GDPR policy

Information note on
the Protection of personal data – customer

According to the provisions of EU Regulation no. 679 of April 27, 2016 regarding the protection of natural persons with regard to the processing of personal data (GDPR), ATLANTIC TOUR, registered at the Trade Register under number J40/14221/1994, Unique Registration Code RO 5968424, as employer and operator within the meaning of the GDPR, hereinafter referred to as the “Operator”, based in Bucharest, sector 1, street George Enescu number 8A, floor 1, Apt. 3, telephone (021) 312.77.57, e-mail office@atlantic.ro, processes personal data provided by you (surname, surname, gender, date and place of birth, address, citizenship, profession, CNP, series and number of CI) for the purpose of the smooth development of commercial relations for the provision of tourist services, your information regarding the evolution reservations and new products, providing information via email, sms, phone, social media platforms regarding marketing campaigns, special offers, events and/or other forms of advertising, contacting in order to conduct surveys of customer opinion, as well as other situations related to the obligatory relations between the parties.

The concept of personal data protection represents the natural person’s right to have those characteristics that lead to his identification protected and the correlative obligation of the Operator to adopt appropriate measures to ensure their effective protection.
Personal data means that information that can be directly or indirectly linked to an identified or identifiable natural person, such as, for example, name, surname, personal code, address, telephone number, address of e-mail, the image, the voice, the economic and financial situation, the profession.

Considering the need to defend and respect the fundamental right to intimate and private life, your personal data are considered confidential by the Operator and are processed under appropriate security conditions.

Your data is communicated only to the following recipients:

• Financial Supervision Authority;
• National Agency for Fiscal Administration;
• Territorial Labor Inspectorate/ITM;
• other possible central and local public authorities based on a legal basis.
• to other companies in the same group as the Operator;
• to other natural or legal persons who process personal data on behalf of the Operator;
• to other legal entities that process data for accounting and human resources purposes, on behalf of the Operator.

We also inform you that, in accordance with the provisions of the GDPR, you can exercise the following rights in relation to your personal data:

• right of access;
• the right to intervene on the data (rectification, updating)
• the right not to be subject to an automated decision
• the right to address the Supervisory Authority and Justice.

At the same time, you have the right to restrict the processing of your personal data, the right to object and the right to request deletion, if they do not contravene the legal provisions in force.
To exercise these rights, you can send a written, dated and signed request, sent by registered letter with confirmation of receipt to the Operator, to the attention of the personal data protection officer or by email to the address data.protection@atlantic.ro.