Privacy policy and protection of personal data

In this Privacy and Personal Data Protection Policy, hereinafter referred to as the Policy , you will find concrete answers about how your personal data is collected and processed. If you have a question or question regarding the issues presented, you can send us your questions to icresb@scdabraila.ro or to the contact details provided below.

The objectives of our approach, in order of importance, regarding this Policy are the following:

  • respect for your fundamental right to the protection of personal data and privacy;
  • compliance with legal provisions regarding the protection of personal data;
  • your complete and correct information about who ?, what ?, why ?, where ?, until when? and how? your personal data are processed, so that you have, at any time, control over the personal data that you entrust to us for processing to achieve our purposes.

This is the current and valid version at the moment, being updated on 14.12.2020.

  1. How to contact us?
  2. What does our Policy cover ?
  3. What personal data do we collect from you, why and how do we process it?
  4. For what purpose and how do we process the data collected online, by phone or directly by you?
  5. Who is responsible for the collection and processing of your personal data?
  6. From whom and how do we collect your personal data?
  7. What are the legal bases on which we process your personal data?
  8. Do we process personal data for profiling or decision making through an automated process?
  9. How long do we keep your personal data?
  10. To whom do we disclose / disclose your personal data?
  11. Is your personal data safe?
  12. Are we certified and have we adhered to a code of conduct?
  13. What are your rights guaranteed by GDPR?
  14. How can you exercise these rights?
  15. How to contact us?

The data are collected and processed by the Brăila Agricultural Development Research Station (SCDA Brăila), which is a public institution, based in Brăila Municipality, Șos. Vizirului, km 9, code 810008, CP 1001, Post Office Nr. 10, Braila County, email: icresb@scdabraila.ro , website:  www.icresb.scdabraila.ro .

For any issues related to the protection of personal data, as well as for the exercise of your rights guaranteed by Regulation 679/2016 and the national legislation in force, you can contact the Personal Data Protection Officer by e-mail: gdpr@netspace.ro .

  • What does our Policy cover ?
  • This Policy: takes effect from the date of the last update.
  • The last update of the Policy takes effect from: 14.12.2020.
  • Our policy applies to the website www.icresb.scdabraila.ro
  • What personal data do we collect from you, why and how do we process it?

To carry out our current activity, through the website www.icresb.scdabraila.ro , you can contact us directly, at the phone numbers / e-mail address, in which case we will process the data sent by you or

  • In the “Contact” section , you can communicate with us and ask us for any information and clarifications related to us and our core business. When you contact us, we process your name, email address, and any other information you provide in the content of the message in order to respond appropriately to your requests or questions.
  • In order to promote our activity and to be in contact with you, we have created presentation pages on social platforms (Facebook) on which you can contact us through messages, appreciations, comments. When you communicate with us, we process your identity online and any other data you provide in the content of the message, in order to properly respond to your requests or questions.
  • For what purpose and how do we process the data collected online, by phone or directly by you?

We process your personal data for:

  • Sending messages through the contact form
  • Sending messages through the Facebook page
  • Who is responsible for the collection and processing of your personal data?

SCDA BRĂILA is the operator responsible for the collection and processing of personal data through the website www.icresb.scdabraila.ro .

  • From whom and how do we collect your personal data?

We collect your personal data directly from you, either through the forms you fill out on the site, or through the e-mails you send us or by any other means of distance communication (mail, express courier, etc.), either by phone or directly at our headquarters.

  • What are the legal bases on which we process your personal data?

For communication with you through the contact section or any other forms for sending messages to us, your personal data are processed based on art. 6, paragraph 1, letter b) of Regulation 679/2016 (request / contract).

  • Do we process personal data for profiling or decision making through an automated process?

We do not process your personal data to create a profile for you, nor do we use an exclusively automated process without human intervention to make decisions about you.

  • How long do we keep your personal data?

We store personal data under the conditions of the relevant legislation for each purpose of processing and limit it to what is strictly and legally necessary.

