Nova Power & Gas SRL (NOVA) understands the importance of your personal data and is committed to protecting the confidentiality and security of this information. Therefore, it is important for us to provide you with integrated and practical information about the processing of your personal data as data subjects (customers/employees, potential customers/employees, users of the NOVA website – www.vreaulanova.ro, users of the online CRM platform – https://crm.novapg.ro/) in this Privacy Policy for Personal Data Processing, applicable for the purposes outlined below.
NOVA securely administers personal data provided by you for specified purposes, in the context of purchasing our products/services and/or visiting the NOVA website and the online CRM platform.
Providing electricity/natural gas, natural gas distribution, and other associated services or products of NOVA. In most cases, we process your personal data for activities related to the supply of electricity/natural gas, including connecting you to the natural gas distribution network. The data we process include: name and surname, identity document details, home address, correspondence address, consumption location address, phone number (landline and mobile), email address, customer code, consumption location code, property documents, topographic data of your properties, bank account information, signature, data on electricity/natural gas consumption (actual and forecasted), invoice number and series, issue date, due date and billing period, internal symbol and invoice barcode, billed products and services, quantity of billed products and services, average daily consumption, meter reading period, meter type series, dial/constant, consumption quantity, balance situation, total invoice, current balance, other data included in the electricity/natural gas invoice, CRM account username.
The basis for processing the above data is the conclusion and execution of the electricity/natural gas supply contract, as well as the conclusion/execution of the natural gas distribution network connection contract.
Transmission of Offers at Your Request
If you request offers regarding our products and services (e.g., electricity/natural gas supply), your data will be processed to conclude a contract with you (at your request), if our offer is of interest to you. Processed data include: name and surname, identity document details, correspondence address, phone number, email address, consumption location address (if applicable), consumption location code (if applicable).
Transmission of Offers on Our Initiative, Following Your Agreement or Our Legitimate Interests
If you have agreed to receive communications (SMS, emails, etc.) regarding NOVA’s products and services, including promotions, we will process certain personal data to send you such information. Processed data include: name and surname, phone number, email address. In this case, the basis for processing is your consent. Additionally, the use of your information is necessary for us to build our business and offer our services. We consider and balance any potential impact on you and your rights before processing your personal data for our legitimate interests. When communicating with you about our services, we may contact you regarding NOVA news, product updates, and new products that we believe may interest you. We may also contact you to offer promotions, contests, marketing materials, and other promotional materials, both online and through other marketing channels. In this case, the basis for processing is our legitimate interest. You can email us at protectiadatelor@novapg.ro at any time to opt out of this.
Transmission of Information to Public Authorities, as Required by Law
In certain situations, the law requires us to communicate data about our customers to certain authorities (e.g., National Energy Regulatory Authority – ANRE) and to store customer data for a certain period. In this case, the basis for processing will be fulfilling a legal obligation.
Defending Our Rights and Interests or Those of Others
We may process your data to exercise or defend our rights or interests or those of others in court, judicial executors, notaries or other public authorities, lawyers, our consultants involved in those disputes/negotiations. In this case, your personal data are processed, as applicable, based on fulfilling legal obligations or our legitimate interests in defending our rights and interests.
Personal data that are subject to special protection, such as the personal numeric code, series, and number of the identity document, will be collected and processed under restrictive conditions and in accordance with legal provisions to ensure compliance with applicable data protection rules. Providing personal data is necessary for NOVA to carry out the activities mentioned above. Your refusal to provide these data could result in NOVA’s inability to offer you its products/services, information, respond to your requests, or carry out any other activities mentioned above.
2. To Whom We Disclose Your Personal Data
To achieve one or more of the purposes mentioned above, NOVA may disclose your personal data to the following categories of recipients:
Our contractual partners, but only under a confidentiality commitment from them, guaranteeing that these data are kept secure and that the provision of this personal information is in accordance with current legislation, including service providers (marketing, courier, payment/banking services, or other services) and entities assisting NOVA in data processing as processors, insurers, public authorities (Prosecutor’s Office, Police, judicial courts and other state-authorized institutions/organs), based on and within the limits of legal provisions and as a result of explicit requests, other companies in the same group as NOVA (E-INFRA), as well as to you as the data subject in the context of exercising your rights recognized under the European Regulation (EU) 2016/679).
Your personal data is processed for the duration of the contract, until the expiration of contractual obligations and archiving terms, in accordance with legal provisions. Also, your personal data is processed until you withdraw your consent for their processing, and there is no other legal reason to allow us to continue processing personal data.
Currently, we do not transfer and do not intend to transfer your personal data to entities in third countries or to international organizations. If such a transfer becomes necessary, we will inform you in advance and, if applicable, will ask for your consent.
According to Regulation (EU) 2016/679, individuals whose personal data are processed have the following rights:
The right to be informed – the right to receive correct processing information, ensuring transparency regarding the use of personal data;
The right of access to data – the right to obtain confirmation from us whether or not we are processing your data, and if so, the right to access those data;
The right to rectification – the right to have inaccurate personal data rectified without undue delay;
The right to erasure of data (“the right to be forgotten”) – the right to have your data erased without undue delay if they have been processed illegally, without your consent, or if they are no longer necessary for the purposes for which they were collected;
The right to restrict processing – the right to obtain restriction of personal data processing;
The right to data portability – the right to receive personal data in a structured format that can be read automatically, and the right for these data to be transmitted directly to another operator;
The right to object – the right to object to the processing of personal data, including profiling.
Any request regarding the exercise of the rights mentioned above should be sent by:
Mail/courier: Cluj-Napoca, str. Calea Turzii, no. 217, Cluj County;
Phone: 0264/450401, Monday to Friday between 8:00-17:00;
Fax: 0264-450.399;
Email: office@novapg.ro
Additionally, starting from May 25, 2018, for any questions, requests, or complaints related to this subject, you can address our Data Protection Officer (DPO) by email at protectiadatelor@novapg.ro. An email message requesting the exercise of a right will not be interpreted as consent regarding the processing of your personal data beyond what is necessary to address your request. Such a request should clearly indicate which right you wish to exercise and the reasons, if necessary. Also, the request must be signed and dated and accompanied by a digitally scanned copy of your valid identity document, proving your identity. NOVA will promptly inform you that we have received this request. If the request is justified, we will honor it as soon as possible, but no later than 30 (thirty) days from receiving the request. If you believe that a right of yours has been violated regarding this subject, you can address the National Supervisory Authority for Personal Data Processing (ANSPDCP).
Special Provisions Related to Minors
NOVA does not target minors in its data processing activities. NOVA does not carry out direct marketing promotional activities for minors. Also, any person who provides us with personal data guarantees that they are of age, i.e., have full capacity to exercise their rights. Any processing of personal data of minors will only be done under the law and considering the above.
Safeguard Measures Regarding Personal Data
We guarantee the security of your personal data. NOVA will take appropriate technical and organizational measures to keep your personal data protected against unauthorized access or theft, as well as accidental loss, manipulation, or destruction. Access by NOVA staff will be based only on the need to know and will be subject to strict confidentiality obligations. However, understand that safety and security are due diligence obligations that can never be fully guaranteed.
Other Information
When you are the recipient of messages from email addresses on the ‘@novapg.ro’ subdomain or respond to or send messages to email addresses on the novapg.ro sub domain, be aware that both the content of these messages and the details of the communication (name, surname, position, email, phone/data from your electronic signature, etc.) with NOVA, its directors, employees, agents, and authorized representatives may be shared internally with other entities within the Group to which NOVA belongs, directors, employees, agents, or authorized representatives of NOVA.
