{"id":6800,"date":"2026-06-11T10:22:29","date_gmt":"2026-06-11T07:22:29","guid":{"rendered":"https:\/\/www.uat.transavia.ro\/?page_id=6800"},"modified":"2026-06-12T10:45:05","modified_gmt":"2026-06-12T07:45:05","slug":"general-information-notice-on-the-processing-of-personal-data","status":"publish","type":"page","link":"https:\/\/www.transavia.ro\/en\/nota-de-informare-generala-privind-prelucrarea-datelor-cu-caracter-personal\/","title":{"rendered":"General Information Notice Regarding the Processing of Personal Data"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

General Information Notice Regarding the Processing of Personal Data<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
Version 1.2 | Last modified on 06.10.2026<\/em><\/div>\n
\n\nIn this document we explain how the company Transavia S.A.<\/strong> processes your personal data and ensures their protection, in accordance with applicable legislation in the field, including Regulation (EU) 2016\/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (GDPR).\n\nThis notice applies in relation to the data processing carried out by Transavia S.A. This document is relevant to you regardless of your capacity: customer, partner \u2013 natural person, representative of a partner \u2013 legal entity, applicant for an offer or person contacting us for other purposes (e.g., regarding requests or complaints), visitor to one of our headquarters or work points, intern, visitor to our website or social media pages, participant in contests organized by us, etc.\n\nThis notice addresses, in the order below, the following aspects:\n\n<\/div>\n
\n
    \n \t
  1. Who we are and how to contact us\n(identification data of the Controller)<\/a><\/li>\n \t
  2. Data categories. Purpose. Legal basis<\/a><\/li>\n \t
  3. To whom we will disclose your personal data<\/a><\/li>\n \t
  4. How long we will retain your data<\/a><\/li>\n \t
  5. What can happen if you do not provide us with your data<\/a><\/li>\n \t
  6. Your rights and how to exercise them<\/a><\/li>\n \t
  7. When does this information apply<\/a><\/li>\n<\/ol>\n<\/div>\n
    <\/a>\n1. Who we are and how we can be contacted<\/strong><\/h5>\nFull name of the Operator:<\/strong> Transavia S.A.\n
    \n\nRegistered office address (mailing address):<\/strong> S\u00e2ntimbru, Blajului Street, no. 244 D, Alba County, registered with the Trade Register under no. J1994000089015, fiscal code RO5182310.\n\nPhone number:<\/strong> +4 0258 81 44 66<\/a> (available Monday through Friday between 08:00 and 16:00)\n\nEmail address:<\/strong> contact.gdpr@transavia.ro<\/a>\n\n<\/div>\n
    <\/a>2. Data categories. Purpose. Legal basis<\/strong><\/h5>\n
    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
    Personal data processed<\/th>\nScope\/Activity<\/th>\nData types<\/th>\nLegal basis for processing<\/th>\nRetention period<\/th>\n<\/tr>\n<\/thead>\n
    Customer data (or, in the case of a legal entity, the data of the customer's representative) as part of the Operator's commercial activities<\/td>\nCustomer \/ prospective customer relationship management\n\nSending offers upon the request of customers \/ prospective customers<\/td>\nIdentification data of clients\/potential clients (last name, first name, e-mail, phone number, job title)\n\nFinancial data (bank account, payments, billing data)<\/td>\nFollowing the steps to initiate\/conclude a contract with the Operator for the supply of the requested products and services<\/td>\nRetention will be required for the duration of:\n\u2022 the contractual\/commercial relationship;\n\u2022 any legal retention period (e.g. for tax, archiving purposes)<\/td>\n<\/tr>\n
    Contact person's details within the client (other than the legal representative) in relation to a business relationship<\/td>\nCustomer \/ prospective customer relationship management<\/td>\nIdentification data of customers \/ potential customers (last name, first name, e-mail, phone number, job title, employer)\n\nData included in the request sent by the customer<\/td>\nThe Controller's legitimate interest in ensuring the management of the contract\/commercial relationship and in responding to any requests\/complaints related to the commercial relationship, as well as for defending the Controller's interests<\/td>\nRetention will be required for the duration of (whichever is longer):\n\u2022 the contractual\/commercial relationship;\n\u2022 any legal procedure before any authority\/court for the defense of the Controller's rights;\n\u2022 any legal retention period (e.g., for tax, archiving purposes)<\/td>\n<\/tr>\n
    The information you send us to answer a survey, complete a questionnaire or any contact form, or to send a notification or feedback<\/td>\nManagement of surveys, customer satisfaction programs, improvement of products and services<\/td>\nName, e-mail address, phone number, other personal details from the submitted information<\/td>\nConsent for registration and the fulfillment of a legal obligation if you express your wish to no longer receive commercial prospecting messages.<\/td>\nThe data will not be kept longer than 3 years<\/strong> since the last contact<\/td>\n<\/tr>\n
    Subscribing to marketing communications<\/td>\nSending and managing commercial communications\n\nPerforming audience analysis and statistics.<\/td>\nName, email address<\/td>\nConsent for enrollment and the fulfillment of a legal obligation if you express your wish to no longer receive commercial prospecting messages.\n\nThe Operator's legitimate interest in the case of sending commercial offers to existing clients with whom the Operator has concluded a contract for the provision of similar goods and services in accordance with art 12 (2) of law 506\/2004.<\/td>\nWe will not keep marketing data for longer than 3 years<\/strong> from the last contact or until you withdraw your consent<\/td>\n<\/tr>\n
