GDPR

1. Principles we follow

Mategeo International SRL seeks to process personal data lawfully, fairly, and transparently, for specified, explicit, and legitimate purposes, while observing the principles of data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

2. Data-subject rights

• The right to be informed about how data is used.
• The right of access to the data being processed.
• The right to rectification where data is inaccurate or incomplete.
• The right to erasure where the legal conditions are met.
• The right to restriction of processing in certain situations.
• The right to data portability where applicable.
• The right to object to certain forms of processing.
• The right not to be subject to a solely automated decision, where the GDPR conditions apply.

3. How to exercise these rights

To exercise your rights, send a request to contact@mategeointernational.eu with enough detail to identify the request and your relationship with the company. If necessary, we may ask for reasonable additional information to verify identity so data is not disclosed to an unauthorized person.

4. Response timeframe

We will respond without undue delay and, as a rule, within one month from receiving a valid request. If the request is complex or extensive, this period may be extended under the conditions permitted by the GDPR, and the data subject will be informed accordingly.

5. Situations where the request may be limited

Some requests may be refused in whole or in part where legal obligations, overriding legitimate interests, the protection of other persons' rights, or other lawful grounds apply. In such cases we will communicate, where the law allows, the main reason for the limitation.

6. Complaints

If a data subject believes that their rights have been infringed, they may lodge a complaint with the Romanian supervisory authority, ANSPDCP, without prejudice to any other administrative or judicial remedy available.

7. Internal measures

To limit excessive processing, we aim to collect only relevant data, restrict internal access, manage archives responsibly, and monitor the functioning of public communication channels.