Data ultimei actualizari: 10.10.2019


Stejarii – Residential Club



This Privacy Policy regarding personal data addresses issues in respect of the processing of personal data of visitors of website, through the interactions they have with our website, as well as other processing that may be of interest for you.

This information is important.

We hope you read it carefully.


Personal data controller


Your personal data will be processed by our company, MASTERANGE ROMANIA S.R.L. headquartered in 24-26 Nordului Road, 1st district, Bucharest, Sole Registration Code 15262492, registered with the Trade Registry under no. J40/3330/2003, belonging to Tiriac Imobiliare group of companies, as a personal data controller.


The processing of personal data is in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of  April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General data protection regulation) - GDPR - and other applicable legislation.

 Use of Cookies

 Personal data we process


Cookies are small alphanumeric files that once placed on your device, submit us information about:

  1. the web browser used and your device;
  2. your visits to the website, as well as the means of use of the website;
  3. the means to access the website, the search engine used, the links accessed, and the search terms you use.


How we collect personal data


The simple visit to our website may result in placing cookies on the device you use, in order to access the website. The cookie is installed through a web server request to your browser (e.g. Internet Explorer, Google Chrome) and is completely "passive" - it does not contain software, viruses or spyware and it can not access the information stored on your hard drive.


The purposes and basis of the processing


Your personal data collected through cookie modules (i.e. statistics cookies, marketing cookies and, as the case may be, preference cookies) is collected based on your consent for the installation of these modules.


For more details regarding active cookies on our website, as well as for information on how to restrict the installation of cookies modules or how to delete them, you can consult the Policy on the use of cookie modules.


  • Sending a message by using the contact forms available on the website

 Personal data we process


When sending a message by using the contact form available on the website, we process the following personal data categories from you:

  1. identification data – your full name;
  2. contact details – e-mail address and, optionally, telephone number;
  3. other personal data and information you provide to us, included in the message submitted to us.


How we collect personal data


We collect the personal data that you send us by filling in the contact form, as well as from the contents of your message, as the case may be.


The purposes and basis of the processing


Personal data is processed based on your default consent, expressed by submitting the contact form, for the purpose of recording your message and having it responded, by using the contact details you have provided or, as the case may be, in order to answer your requests, questions or complaints thus addressed.


We can also contact you later in order to find out more information from you, in case you have requested to be presented with an offer that matches your budget and preferences. In this case, please refer to Section IV.


Data processing in the context of requesting an offer within the Residential Club

 Personal data we process


If you are requesting us an offer for renting an apartment within Stejarii – Residential Club, we process the following data:

  1. identification data – your full name, date and place of birth;
  2. contact details – e-mail address and telephone number;
  3. the budget and other expressed preferences;
  4. other information provided voluntarily, such as family composition.


In addition, when you visit us for a viewing, we will need the series and number of your identity document, in order to fill in the visitors register, where we will also record your name and the purpose and duration of your visit. We will collect CCTV images with you from the access point to the complex and within the complex, as well as the registration number of the vehicle you use for the visit.


How we collect personal data


We collect personal data that you provide us either verbally, by telephone, by e-mail or by other forms, when you express your interest in our services, or through our control access systems or CCTV within the complex, as the case may be. We can also collect your personal data through the real estate agencies we work with, that you have contacted for the purpose of receiving our services.


If the offer is requested by a company, we will only process the necessary data for your access within the complex.

 The purposes and basis of the processing


Your data necessary for drawing up the offer will be processed based on the conclusion and execution of a contract with you, as data subject, upon your request. Requesting an offer from us will involve the submission of a single offer, tailored to your needs and preferences, as such have been communicated to us.


If at a later time you want a new offer from us, you can contact us to express your interest by using one of the contact methods at your disposal.


With regard to CCTV images collected at the access point in the complex and within the complex, we will rely on our legitimate interest in ensuring and maintaining the security and protection of goods and people.


We will fill in the visitors register strictly with the data provided by the legal provisions (i.e. your full name, series and ID number of your identification document, purpose and duration of the visit) and we will process the registration number of the vehicle you use for the visit, based on the legal obligations incumbent to us in this respect.


If the offering period ends with the conclusion of a contract, you will be informed about the new processing of your data, in your capacity as a client and resident of the Residential Club, through a new information notice, which will be made available to you later on.

 Data processing on social networks

 Personal data we process


We can process your image on our social network pages, when posting photos with you in the events organized by us for residents of the Residential Club.


