Privacy policy

1. Controller

RTS GLOBAL EXPRESS S.R.L., Sat Sânpetru Mic, Comuna Variaș, Nr. 35A, 307457 Județul Timiș, Romania

Contact for data protection: er@rtsglobal-express.com, +40 732 845 622

2. The essentials

On this website:

• no cookies or similar technologies; your browser only keeps its usual technical cache and the instruction to use HTTPS
• no tracking, no visitor statistics, no advertising, no social media plugins
• no fonts, maps, videos or other content from Google or other providers; all files come from our own website
• no forms: the website stores nothing you enter; you reach us by email or phone

3. Service providers

Our website hosting and our email system are administered on our behalf by an IT service provider based in Austria. It acts as our processor and uses Cloudflare (hosting) and Microsoft (email) as sub-processors. All of them process personal data only on documented instructions.

4. Hosting (Cloudflare)

The website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data: IP address, date and time, requested address, referrer, browser and operating system.

The purpose is to deliver the website and protect it against attacks. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

We do not store or analyse access logs ourselves. Cloudflare processes the connection data as a sub-processor under the Cloudflare Customer Data Processing Addendum, only to the extent and for as long as needed to deliver and protect the website. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision of 10 July 2023, and otherwise on the EU standard contractual clauses.

5. Contact by email and phone

When you contact us by email or phone, we process your details: name, company, contact details and the content of your message. We use them only to handle your request.

If you contact us on behalf of a company, the legal basis is our legitimate interest in communicating with business partners and handling their requests (Art. 6(1)(f) GDPR). If you contact us yourself as a sole trader about a contract, it is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR).

We receive and handle emails with Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), which acts as a sub-processor. Microsoft is certified under the EU-US Data Privacy Framework; where data is transferred to the USA, the European Commission's adequacy decision applies.

We delete your details once your request and any follow-up questions have been dealt with. If a contract results, we keep the records for the periods required by Romanian law, in particular Art. 25 of the Accounting Law no. 82/1991 (generally five years).

6. Job applications

If you apply to us as a driver, we process the information you send us (for example CV, licence categories, contact details) to decide on your application. The legal basis is taking steps at your request prior to entering into an employment contract (Art. 6(1)(b) GDPR).

With your first email, please send only your CV and tell us your licence categories and whether you hold Code 95. We ask for documents such as passport, driving licence, permits or certificates only when they are needed for the next step.

If we proceed with your application, we also process data that the law requires for employing professional drivers: proof of medical and psychological fitness (health data, Art. 9(2)(b) GDPR in conjunction with Romanian occupational health and road traffic rules) and, for applicants from outside the EU, a criminal record certificate required for the work permit (Art. 10 GDPR in conjunction with Government Emergency Ordinance no. 25/2014). Only the people who need these documents for the procedure see them.

If you come from outside the EU, we pass the necessary data to the competent Romanian authorities, in particular the General Inspectorate for Immigration (IGI) and the Romanian Road Authority (ARR), and, where needed, to training centres for the Code 95 course and to medical and psychological examination centres. For your visa application we provide you with the documents you need. The legal basis is Art. 6(1)(b) and (c) GDPR.

If you applied through a recruitment agency, we receive your details from that agency (Art. 14 GDPR) and exchange information on the status of your application with it. If the agency is located outside the EU, we transfer the necessary information on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR); you can request a copy from us. The agency is responsible for its own processing.

If no employment results, we delete your application documents no later than twelve months after the end of the application process, so that we can respond to possible discrimination claims (legitimate interest, Art. 6(1)(f) GDPR). We keep them longer only if you agree, for example for future vacancies. You can withdraw this consent at any time.

7. Recipients

Within our company, only the staff responsible for your request or application receive your details. Our IT service provider, Cloudflare and Microsoft act as processors and only on our instructions.

Other recipients, where needed, are the authorities named above, our accountants and auditors, insurers and legal advisers in the event of a claim, and courts and authorities where the law requires it.

8. Links to other websites

We link to the websites of authorities, for example the Romanian Road Authority on our legal information page and the data protection authority below. These are plain links. No data is transferred until you click a link. The linked websites have their own privacy notices.

9. Providing your data

You are not obliged by law or contract to provide us with personal data. Without the technically necessary connection data, however, the website cannot be delivered. Without contact details we cannot answer your request, and without application documents we cannot consider an application.

10. Your rights

Subject to the conditions of the GDPR, you have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw any consent at any time; this does not affect the lawfulness of processing before the withdrawal.

To exercise your rights, write to er@rtsglobal-express.com.

You may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the alleged infringement. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, 010336 București:

www.dataprotection.ro

11. Right to object

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). We then no longer process the data unless we can demonstrate compelling legitimate grounds or need the data to establish, exercise or defend legal claims.

12. Automated decisions

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you (Art. 22 GDPR).

13. Changes

We update this policy when our website or our processing changes. The version published on this page applies.