Privacy Policy

Privacy and Personal Data Protection Policy

  1. INTRODUCTION

This Privacy Policy complies with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (“GDPR”), as well as the requirements of Law no. 190/2018 implementing Regulation (EU) 2016/679 and Law no. 506/2004 on the processing of personal data and privacy protection in the electronic communications sector.

This Privacy Policy contains important information and aims to explain clearly and transparently what type of personal data we collect about you, how we process it, and your rights regarding the use of your personal information.

The personal data privacy policy covers how , as a personal data processor, processes personal data, specifically:

  • the purposes for which we collect and use your personal data;
  • the legal grounds for processing this data;
  • the categories of personal data we collect from you and process;
  • the duration of processing and storage of this data;
  • your rights as a data subject;
  • the persons to whom your personal data may be disclosed.
  1. WHO WE ARE

, an administrative-territorial unit, with SIRUTA code <….>, as a personal data controller, processes your personal data when you use the Application.

By accessing and using the Application and becoming a User, you are deemed to have read the Terms and Conditions of the Application and this Privacy Policy, and you consent to the processing of your personal information necessary for providing these services.

Please read this policy carefully to understand our data practices and how we handle your information. If you do not agree with any of these practices, do not use the services provided by this Application.

If after reading this agreement you still have doubts or questions, please contact us at: ….

  1. PRINCIPLES OF PROCESSING

Protecting and respecting privacy is one of our constant concerns.

Your personal data will be processed lawfully, fairly, and transparently.

The purposes for which we collect personal data are specific, explicit, and legitimate, and your personal data will not be further processed in a manner incompatible with these purposes.

We will collect your personal data in an adequate manner. The personal data collected are relevant and limited to what is necessary for processing, accurate, and, where necessary, updated.

We commit to taking all necessary measures to ensure the deletion or correction of inaccurate data.

Personal data will not be kept longer than necessary for processing, except as required by law when retention may be needed.

Personal data will be stored confidentially and securely.

Personal data will be shared with third parties only when necessary to provide services under agreements or as required by applicable laws.

Data subjects have the right to request access to personal data, correction, deletion, restriction, or portability of their data.

  1. CATEGORIES OF PERSONAL DATA PROCESSED

If you access our Application as a visitor without registering as a User:

  • Technical information such as IP address, browser type and version, login information, time zone settings, operating system and platform, device type, mobile network information, mobile OS, mobile browser type, collected via cookies or similar technologies (if applicable).

If a simple User account is created (not as a local citizen), the following personal data are processed:

  • Full name
  • Mobile phone number
  • Email address (optional)

If a User account is created as a local citizen, in addition to the above, the following personal data are processed:

  • Information in the identity card or other legal identification document (e.g., residence permit): personal ID number, series and number of the ID, date and place of birth, domicile, citizenship, photograph, etc.

By doing so, you explicitly consent to local authorities of processing your personal data for identification purposes.

  1. PURPOSE OF PROCESSING

Our main purpose in collecting personal information is to provide you a safe, efficient, and personalized experience. We use personal data to create, operate, deliver, and improve our services, register user accounts, identify you as a user and local citizen, and provide access to various features and services available to you as a registered user or local citizen.

If you only access our Application, personal data are processed to ensure a safe, efficient, and personalized experience for visitors.

If you consent to subscribe to our newsletter or other communications, personal data will be processed solely to communicate information regarding our services, products, and articles.

Personal information provided during account registration is processed only to verify identity, create and manage the user account, and maintain communication with you.

  1. LEGAL BASIS FOR PROCESSING

The operator processes your personal information based on:

  • Consent – We need certain personal information to provide our services and cannot do so without it.
  • Legal obligations – In some cases, we have a legal responsibility to collect and store your personal information.
  • Legitimate interests – Sometimes we process personal information for legitimate purposes balanced against your privacy rights.
  • Explicit consent – By accepting this privacy policy, you provide your specific consent for the purposes described above.

Legal grounds for processing include:

  • Data collected through the Application, contact forms, newsletter subscription, and user account registration are processed based on your prior, free, informed, and specific consent under Art. 6(1)(a) GDPR.
  • Creating a citizen account is processed under Art. 6(1)(b) GDPR for executing a contract between the operator and the data subject.
  • Address or other data may be processed for legal obligations under Art. 6(1)(c) GDPR.
  • Protection of vital interests under Art. 6(1)(d) GDPR or legitimate interests under Art. 6(1)(f) GDPR.
  1. DURATION OF PROCESSING AND STORAGE

Personal data will be retained as agreed or as permitted by law, and as long as necessary to achieve the processing purposes.

Upon your request or after the necessary duration, personal data will be deleted, anonymized, or removed from systems to prevent identification.

If you wish to stop processing or request deletion of personal data, you may exercise your rights listed in section 12 below.

  1. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

(a) When you request or permit it.

(b) To persons legally authorized to act on your behalf.

(c) To employees or collaborators of the operator for the purposes above.

(d) If required by law or government authorities for legal compliance, national security, law enforcement, or to prevent illegal activities.

(e) To respond to claims, protect rights, ensure safety, or prevent illegal activities.

(f) For Application administration (e.g., third-party hosting, cloud services, databases).

(g) For data analysis, testing, monitoring trends, improving security features, and user authentication.

(h) To fix technical issues in the Application.

(i) For identification by employees or entities cooperating with .

By agreeing to this policy, you consent to the processing of personal data by collaborators for the above purposes and Application functionality for local citizens.

  1. PERSONAL DATA SECURITY

You are responsible for securing access credentials (email, password) and for activities conducted with your account. Notify the administrator immediately if confidentiality is compromised.

monitors traffic to detect unauthorized access or changes. By using the Application, users consent to monitoring and recording their activities.

Appropriate measures are used to maintain confidentiality, security, and prevent unauthorized access or disclosure.

The operator has implemented internal IT security procedures, audits, user training, and access controls.

Note that these safeguards do not apply to information you share publicly, e.g., social networks.

Personal data is processed only by authorized personnel for specific purposes.

Data is stored in secure operating environments.

Personal information is encrypted and stored on 's servers, location: …

IT service providers have their own privacy policies.

By consenting, you confirm that you have read and agree with the Privacy Policy.

You are responsible for account confidentiality. Notify the operator immediately in case of unauthorized use or breaches.

  1. TRANSFER OF PERSONAL DATA

Processing may involve transferring or storing data outside the country, e.g., in the EU/EEA, with appropriate protections.

  1. DATA SUBJECT RIGHTS
  • Right of access, right to rectification, right to deletion, right to restrict processing, right to object, right to data portability, right not to be subject to automated decisions, right to lodge complaints with the Romanian data protection authority (ANSPDCP), and right to seek judicial remedies.

These rights apply regardless of the legal basis of processing.

  1. MISCELLANEOUS

The Application may contain links to partner sites with their own privacy policies.

The operator responds in writing to requests about personal data processing. Contact details:

SIRUTA Code:

Address

Email: …

Phone: …; …

has designated a Data Protection Officer, contactable at ….

  1. CHANGES TO THIS POLICY

If changes occur, this policy will be updated. Check the website regularly for updates. Previous versions remain available online.