Purpose of the Personal Data Processing Policy
1.1. In accordance with the requirements of the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) regarding the processing of personal data and the free movement of such data, arllfulfill.ro is obligated to manage the personal data you provide in a secure manner and only for the specified purposes.
1.2. arllfulfill.ro is operated by EUROARLL SALES SRL, a company headquartered in Neamț, Sat Mădei 219, Comuna Borca, with a share capital of 200 RON, registered in the Trade Register under number J27/370/2018. arllfulfill.ro acts as a Data Controller for the personal data you (the data subject) provide to us.

Categories of Personal Data Processed by EUROARLL SALES
2.1. To carry out its specific business activities and provide services through the website www.arllfulfill.ro, EUROARLL SALES SRL may process the following personal data: name, surname, address (residence/domicile), phone, fax, email, date and place of birth, gender, signature, technical information regarding the visitor’s device (location, IP address, hardware type, information related to time and date of website usage), and information derived from the Cookie Policy.
2.2. For advertising, marketing, and promotional activities, including newsletters, sales tracking, and customer behavior monitoring, EUROARLL SALES SRL may process the following personal data: name and surname, date and place of birth, phone/fax, email, address (residence/domicile), habits, preferences, commercial behavior. Additionally, for promotional campaigns, to identify winners, EUROARLL SALES SRL processes personal data consisting of the personal identification number (CNP) and the series and number of the identity document.
2.3. For customer communication, service evaluation, and quality improvement, activities conducted through the Customer Relations Department and/or the Commercial Department, the following personal data may be processed: name and surname, date and place of birth, phone/fax, email, address (residence/domicile), voice, habits, preferences, behavior, as well as other data that may result from the client’s evaluation of the services offered.
2.4. Additionally, EUROARLL SALES SRL processes personal data related to the activities mentioned above for archiving purposes (to maintain records related to conducted activities, in accordance with legal requirements), for evidentiary purposes (to protect rights in court and exercise other rights in accordance with legal provisions), as well as for the administration and monitoring of contracts concluded with its clients.
2.5. Personal data with special protection status, specifically the personal identification number (CNP), the series and number of the identity document, will be collected and processed only in accordance with legal provisions and under limited conditions.
2.6. For certain categories of data, such as name, surname, address (residence/domicile), phone, fax, and email, their provision is mandatory for the preparation of documents related to the services ordered from EUROARLL SALES SRL, and the refusal to provide them will result in the company being unable to perform the requested services.
2.7. Additionally, EUROARLL SALES (through the Human Resources Department) processes personal data when selecting and recruiting individuals who apply for an available job at EUROARLL SALES. In this regard, EUROARLL SALES will collect the candidate’s name and surname, email address, phone number, information regarding previous employer(s), as well as details about previous job descriptions. Candidates applying are responsible for the accuracy of the data provided in their CV/resume. If a candidate visits the website www.arllfulfill.ro, even without applying for a job, EUROARLL SALES SRL may collect the IP address and information about the operating system of the computer used at the time of accessing the site, the browser used, application version, language settings, and web pages accessed by the candidate. If a candidate uses a mobile phone, EUROARLL SALES may collect data identifying the device used, specific settings, and device characteristics. When a candidate applies for a job within the company, EUROARLL SALES collects information regarding the websites from which the application was made, as well as the means used to submit the application.

Purposes of Collecting and Processing Personal Data
3.1. EUROARLL SALES SRL collects and processes the personal data of its clients for the following processing purposes: a) The provision of services by EUROARLL SALES SRL, including through the website www.arllfulfill.ro, as well as the management of these services; b) Conducting commercial activities related to the sale of postal and courier services, managing customer accounts, conducting research and market studies, and generating statistics; c) Carrying out advertising, marketing, and promotional activities related to the services offered by EUROARLL SALES SRL, organizing promotional campaigns, sending newsletters and informational bulletins, and monitoring sales of postal and courier services; d) Conducting customer relations activities, informing customers about the services offered and performed, recording and resolving complaints, and improving service quality; e) Evidentiary purposes related to the aforementioned activities and archiving, as described in Article 2.4.

