAFEGUARDS

The Company implements appropriate technical and organizational measures to ensure a high level of security for personal data, including internal policies, procedures, monitoring, and auditing systems, in accordance with applicable data protection laws.

8. YOUR RIGHTS AS A DATA SUBJECT

 You have the following rights under the GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right not to be subject to automated decision-making, including profiling
  • Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing and with courts

 

To exercise these rights or for any questions regarding your personal data, you can contact us at: gdpr@duxmd.ro or by phone at 0745508673, contact person Ionel Orza. Data Protection Officer (DPO) services are outsourced and provided by GDPRComplet.