Max Bet Personal Data Processing Policy
Please carefully read this privacy policy, which contains important information regarding the protection of personal data through the website www.maxbetgroup.ro ("the Website"), the reasons and methods for which we collect and use personal data, and information regarding your rights under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the national implementation legislation.
The use of the personal data you have provided is done according to this privacy policy or the notification made available to you at the time of collection.
1. DATA CONTROLLERS -We, MAX BET SRL, with headquarters in Bucharest, Soseaua Oltenitei no. 2, 1st floor, space 1, Sector 4, postal code 041312, registered in the Trade Register under number J40/6809/2002, fiscal code RO 14786022, and MAX BET JOCURI ELECTRONICE SRL , with headquarters in Bucharest, Soseaua Oltenitei no. 2, 1st floor, space 3, Sector 4, postal code 041312, registered in the Trade Register under number J40/1401/2010, fiscal code RO 26505198, hereinafter collectively referred to as “Max Bet,” as joint controllers, are firmly committed to protecting your personal data.
2. DATA PROTECTION OFFICER (DPO) -MAX BET has appointed a Data Protection Officer (“DPO”) responsible for ensuring GDPR compliance in data processing activities and representing the controller in relation to data subjects and the Supervisory Authority.For more information on the processing of personal data, for questions, suggestions, or any communication regarding data protection issues, please contact the DPO via email at dpo@maxbetromania.com or send written requests to our address, as specified at the beginning of this privacy policy.
3. PERSONAL DATA WE PROCESS
The personal data processed through the Website includes:
· Identification and contact data, such as: name, first name, email, phone number, and any other personal data provided in the “Contact” section of the Website.
· Identification and contact data, such as: name, first name, email, phone number, age, and any other personal data provided in the “Career” section of the Website.
· Personal data contained in your CV submitted via the “Career” section, including information about your occupation or profession.
· Other data necessary for our activities through the Website, such as data contained in cookie files used by the Website, in accordance with the Cookie Policy, available here.
4. LEGAL BASIS AND PURPOSES FOR PROCESSING PERSONAL DATA
We process your data:
For concluding and executing contracts between the parties – under Art. 6 (1) (b) GDPR
To provide you with our products and services as requested, we need to process personal data belonging to you. We also process data in the employment application process as part of a pre-contractual or contractual relationship, in which you, as the data subject, are involved.
a) For marketing purposes – under Art. 6 (1) (a) GDPR
We process your personal data when you have given your consent for one or more specific purposes. In certain situations, your personal data will be used to send marketing messages, offers, news about future campaigns, and event invitations.
b) For the purpose of addressing your requests, inquiries, or complaints - In accordance with Article 6(1), letters (a) and (b) and/or (f) of the GDPR
For this purpose, we will process the personal data you provide in the relevant section of the website, under "Contact" or "Careers," solely for the purpose of handling your request.
Through the Contact section on www.maxbetgroup.ro, you have the option to send us feedback, a specific request, or an inquiry. We are available to respond to your questions via email at office@maxbetromania.com.
Through the Careers section on www.maxbetgroup.ro, you have the option to share information about your professional experience with us.
The data will be transmitted to us in an encrypted format in line with the current state of technology. Candidates may send their job applications to us by email at office@maxbetromania.com. Additionally, candidates are welcome to reach out to us regarding the application process or send their job applications via regular mail.
c) For legitimate interests pursued by Max Bet or a third party – under Art. 6 (1) (f) GDPR
We collect your personal data to provide you with a pleasant and secure experience on our website, including using cookies, as outlined in our Cookie Policy.
5. DATA STORAGE PERIOD
MAXBET will retain processed data for various time periods, deemed reasonable, in line with the purposes previously indicated. We keep your data only for as long as necessary to achieve the purpose for which we hold it, to meet your needs, or to fulfill our legal obligations.
To determine how long your data may be retained, we use the following criteria:
a) When you access and use MAXBET's services, we retain your personal data for the duration of our contractual relationship and for a subsequent period if there is a legal retention obligation for MAXBET.
b) If you have given your consent for marketing purposes, we will retain your personal data until you unsubscribe or request its deletion, but no more than 2 years from our initial interaction. If you withdraw your consent for data processing for marketing purposes, processing your personal data for this purpose will cease. However, this does not affect the processing carried out based on your consent before it was withdrawn.
c) If you contact us with a request, inquiry, or complaint, we retain your personal data for the time necessary to process and/or resolve it, but no longer than 2 years from the date of our last correspondence, unless there is a legal retention obligation for MAXBET that exceeds this period.
d) If your data was processed due to a legitimate interest of MAXBET, we will retain your data for the period necessary to fulfill our legitimate interest, but no more than 2 years from our first interaction with you.
6. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
We disclose personal data to regulatory bodies that oversee our activities, as well as institutions and authorities to whom we have a reporting obligation.
