Information regarding the processing of personal data
Starting with the 25 th of May 2018, the 2016/679 European Regulation regarding the processing of personal data and the free movement of such data (The “Regulation” ) has come into force. OSMR is in compliance with the provisions of the Regulation and the equivalent national law.
The Regulation essentially covers the protection and safeguarding of individuals’ rights to privacy and sets out strict global confidentiality requirements governing the way personal data is managed and protected, while respecting individual choices, regardless of where they are sent, processed or stored.
The Regulation requires OSMR to comply with a wide range of demands in the activities of collecting and processing of personal data. At the same time OSMR must comply with the following six principles:
- The need for transparency in regards to the management and use of personal data;
- Limiting the processing of personal data to the specified, legitimate purposes;
- Restriction of collection and storage to the minimum amount of personal data required for a specific purpose;
- Provide individuals with the ability to correct or request the deletion of personal data;
- Limiting the storage of personal data only to the time required to reach the goal;
- Ensure security, integrity, confidentiality and protection of personal data through appropriate security practices.
- Personal data collected by OSMR
Personal data refers to any information that allows a natural person to be identified. These include the name, serial number and ID card number, address, date of birth, bank account number, email address, no. telephone / fax, etc. Processing refers to all operations that may be conducted with the data, such as collecting, recording, storing, adjusting, organizing, using, disclosing, transferring and deleting data.
- Rights of the person concerned
The Regulation increases the control the person has over how their personal data is captured and used.
The persons protected by the Regulation have certain specific rights that they can exercise for the protection of their personal data, namely:
- Right to access information
You have the right to request a report of your personal data, processed by OSMR.
- Right to rectification
You have the right to obtain from the OSMR, without undue delay, the correction of inaccurate personal data which is attributed to you. Taking into account the purposes for which the personal data was processed, you have the right to obtain the completion of incomplete personal data, including by providing additional statements.
- Right to delete data (“the right to be forgotten”).
You have the right to obtain from OSMR the deletion of personal data concerning you if:
- the data is no longer required for the purpose for which it was collected or processed;
- you withdraw your consent to the collection of you personal data;
- object to your data processing by OSMR;
- OSMR processes your personal data illegally;
- The data must be deleted for compliance with a statutory obligation imposed by OSMR.
- The right to restrict processing
You may request the restricted processing of your personal data if you dispute the accuracy of the data. You may also request the restricted processing of personal data in other cases provided by law.
- The right to data portability
You may request and receive your personal data that has been collected by OSMR or you may request that the data be sent to another operator.
- Right to opposition
You can oppose the use of your personal data by OSMR. We will take your opposition into consideration and determine if the processing of your information may affect you in any prejudicial manner unless OSMR stops processing the data.
- Right of withdrawal of consent
In cases where processing is based on your consent, you can withdraw your consent at any time. Withdrawal of consent will only take effect for the future. The prior processing of the personal data will remain valid.
- The right to oppose automatic decisions
You have the right to request and obtain human intervention with respect to the processing of your personal data and you can express your view point as per Art. 22 of the Regulation.
- Right to file a complaint
If you are dissatisfied with the way we respond to your requests, you have the right to formulate a complaint. If you are still dissatisfied with our response to the complaint, you may forward the complaint to the OSMR Data Protection Officer using the contact details mentioned in paragraph 8 of this Notice.
You can also formulate a complaint regarding how your personal data is being processed with the National Supervising Authority for Personal Data Processing.
- Statement of consent
By completing the Contact Form on the OSMR website, by transmitting personal data to the OSMR official email addresses and by communicating in any way with OSMR, regardless of the form of your personal data, you agree that OSMR collects your personal data for the purpose of recording your message and responding for the duration necessary to accomplish that purpose. According to Regulation (EU) 2016/679 you have the right to be informed, the right of access, to data interference (rectification, updating), the right to not be subject to an individual decision, the right to portability and the right to file a complaint. At the same time, you may oppose at any time, free of charge, the processing of your personal data and request the deletion of the data as provided in Section 4 of this Notice. In order to exercise these rights, you may formulate a request by using the contact details mentioned in Section 8 of this Notice.
- Managing personal data by OSMR
OSMR policies and standards are in place to keep your data safe. These measures are updated periodically to meet current regulations.
We also take appropriate technical and practical measures in regards to our policies and procedures, IT security, etc. in order to ensure the confidentiality and integrity of your personal data.
An additional guarantee is given by employee training and their obligation to maintain confidentiality and not to disclose your personal data illegally.
- Retention of data period
OSMR is required to keep your personal data only for as long as it is required for the purpose for which it is processed. OSMR does not process personal data as an end goal, your personal data being processed considering your quality of legal (or conventional) representative of an entity with which the OSMR has established a connection.
You may exercise your rights regarding the protection of your personal data by submitting a request to the OSMR headquarters in Bucharest, Calea Floreasca 169, Sector 1, Bucharest, ZC 014459 or by email, to: email@example.com. In this regard, only the emails containing the phrase “Data protection” will be considered.
Furthermore, OSMR has established a designated person that may be contacted should the need for any clarifications regarding the use of you personal data arise. The designated person will also receive at the aforementioned e-mail and physical addresses any complaint that you might formulate in this regard.