Skip to main content
Published on: February 6, 2023

Privacy Policy/GDPR

Acceptance of terms and conditions

Information note regarding the processing of personal data in the framework

1. Who is the company that manages
SC ANA HR SRL (hereinafter referred to as "") is a limited liability company from Romania, with headquarters in Oradea Str. Balogh Istvan no. 17, Bihor county, registered at the Trade Register under number J05/604/2015, fiscal code 34377510.

SC ANA HR SRL is registered in the Registry of Personal Data Processing under number 36996.

 In the sense of the data protection legislation, we are the operator when we process your personal data.

Since we are always open to your opinions, as well as to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact SC ANA HR SRL at the e-mail address via post office or courier at Oradea Str. Balogh Istvan no 17, Bihor county.

 We consider ensuring the right to the protection of personal data as a fundamental commitment of, therefore we will dedicate all the necessary resources and efforts to process your data in full accordance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR"), as well as with any other legislation applicable on the territory of Romania.

 We reserve the right to periodically update and modify this Privacy Policy, to reflect any changes in the way we process your personal data or any changes in legal requirements. In case of any such modification, we will display the modified version of the Privacy Policy on our website, which is why we ask you to periodically check the content of this Privacy Policy.

2. What categories of personal data do we process
In general, we collect your personal data directly from you, so you have control over the type of information you provide us. With the example title, we receive information from you as follows:

In the process of recruitment, actual employment and/or human resources management, the scope of personal data may include the following types of information:

  •  personal data that allow the candidate to be identified: name, surname, gender, date of birth;
  •  information provided by the candidate that allows the specific initial tests to be carried out: address, telephone, fax, e-mail address;
  •  information that allows checking the eligibility and selection conditions related to the respective recruitment process: nationality, foreign languages, education, professional experience;
  •  if applicable, the results of the initial specific tests and other related tests.

All these references outline a person's identity and are usually found in the CV, right from the moment the person in question initiates an application for a job.

  • account login data, username and password, for registering an account on the website and as a precautionary measure when the password is forgotten and the client wishes to access the account;
  •  technical information (IP address, the device used to visit the site), for customer recognition when you visit the site;
  •  the client's id from the strictly necessary cookies placed by to allow authentication and to keep the authentication as they browse the pages of our site, to keep the history related to the client's interaction within the site.

When you create an account, you send us: e-mail address, name and surname;

As with most sites, this site collects anonymous information such as IP address, browser type, access to certain pages and other general traffic information. This information may be compiled and presented in an anonymous, collective form to third parties without any personal details being detectable or associated with specific individuals.

The site contains links to other sites. We are not responsible for the privacy practices or the content of those sites.

If you provide us with personal information about you, we may use that information to contact you periodically for matters directly related to our site, such as notification of the expiration of your posted ad. or changes to the site that may affect you.

Your personal information will not be disposed of, sold, rented, loaned or otherwise disclosed to third parties except where we have your permission to do so or in special circumstances, such as subject to legal process.

Please note that the publication of any personal information by you in public access areas of – e.g. in a blog comment – may be collected and used by others over whom we have no control. We are not responsible for the use by third parties of the information published by you or otherwise presented in the public access areas of not intended for children under 16 years of age. We do not knowingly collect any information from users under the age of 16.

If you want to apply for a job directly from our website, we will automatically send your application to the company that the ad belongs to. The personal information about you (including Curriculum Vitae) existing in that form will not be stored by

If you choose to use the referral service to send a friend an existing ad on, you will need to fill in your email address and that of your friend. We will automatically send your friend's email only once date inviting him to view the ad sent by you. This information will not be stored.

We may also collect and subsequently process certain information regarding your behavior while visiting our website, in order to personalize your online experience and provide you with offers adapted to your profile

We do not collect or otherwise process sensitive data, included by the General Data Protection Regulation in special categories of personal data.

3. What are the purposes and grounds of the processing

We will use your personal data for the following purposes:

For the provision of ro services for your benefit

This general purpose may include, as the case may be, the following:

a) Creation and administration of the account within the platform ro.;
b) Solving cancellations or problems of any nature related to the purchased services;
c) Providing support services, including providing answers to your questions regarding ro services.

Also, certain processing subsumed for these purposes are imposed by the applicable legislation, including fiscal and accounting legislation.

To improve our services

We always want to offer you the best online browsing experience. For this, we can collect and use certain information about your customer behavior, we can invite you to complete satisfaction questionnaires following the completion of an order or we can conduct, directly or with the help of partners, studies and market research.

