INFORMATION NOTICE TO THE DATA SUBJECT REGARDING THE PROCESSING OF PERSONAL DATA BY MOJO SPORTS

This document is intended to inform you about the processing of personal data and your rights as a data subject, in accordance with Regulation No. 679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Identification and contact details of the controller

Mojo Sports, with its correspondence address in Bucharest, Sector 2, Bd. Pierre de Coubertin no. 3-5, Terrace Level 2B, tax ID RO46275255, registered with the Trade Register under number J40/10958/2022, hereinafter referred to as “the Controller”.

Your personal data is processed lawfully, fairly, and transparently, in a responsible manner and in accordance with applicable data protection legislation.

The personal data we process includes data received from third parties or data you provide during visits to our premises, during business activities, contractual or business relationships, subscriptions, payment for services rendered, or events held at our headquarters.

If we process personal data obtained from third parties, they are required to provide you with the necessary information about how your data is being used.

Principles of personal data processing

1.1. Personal data is processed by the Controller in good faith and in accordance with the legal provisions in force.

1.2. Personal data is collected for specific, explicit, and legitimate purposes, and further processing shall not be incompatible with those purposes.

1.3. The data is adequate, relevant, and not excessive in relation to the purposes for which it is collected and subsequently processed.

1.4. Personal data is not stored longer than necessary for achieving the purposes for which it was collected.

1.5. Mojo Sports has implemented appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, and to rectify or erase inaccurate or incomplete data with respect to the purpose for which it was collected and processed.

Contact details of the Data Protection Officer

The person responsible for personal data protection can be contacted via email at: gdpr@sportmallarena.ro or by mail at the address mentioned above.

Purposes and legal basis of processing

In accordance with national legislation (Law 190/2018) and European legislation (EU Regulation 679/2016), Mojo Sports is obliged to manage the personal data provided to it securely and solely for the specified purposes.

Mojo Sports processes your personal data in accordance with the GDPR, as the controller, via its departments and services, for the purpose of carrying out specific business activities, including:

– Public relations

– Organizing/hosting events

– Fulfilling legal accounting and legal obligations

– Signing contracts for goods/services

– Providing information via communication means and social media platforms

If Mojo Sports intends to process your data for a different purpose than that for which it was collected, you will be informed beforehand.

Legal grounds for processing

The Controller processes personal data based on the following legal grounds:

1. Your consent given by selecting communication options;

2. Execution of a contract concluded with you or actions taken at your request before entering into a contract;

3. Compliance with a legal obligation of the Controller (e.g., accounting, legal reporting);

4. Legitimate interest of the Controller (e.g., operations related to business continuity, fraud prevention, service improvement, and high-level security at our premises).

If providing your personal data is a legal, contractual, or necessary obligation to enter into a contract, failing to provide it may make it impossible to proceed with economic activities related to you.

Types of personal data we process

Mojo Sports’ data protection policy is to collect only the data necessary for the mentioned purposes and to ask data subjects to only provide what is strictly required:

– Full name, legal representatives’ names, personal ID number (CNP), payment and banking data, contact details (phone, email, home address), ID card series and number, age, photos, signature.

Processing is not subject to automated decision-making or profiling.

Recipients or categories of recipients

Your data may be shared with third-party companies acting as service providers for Mojo Sports. When necessary, we may contract other companies or individuals to carry out tasks that support our services (e.g., couriers, agents, contractors, suppliers, clients).

Data may also be provided to public authorities in accordance with applicable legal obligations.

Storage period

The storage period is established by law or internal policy. Your data is retained as long as needed for supporting business operations, as per legal requirements.

Your rights and how to exercise them

– Right to be informed – You have the right to receive information about how your data is being processed.

– Right of access – You may request access to or copies of your personal data.

– Right to rectification – You may ask to correct inaccurate data.

– Right to erasure – You may request deletion of your personal data.

– Right to restrict processing – You may request limitation of data processing.

– Right to object – You may object to processing, including for direct marketing purposes.

– Right to data portability – You may request your data be transferred to another controller in a structured format.

– Right to withdraw consent – You may withdraw consent at any time, without affecting prior processing.

– Right not to be subject to automated decision-making, including profiling.

– Right to be notified of security incidents affecting your data.

– Right to lodge a complaint with a data protection authority.

– Right to an effective judicial remedy against a controller or processor.

To exercise any of the rights mentioned above, or for inquiries related to this notice or the processing of your data, you may use the contact information provided earlier.

Final provisions

The contents of this notice are informative and do not affect any legal rights provided by applicable law.

This Privacy Notice may be updated based on changes in business operations, communication improvements, or compliance with legal obligations and is an integral part of Mojo Sports’ GDPR compliance policy.

We encourage you to check this notice periodically to stay informed about how we process your personal data and any changes that may occur.