top of page

DATA PRIVACY POLICY

​

Introduction

​

Stone Capital pays great attention to personal data protection so that your data should be safe and protected according to the legal requirements. As part of the fundamental obligations related to personal data processing, Stone Capital undertakes to appropriately protect and use the personal data information (hereinafter referred to as “personal data”) which has been collected both in electronic and physical format.


We hereby inform you about the total aspects concerning the processing of your personal data and concerning your rights according to the provisions of (EU) Regulation 2016/679 – General Data Protection Regulation (“GDPR”), to the Law for application of GDPR provisions(Law 190/2018), as well as to any other decisions which the National Personal Data Supervisory Authority may issue with regards to personal data protection.

​

Stone Capital will collect only the personal data voluntarily offered by the online visitors of our website, data which are necessary to us in order to be able to provide services, to carry out contractual relations, to promote our services and to provide information about the employment opportunities.

​

In addition, in order to comply with the different legal obligations, we inform you that certain personal data are absolutely necessary to us.

By this Policy we wish to inform you about the personal data which we process, about the purposes for which we collect and process these data, the categories of recipients, the rights which you enjoy according to the EU Regulation no. 679/2016, the grounds on which this processing is based and so forth. Generally, Stone Capital collects only the personal data necessary for fulfilling your request. In case when optional additional personal data are necessary, you will be notified of this circumstance upon collection. The law allows us to process personal data as long as we have a legal basis or a legitimate interest to do so. Therefore, when we process your personal data, we will rely on one of the following legal basis related to processing:

​

  • Execution of a contract: when the processing of your personal data is necessary for us in order to take steps, upon your request, for the conclusion of a contract;

  • Performance of a contract: when the processing of your personal data is necessary to fulfill our obligations arising out of a contract;

  • Legal obligation: when we are obliged to process your personal data to fulfill a legal obligation, as well as to keep the records for tax purposes or to provide information to a public authority or a competent public institution;

  • Legitimate interest: we will process personal data about you in case when this processing is carried out for our legitimate interest, during the development of a legal/business relationship, according to the legal provisions, to continue its development, as long as it does not override your interests or

  • The consent of the data subject, your consent: in certain cases, we will request your specific permission in order to be able to process some of your personal data and we will process your personal data this way only if you agree

 

Examples of “legitimate interests” mentioned above are the following:

  • Provision of information and/or services to the persons who visit our website or provision of information about the employment opportunities.

  • Prevention of fraud or of criminal activity and protection of our IT systems.

  • Fulfillment of our corporate and social responsibility obligations (CSR)

  • Exercise of our fundamental rights in the EU pursuant to articles 16 and 17 of the Charter of fundamental rights, including our freedom to carry out a business and the ownership right.

  • For ensuring the guard and security of SG EBS locations, staff and goods.

  • For carrying out the risk management procedures.

 

 

The processing of personal data for website utilization

​

Personal data protection on our website

Stone Capital gives particular importance to the protection of your personal data, this being the reason why we want to inform you, in as much transparent manner as possible about the data we process, the purposes of processing such data, their recipients, the rights from which you benefit and about other issues required by the European Regulation no. 679/2016.  The protection of your privacy area during the utilization of our website represents an extremely important aspect for us.  Therefore, we further inform you in detail about the personal data processing.

Data security and integrity


Stone Capital has adopted and implemented security policies and procedures to protect the personal data against unauthorized access, loss, misuse, unauthorized alteration or destruction. However, despite the efforts made by Stone Capital, the security cannot be  absolutely guaranteed against all threats.  The access to your personal data is limited to those who need to know them.  The persons who have access to personal data are required to maintain the confidentiality of such information.For the protection of your personal data, we have taken technical and organizational measures, especially against unauthorized access, loss or unlawful disclosure, unauthorized handling or destruction. The measures adopted are regularly checked and are constantly adapted according to the applicable standards of modern technique.

​

 

Your rights

​

If Stone Capital processes personal data about you, you have the following rights:

  • The right to Information: you have the right to be informed about the personal data processing operations carried out by the company.

  • The right of access: you have the right to access these data. If we agree that we are obliged to provide personal data to you, we will provide you for free. Before providing personal data to you, we may request proof of identity and sufficient information about your interaction with us so that we can find your personal data.

  • The right to Rectification: If the information which we hold about you is incorrect, you have the right to ask us to correct any inaccuracy in terms of personal data.

  • The right to Erasure: you have the right to request to StoneCapital, without undue delay, to delete your personal data in the following situations:

    • Your personal data are no longer needed for the fulfillment of the purposes for which they have been collected or initially processed by the company;

    • If you withdraw your consent based on which the processing was made;

    • If you object to the processing of personal data on the basis of legitimate interests and there are no legal justified grounds to continue the processing;

    • If you object to the processing of personal data based on direct marketing purposes, including profiling to the extent that it is connected to the performance of direct marketing activities;

    • If your personal data have been unlawfully processed;

    • If your personal data must be deleted to comply with a legal obligation by which SG EBS is bound.

  • The right to data portability: you have the right to receive from the Company the personal data relating to you and which you provided to the Company, in a structured format, commonly used and which can be automatically read and to send such data to another operator when the technical means allow it. You have this right only when the processing is based on your consent or when the processing is carried out by automated means.

  • The right to object: you have the right to object, on grounds relating to your situation, to the processing based on the legitimate interests of Stone Capital. The company will no longer process the personal data unless it demonstrates that it has compelling and legitimate grounds which justify the processing and override your interests, rights and freedoms or that the purpose is the establishment, exercise or defense of a legal claim.

  • Automated decision-making process, including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects upon you or which affects you in a similar manner to a significant extent.

  • The right to lodge a complaint with the competent authority responsible for protecting the personal data, the National Supervisory Authority for Personal Data Processing.

 

You can make a request or can exercise these rights by contacting Stone Capital to the e-mail address and we will make all reasonable and practical efforts to meet your request, as long as it is consistent with the applicable law and the professional standards.

​

Retention period

​

Stone Capital has implemented technical and organizational measures to keep your personal data safe.  Thus, we will keep your personal data in accordance with the provisions of the Policy on the protection of personal data applicable at the level of SG EBS.

However, we will cease to process any of your personal data, just as long as they are necessary for the purposes established or until you withdraw your consent when it represents the legal basis for the processing and (i) there are legitimate compelling reasons for SG EBS to continue the processing, interests which override your interests, rights and freedoms or (ii) if the personal data are not necessary for the establishment, exercise or defense of a legal claim.

Amendment of this Policy. Stone Capital may amend this Policy from time to time to reflect the applicable legal requirements and the processes carried out within the company and which involve the processing of personal data. 

​

bottom of page