ROCIR (hereafter referred to as "ROCIR") is committed to safeguarding your privacy and ensuring the confidentiality of your personal data. As the “controller” (as defined below), we have developed a comprehensive Personal Data Protection Policy (“Policy”) to outline how we protect and process your personal data collected through this website.

This Policy explains:

· How ROCIR collects and processes your personal data;

· ROCIR's commitment to protecting your personal data.

The version of the Policy published on our website is the latest version, and we reserve the right to update it at any time. We encourage you to visit this page regularly to stay informed about any changes.

Personal Data Definitions

For clarity, the following terms are defined within this Policy:

· Cookies: Small text files placed on your device to track preferences and enhance your browsing experience.

· Personal Data: Any information that can identify an individual, such as names, contact information, or browsing data.

· Controller: ROCIR is the entity responsible for determining the purposes and means of processing your personal data.

· Third Party: External organizations that process your personal data on behalf of ROCIR, according to written instructions.

· Processing: Any operation performed on personal data, including collection, storage, or transmission.

Personal Data We Collect

ROCIR collects only the personal data necessary for the purposes of processing, and we provide clear information when collecting your data, including:

· The purpose of data collection;

· Contact details of the controller;

· Legal basis for processing;

· Whether data collection is mandatory or optional;

· Data retention periods;

· Recipients of your personal data;

· Whether data is transferred outside the European Economic Area (if applicable);

· Your rights and how to exercise them.

We collect personal data through:

· Online and paper forms (such as contract signing);

· Emails or postal correspondence;

· Business cards;

· Cookies on our website;

· Social media interactions.

Please be aware that social media platforms operate independently of ROCIR, and their data policies apply to your interactions with them. ROCIR does not control their actions and is not responsible for how they handle personal data.

Legal Basis for Processing

ROCIR collects your personal data lawfully, based on one or more of the following grounds:

· Consent: You actively opt in (e.g., for job applications, newsletters, or marketing communications).

· Contractual Requirements: To manage relationships and provide products or services.

· Legal Obligations: To comply with legal requirements (e.g., labor or anti-corruption laws).

· Legitimate Interests: To ensure safety, prevent fraud, and improve our services.

Recipients of Personal Data

Access to your personal data is limited to authorized ROCIR personnel and trusted third parties for the purposes of processing. Your data may also be disclosed to government or legal authorities if required.

ROCIR ensures that all third-party subcontractors provide sufficient guarantees of data protection and confidentiality. Your data will not be sold or shared for marketing purposes without your consent.

Data Retention

Personal data is retained only for as long as necessary to fulfill its processing purposes and legal obligations. Afterward, it may be archived for compliance or legal reasons.

Security Measures

ROCIR implements both organizational and technical measures to protect your personal data against unauthorized access, breaches, or loss. Our employees are trained on data protection, and our systems are hosted by secure European service providers.

Your Rights

You have the right to:

· Access: Request information on how your data is processed and obtain a copy.

· Rectify: Correct or update inaccurate data.

· Object: Stop processing your data for legitimate reasons.

· Restrict Processing: Limit processing in certain circumstances (e.g., if the data is disputed or no longer necessary).

· Erase: Request deletion of data in specific cases.

· Data Portability: Request transfer of your data in a structured format.

To exercise your rights, proof of identity may be required. Please note that legal obligations may affect our ability to fulfill your request.

For more information or to make a request, you can contact us at [email protected].