A PRACTICAL GUIDE
Your rights over your data
What you can request, when each right applies and how to send the request. What data we process and why is described separately, in the privacy policy.
UPDATED ON 19 SEPTEMBER 2026. THE PRIVACY POLICY IS COMPLETE. YOU CAN SEND YOUR REQUEST DIRECTLY FROM THE FORM AT ATS.HUMX.RO/DREPTURI.
WHAT YOU CAN REQUEST, AND WHEN
Not all the rights below apply at all times. Each has its own conditions, and the column on the right says when it comes into play.
Access
To find out whether we hold data about you, what it is and why we have it, and to receive a copy. Applies at any time.
Rectification
To have us correct what is inaccurate and complete what is incomplete. Applies at any time.
Erasure
Applies in the situations set out in the regulation: the data is no longer necessary, you withdrew the consent the processing was based on, you objected on valid grounds. It is not an unconditional right: a legal obligation or the defence of a legal claim may require us to keep something. If so, we tell you what we keep and on what basis.
Restriction
To have processing paused, for instance while we check whether the data is accurate or whether your objection is well founded.
Objection
To object to processing based on legitimate interest, citing your particular situation. If the processing were for direct marketing, the objection applies without any justification.
Portability
To receive the data you provided to us, in a structured, machine-readable format. Applies to processing based on consent or on a contract and carried out by automated means.
Withdrawal of consent
Where a processing operation is based on your consent, you can withdraw it at any time, as easily as you gave it. Withdrawal does not affect what was lawfully done before.
Automated decisions
The regulation gives you the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. Article 22 sets out both the conditions under which the right applies and the exceptions — performance of a contract, a legal authorisation or your explicit consent — accompanied by safeguards. This site makes no automated decisions about candidates.
The text establishing these rights is Regulation (EU) 2016/679, Articles 12 to 22, and the right to lodge a complaint is in Article 77: the official text on EUR-Lex.
HOW TO SEND THE REQUEST
By e-mail to contact@humx.ro. You do not need a particular form and you do not have to cite articles of the regulation. Write what you want in your own words.
Or, if you prefer a form that lists the rights one by one and tells you the deadline: ats.humx.ro/drepturi. The request goes straight into our register, with the clock started.
The button below opens a pre-filled e-mail in your application. It sends nothing on its own: you read it, complete it and send it yourself.
Prepare the e-mail→WHAT HELPS US FIND THE DATA
To answer to the point, three things help us, none of them sensitive:
The address used
The e-mail address you wrote to us from, if it differs from the one you are sending the request from.
The context
Whether you wrote to us as a company interested in a service or as a person interested in a role.
The approximate period
When you think it was, even roughly. "Last spring" is enough.
Do not send a copy of your identity document from the outset. If there are reasonable doubts about identity, we may request only the additional information needed to confirm it.
HOW LONG WE TAKE TO ANSWER
The period set by the regulation is one month from receipt of the request. For complex requests, or when there are several at once, it may be extended by a further two months — but we are obliged to tell you about the extension and its reasons within the first month.
The answer is free of charge. The regulation allows a reasonable fee or a refusal only for manifestly unfounded or excessive requests, in particular repetitive ones; if we ever invoke that, we explain why.
If we do not act on the request, we inform you within the same month of the reasons and of the avenues open to you.
IF YOU WANT TO COMPLAIN
You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing, dataprotection.ro. You do not need to contact us first — the right to turn to the authority does not depend on it.
You can also go to court, separately from a complaint to the authority.
The controller is AXA TREND S.R.L., tax ID 48597133, J5/2000/07.08.2023, with its registered office at Municipiul Oradea, strada Petru Maior nr. 91Z8, județul Bihor, România. What data we process and why is described in the privacy policy.
contact@humx.ro