1. JT INTERNATIONAL (ROMANIA) SRL and JT INTERNATIONAL MANUFACTURING SA (hereinafter referred to as "JTI") with registered office in Bucharest, District 2, Dimitrie Pompei blvd. 9-9A process personal data (e.g. name, surname, function, quality, telephone number, email address, signature, and any other data necessary for achieving the purpose) provided by: the customers / suppliers (individuals or legal entities) in order to carry out a commercial relationship / collaboration respectively for the execution of contracts, by the representatives of public authorities / institutions, and by any other persons (e.g. employees, former employees, participants in recruitment processes, subcontractors etc.) for the following purposes:
a. economic, financial, administrative and financial management
b. ensuring the compliance with JTI's internal policies and procedures / Global Compliance Programs, corporate governance and compliance risk management and fulfilling legal compliance obligations, such as whistleblower protection legislation.
The legal grounds for processing are:
the contracts concluded with suppliers, customers, individuals or legal entities,
the tax and accounting legislation and any other specific applicable laws (e.g. whistleblower protection legislation)
the legitimate interest to ensure the economic, financial and administrative management of all contracts to which JTI is a party and the corporate management, ensuring compliance with JTI's Global Compliance Programs.
The duration of the data processing is between 5 and 10 years starting with the year following the year after the personal data is provided.
JTI will transfer this data to JT International SA, 8 Rue Kazem Radjavi, 1202 Geneva, Switzerland (a JTI group company) for a legitimate purpose: to ensure the improvement of internal Information Technology (IT) processes, to ensure corporate compliance risk management (prevention of reputational and financial damage by identifying risk situations and taking the necessary measures according to compliance programs) and the IT centralization of financial and accounting data on servers in Switzerland in order to optimize costs and ensure better management; JT International SA may transfer the data to other companies part of JTI Group of companies or to other parties such as authorities, institutions, third party service providers / artificial intelligence solutions / Cloud services in order to store them in countries of the European Union / European Economic Area. In case the data will be transferred / stored in other states other than the above, the necessary measures will be taken to ensure compliance of international transfers with the applicable personal data protection legislation.
2. According to the General Regulation for the protection of personal data (no. 679/2016), the following rights are granted to you: access, rectification, erasure, restriction or to object to the processing of personal data described above. Any of these rights may be exercised by means of a simple written, dated and signed request to be sent by post to JTI (Bucharest, Bd. Dimitrie Pompei nr. 9-9A, Sector 2) or to the email address cloud.romania@jti.com, in the attention of the Contract Owner / the Department to which he/she belongs for the purpose of point 1.a, respectively for the attention of the Compliance Manager for the purpose of point 1.b.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.