Recipients of Personal Data
4.1. EUROARLL SALES SRL may disclose personal data to the following categories of recipients: a) Subcontractors and agents of EUROARLL SALES SRL (postal and courier service providers conducting activities on behalf of EUROARLL SALES SRL, based on contracts concluded with the company), ensuring their compliance with confidentiality requirements, and guaranteeing that the personal data processed are kept secure and provided only in accordance with applicable legislation; b) Service providers (such as marketing, banking, and other services), as well as other recipients (police, courts, prosecutors, authorities, and other state bodies), who assist EUROARLL SALES SRL in the processing of personal data as Authorized Persons, with assistance provided only within the limits of applicable legal provisions and/or as a result of explicit requests regarding the processed personal data.

Special Provisions Regarding Minors
5.1. In the activities carried out, EUROARLL SALES SRL does not aim to directly process the personal data of minors. In this regard, EUROARLL SALES SRL pays special attention to such data, ensuring that any processing of minors’ personal data is done only in accordance with legal provisions and only in strictly and specifically determined cases. In this regard, EUROARLL SALES SRL: – does not carry out direct marketing activities towards minors; – does not allow minors under the age of 14 to place orders or request services; – does not allow minors under the age of 14 to participate in contests or campaigns, unless this is done through the legal representative or guardian of the minor, acting on their behalf; – allows the ordering and purchasing of services only with the explicit consent of the minor’s legal representative or guardian.
5.2. Any person who provides personal data through the website www.arllfulfill.ro guarantees that they are of legal age and have full legal capacity to act.

Duration of Personal Data Processing
6.1. The duration of personal data processing will be determined by the exercise of the data subject’s right to object, in accordance with the provisions of Article 15/Paragraph 2 of EU Regulation 679/2016.
6.2. EUROARLL SALES SRL may store personal data for the duration determined by law, for evidentiary and archiving purposes, as well as for statistical activities, conducting research and market studies, and managing customer accounts.
6.3. The duration of processing personal data of selected and recruited candidates by EUROARLL SALES is a maximum of 1 (one) year, calculated from the date EUROARLL SALES receives the candidate’s CV/resume, the period considered necessary for providing the requested recruitment services to the candidate.

Rights of the Data Subject According to Regulation 679/2016
7.1. By reading this Data Processing Policy and by checking the appropriate boxes made available to the clients, they acknowledge that EUROARLL SALES SRL guarantees them the rights provided by Regulation 679/2016 according to Articles 15-22, namely:
Right of access to data according to Article 15;
Right to rectification of data according to Article 16;
Right to erasure of data according to Article 17;
Right to restriction of data according to Article 18;
Right to data portability according to Article 20;
Right to object according to Article 21;
Right not to be subject to automated individual decision-making, including profiling, according to Article 22;
Right to address the National Authority for the Supervision of Personal Data Processing.
7.2. All these rights can be exercised via email at office@arllfulfill.ro or by sending a written, signed, and dated request from the data subject to the registered office of the party acting as the recipient of the data from the other contracting party and personal data operator. The envelope containing the request should include the mention “Attention: GDPR – DPO.” The party to whom the request is addressed will respond within 30 days in accordance with the provisions of the General Data Protection Regulation.
7.3. The data subject can also exercise any of these rights by sending a notification to the EUROARLL SALES SRL address or by accessing the contact form on the website www.arllfulfill.ro.
7.4. The data subject may object at any time, without justification, to the processing of personal data for direct marketing purposes, by sending a request to the EUROARLL SALES SRL address or by accessing the contact form on the website www.arllfulfill.ro.
7.5. After the completion of personal data processing operations, the recorded data may be transferred, in full or in part, to any other legal entity that is obligated to comply with applicable special legislation, provided they will be used for purposes similar to those set forth in this Personal Data Processing Policy.
7.6. In the case of candidates selected and/or recruited by EUROARLL SALES: to review, block, or delete personal data collected by EUROARLL SALES, the interested candidate must send a request by email to office@arllfulfill.ro with the subject “Request for Personal Information.” EUROARLL SALES will respond to this request within the legal 15-day period after verifying the identity of the candidate making the request. If the personal data collected by EUROARLL SALES is incorrect, it will be updated upon the explicit request of the candidate.
7.7. If a data subject has subscribed to EUROARLL SALES newsletters, they can unsubscribe at any time by clicking the “Unsubscribe” link included in each newsletter.