This Privacy Policy explains how Green Port Operator (“the Operator” or “GPO”) collects, uses, stores, and protects the personal data of individuals who interact with the greenportoperator.ro website and our associated communication channels.<\/p>\n
The Policy is drafted in accordance with Regulation (EU) 2016\/679 on the protection of natural persons with regard to the processing of personal data (“GDPR”), Law 190\/2018 on the implementation measures of GDPR in Romania, and Law 506\/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.<\/p>\n
Please read this document carefully. By using the Site and by submitting data through our forms or contact channels, you confirm that you have read and understood this Policy. <\/p>\n
1. DATA CONTROLLER<\/p>\n
Name: Green Port Operator
\nRegistered office: Bdul Mamaia Nr. 251-253, Et. 6, Office 3, Constan\u021ba, Constan\u021ba County
\nEmail for personal data requests: contact@greenportoperator.ro <\/p>\n
The Operator is not legally obliged to appoint a Data Protection Officer (DPO), according to Art. 37 GDPR. For any request related to personal data, please contact us at the email address above. <\/p>\n
2. SCOPE OF APPLICATION<\/p>\n
This Policy applies to the processing of personal data collected through:<\/p>\n
– The greenportoperator.ro website and its subdomains
\n– Contact forms available on the Site
\n– Email correspondence with @greenportoperator.ro addresses
\n– Phone calls to numbers displayed on the Site
\n– Requests for offers or informational materials (e.g., investment memorandum)<\/p>\n
The Policy does not apply to:<\/p>\n
– Personal data processed in the context of contracts signed by the Operator with its clients (such processing is governed by specific contractual provisions)
\n– Third-party websites and services to which our Site may refer via links (Google, ANSPDCP, etc.)<\/p>\n
3. CATEGORIES OF PERSONAL DATA PROCESSED<\/p>\n
Depending on the type of interaction, we process the following categories of data:<\/p>\n
Data provided directly through contact forms:
\n– First and last name
\n– Company name (if applicable)
\n– Email address
\n– Phone number (optional)
\n– Content of the message or request
\n– Category of request (operation \/ investment \/ other)
\n– Expressed consent for data processing<\/p>\n
Data collected automatically through the Site:
\n– IP address
\n– Browser type and version
\n– Operating system
\n– Pages visited, duration of visit, referring page
\n– Date and time of access
\n– Device data (screen resolution, device type)
\n– Cookies (detailed separately in the Cookie Policy)<\/p>\n
Data received via email correspondence or phone:
\n– Email address, email signature, and any voluntarily provided data
\n– Phone number, content of the conversation (when relevant to the request)<\/p>\n
We do not intentionally process special categories of personal data (data concerning health, sexual orientation, political or religious opinions, racial or ethnic origin, genetic or biometric data). Please do not transmit such data through our forms. <\/p>\n
4. PURPOSES AND LEGAL BASES OF PROCESSING<\/p>\n
We process personal data for the purposes and on the legal bases described below:<\/p>\n
Responding to requests and initiating commercial relationships
\nPurpose: managing requests received through forms or email, providing requested information, initiating pre-contractual discussions.
\nLegal basis: Art. 6 para. (1) lit. (b) GDPR \u2014 pre-contractual measures taken at the request of the data subject. <\/p>\n
Storage for future communications and managing prospect relationships
\nPurpose: maintaining a record of interactions to be able to respond to subsequent requests, make appropriate offers, track communication history.
\nLegal basis: Art. 6 para. (1) lit. (a) GDPR \u2014 consent expressed in the form or, as the case may be, Art. 6 para. (1) lit. (f) GDPR \u2014 legitimate interest of the Operator to efficiently manage its commercial relationships. <\/p>\n
Website security and fraud prevention
\nPurpose: monitoring server logs, detecting attack attempts, preventing unauthorized access, ensuring the integrity of the Site.
\nLegal basis: Art. 6 para. (1) lit. (f) GDPR \u2014 legitimate interest of the Operator to protect its infrastructure. <\/p>\n
Legal compliance
\nPurpose: compliance with the Operator’s tax, accounting, and archiving obligations, when data becomes part of documents with contractual or financial value.