    Data that you provide to us when you participate in a commercial campaign or contest<\/td>\nTo allow us to register you or send you additional information about the contest or a prize if you are the contest winner. Unless we state otherwise when collecting your information, we will use this information solely for the purpose of managing and administering competitions or contests.<\/td>\nData collected through a contest, including those held via social media, may include, for example, the name, email address, and\/or phone number or other related data necessary for participation in the contest (e.g., the social media comment).\n\nIf you are the winner of a prize, we may also request your full address in order to send you the prize.<\/td>\nYour consent to participate in the campaign\n\nPerformance of an agreement between you and us regarding the delivery of the prize to the winner\n\nFulfillment of a legal obligation in the tax field (data related to winners)\n\nThe Controller's legitimate interest to defend its rights in connection with any complaint or claim (data related to participants)<\/td>\nThe data will be kept until the completion of the competition\/contest and thereafter for a period of:\n\u2022 3 years<\/strong> from the finalization of the competition\/contest regarding the participants in order to defend against a claim;\n\u2022 retention periods imposed by tax laws (winner data), archiving, and other applicable laws.<\/td>\n<\/tr>\n
    Job applicants within the Operator<\/td>\nManaging recruitment and choosing the most suitable candidate for a specific position within the Operator<\/td>\nName, email, phone number\n\nThe data you provide in your CV\/cover letter (e.g., address, photograph, professional experience, educational background, description of various skills or certifications, preferences, hobbies, etc.)\n\nThe data recorded in the diplomas\/certifications required for the position you are applying for (if applicable)<\/td>\nThe Controller's legitimate interest in identifying the most suitable candidates to fill a vacant position within the Controller\n\nThe Controller's legitimate interest in defending its rights against any complaints\/claims raised by candidates\n\nEntering into a contract (in the case of candidates to whom the Controller has made an offer)\n\nCompliance with a legal obligation (e.g., creating the personnel file in accordance with labor legislation)<\/td>\nThe data will be kept for the entire duration of the recruitment process and for a period:\n\u2022 of 3 years<\/strong> from the rejection of a candidate in order to defend against a claim;\n\u2022 during the performance of the employment contract (for candidates who received and accepted a job offer);\n\u2022 related to retention periods required by labor, tax, archiving, and other applicable laws (e.g., 75 years<\/strong> for the personnel file).<\/td>\n<\/tr>\n
    Visitor data for the headquarters\/workplaces<\/td>\nGuard and asset protection\n\nCompliance with health and safety at work procedures, and the recording and reporting of work-related accidents<\/td>\nThe image captured by the video cameras installed within the perimeter of the visited headquarters\/workplace\n\nLast name, first name, phone number, size of protective equipment (if applicable)<\/td>\nFulfillment of a legal obligation of the Controller under the legislation on the security of objectives, goods, valuables, and the protection of persons\n\nFulfillment of a legal obligation of the Controller under occupational health and safety legislation\n\nThe legitimate interest of the Controller to defend its rights against any claim<\/td>\nData will be retained for a period of:\n\u2022 30 days<\/strong> regarding video recordings;\n\u2022 for the duration of any legal proceedings before any authority\/court in which the Operator is involved;\n\u2022 related to retention periods imposed by labor, tax, archiving, and other applicable laws (e.g., 75 years<\/strong> for the personnel file).<\/td>\n<\/tr>\n
    Contact details of press agency representatives, journalists, and other media partners (bloggers, vloggers, etc.)<\/td>\nTo communicate \/ engage in dialogue with media representatives on topics of interest to the audience and the Operator<\/td>\nLast name, first name, email address, phone number, job title, date of birth<\/td>\nConclusion and execution of a contract\n\nThe Operator's legitimate interest in promoting its campaigns and marketing strategy.<\/td>\nThe possible duration of communication on topics of interest to the audience and the Operator<\/td>\n<\/tr>\n
    Technical data of the webpage visitors<\/td>\nThe purpose of ensuring the proper functioning of the website and improving the presentation of information on the site. Ensuring the security of the webpage.<\/td>\nTechnical data automatically sent by the visitor's browser, such as: IP address, type of browser used, screen resolution, or the page from which they accessed our website. We do not use this data to identify visitors.<\/td>\nThe Operator's legitimate interest in ensuring the security of the website and using technical data in aggregate for the proper functioning of the website.<\/td>\nMaxim 14 months<\/strong> since the last visit to the site.<\/td>\n<\/tr>\n
