BUSINESS

Policy on Protection of Personal Information – FAN Courier

SC FAN Courier Express SRL recognizes the importance of your data and is committed to protecting its privacy and security. Therefore, it is important for us to provide you in an integrated and practical manner with your personal data processing as the data subjects (customers, potential customers, consumers, potential consumers, employees, former employees, users of the www.fancourier.ro and www.selfawb.ro websites) within the framework of this Privacy Policy, applicable to the purposes listed below.

According to the requirements of the UE General Data Protection Regulation no. 679/2016 referred to as the “Regulation” for the protection of individuals with regard to the processing of personal data and the free movement of such data, SC FAN Courier Express SRL manages safely and for the specified purposes only, the personal data you provide us about you in the context of purchasing the services of SC FAN Courier Express SRL under the brand: FAN Courier.

  1. The purposes we collect and process your personal information

SC FAN Courier Express SRL collects and processes your personal information with the following purposes:

  • The main purpose is to provide postal services, respectively fast courier services;
  • Administering, improving and implementing the services provided by the website www.fancourier.ro and www.selfawb.ro;
  • Commercial activities of sales services, including realization, administration and development of sales services on the website www.fancourier.ro, administration of customer accounts, research / market studies and satisfaction, statistics.
  • Advertising, marketing and publicity, activities to promote the services of SC FAN Courier Express SRL, running promotional campaigns, sending newsletters (informative bulletins), tracking and monitoring service sales and consumer behavior.
  • Post-sales activities, including customer relations services, informing users/customers regarding the evaluation of the offered services (including the evaluation of the services on the website www.fancourier.ro), improvement for evidential purposes in connection with the above activities and archiving.
  • Carrying out the internal/external audit.
  • The collection and processing of personal data through SMS notifications and access links aim to promptly and efficiently inform customers about daily deliveries, as well as to ensure secure access to the details of these deliveries.

2. Categories of personal information we process

For achieving the purposes from above, we process the following categories of personal information:

  • To carry out the courier service: name, surname, address, telephone number, e-mail, series and number of the recipient’s identity document.
  • For commercial activities of sales of services, including realization, administration and development of sales, including online sales on the website www.fancourier.ro, administration of customer accounts, research / market studies, statistics: name, first name, address (domicile /residence), telephone, e-mail, delivery addresses.
  • For the administration, improvement and realization of the services provided by the website www.fancourier.ro: name, surname, address (domicile/residence), e-mail, technical information about the visitor’s device – its location, IP address, type of hardware equipment, information about the time interval as well as the date on which the website was used – ul www.fancourier.ro, other information resulting from the use of Cookies type applications. For more information related to cookies, please see the Cookies Policy displayed on the website.
  • For advertising, marketing and advertising, promotion of SC FAN Courier Express SRL services, promotion of promotional companies, transmission of newsletters (newsletters), tracking and monitoring of sales and consumer behavior: name and surname, telephone / fax, e-mail, address (residence / residence), habits / preferences / behavior – in addition, SC FAN Courier Express SRL processes data consisting of serial number and identity number strictly identifying winners of promotional campaigns (if applicable) and to comply with the requirements of tax legislation. Also, some of these data are required as the unique identifier of the person depending on the type of contest / promotion / application / game they participate in.
  • For post-sales activities, including customer relations services, informing users/customers regarding the evaluation of the services offered by SC FAN Courier Express SRL, improving the quality of services within the Call Center service: – name and surname, phone/fax, e- email, address (domicile/residence), voice, habits/preferences/behaviour, other data resulting from the evaluation of products by customers – in addition, SC FAN Courier Express SRL processes data related to: personal numerical code, series and identity card number , bank data, only for situations in which there are replacements of Services.
  • For evidentiary purposes relating to the above activities and archiving: storing personal data for the above purposes in order to keep records of the activities carried out, to protect the rights of the courts and to exercise other rights under the law and contracts the fulfillment of any archiving requirements in accordance with the legal provisions.Personal data that benefit from a special protection regime such as personal identification number, serial number and ID number will be collected and processed under restrictive conditions and in accordance with legal provisions to ensure compliance with the applicable data protection rules with regarding them. The provision of personal data is required for SC FAN Courier Express SRL. to perform the activities listed above.
  • As part of the SMS notification functionality and secure access to delivery details, the following data is collected and processed: phone number (for sending notifications), unique access codes, and temporary PINs, which are automatically generated to ensure secure access to the links sent to customers.