\nLegal basis: Art. 6 para. (1) lit. (c) GDPR \u2014 legal obligation. <\/p>\n
Responding to requests from public authorities
\nPurpose: compliance with legal obligations to provide data to competent authorities (e.g., in the context of investigations, tax audits, judicial proceedings).
\nLegal basis: Art. 6 para. (1) lit. (c) GDPR \u2014 legal obligation. <\/p>\n
We do not use personal data for automated profiling with legal effects on the data subject and we do not make decisions based solely on automated processing.<\/p>\n
5. RECIPIENTS OF DATA<\/p>\n
Personal data may be accessed or transmitted to the following categories of recipients:<\/p>\n
– Internal staff of the Operator, strictly within the limits of professional duties (commercial team for offers, IT team for site administration, management for decisions)
\n– Service providers acting as processors based on data processing agreements (DPAs), including: hosting \/ data center provider, email service provider, accounting service provider, possibly plugin or email marketing service provider
\n– Public authorities and competent institutions, upon express request and on legal grounds (ANAF, ANSPDCP, courts, criminal investigation bodies, etc.)
\n– External advisors (lawyers, auditors, accountants) subject to professional confidentiality obligations<\/p>\n
We do not sell, rent, or transmit personal data to third parties for marketing purposes without the explicit consent of the data subject.<\/p>\n
6. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)<\/p>\n
If we use service providers based outside the EEA \u2014 for example, Google LLC (United States) for services such as Google Maps, Google Fonts, or Google Analytics \u2014 such transfers are carried out:<\/p>\n
– Based on the EU-US Data Privacy Framework (for certified providers)
\n– Or based on Standard Contractual Clauses approved by the European Commission, in accordance with Art. 46 GDPR
\n– With additional safeguards where necessary (pseudonymization, in-transit encryption)<\/p>\n
Indicative list of third-party providers with possible transfers:<\/p>\n
– Google LLC (Google Maps, Google Fonts, Google Analytics \u2014 if active): USA, DPF certified
\n– Other services will be added here if integrated later<\/p>\n
For details on Google’s processing activities, please consult their policy at https:\/\/policies.google.com\/privacy.<\/p>\n
7. STORAGE DURATION<\/p>\n
We store personal data only for as long as necessary to achieve the purposes for which it was collected, or as required by legal obligations:<\/p>\n
– Data from contact forms (requests for offers, questions): 3 years from the last interaction with the data subject, after which it is deleted or anonymized
\n– Email correspondence: 3 years from the last communication, with the exception of emails that are part of active contractual relationships
\n– Contractual and invoice-related data: 10 years according to Law 82\/1991 on accounting and the Tax Code
\n– Server logs (including IPs): maximum 6 months, after which they are anonymized or deleted
\n– Cookies: according to the specific duration of each cookie, described in the Cookie Policy
\n– Data stored based on explicit consent (e.g., for future communications): until consent is withdrawn or a maximum of 3 years from granting it, with the possibility of reconfirmation<\/p>\n
After the storage period expires, data is securely deleted or irreversibly anonymized.<\/p>\n
8. RIGHTS OF THE DATA SUBJECT<\/p>\n
According to GDPR and Romanian legislation, you have the following rights regarding your personal data:<\/p>\n
Right to information \u2014 to be clearly and fully informed about data processing (this Policy fulfills this right).<\/p>\n
Right of access \u2014 to obtain confirmation that we process data about you, to receive a copy of this data, and information about the processing.<\/p>\n
Right to rectification \u2014 to correct inaccurate data or to complete incomplete data we hold about you.<\/p>\n
Right to erasure (“right to be forgotten”) \u2014 to request the deletion of your data when processing is no longer necessary, you withdraw your consent, or you object to processing and there are no overriding legitimate grounds for continuation.<\/p>\n
Right to restriction of processing \u2014 to request the temporary limitation of processing in specific cases (e.g., you contest the accuracy of the data).<\/p>\n
Right to data portability \u2014 to receive the data you have provided in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.<\/p>\n
Right to object \u2014 to object to data processing based on legitimate interest or public interest, including profiling based thereon.<\/p>\n
Right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you.<\/p>\n
Right to withdraw your consent at any time \u2014 when processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. <\/p>\n
Right to lodge a complaint with the supervisory authority \u2014 the National Supervisory Authority for Personal Data Processing (ANSPDCP):
