KRUK Romania website Info Note

Dear Partner,


Starting from 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and the free movement of such data came into force and the repeal of Directive 95/46 / EC (General Data Protection Regulation), also known as GDPR.

So, we want to let you know what your rights are about how we process your personal data.


Under Article 13 of the GDPR, we will provide you with all the information as follows:


What is the data we are talking about?

Personal data is any information that can lead to the identification of a person.

As a result of completing the questionnaire, we will collect the following data:

  • name, first name, e-mail address, phone number, job position, employer (company), image (photo/video) and/or voice.

We process the above data for your registration at the Creditors’ Challenges Conference event and in order to measure your satisfaction with the services offered by the KRUK Group, as well as to improve the quality of our collaboration.


Who is the Controller processing your data?

The entity of the KRUK Group, which is the Controller of your personal data is KRUK Romania S.R.L. with headquarters in Splaiul Unirii 165, TN Offices 2, basement, ground floor and era 7, 8, 9, sector 3, Bucharest, postal code 030133 for which you have agreed to the processing of your personal data.

Who is the Data Protection Officer?

We have appointed the Personal Data Protection Officer, which you can contact for any information relating to the processing of your personal data and your rights in relation to these matters. In this sense, you can apply to: Data Protection Officer at: Splaiul Unirii 165, TN Offices 2, 9th Floor, Sector 3, Bucharest 030133 or by email at

Why and for what purpose do we process your personal data?

We may process your personal data for the following purposes:

  • In order to analyze the quality of our services, we evaluate your level of satisfaction with the way your partnership has been conducted with you and verify that our actions have been properly carried out, based on the legitimate interests of the operator (Article 6 (1) GDPR)
  • Marketing, in particular, to present new offers to you if you have given your consent freely - having as legal basis for your consent. Article 6 (1) (a) of the GDPR
  • Take steps before entering into a contractual relationship or where we need to honor obligations or draw up documents in relation to the contractual relationship (Article 6 (1) (b) of GDPR).

How long do we store your personal data?


Personal data will be retained for as long as is necessary to achieve the above-mentioned purposes, or until your consent is withdrawn if the legal basis for processing your data is your agreement. Please note that withdrawal of your consent does not affect the legitimacy of our processing prior to withdrawal.

Who will reveal your personal data to?

Your personal data is processed by KRUK ROMANIA SRL with headquarters in Bucharest, Splaiul Unirii 165, TN Offices 2, basement, ground floor and floors 7, 8, 9, sector 3, Post Code 030133, Romania.

These may be disclosed to KRUK SA, located at ul. Wołowska 8, 51-116 Wrocław.


Do you need to provide us your personal data?

Your data is provided to the subscriber on a voluntary basis for the purpose of registration at the Creditors’ Challenges Conference event


Profiling and making automated decisions

We want to inform you that your data will not be processed by automatic means, including profiling, to complete the questionnaire.


What rights do you have about your data and how can you exercise it?

In our activity, we ensure that the rights deriving from GDPR can be exercised by you, which are:

  • The possibility of withdrawing consent at any time, as personal data is processed on your consent. Consent will not affect the lawfulness of data usage by the Company on the basis of consent prior to its withdrawal.
  • Obtaining information about the processing of your personal data and a copy thereof;
  • In the case of legitimate data processing, you have the right to oppose the processing of your personal data, especially for reasons related to your particular situation. It is necessary to remind you that such an effect will not be produced if it has been demonstrated that there are good reasons for processing that have priority over objections or if we prove that there are grounds for establishing, exercising or defending our rights.


You can also request that:

  • Exercise the right of access, obtaining from the operator confirmation that your data is processed or not
  • Your data should be rectified if the data we have is inaccurate, eg. are no longer up to date or incomplete;
  • Your personal data must be deleted ("the right to be forgotten") if: the data are no longer necessary in relation to the purpose for which they were collected or processed, the data was processed unlawfully; deleting data is required by law; you opposed your data processing; you have withdrawn your consent for data processing,
  • The processing of your personal data is restricted, which means you can limit your future processing if you have questioned the accuracy of your personal data, processing is illegal, but you do not want your personal data to be deleted; we no longer need your data, but you have to defend yourself or exercise your right; you oppose data processing - until it is found that there are legitimate reasons for processing, removing the reasons for the opposition.


If you wish to exercise your rights above, you can submit your application:


  • by e-mail to:
  • by calling at: 031 413 20 20 number with normal tariff enrolled in the Orange network
  • by post to: Splaiul Unirii 165, TN Offices 2, 9th floor, sector 3, Bucharest 030133
  • in person, by contacting our representative or visiting the headquarters of KRUK Romania in Splaiul Unirii 165, TN Offices 2, ground floor, sector 3, Bucharest 030133


You can also file a complaint with a supervisory authority that deals with the protection of personal data, such as the National Authority for Personal Data Processing Supervision (ANSDPDC).