We base these activities on our legitimate interest to carry out commercial activities, always taking care that your fundamental rights and freedoms are not affected.

For marketing

We want to keep you informed about the best offers for the services that interest you. In this sense, we can send you any type of message (such as: e-mail/SMS/telephone/mobile push/webpush/etc.) containing general and thematic information, information regarding services similar or complementary to those you have purchased, information about offers, as well as other communications such as market research and opinion polls, and we may display personalized recommendations on the website and in the smartphone application. In order to provide you with information of interest to you, we may use certain data regarding your behavior as our customer to create a profile for you. We always make sure that these processes are carried out with respect for your rights and freedoms and that the decisions taken based on them do not have legal effects on you and do not similarly affect you to a significant extent.

In most cases, we base our marketing communications on your prior consent. You can change your mind and withdraw your consent at any time, by:

  • Accessing the unsubscribe link displayed in the messages you receive from us; or through
  • Contacting using the contact details described above.

In certain situations, we may base our marketing activities on our legitimate interest to promote and develop our commercial activity. In any situation where we use information about you for a legitimate interest of ours, we take care and take all the necessary measures so that your fundamental rights and freedoms are not affected. However, you can request us at any time, through the means described above, to stop the processing of your personal data for marketing purposes, and we will comply with your request

To defend our legitimate interests

There may be situations in which we will use or transmit information to protect our rights and commercial activity. These may include:

  • Protection measures for the website and the users of the platform against cyber attacks:
  • Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;
  • Measures to manage various other risks.

The general basis of these types of processing is our legitimate interest to defend our commercial activity, it being understood that we ensure that all the measures we take guarantee a balance between our interests and your fundamental rights and freedoms.

Also, in certain cases we base our processing on legal provisions such as the obligation to ensure the protection of goods and valuables provided by the applicable legislation in this matter.

4. How long we keep your personal data

As a general rule, we will store your personal data as long as you have an account on the platform. You can request us to delete certain information or close your account at any time and we will comply with these requests, subject to keeping certain information including after closing the account, in situations where the applicable legislation or our legitimate interests require it.

5. To whom we transmit your personal data
As the case may be, we may transmit or provide access to certain of your personal data to the following categories of recipients:

  • companies with which SC ANA HR SRL has established commercial relations for the purpose of providing the services for which SC ANA HR SRL was hired
  • market research service providers;
  • other companies with which we can develop joint programs for offering our goods and services on the market.

If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third parties under private law is carried out in accordance with the legal provisions on data protection and information confidentiality, based on contracts concluded with them.

6. In which countries do we transfer your personal data
Currently, we store and process your personal data on the territory of Romania.

However, it is possible to transfer some of your personal data to entities located in the European Union or outside the Union, including countries that the European Commission has not recognized as having an adequate level of personal data protection.

We will always take steps to ensure that any international transfer of personal data is carefully managed to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, as the case may be, by other guarantees, such as standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for the protection of personal data transferred from within the EU to the United States of America.

You can contact us at any time, using the contact details set out above, to find out more information about the countries to which we transfer your data, as well as the guarantees we have put in place regarding these transfers.

7. How we protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to industry standards.

Despite the measures taken to protect your personal data, we draw your attention to the fact that the transmission of information over the Internet, in general, or through other public networks, is not completely secure, as there is a risk that the data will be seen and used by third parties unauthorized. We cannot be responsible for such vulnerabilities of systems that are not under our control.

 8. What rights you have
The general data protection regulation recognizes a number of rights in relation to your personal data. You can request access to your data, the correction of any mistakes in our files and/or you can object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or to go to court. As the case may be, you can also benefit from the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.

To be able to exercise your rights, you can contact us using the contact details set out above. Please note the following aspects if you wish to exercise these rights:

Identity. We take seriously the confidentiality of all records containing personal data. For this reason, please send us your requests regarding such registrations using the e-mail address related to the account. Otherwise, we reserve the right to verify your identity by requesting additional information that purpose of confirming your identity

Fees. We will not request a fee to exercise any right regarding your personal data, except for the case where your request for access to information is unfounded, repetitive or excessive, in which case we will charge a reasonable amount in such circumstances. We will inform you about any fees applied before resolving your request.

Response time. We aim to respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made several requests, in which case we will respond within a maximum of two months. We will let you know if we need more than a month. We might ask you if you can tell us exactly what you want to receive or what exactly worries you. This will help us act faster and shorten the response time to your request

Third party rights. We do not have to comply with a request if it would negatively affect the rights and freedoms of other data subjects.