3. Whom we disclose your personal data

In order to achieve one or more of the above mentioned purposes, SC FAN Courier Express SRL may disclose your personal data to the following categories of recipients:

  • to the contractual partners of SC FAN Courier Express SRL (as is the case with the companies with which SC FAN Courier Express SRL is in partnership, but only on the basis of a confidentiality commitment from them, guaranteeing that these data are kept secure and that such personal information is provided in accordance with applicable law),
  • service providers (marketing, payment / banking or other services) including entities assisting SC FAN Courier Express SRL in data processing as empowered, insurers, public authorities (Prosecutors, Police, Courts and other bodies ability of the state), on the basis of and within the limits of the legal provisions and following express requests made to other companies in the same group as SC FAN Courier Express SRL as well as you as a person concerned in the exercise of your right of access, Article 15 of Regulation.
  • In the context of the SMS notification functionality and secure access to delivery details, access to the generated data is limited to authorized personnel and to the providers of the SMS services and the online platform used for managing notifications and secure access, solely for the purpose of delivering the respective services.

The data recorded by FAN Courier is not sold to third parties and is used only for the purpose of improving FAN Courier services.

4. By reading the Policies, you have taken note of the fact that you are guaranteed the rights provided by the Regulation, namely:

  • To be informed about the processing of your personal data, Articles 13 and 14 of the Regulation;
  • Access to your personal data, Article 15 of the Regulation;
  • Rectification of your personal data Article 16 of the Regulation;
  • Deletion (“right to be forgotten”) of personal data, Article 17 of the Regulation;
  • Obtain restrictions on processing, Article 18 of the Regulation;
  • On portability of data, Article 20 of the Regulation;
  • To oppose the processing of your personal data and to request the rectification, updating or deletion of data under the law – in the case of personal data processed for direct marketing purposes, this right may be exercised at any time, free of charge and without justification , Article 21 of the Regulation;
  • Not to be subject to an automatic decision, including the creation of profiles Article 22 of the Regulation;
  • To file a complaint with the NAPSPC Surveillance Authority, Article 77 of the Regulation;
  • To address the law if violations of the relevant legislation have been found, Articles 78 to 79 of the Regulation.

You can exercise these rights by sending an e-mail to SC FAN Courier Express SRL by accessing the contact form at fancourier.ro/contact or you can write to the following mailing address: Glucose Factory, no. 11C, sector 2, Bucharest, or e-mail of Data Protection Officer (DPO) dataprotection@fancourier.ro.

You may at any time and without justification oppose the processing of your personal data for direct marketing purposes by forwarding it to SC FAN Courier Express SRL. (by accessing the contact form at fancourier.ro/contact/ or at your postal address: Sucrose, 11C Glucose Factory, Sector 2, Bucharest or e-mail: marketing@fancourier.ro, a written request , dated and signed in this respect.  In this case, your request will be forwarded to the specialized department of SC FAN Courier Express SRL; you may receive a message confirming that your option has been noted, as well as any other necessary information, as appropriate.

5. Special provisions relating to minors

SC FAN Courier Express SRL does not pursue the processing of personal data of minors in its data processing activities. Particular attention shall be paid to ensuring that any processing of the personal data of minors is carried out in accordance with the requirements of the Regulation, Article 8 and in strictly determined cases.

SC FAN Courier Express SRL does not carry out promotional direct marketing activities towards minors.

Minors under the age of 14 are not allowed to request services or any communications on the website of SC FAN Courier Express SRL, or to participate in competitions or campaigns of SC FAN Courier Express SRL, unless it is done on behalf of the minor by the legal representative or guardian of the minor concerned, according to the law.

Also, any person who provides us with personal data through the site or other applications or devices covered by this Policy warrants that it is major and has full exercise capacity.

Any collection or processing of personal data of minors shall be carried out only under the law and in view of the above.

6. Duration of data processing

It will generally be determined by the moment of exercising your right to object under the conditions of Article 21 paragraph. 2 of European Regulation. Exception: For the data declared within the call center service, the duration of the data processing is 3 years, as a rule, or until the exercise of the right to object. Also, SC FAN Courier Express SRL can store personal data for such a long period of time, for probation and archiving purposes.

At the same time, storing personal data for a longer period of time can be achieved for statistics, service improvement, customer account management, market research / studies.

7. Further information

Please check our Privacy Policy each time you use our website www.fancourier.ro to keep us informed about it at all times.

Upon completion of the processing operations, the recorded data may be transferred, in full or in part, to any other legal person in compliance with the special legislation in force, provided that they are used for purposes similar to those provided in this document.

For misrepresentation of personal data caused by the data indexing software, SC FAN Courier Express SRL assumes no responsibility.

