General information

www.csmoradea.ro, administered by CSM ORADEA, 410209 Oradea str. Traian Blajovici, No. 24, CUI15569544, processes your data in accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, Law no. 677/2001 for the protection of individuals with regard to the processing of personal data and the free movement of such data, as amended and supplemented, and Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector and OUG 13/24.04.2012. The confidentiality of your personal data is one of the main concerns of our website. According to the provisions of the GDPR, our company is obliged to manage, in safe conditions and only for the specified purposes, the personal data you provide about yourself. We reserve the right to update and modify this Privacy Policy periodically, to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will display the modified version of the Privacy Policy on our website, which is why we ask you to periodically check the content of this Privacy Policy.

Definitions

• personal data – any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;
• processing of personal data – any operation or set of operations which is performed on personal data, by automatic or non-automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, alignment or combination, blocking, erasure or destruction;
• storage – the retention on any medium of the personal data collected;
• personal data filing system – any organised structure of personal data, accessible according to certain criteria, regardless of whether this structure is organised in a centralized or decentralized manner or is distributed according to functional or geographical criteria;
• controller – any natural or legal person, governed by private law or public law, including public authorities, institutions and territorial structures thereof, who determines the purposes and means of the processing of personal data;
• persons empowered by the controller– that is, the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
• third party– any natural or legal person, governed by private law or public law, including public authorities, institutions and territorial structures thereof, other than the data subject, the controller or the processor or the persons who, under the direct authority of the controller or the processor, are authorized to process data;
• recipient– any natural or legal person, governed by private law or public law, including public authorities, their institutions and territorial structures, to whom data are disclosed, whether or not a third party; public authorities to whom data are communicated within the framework of a special investigative competence will not be considered recipients;
• anonymous data – data which, due to its origin or the specific manner of processing, cannot be associated with an identified or identifiable person;
• data of the type “business address” – data which include the name, position, business address, telephone number or e-mail address of an employee of an organization, in this capacity. Data of the type “business address” does not fall into the category of personal data;
• statistical data – data which have been obtained as a result of the processing ofe to the controller of personal data but which cannot be used to identify a person and are used exclusively for statistical and/or informational, promotional purposes.
• DPO – the data protection officer whose main role is to ensure the application of the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR – General Data Protection Regulation).
• GDPR – is the abbreviation of EU Regulation No. 679/2016 applicable from May 25, 2018 throughout the European Union as well as in any other country in the world where personal data of EU citizens are used.

Processing of confidential data and their confidentiality

According to the requirements (GDPR) of Regulation (EU) 2016/679 on the protection of individuals physical persons with regard to the processing of personal data and on the free movement of such data, Law no. 677/2001 for the protection of individuals with regard to the processing of personal data and on the free movement of such data, as amended and supplemented, and Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector and GEO 13/24.04.2012, Through our website, we may collect personal data from you, but only with your consent and if they are provided voluntarily. We manage the personal data you provide about yourself or another person in a secure manner and only for the specified purposes. We use the collected personal data, including the IP address from which the Site is visited, the browser configuration and your location, for the following purposes (see Cookie Policy): – To personalize the pages – To ensure that the web page is relevant to your needs. – To help us create and publish the most relevant content for you. – To improve the security of access to the services offered

Categories of personal data processed

If you are a user of the site, your personal data that you provide directly in the context of using the site, such as the data you provide in the contact and newsletter section, will be processed; we collect your personal data directly from you. We also offer you the possibility to access us through your Facebook, Instagram or Twitter account. If you choose one of these options, you will be directed to a page managed by Facebook Inc / Twitter INC, where they will process your personal data in accordance with the Facebook, Instagram and Twitter privacy policies. You can access these policies using the links below:

• https://www.facebook.com/about/privacy
  • https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Ajutor%20Instagram&bc[1]=Trust%C8%9Biality%20%C8%99i%20Center%20de%20seguran%C8%9B%C4%83
  • https://twitter.com/en/privacy

Purposes and grounds for processing

If you are a user of the site, we process your personal data as follows:

1. name, e-mail;

Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it.