\n– Address: B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest
\n– Email: anspdcp@dataprotection.ro
\n– Website: https:\/\/www.dataprotection.ro<\/p>\n
To exercise any right, you can contact us at contact@greenportoperator.ro. We will respond to your request within a maximum of 30 days from receipt (with the possibility of extension up to 60 days for complex or numerous requests, in which case we will inform you about the extension and its reasons). <\/p>\n
9. DATA SECURITY<\/p>\n
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:<\/p>\n
Technical measures:
\n– Encrypted HTTPS (SSL\/TLS) connections across the entire Site
\n– Restricted database access through strong authentication
\n– Regular, encrypted backups
\n– Periodic updates of the WordPress system, theme, and plugins
\n– Security plugins for detecting attacks and unauthorized access attempts
\n– Professional hosting, with infrastructure in the EU<\/p>\n
Organizational measures:
\n– Access to data strictly on a “need-to-know” basis for team members
\n– Training of personnel who interact with personal data
\n– Data Processing Agreements (DPAs) with service providers
\n– Internal procedure for managing security incidents
\n– Notification to ANSPDCP within 72 hours in case of a security breach with risk to the rights of data subjects<\/p>\n
However, no security measure is absolute. We recommend users to use strong passwords, not to transmit sensitive information through forms (passwords, bank details, health data, etc.), and to report any suspicious activity immediately. <\/p>\n
10. COOKIES<\/p>\n
The Site uses cookies and similar technologies for functionality, preference retention, and anonymized usage statistics. Full details about cookie types, their purposes, and management are presented in the Cookie Policy, accessible from the Site’s footer. <\/p>\n
By accepting the cookie banner or by modifying preferences in the dedicated panel, you express (or withdraw) consent for non-essential cookies.<\/p>\n
11. CHILDREN’S DATA<\/p>\n
The Site is not intended for children under 16 years of age, and we do not intentionally collect personal data from minors.<\/p>\n
According to Art. 8 GDPR and Art. 8 of Law 190\/2018, the processing of data of a minor under 16 years of age based on consent requires the consent of the holder of parental responsibility.<\/p>\n
If we learn that we have inadvertently collected data from a minor under 16 without parental consent, we will delete this data as soon as possible. If you are a parent or guardian and believe that a child has transmitted personal data to us without authorization, please contact us. <\/p>\n
12. CHANGES TO THIS POLICY<\/p>\n
We may update this Privacy Policy periodically to reflect:<\/p>\n
– Changes in our data processing practices
\n– Legislative changes at national or European level
\n– Introduction of new services, providers, or functionalities on the Site
\n– Recommendations from supervisory authorities<\/p>\n
The updated version will be published on this page, with the date of the last modification mentioned at the top. We encourage you to periodically check this Policy to stay informed about how we protect your data. <\/p>\n
For significant changes (e.g., change of processing purposes, introduction of new categories of recipients, or transfers to third countries), we will display a visible announcement on the Site or, when possible, notify you directly via email.<\/p>\n
13. CONTACT<\/p>\n
For any questions, requests, or complaints related to the processing of your personal data, you can contact the Operator:<\/p>\n
Email: contact@greenportoperator.ro
\nAddress: Bdul Mamaia Nr. 251-253, Et. 6, Office 3, Constan\u021ba, Constan\u021ba County
\nPhone: +40 (0725) 400 060
\nData Controller: Green Port Operator <\/p>\n
Recommended email subject: “GDPR \u2014 [type of request]” (e.g.: “GDPR \u2014 access request”, “GDPR \u2014 consent withdrawal”, “GDPR \u2014 data deletion”).<\/p>\n
We are committed to treating every request seriously and responding within the deadlines provided by GDPR.<\/p>\n
If you are not satisfied with how we respond to your request, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), using the contact details mentioned in Section 8 above.[\/vc_column_text][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"
[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default”…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-433","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/pages\/433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/comments?post=433"}],"version-history":[{"count":2,"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/pages\/433\/revisions"}],"predecessor-version":[{"id":435,"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/pages\/433\/revisions\/435"}],"wp:attachment":[{"href":"https:\/\/greenportoperator.ro\/en\/wp-json\/wp\/v2\/media?parent=433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}