8. Processing of personal data in the recruitment and selection process

8.1 Categories of personal data processed

During the recruitment process, the following categories of personal data may be processed, without being limited to:

  • a) Identification and contact data: Full name, date of birth, nationality, city/county of residence, phone number, email address;
  • b) Professional and educational background: CV, cover letter, information on pre-university and university education, professional training, diplomas, certificates, qualifications, previous professional experience, references;
  • c) Financial data: IBAN account number (only in case of reimbursement for travel expenses related to participation in interviews/tests);
  • d) Audio-video recordings: Only if the selection process includes video interviews or recordings;
  • e) Special categories of data (processed only if strictly necessary and with additional safeguards): health data (e.g., assessment of work capacity), religious or trade union affiliation, criminal record – to the extent that it is relevant for the employment relationship.

8.2 Purposes of personal data processing

The data is processed for the purpose of managing the recruitment and selection process, namely for initiating and concluding an employment relationship with a legal entity within the “FAN Group”.

Personal data is therefore processed exclusively for purposes related to the recruitment and selection process, as follows:

  • Analyzing and assessing the application in relation to the job requirements;
  • Organizing interviews and/or selection tests;
  • Communicating with the candidate throughout the recruitment and selection process (e.g., interview/test invitations, updates regarding the application status);
  • Considering the application for other vacant positions, with the candidate’s consent;
  • Complying with legal obligations related to equal opportunities and non-discrimination;
  • Conducting internal analyses and HR statistics (e.g., recruitment efficiency reports), based on the data controller’s legitimate interest.

8.3 Legal bases for data processing

  • Article 6(1)(b) GDPR – Performance of a contract or pre-contractual measures

Processing is necessary for carrying out the recruitment and selection process to take steps at the request of the candidate prior to entering into a contract.
Example: evaluating the application, organizing interviews/selection tests, communicating with the candidate.

  • Article 6(1)(a) GDPR – Consent of the data subject

Processing is carried out based on the candidate’s consent.
Example: considering the application for other available positions within the FAN Group.

  • Article 6(1)(c) GDPR – Legal obligation

Processing is necessary for compliance with a legal obligation applicable to the controller under national legislation.

  • Article 6(1)(f) GDPR – Legitimate interest

Personal data may also be processed based on our legitimate interest, which lies in efficiently organizing internal recruitment and HR processes. This interest is always balanced against the fundamental rights and freedoms of the data subjects.
Example: internal HR reports and analyses; where applicable, the use of AI-based tools to evaluate the match between a candidate’s profile and job requirements – without automated decision-making.

  • Article 9(2)(b) and (h) GDPR – Special categories of data

If special categories of data are processed (e.g., health data, religious or trade union affiliation, criminal record), they are processed only to the extent necessary and based on specific legal grounds, namely:
Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or the data subject in the field of employment and social security and social protection law, insofar as this is authorized by Union or Member State law or a collective agreement under Member State law providing for appropriate safeguards for the fundamental rights and interests of the data subject;
Processing is necessary for the purposes of preventive or occupational medicine, the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services, pursuant to Union or Member State law or under a contract with a health professional.

8.4 Source of personal data

Personal data may be collected: Directly from the candidate (via online applications, email, application form); Indirectly, through referrals made by FAN Courier employees (who upload or forward the CV); By participating in recruitment events (e.g., job/career fairs); Through online platforms.

8.5 Recipients of personal data

  • a) Within the data controller (FAN Courier or the hiring legal entity): HR/recruitment department; hiring managers involved in the selection process;
  • b) Within the “FAN Group”: Other legal entities within the same group, involved in the recruitment process where recruitment is centrally managed;
  • c) External service providers: Providers of IT platforms/solutions; recruitment platforms; recruitment agencies. All such providers act based on contracts in compliance with the GDPR;
  • d) Recipients outside the EU/EEA: Only if necessary and with appropriate safeguards (e.g., standard contractual clauses; derogations under Article 49 GDPR, etc.).

8.6 Retention period of personal data

  • Personal data is retained for the duration of the recruitment and selection process for the position in question.
  • If the recruitment and selection process ends without hiring the candidate, the data will generally be retained for a period of 12 months.
  • After the expiration of this period, the data will be either anonymized or permanently deleted, unless a longer retention period is required by law (e.g., legal obligations, audits, etc.).

9. Changes to the Data processing Notice

We reserve the right to update this notice whenever necessary. We recommend that you periodically review the latest version available on our website, as changes may occur.

Last updated: September 2025.