• : e-mail

Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it, we want to keep you informed of the latest news.

Duration for which we process your data

Personal data may be kept by the Company even after the purposes for which they were initially collected have been fulfilled, to the extent that the personal data will be processed exclusively for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in compliance with the provisions of the GDPR (art. 89), subject to the implementation by the Company of appropriate technical and organizational measures to respect and guarantee the rights and freedoms of the data subjects. After the purposes for which the personal data were collected have been fulfilled (and in the absence of applicabilityii the situations mentioned in the previous paragraph), personal data will be destroyed, deleted or anonymized from the Company’s databases/record systems (both electronic and in letter/paper format), in compliance with the applicable legal provisions and the Company’s personal data storage (retention) Policy.

Disclosure of personal data

Personal Data may be communicated, to the extent necessary, to the following categories of recipients: National Authority for Consumer Protection, etc.); the commission of criminal acts, at their request, the provision, activation, installation, operation, maintenance of equipment and services provided by any of the Operators. Personal data within the European Union/European Economic Area are subject to the same legal provisions and offer the same level of protection as the Operators. However, if the performance of the Contract requires the transfer of Personal Data to recipients outside the European Union/European Economic Area or to states that do not provide an adequate level of protection, the Operators will require the respective recipients to protect the Personal Data in accordance with the requirements of European legislation. We ensure that access to your data by third parties, legal entities governed by private law, is carried out in accordance with the legal provisions regarding data protection and confidentiality of information, based on contracts concluded with them.

Transfer of personal data

Personal data provided to the website owner will not be transferred outside Romania.

How we protect the security of your personal data

Our company meets the minimum requirements for the security of personal data. We use security methods and technologies, together with policies applied to employees, to protect personal data in accordance with the legal provisions in force. Despite the measures taken to protect your data, we draw your attention to the fact that the transmission of information over the Internet or other public networks is not completely secure, and there is a risk that the data may be viewed and used by unauthorized third parties. We cannot be responsible for such responsibilities of systems that are not under our control.

Rights of individuals

• Right to be informed (art. 12-13): Informing the data subject about the categories of data collected, purpose, recipients, transfer;
• Data portability (art. 20): The data subject has the right to request the portability of data between Controllers;
• Right to be forgotten (art. 17): When the processing is no longer justified or when the data subject has withdrawn his/her consent;
• Right to object (art. 21): The data subject’s right to object or oppose certain types of processing;
• Right to access data (art. 15): The data subject may request access to his/her data in order to verify whether the processing is justified;
• Right to rectification of data ( art.16): The data subject may request the rectification of data if they are processed incorrectly;
• Right to restriction of processing(art.18) The data subject may request the restriction of the data used or the transfer of data;
• Right to object to profiling(art. 21) The data subject has the right not to be subject to a profiling decision when it is based on automated processing.

Links to other websites

Our website may provide links to websites that we do not control. After you click on a third-party link, you will be directed to the third-party website. If you visit any of these linked websites, you should review their privacy policies. We are not responsible for the policies and practices of other websites. We assume no responsibility for the content, privacy policies, notices, or practices of third-party websites or services. We have designated a Data Protection Officer for all aspects of personal data protection, and you may contact the Data Protection Officer with respect to all matters relating to the processing of your data and the exercise of your rights under applicable law, in particular if you have any questions or concerns about how we process your personal data.e contact person responsible for data protection:

• Phone: 0771 054 614
• Email: dpo@csmoradea.ro

Attention! Please exercise your rights wisely and remember that abuse of rights may incur liability. The contact details of the National Authority for the Protection of Personal Data are as follows: National Authority for the Supervision of Personal Data Processing Address: Bucharest, B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, postal code 010336 Website: http://www.dataprotection.ro E-mail address: anspdcp@dataprotection.ro Phone: +40.318.059.211; +40.318.059.212 Fax: +40.318.059.602

Contact

The information presented is intended to provide the user with more details about the nature, use and management of personal data used by our website. If you need more information and it is not found in this section, you can contact us at dpo@csmoradea.ro.