According to the requirements of Law no. 190/2018 on measures for the implementation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing of Directive 95/46 / EC (General Data Protection Regulation) and of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector we have the obligation to manage safely and only for the specified purposes, the personal data you provide us about you, a member of your family or another person.
CONTENT OF THE INFORMATION
1.WHO ARE WE?
The Association for Health and Medical Programs (hereinafter referred to as “the Association” or “ASPM”), headquartered in Bucharest, Calea Plevnei, no. 222, et. 1, Sector 6, CIF 43916975, bank account RO23 BACX 0000 0021 1580 6001 opened at UniCredit Bank Bucharest, is the owner of the website: https: // www .aspm.ro which is the subject of this information.
The site www.aspm.ro is an online community that brings our services to you. This information note explains why we need certain personal data in order to provide certain services. Please read it carefully, because this way you will understand and control as you wish the type and volume of personal data that will be processed in your online environment.
2. WHAT ARE PERSONAL DATA?
As explained in Regulation 679/2016, “personal data” means any information concerning an identified or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier or one or more specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity.
Personal data are, but are not limited to:
Thus, personal data are considered to be those that allow the identification of a person, or that together with other data sets allow the operator to identify the data subject.
Identification data belonging to a legal entity are NOT personal data.
3. WHO ARE THE PERSONS TARGETED?
The persons covered by this processing are:
4. WHAT PERSONAL DATA DO WE COLLECT?
We collect and process personal data from the information you provide us, directly, as follows:
In these situations, data will be collected such as: name and surname, address, telephone number, information about the bank card with which you will make the payment, identification data of the company, what you want to send us, etc.
Every time you visit the website https://www.aspm.ro, we automatically collect the following data:
If we obtain your personal data from a third party, we will provide you with all relevant information about their processing as soon as possible, but no later than one month after obtaining your personal data.
5. PURPOSE OF DATA PROCESSING AND LEGAL BASIS
When we request personal data in order to comply with legal or contractual obligations, the provision of such personal data by you is mandatory. This means that if such personal data is not provided, we will not be able to manage the contractual relations or comply with the legal obligations imposed on us. In all other cases, the provision of personal data is optional and you are not obliged to provide it.
In this case, the website https://www.aspm.ro provides you with an easy-to-use option to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing that took place before its withdrawal.
We may process your personal data, such as identification data, contact details and address of residence, and for the purpose of the possible exercise of our rights or claims against you in the future. This processing is based on our legitimate interest, and it is necessary to exercise our rights in the event of any disputes.
Specifically, we will use your personal information as follows:
Users and customers:
In order to provide the services, and make payments based on your donations, we may process your personal data, such as identification data, contact details, bank details.
This processing is based on:
We may process personal data so that we can provide you with information about services that we believe are of interest to you. If you are an existing user, we will only contact you by e-mail, telephone or postal address (depending on your choice), with information about services similar to those that have been the subject of a previous interest or with information on the main news in the social field , charitable or economic, as reflected in the media through the newsletter.
If you are a new user, we will contact you by electronic means only if we have your prior consent. Whether or not you want us to use your data in this way, check the appropriate box on the form by which we collect your data.
We will not pass on your personal data to third parties for marketing purposes without your explicit consent.
We may also use your personal data to measure or understand your preferred content related to our products and to make suggestions and recommendations to other Users of our site about products that may be of interest to you.
Candidates for jobs published by ASPM:
In connection with your participation in the recruitment and selection process for one or more of the jobs listed as available, within ASPM, we may collect and process your personal data, (for example, the data in the CV that we send it), for the purpose of selection, evaluation of professional skills for the job / jobs you apply for, as well as for communication with you, during the recruitment process. This processing is based on the legitimate interest of ASPM. We will only keep this data for 6 months.
Through our work on the website https://www.aspm.ro, we will not collect or process sensitive personal data about you (for example, information about racial or ethnic origin, political opinions, religion or philosophical beliefs). .
We do not use the information you provide to make automated decisions that could affect you.
6. DURATION OF DATA PROCESSING
We will retain your personal data for the period necessary to fulfill the purposes listed in this Policy or for the period required by applicable national law, in accordance with the applicable minimum legal retention periods and / or as long as is necessary to exercise our legitimate rights ( and the legitimate rights of others).
7. DATA STORAGE
The website https://www.aspm.ro is managed and maintained by Sensigo Software SRL and hosted by the servers of Herzner Online GmbH.
8. TRANSFER OF PERSONAL DATA
We will only disclose your personal data for the purposes mentioned above and for the employees, proxies, associated operators or third parties listed below. In this regard, we make every effort to ensure that all of them comply with the provisions of Regulation 679/2016 and Law 190/2018 so that your personal data is processed, secured and transferred in accordance with applicable law.
Your personal data is administered internally (general databases of sites, by donors, event participants, users of our services) for the provision of our services and based on the legal obligation for the situations governed by the tax code in force. Authorized employees have access to the internal databases, which have received the necessary training to comply with the security of the databases, from the accounting, technical, legal, marketing or sales department.
Your personal data is transferred where it is absolutely necessary, based on the principle of “need to know” – the need to know, to companies that provide us with services, such as:
Your personal data may be transferred to third parties, as follows:
We inform you that any employee, proxy, associated operator or third party who processes personal data is limited by law and contract (confidentiality, security) to use your data for purposes other than those specified by us.
Except in the cases shown above, ASPM will not disclose, sell, give for consultation, rent your personal data.
We inform you that some of the proxies, associated operators or third parties listed above may transfer personal data outside the EU / EEA (European Economic Area).
9. THE RIGHTS OF THE PERSONS CONCERNED
As a data subject, according to Regulation 679/2016 you have the following rights:
The website https://www.aspm.ro always offers you the option to unsubscribe from the services we offer. The right to object to the processing of your data may be limited if we can demonstrate that we have legitimate reasons to process this data, which prevails over your interests.
Please note that your rights may be limited in certain situations as set out in Article 23 of the Regulation and are subject to applicable laws and regulations regarding the protection of personal data.
Whenever you ask us to exercise these rights, you will need to prove your identity and provide us with other details to help us respond to your request. The answer to your request will be provided as soon as possible, within a maximum of 30 days and only in duly justified cases or if your request has a high degree of complexity, we will extend this period. You will be informed about the reasons and duration of the extension.
We will not charge a fee to respond to your request.
To exercise one or more of these rights, please contact us at the e-mail address email@example.com or by letter to ASPM: Calea Plevnei, no. 222, et. 1, Bucharest, Sector 6.
11. DATA SECURITY
We keep your personal data on ours, located in Romania.
We use appropriate technical and organizational measures in order to protect personal data against loss, misuse, disclosure, alteration, unavailability, unauthorized access and destruction. Such measures include security of physical and logical access to servers, workstations, applications, staff accountability, encryption, passwords, security certificates, etc.
We have entered into contractual relationships with third parties that provide hosting services and these contracts include obligations regarding the organizational and technical security of personal data.
Data transmission over the Internet is not completely secure. Although we do our best to protect your data, we cannot guarantee 100% security of the data transmitted on our site; any transmission of personal data is at your own risk. Once we receive your data, we will use strict security procedures to try to prevent unauthorized access.