    Transavia social media page visitor data<\/td>\nTo interact\/communicate\/dialogue with social media visitors who interact with our pages<\/td>\nUsername, comment (depending on the social network)<\/td>\nUser consent through initiation of interaction<\/td>\nThe duration established by the social media network (as a joint controller) in accordance with the Terms of Use or until the user requests deletion.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/a>About third-party data<\/strong><\/div>\nIf you provide us with personal data regarding other persons (for example, your representatives, your family members, your dependents, etc.), you must ensure that you have informed them thereof and that you have directed them to this notice regarding how the Controller processes personal data.\n\nWe will appropriately inform the respective persons about how we process their data, when applicable.\n\n<\/a>Other policies we suggest you read<\/strong>\n\nAlthough this privacy notice regarding the processing of personal data contains the information you need about how we collect and use your personal data, there is information that we encourage you to read which can be found elsewhere.\n\nCookie Policy<\/strong>\n\nWhen using our website, information may be collected through cookies to distinguish you from other website users and other products and services. We have a separate cookie policy, which explains the use of cookies and the purposes for which we use them. The cookie policy can be accessed here<\/a>.\n\nTerms and Conditions<\/strong>\n\nOur terms and conditions set out the terms on which you may use our website and must be read together with this privacy notice regarding the processing of personal data. The terms and conditions can be accessed here<\/a>.\n\n<\/a>Third-party platforms<\/strong>\n\nOur site may contain links to and from the websites or digital platforms of our partner networks, advertisers, affiliates, or social media pages. If you follow a link to any of these websites, please note that these websites have their own personal data processing policies and that we assume no responsibility or liability for these policies and regarding the manner and\/or legality of data processing carried out by third parties who administer or manage the respective platforms. Please check these policies before submitting any personal data to these websites.\n
    <\/a>3. To whom we will disclose personal data concerning you<\/strong><\/h5>\nAs a general rule, we will not disclose your data to other individuals or legal entities, except in the cases listed below.\n\nWe strive to limit access to your data to individuals outside of Transavia S.A. who process your personal data (i.e., the company to which you provided your personal data). However, in certain cases, we may need to disclose your data, as described below.\n\nYour data will be processed by Transavia S.A.\n\nWe may disclose your data to other companies or individuals, such as: individuals or legal entities acting as agents for the Controller in various areas (such as document archiving, document destruction, or data storage, payment services, recruitment services), other individuals, courts, and authorities. In these cases, we will disclose the data for legitimate reasons related to our business, such as ensuring our ability to safeguard documents, streamlining our operations, or establishing, defending, and exercising our rights or interests or those of another person.\n\nWe use the hosting services provided by Astimp IT Solution S.R.L., which hosts the website www.transavia.ro; website maintenance is provided by Iviteb Solutions S.R.L.\n\nWith regard to advertising campaigns, we use the services of MTH Strategic Marketing S.R.L. to manage the execution of campaigns.\n\nRegarding subscriptions to marketing communications, we use the SaaS services of SC Dazoot Software S.R.L. to send email marketing campaigns to our own contact database and the services of MTH Strategic Marketing S.R.L. to manage marketing campaigns.\n\nRegarding technical data related to visits to this website, we also use Google Analytics services in our capacity as a processor.\n\nWith regard to data processed on social media platforms, we act as a joint controller (pursuant to Article 26 of the GDPR) together with the social media platform provider. The Controller has limited control over the data to which it has access, depending on the specific social media platform. The social media platform provider has its own data processing policy, over which the Controller has no influence.\n\nFurthermore, as noted above, in certain cases we may have a legal obligation to disclose data to public authorities or other individuals or legal entities.\n\nIn all such cases, we will ensure that the recipients of your personal data process it securely and confidentially, in accordance with the purpose for which we transferred it and with respect for your rights.\n\nAll of the above-mentioned parties or other recipients are located in the European Union or in any other jurisdiction that provides an adequate level of protection for personal data in accordance with European Union standards (Article 45 of the GDPR) or other appropriate safeguards, including standard data protection clauses (Article 46(2) of the GDPR).\n
    <\/a>4. How long we will retain your data<\/strong><\/h5>\nWe will store your data in accordance with our personal data retention policy, which assigns a retention period based on the purpose of the processing and the category of data processed.\n\nThe respective periods are based on legal provisions (in particular in the field of personal data protection), also taking into account the obligations to store certain data, applicable limitation periods, recommended practices in the field, and the purposes of our activity. Additional details are available for each category of data listed above in the table in Article 2.\n
    <\/a>5. What can happen if you do not provide your data<\/strong><\/h5>\nIn most cases, you are under no obligation to provide us with your personal data.\n\nHowever, if you do not provide the requested data, we will not be able, for example, to conclude or negotiate a contract with you, sell you our products or provide you with our services, allow you access to all options on our website, respond to your complaints or requests, or send you communications regarding our products, services, and promotions that might interest you.\n\n<\/a>The absence of automated decision-making<\/strong>\n\nWe do not make decisions based solely on the automated processing of your data (including profiling) that would produce legal effects concerning you or similarly affect you to a significant extent.\n
    <\/a>6. Your rights and how to exercise them<\/strong><\/h5>\nYour rights<\/strong>\n\nYou have the following rights:\n