Additionally, we share data with our partners only if and to the extent necessary for them to fulfill their obligations. We ensure that these partners are technically, organizationally, and contractually bound to protect the data appropriately (e.g., providers of operational services such as courier services, telecommunications, IT, payments, processing, training, storage, archiving, customer support investigation services, etc.). Data is accessible to our staff members who require it to perform their duties, but only if and to the extent necessary for their job functions, and only after they have received appropriate training on data protection.
In certain situations, we may transfer personal data to any business partner, investor, assignee (current or potential), or professional advisors such as auditors or lawyers.
We do not perform cross-border transfers of personal data.
7. AUTOMATED DATA PROCESSING
Our data processing does not involve automated decision-making processes. Each data processing operation is reviewed by an employee who performs their duties strictly in accordance with legal provisions and internal regulations.
8. DATA PROCESSING SECURITY
We place the utmost importance on protecting personal data that we collect, process, use, and delete in strict compliance with legal requirements. Our organizational and technical data protection procedures are structured to ensure the confidentiality and security of personal data. We have implemented appropriate technical and organizational measures to maintain an acceptable level of risk, including, where applicable, pseudonymization and encryption of personal data, ensuring the confidentiality, integrity, availability, and resilience of processing systems and services, and the ability to restore personal data availability and access promptly in the event of a physical or technical incident. We also have a process in place for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures to guarantee processing security. All implemented measures are based on a documented risk analysis regarding the protection of the rights and freedoms of the subjects.
9. DATA SUBJECT RIGHTS
In accordance with the GDPR, you have a series of rights regarding your personal data that we process:
a) Right of Access - You have the right to obtain access to your personal data that we process or control, or to copy it. You also have the right to information about the nature, disclosure, and processing of these data (such as what data we process and for what purpose, where and how long we store it, who has access, etc.).
b) Right to Rectification - You have the right to request the correction of your data if it is inaccurate or outdated and/or to complete it if it is incomplete. For example, if you have changed your phone number or email address, you can contact us to update this information.
c) Right to Erasure ("Right to be Forgotten") - In certain cases, you have the right to request the deletion or destruction of your personal data. This is not an absolute right, as sometimes we may have a legal obligation to retain your data.
d) Right to Restriction of Processing - You have the right to request that your data processing be restricted, meaning that while we may retain the data, we will not use or process it. This right applies under specific circumstances outlined by the GDPR, such as: (i) the accuracy of the data is contested by you, for a period allowing us to verify the data’s accuracy; (ii) processing is unlawful and you oppose the erasure of the data, requesting restriction instead; (iii) MAXBET no longer needs the data for processing, but you require it for establishing, exercising, or defending legal claims; (iv) you have objected to processing based on MAXBET’s legitimate interests, pending verification of whether our legitimate grounds override yours.
e) Right to Data Portability - You have the right to request the transfer, copy, or move of your data from our database to another. This applies only to the data you provided when processing is based on your consent or on a contract and is carried out by automated means.
f) Right to Object - You may object at any time, for legitimate reasons related to your particular situation, to the processing of data concerning you, including profiling based on those provisions. Please note that we are only required to fulfill your request if the processing is for direct marketing purposes. In other cases, we will review each particular situation before making a final decision, so please explain your reasons when submitting an objection.
g) Right to Withdraw Consent at Any Time - You can withdraw your consent for the processing of your data at any time if such processing is based on your consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
h) Right Not to Be Subject to Automated Decision-Making - As a rule, you have the right not to be subject to an automated decision if this has legal effects or significantly affects you.
i) Right to File a Complaint with the Competent Supervisory Authority - You have the right to lodge a complaint with the data protection authority in your country of residence or with competent courts. In Romania, the supervisory authority is the National Authority for the Supervision of Personal Data Processing (B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania – www.dataprotection.ro ).
j) Right to Object to Processing Based on Public Interest or Legitimate Interests - You may object at any time to the processing of your data when such processing is based on a legitimate interest.
When exercising one or more of your rights, we may need to verify your identity to ensure that the information is provided only to the person entitled to it. We are only required to respond if you provide sufficient details to identify the data subject making the request.
10. THIRD-PARTY INFORMATION COLLECTION, WEBSITES, AND SPONSORS
Our website may contain links to other websites with information practices different from ours. Visitors should consult the privacy notices of other websites, as we have no control over information sent to or collected by these third parties.
11. DISCLAIMER
The website may contain links to other sites and/or web pages not owned by MAXBET. MAXBET assumes no responsibility for the content of these sites and, therefore, cannot be held liable for the content, advertisements, goods, services, software, information, or other materials available on or through these sites. MAXBET is not liable for any personal data loss, adverse effects on visitors' personal data, or other moral and/or material damages caused by accessing those sites.
12. PRIVACY POLICY UPDATES
This Personal Data Processing Policy may be modified or updated by MAXBET at any time if we consider there are changes in our data processing activities. We will publish any such changes on our website and inform you accordingly.
13. CONTACT
For additional information regarding the processing of personal data, any questions, or suggestions, as well as for any communication or incidents regarding the protection of your data, please contact our Data Protection Officer at dpo@maxbetromania.com or send written requests directly to our headquarters at the address indicated at the beginning of this Privacy Policy.