How we collect personal data


We collect personal data directly from you, by taking photographs.

 Purposes and basis of the processing


We process your image and we post photos with you on social network pages based on our legitimate interest, to publicly present the events we organize, or the opportunities we provide to our residents, when these images do not contain your portrait.


If the photographs contain your portrait, we will ask for your explicit consent regarding such processing, which consent you can withdraw at any time and will result in the delition of the images with you from those pages.


Use of plug-ins


You can watch the presentations we upload on our YouTube page, or you can follow the links on our website or those associated with the Facebook account. In this case, the respective social networks could carry out processing regarding some personal data that belong to you. Each social network has its own policy on how it processes personal data, including through cookie modules, which you can access on your own websites.


If you do not want Facebook to associate with your Facebook account data collected upon accessing our website, you must sign out from Facebook when you access our page. You can completely prevent the loading of Facebook plug-ins by using Add-Ons compatible with the used browser, for example, "Facebook Blocker".


Retention periods


Personal data received as a result of sending a message to us by using the contact form available on the website will usually be kept for a period of 6 months from receipt of the respective message.


However, the data provided in order to draw up the offer will be deleted and/or destroyed within 1 year from receipt of the negative and final response from you, or from the date of the last correspondence regarding the offer.


If you schedule a viewing of an apartment within the Residential Club, the data necessary for registering in the visitors register and the registration number of the vehicle will be stored for a period of 2 years, in accordance with the legal provisions. The images captured by the cameras installed at the access point in the complex and within the complex will be deleted after 30 days.


The presentation photographs of the events organized by us will be kept for up to 3 years; the same applies in case of portrait photographs with you, based on your consent, or until the withdrawal of this consent.



  • Recipients of personal data


We carry out the processing included in this Policy alongside our joint controllers, Fergus Construct International S.R.L. and ITH Management Office S.R.L., member companies of Ţiriac Imobiliare Group, with whom we have entered into an agreement in this respect.


In the processing we carry out, your data may be disclosed to third parties for the purpose of providing the following services:

  • maintenance and administration of the applications and platforms we use;
  • personal data security and safe storage;
  • web hosting;
  • security and protection services within the Residential Club;
  • Cookies used;
  • services that help us respond to your requests and messages, in those cases where such services are outsourced;
  • services that you request expressly through Concierge, in which case the data is disclosed to the service providers based on your consent.


In all cases, we only disclose those personal data that is strictly necessary for the provision of the respective services, third parties being required to process (including to erase) personal data in full compliance with the applicable law, as well as to provide an adequate level of protection in respect of the processed data.


MASTERANGE ROMANIA S.R.L. will not disclose your personal data in order to be used by third parties, other than the mentioned ones, or by external transfer outside the EEA.


However, we may also disclose personal data to other entities, where the disclosure of such information is required for:

  • compliance with the law, judicial or administrative legal proceedings or upon the request of any entitled authority;
  • preventing or combating computer fraud, information security or technical security issues;
  • protection against violation of the rights, property or safety of companies acting as joint controllers, of our users, as stipulated by the law.


  • Security of personal data


We ensure that personal data is properly protected against threats, by taking security measures, including in respect of IT infrastructure.


If we become aware of a data protection incident that generates a risk to you, we will notify the National Supervisory Authority for Personal Data Protection (NSAPDP). We will also inform you of the ocurrence of any security incident in respect of your data, that is likely to generate a high risk for your rights and freedoms.


Your rights in relation to the processing of personal data


If you have expressed your consent in respect of carrying out some processing activities, you may withdraw this consent at any time, which will only have effects for the future. Withdrawal of the consent will in no way affect the legality of the processing carried out before that moment. As a general rule, withdrawal of the consent will result in the termination of any processing of your personal data in relation to which you have withdrawn your consent. We will take all measures to delete your data from any records where they are found.


In any case, if the processing is necessary for carrying out our services and it may be grounded on another legal basis provided under the applicable legal provisions, we will continue the processing of your data and we will notify you in this regard.


You have the following rights regarding the processing of your personal data:


Right to access the data. You have the right to be informed, upon request, whether we process your data or not and, as the case may be, to request access to your personal data. The information you will have access to includes, among others:

  • what is the purpose of processing your personal data?
  • which personal data categories do we process?
  • who are the recipients to whom personal data has been submitted/disclosed?
  • what is the period for storage of the personal data?