9. What rights do you have as a user of
The right to information - art. 13 and 14 GDPR. It allows the data subjects to know, right from the moment of collection, how those data will be used, to whom they will be disclosed or transferred, what rights the data subjects have regarding the processed data, etc.

The right of access to data - art. 15 GDPR. It allows you to obtain, from us, a confirmation that personal data concerning you is being processed or not and, if so, access to the respective data and other useful information.

The right to delete data - art. 17 GDPR. It allows you to obtain from us the deletion of your personal data, without undue delay. There are, however, exceptions to this rule, such as the idea that some data are processed to give the public the right to information, that they are processed for statistical or archiving purposes, that they are processed to fulfill a legal obligation or that we process them for establishing or defending a right in court.

The right to rectification of data - art. 16 GDPR. It allows you to obtain from us, without undue delay, the rectification or completion of inaccurate personal data concerning you.

The right to data restriction - art. 18 GDPR. It is a temporary right. In some situations, between the moment when, for example, we take the decision to delete certain data (we no longer need the personal data for the purpose of processing) and the effective deletion of the data, you send us a request by which you oppose the deletion, giving reasons the fact that you need this data to establish, exercise or defend a right in court. As a result of such a request, we will "freeze" the data, stopping their processing for a certain period of time.

The right to data portability - art. 20 GDPR. You have the right to receive the personal data that concern you and that you have provided to the operator (who processes them on the basis of a contract or on the basis of your consent, by automatic means) in a structured format, currently used and which it can be read automatically and you have the right to transmit this data to another operator, without obstacles from our side. In other words, the personal data will be provided to you, in a structured format, so that you can decide whether to download them or, on the contrary, to send them to another operator.

The right to opposition - art. 21 GDPR. You have the right to oppose, for example, the processing of your personal data, when they are processed for direct marketing purposes. To make it clearer how you can exercise this right, it should be mentioned, for example, that in all newsletters that come from (regardless of whether we are talking about newsletters that only provide information or newsletters that promote services.) you will always have the opportunity to unsubscribe. We offer this possibility in absolutely all situations, regardless of whether the law obliges us to do so or not (not all emails from us are considered to be direct marketing), because it seems important to us that your interaction with to exist only as long as you want it to.

The right not to be subject to a decision based exclusively on automatic processing, including profiling, which produces legal effects that concern the data subject or similarly affect him to a significant extent. does not perform such profiling that is followed by automated decisions with legal or similar significant effect for the person concerned. When we carry out such profiling, we will notify you and modify this information note.

The right to file a complaint with the National Authority for the Supervision of Personal Data Processing. G-ral Blvd. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania. +40.318.059.211 / +40.318.059.212,

Please also consider the following:

Time period: We will try to respond to your request within 30 days and we can extend this period for specific reasons, related to the complexity of your request. In all cases, if this period is extended, we will inform you about the extension period and the reasons that led to it.

Access restriction: in certain situations, we may not be able to provide you with access to all or some of your personal data due to legal provisions. If we refuse your access request, we will inform you about the reason for the refusal.

No identification: in some cases, we may not be able to search your personal data due to the identifiers you provide in your request. In such cases, if we cannot identify you as the data subject, we are unable to comply with your request to exercise your legal rights described in this section, unless you provide additional information that allows you to identify . We will inform you and give you the opportunity to provide such additional details.

SECURITY undertakes to protect your personal data against loss, misuse, disclosure, modification, unavailability, unauthorized access and destruction and takes all reasonable precautions to protect the confidentiality of this data, including by using appropriate organizational and technical measures. Organizational measures include physical access control to our headquarters, staff training and locking of physical files in storage cabinets. Technical measures include the use of encryption, passwords for access to our systems, the use of SSL security certificates, for data encryption in transit, etc.

During the provision of your personal data to you, the personal data may be transferred over the Internet. Although we make every effort to protect the personal data that you provide us, the transmission of information between you and us, on the Internet, is not completely secure (it is possible that the terminal from which you write is monitored by third parties, for example, without we can do nothing about this). Therefore, we cannot guarantee the security of your personal information transmitted via the Internet. You understand, therefore, that any such transmission is at your own risk. Once we receive personal data, we will use strict procedures and security features to prevent unauthorized access to it.


We reserve the right, at our discretion, to change our privacy practices and to update and make changes to this notice at any time. For this reason, we encourage you to return to this note regularly. This document is current from the date that appears at the top of the document. We will treat your personal data in a manner compatible with the privacy notice on the basis of which they were collected, unless we have your consent to treat them differently.