As of May 25, 2018, the provisions of Regulation (EU) No 679/2016 of the European Parliament and of the Council of the European Union on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) apply.
The protection of individuals regarding the processing of personal data is a fundamental right of every person, as provided for in Article 8(1) of the Charter of Fundamental Rights of the European Union and Article 16(1) of the Treaty on the Functioning of the European Union.
The European Institute of Romania recognizes the importance of your data and is committed to protecting their confidentiality and security. For this reason, it is important for us, as a personal data controller, to provide you with integrated and practical information regarding the processing of your personal data as data subjects.
The European Institute of Romania, located at Bd. Regina Elisabeta nr. 7-9, Sector 3, Bucharest, collects and processes personal data for the purpose of fulfilling its mission and objectives, which include:
- a) supporting the development and implementation of the policies of the Government of Romania in the field of European affairs.
- b) increasing the level of knowledge and skills of public officials and other socio-professional categories in the field of European affairs.
- c) improving access to European Union law, jurisprudence of the European Court of Human Rights, and Romanian law relevant to European affairs, as well as understanding and applying them.
- d) contributing to the development of the European spirit and values.
We collect and process the following types of data:
- name and surname,
- home/residential address,
- email address,
- institutional affiliation,
- cookie identifiers.
We reserve the right to request other necessary data for the fulfilment of the tasks of the departments within the European Institute of Romania, strictly in accordance with legal provisions.
The European Institute of Romania, through its departments, collects personal data directly from you or from third parties (such as other institutions or entities that address the European Institute of Romania or with which the European Institute of Romania has partnerships, cooperation agreements, or other data subjects) or from public documents.
In the case of processing personal data obtained from legal entities, these entities are obliged to provide you with the necessary information regarding the use of the transmitted personal data.
Terms within the meaning of Regulation (EU) No 679/2016:
personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;
restriction of processing means the marking of personal data stored for the purpose of limiting their processing in the future;
controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Consent of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
The principles underlying the processing of personal data are:
- Good faith, authorization, and responsibility in the processing of personal data;
- Collection of data exclusively for specified, explicit, and legitimate purposes;
- Adequate and non-excessive collection of personal data, in relation to the purposes for which they are collected and processed;
- Confidentiality regarding the processing of personal data;
- Respect for the rights of data subjects regarding the processing of personal data.
Purpose:
Personal data is collected and processed for the following types of activities in the field of European affairs:
- Specific support activities for carrying out current activities, such as those specific to the field of human resources, financial-accounting, etc.;
- Research and development activities, including the elaboration of studies, analyses, the production and dissemination of periodic publications (Romanian Journal of European Affairs, Newsletter);
- Activities and programs for continuous training and professional development, both short-term and long-term;
- Translation into Romanian, English, or French, as well as linguistic and legal revision;
- Public communication activities in the field of European affairs, through the organization of public conferences, seminars, roundtables, debates, etc.;
- Implementation of projects funded by non-reimbursable funds.
Storage methods:
For electronic/digital storage of data, we use the following services: Google Apps/Drive, MailChimp. The collected data is stored on the institution’s server and is protected at high security standards.
Data is also stored in paper format, specifying that these documents are managed by designated persons and archived in accordance with applicable legislation.
Data storage is strictly done for the purpose for which consent has been given, and access to this data is provided only to individuals responsible for the respective areas.
Your personal data is stored for the period necessary to carry out all the necessary steps to support the activities of the compartments within the IER, including:
- a) Supporting the development and implementation of the Romanian Government’s policies in the field of European affairs;
- b) Increasing the knowledge and skills of public officials and other socio-professional categories in the field of European affairs;
- c) Improving access to European Union law, European Court of Human Rights jurisprudence, and Romanian law relevant to European affairs, as well as understanding and application thereof;
- d) Contributing to the development of the European spirit and values.
Disclosure of data to other individuals:
In order to provide the most competitive services, fulfill our legal obligations, or for other legitimate purposes, it may be necessary to transmit your personal data to public authorities, judicial bodies, and other recipients, within Romania or outside it or the European Union. However, we always ensure adequate safeguards for the protection of your data (for example, standard contractual clauses, etc.).
Rights:
Any person has the right to refuse the processing of their personal data for well-founded and legitimate reasons.
Individuals who have previously given their consent for the collection and processing of their data have the following rights:
Right to information: They can request information regarding the processing activities of personal data, including the identity of the data controller, the purposes of the processing, the categories of personal data involved, the recipients or categories of recipients to whom the personal data have been or will be disclosed;
Right to rectification: They can rectify inaccurate personal data or request their completion;
Right to erasure (“right to be forgotten”): They can request the deletion of data if they are no longer necessary for the purposes for which they were collected or processed, if the consent has been withdrawn, if the data have been processed unlawfully, or if the data must be deleted to comply with a legal obligation;
Right to restriction of processing: They can request the restriction of processing if they contest the accuracy of the data, if the processing is unlawful, if the data are no longer necessary, or if they have objected to the processing;
Right to data portability: They can receive their personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another data controller;
Right to object: They can object to the processing of their personal data based on legitimate grounds, unless there are compelling legitimate grounds for the processing that override their interests, rights, and freedoms;
Right not to be subject to automated individual decision-making, including profiling: They can request human intervention in the processing and can express their point of view on the matter and challenge the decision.
You can request and obtain human intervention regarding the process mentioned above, express your own point of view on it, and contest the decision. Exceptions apply when such processing is necessary for the conclusion or performance of a contract, authorized by Union law or national law, or based on the data subject’s consent.
The exercise of the rights shall be based on a written, dated, and signed request addressed to the data protection officer at the email address dpo[at]ier.gov.ro. Upon receiving the request, the identity of the data subject will be verified. If the identity of the data subject cannot be confirmed, the request will be rejected. If the data subject provides additional information enabling their identification for the purpose of exercising their rights, the request will be analysed. The response will be provided within 30 days, in accordance with the provisions of the GDPR. In cases where it is necessary, due to the complexity and volume of simultaneous requests, this period may be extended.
When the processing is based on Article 6(1)(a) ‘the data subject has given consent to the processing of their personal data for one or more specific purposes’ or Article 9(2)(a) ‘the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provides that the prohibition referred to in paragraph 1 may not be lifted by the data subject’s consent’ of the GDPR, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal. Therefore, you can modify or revoke your consent at any time, and we will act accordingly immediately, unless there is a legal reason or legitimate interest for not doing so.
By accessing our website, we consider that you have acknowledged the information regarding the protection of personal data.