You are entitled to a copy of your data that we process, in a structured format. For any other copies of the data, we can charge you a reasonable fee, based on the administrative costs involved by provision of these copies.


In case personal data is not collected from you, as data subject, you may request any available information on their origin, and this will be provided to you as far as it is available and only if the provider of the data can be identified. To do this, we will need you to provide us with your data in order to demonstrate that data is not being submitted through your direct action.


Right to rectification of the data: In case you notice that your personal data is inaccurate or incomplete, you may request it to be rectified or supplemented.


Right to erasure of the data ("The right to be forgotten"): You have the right to obtain the deletion of your personal data without undue delay. Erasure of the data will be done in the following cases:

  1. data is no longer required for the intended processing purposes;
  2. you withdraw your consent on the basis of which processing takes place;
  3. you oppose the processing of your data, in case the data processing is based on our legitimate interest, over which your rights and freedoms prevail;
  4. the data has been processed in breach of some applicable legal provisions;
  5. the data must be erased in order to comply with a statutory obligation incumbent on us in our capacity as controller;
  6. personal data belongs to children under the age of 16, and the parents or the persons exercising parental rights withdraw their consent.


Right to restriction of data processing: You have the right to exercise this right in relation to one of the following situations:

  1. you challenge the accuracy of your data we process;
  2. processing is illegal, but you do not want to have the data erased, instead you request the restrictions of its use;
  3. we no longer need to process personal data, but you want us to keep them in order to be used in court proceedings;
  4. you have opposed the processing, for the period we verify whether your rights and freedoms prevail over the legitimate interests we invoke.


In our turn, depending on the available technology and the cost of implementation, we will take reasonable measures, including technical measures, in order to inform all recipients that you have requested its deletion, including copies or links referring to that data, or the restriction of the processing.


Right to data portability: You are entitled to receive the data we process in a commonly used and machine-readable format. You also have the right to request us that this data be transmitted to another controller (legal entity), as you will instruct.


Right to object: You have the right to oppose at any time, for reasons related to your particular situation, the processing of your data. When exercising this right, we are obliged to discontinue the processing of the data concerning you, unless our legitimate interest prevail over the rights and freedoms invoked by you. Exercising this right does not entail any costs.


If you have any questions regarding the processing of your personal data or if you want to submit us a request in order to exercise the above rights, you can contact us by using the following data:


  • e-mail to our DPO:;
  • telephone: 0374104114, schedule 10 - 17, Monday to Friday, except for public holidays
  • at our headquarters, located in 24-26 Nordului Road, 1st district, Bucharest.

We will analyze each request and notify you of the actions that have been taken as soon as possible, but no later than one month after filing your request with us. If we find that more information is required from you or if we encounter any other difficulty in addressing the request, we will inform you without delay that we need more time to properly analyze the request.


You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing, as well as to go before the courts of law.


Joint controllers


Our agreement of joint controllers mentioned above provides for sharing of responsibilities between joint controllers, Masterange Romania S.R.L., Fergus Construct International S.R.L. and ITH Management Office S.R.L., in respect of analyzing and addressing the requests for the exercise of data subjects rights. According to Art. 26 par. (3) of GDPR, you may exercise your rights towards any of the joint controllers. The responsibility regarding your request falls as follows:



Type of request

Responsible entity


Right to access

ITH Management Office S.R.L.


Right to rectification

ITH Management Office S.R.L.


Right to data erasure („right to be forgotten”)

ITH Management Office S.R.L.


Right to restriction of processing

ITH Management Office S.R.L.


Right to data portability

ITH Management Office S.R.L.


Right to object

ITH Management Office S.R.L.


Amendments to this Policy


If we decide to amend this Policy, we will publish the new version on this page; if the changes will address essential or substantial matters of this Policy, we will inform you accordingly. No changes to this Policy will affect your rights granted by the law.


Thank you for your confidence regarding the processing of your data and for the necessary time taken to read this Policy. You can contact us at any time in relation to any questions regarding the protection and processing of personal data.


  • Other provisions


Our data protection policy does not apply to services provided by other companies or individuals, including products or internet pages that may be displayed in search results, which internet pages may include services of Masterange Romania S.R.L., or other websites linked within our services. Our data protection policy does not include practices related to the processing of personal data of other companies and organizations advertising our services, that may use cookies, pixel tags and other technologies in order to display and deliver relevant ads.


For more information on how website works, we invite you to review the Terms and Conditions.