GDPR Policy

S.C. KO BY KARINA OCHIS S.R.L. (in the name of Prof. Dr. Karina Ochis) is a company established in accordance with Romanian legislation, with its registered office in Oradea, str. Parc I.C.Bratianu, number 24, registered at the Trade Register under no. J05/1915/2015, CUI 35312820, as Operator of personal data, processes in accordance with the provisions of EU Regulation no. 679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Law 190 of July 18, 2018 for the implementation of EU Regulation no. 679/2016, your personal data in good faith and to achieve the purposes specified in this information note.

Personal data

In your capacity as a data subject, S.C. KO BY KARINA OCHIS S.R.L. expressly informs you, in accordance with art. 12 and 13 of EU Regulation no. 679/2016, regarding the processing and storage of your personal data under the conditions described in this Information Note:

a) General information: name, surname, home address, date of birth, phone, e-mail, place of work, nationality, gender, card data, special requests, observations about your service preferences and any other personal data we collect directly from the data subject or from other sources when you use our products or services or when you become a customer or potential customer of S.C. KO BY KARINA OCHIS S.R.L. It is possible to collect personal data regarding minors but we assure you that we take all the necessary measures so that these data are not stored, processed more than necessary;
b) Data regarding the recruitment process: CV, work record, the level and specialization of studies required by the job requirements, supporting documents that also include sensitive data, such as: criminal record (if applicable), characterization from the last job (as the case may be), the psychological examination certificate (as the case may be);
d) Image data: voice, video image of the person concerned;
e) Data related to the profiling of the users of the and sites according to the Cookies Policy: age, sex, IP, geolocation traffic data, device used, operating system, keywords searched by user according to his interests.

Purpose of personal data processing

a) Carrying out personnel recruitment operations;
b) Execution of your request;
c) Carrying out marketing and promotion activities, including asking for your opinion on the services we have offered you;
d) Ensuring the security of goods and people through video surveillance;
e) Carrying out market and product studies and marketing of our services;
f) Promotion of advertising campaigns carried out by S.C. KO BY KARINA OCHIS S.R.L.;
g) Solving your requests, questions or complaints;
h) Communication with contractual partners and any collaborators (regardless of whether this is done punctually or on the basis of a contract);
i) To contact you and provide all information about our services;
j) To provide medical services (diagnosis and treatment) both now and in the future, based on the patient’s history;

Duration of data processing:

Your personal data will be stored and kept only for the period necessary to achieve the purpose for which we hold the data, to satisfy your needs or to fulfill our obligations imposed by law.

The need for data processing:

Your personal data processed for the purposes set out in point 2 are necessary in order to either conclude or execute the contract concluded with you, or to comply with a legal obligation of the Operator. Thus, your refusal to transmit this data to the Operator may make it impossible for him to provide the requested services.

Authorized persons/Recipients/Associated Operator:

Your personal data may be processed by the following persons in full compliance with the legislation on the protection of personal data:
a) Service providers such as, but not limited to, service providers and IT systems, contractual partners (lawyers, consultants, accountants, censors and auditors) bound by the obligation of confidentiality regarding the data transmitted;
b) The contracting parties of S.C. KO BY KARINA OCHIS S.R.L. who have the quality of associated operator according to art. 26 of the GDPR;
c) State authorities based on their powers provided by the applicable law;

The data transmitted to third parties will be adequate, relevant and not excessive in relation to the purpose for which it was collected and which allows the transmission to a particular third party.

Transfer of personal data:

If your data will be transferred to other companies in other countries, in order to initiate, conclude and develop contracts and/or projects with such an entity, such as, but without the travel management limit, you will be informed and the guarantees provided by art. 44-49 of the GDPR.

Your right regarding personal data:

According to EU Regulation no. 679/2016 and Law 190/2018 you have the following rights:
a) The right to information and access to your personal data;
b) The right to rectify your data;
c) The right to be forgotten/the right to delete data;
d) The right to restrict processing;
e) The right to data portability;
f) The right to opposition and the automated individual decision-making process;
g) The right not to be subject to an automated decision-making process, including the creation of profiles;
h) The right to notify the National Authority for the Supervision of the Processing of Personal Data;
i) The right to go to court;

To exercise these rights, you can contact S.C. KO BY KARINA OCHIS S.R.L. through a written, dated and signed request – to the attention of the Personal Data Protection Representative or to the e-mail address Your request will be analyzed and answered within 30 days, according to EU Regulation no. 679/2016 and Law 190/2018.

In the case of the processing operations of your personal data based on your consent, as the data subject, you have the right to withdraw your consent, at any time, without affecting the legality of the processing carried out on the basis of the consent, before its withdrawal.

Other aspects:

The personal data operator guarantees that the processing of your data is lawful, while implementing appropriate technical and organizational measures to ensure data integrity and confidentiality according to art. 25 and 32 of the GDPR. We mention that for the processing operations carried out on the basis of the data subject’s consent, he will be informed according to art. 13 of the GDPR through an Information Note in order to express their express consent.