Processing of personal data

DN AGRAR GROUP S.A.

Last updated: 24.06.2026

1. Who we are (data controller)

This Privacy Policy describes how DN AGRAR GROUP S.A. (“the Company”, “the Controller”, “we”) processes the personal data of persons who use our website and associated services, in accordance with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 on measures implementing the GDPR, and Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.

• Name: DN AGRAR GROUP S.A.
• Unique Registration Code (CUI): 24020501
• Trade Register no.: J1/730/2008
• Registered office: Alba Iulia, P-ța Iuliu Maniu no. 1, bl. 31DE, Alba County
• Contact: https://dn-agrar.eu/ro/, office@dn-agrar.eu, (+40) 258 818 114

The confidentiality of your data is a primary concern for us. We process personal data securely and only for the purposes specified in this policy.

2. Data Protection Officer (DPO)

We have appointed a Data Protection Officer (DPO), whom you can contact for any matter related to the processing of your data and the exercise of your rights:

• E-mail: dpo@infomedpro.ro
• Phone: 0771 054 497

3. Definitions

• Personal data – any information relating to an identified or identifiable natural person (e.g. name, e-mail, phone, IP address).
• Processing – any operation performed on data: collection, recording, storage, use, transmission, deletion, etc.
• Controller – the person who determines the purposes and means of data processing (in this case, the Company).
• Processor – the third party who processes data on behalf of and for the Controller (e.g. the hosting provider).
• Data subject – the natural person whose data is being processed.
• ANSPDCP – the National Supervisory Authority for Personal Data Processing.

4. What data we collect, for what purposes and on what legal basis

We process the data you provide directly through the website, as well as certain technical data collected automatically. Below we detail each situation:

a) Contact form

• Data: name, e-mail, phone (optional), content of the message.
• Purpose: receiving and handling your requests.
• Legal basis: our legitimate interest in responding to requests – Art. 6(1)(f) GDPR; if the request concerns the conclusion of a contract/offer, the basis is Art. 6(1)(b).

b) Newsletter subscription / job alerts

• Data: name (optional) and e-mail address.
• Purpose: sending news, announcements and updates.
• Legal basis: your consent – Art. 6(1)(a) GDPR. Consent may be withdrawn at any time (via the unsubscribe link or at dpo@infomedpro.ro), without affecting the lawfulness of processing prior to withdrawal.

c) Careers / recruitment / internship section

• Data: first name, last name, e-mail, phone, CV, cover letter, and other information you choose to include in your application.
• Purpose: evaluating the application and conducting the recruitment process.
• Legal basis: carrying out pre-contractual steps at your request – Art. 6(1)(b) GDPR.

d) Shareholders and investors

• Data: name, identification and contact details, information on holdings, data required for participation in General Meetings and for communication with investors.
• Purpose: fulfilling the obligations of a listed company (shareholder relations, General Meetings, reporting).
• Legal basis: compliance with a legal obligation – Art. 6(1)(c) GDPR (capital markets legislation, including Law no. 24/2017 and Regulation (EU) no. 596/2014), as well as the legitimate interest of communicating with investors – Art. 6(1)(f).

e) Technical data collected automatically

• Data: IP address, browser type and configuration, pages visited, date and time of access, approximate location data, and cookie identifiers.
• Purpose: operation and security of the website, content personalization, audience measurement, and service improvement.
• Legal basis: legitimate interest for strictly necessary cookies – Art. 6(1)(f); consent for analytics and marketing cookies – Art. 6(1)(a) GDPR in conjunction with Art. 4(5) of Law no. 506/2004.

5. Cookies and similar technologies

Our website uses cookies and similar technologies (including third-party modules, such as embedded video content and analytics tools). Cookies that are not strictly necessary are installed only on the basis of your consent, expressed via the cookie banner, which you can modify or withdraw at any time.

Full details about cookies can be found in the Cookie Policy.

6. To whom we disclose data (recipients and processors)

For the purposes above, data may be disclosed to the following categories of recipients, who process the data either as processors (on our behalf) or as independent controllers:

• the web hosting and site maintenance provider;
• for shareholders/investors: the Central Depository, the Bucharest Stock Exchange and the capital markets authority (ASF), in accordance with the law;
• professional consultants (legal, accounting, audit) and the external DPO;
• public authorities, when we have a legal obligation to do so.

We impose contractual obligations of confidentiality and security on processors, in accordance with Art. 28 GDPR.

7. Transfer of data outside the EU / EEA

Personal data provided to the site owner will not be transferred outside the European Union.

8. How long we keep the data

We keep personal data only for as long as necessary for the purposes for which it was collected or to comply with legal obligations. As a guideline:

Upon expiry of these periods, data is deleted, destroyed or anonymized securely.

9. How we secure data

We apply appropriate technical and organizational measures to protect data against unauthorized access, loss or disclosure. We nonetheless draw your attention to the fact that the transmission of information over the internet cannot be guaranteed to be completely secure; any transmission is made at your own risk, and we cannot be held responsible for events outside our reasonable control.

10. Your rights

As a data subject, you have the following rights:

• the right to be informed (Art. 13–14);
• the right of access to data (Art. 15);
• the right to rectification (Art. 16);
• the right to erasure (“the right to be forgotten”) (Art. 17);
• the right to restriction of processing (Art. 18);
• the right to data portability (Art. 20);
• the right to object to processing, including profiling (Art. 21);
• the right not to be subject to an automated decision (Art. 22);
• the right to withdraw consent at any time, where processing is based on consent (Art. 7);
• the right to lodge a complaint with the ANSPDCP and to bring proceedings before the courts (Art. 77–79).

National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru no. 28-30, sector 1, postal code 010336, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro, phone: +40.318.059.211; +40.318.059.212.

You can exercise your rights through a request to dpo@infomedpro.ro. We will respond within no more than one month of receiving the request (a period which may be extended by two months in complex cases, with notice to you). To protect your data, we may ask for additional information to verify your identity.

11. Automated decisions and profiling

The Company does not take decisions based solely on automated processing that produce legal effects on you.

12. Minors’ data

The website is intended for persons aged at least 16. We do not knowingly collect data from minors under 16 without the consent of the holder of parental responsibility. If we become aware of such a situation, we will delete the data concerned.

13. Links to other websites

Our site may contain links to sites that we do not control. We are not responsible for their content and privacy practices; we recommend that you consult their privacy policies.

14. Changes to this policy

We reserve the right to periodically update this Privacy Policy. The updated version will be published on the site, with the date of the last revision indicated. We recommend that you periodically review its content.

15. Contact

For any questions about the processing of your data, you can contact us at dpo@infomedpro.ro.