Personal data that have become useless or expired, in accordance with the law, are irreversibly deleted / destroyed from any database and from any personal data storage / archiving media used.

As an exception, personal data that have become useless or have expired, in accordance with the law, may be stored for longer periods of time if they are necessary to defend a right in court of the data subject or ours.

  1. To whom do we disclose / disclose your personal data?

Depending on the purposes for which we process your personal data, we disclose data to state institutions and bodies, in accordance with the law or to judicial / criminal investigation bodies, in accordance with the law.

Under the conditions of the Investigation Procedure of October 9, 2018 , approved by Decision no. 161 of October 9, 2018 on the approval of the Procedure for conducting investigations by the National Authority for Supervision of Personal Data Processing, ANSPDCP receives full and immediate access to any personal data processed by us and any information we hold about you ., without being able to oppose their confidential nature.

  1. Is your personal data safe?

For the safe processing of your personal data for your fundamental rights and freedoms, we have taken appropriate technical and organizational measures for the protection of personal data, including, but not limited to:

  • All our employees sign a confidentiality agreement regarding the protection of personal data processed by them for the performance of their duties;
  • All employees are properly trained in the security measures implemented by us and which they must comply with for the protection of personal data;
  • We use only external services provided by providers that demonstrate a high level of security of personal data processed on our behalf;
  • We implement technical and organizational security measures for the physical protection of the locations where we process personal data and the devices we use in the current activity.

All technical and organizational measures implemented by us are intended to protect your personal data against unauthorized or illegal processing and against accidental loss, destruction or damage.

  1. Are we certified and have we adhered to a code of conduct?

In Romania, until the date of updating this Policy , no certified certification body has been set up to certify that we comply with the legislation in force on the protection of personal data, nor has a Code of Conduct been developed and approved to which we can adhere. , which is why we adopt, including as good practice measures, any possible means of security to ensure the highest possible degree of protection for the personal data we process.

  1. What are your rights guaranteed by GDPR?

In order to comply with the provisions of Regulation 679/2016, we guarantee the observance of the following rights:

  1. You have the right to withdraw your consent to the processing of personal data at any time when the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of the processing of personal data carried out before its withdrawal. If your data has been processed based on your consent, the withdrawal of consent is as easy as granting it, by e-mail sent to icresb@scdabraila.ro .
  2.  You have the right to receive access to your personal data that we process, and we offer you a confirmation that we process your personal data, or not, and, if so, we provide you with all the mandatory information provided by art. 15 GDPR, as well as a copy of this data, if you request it, in the format requested by you and through the communication channel specified by you in the request.
  3. You have the right to obtain from us the rectification of inaccurate personal data concerning you, without undue delay, as well as the completion of personal data that are incomplete, including by providing an additional statement. We must communicate the rectification of your personal data to the recipients of your personal data (if any).
  4. You have the right to request the deletion of the personal data we process.

We are obliged to delete your personal data and we will do so without undue delay, if the following conditions provided by art. 17, paragraphs 1 and 2 of the GDPR:

  • personal data are no longer necessary for the purposes for which they were collected or processed;
  • you withdraw your consent on the basis of which the processing takes place and there is no other legal basis for the processing;
  • you object to the processing for reasons related to your particular situation and there are no legitimate reasons prevailing in respect of the processing (art. 21, para. 1 GDPR) or you oppose the processing for the purpose of direct marketing (art. 21, paragraph 2 GDPR);
  • your personal data has been processed illegally;
  • your personal data must be deleted in order to comply with a legal obligation incumbent on us under Union or national law to which we are subject;
  • personal data were collected in connection with the provision of information society services directly to a child.

If we have made personal data public and we are required to delete it, taking into account available technology and the cost of implementation, we take reasonable steps, including technical measures, to inform operators who process your personal data that you have requested the deletion by these operators of any links to such data or of any copies or reproductions of such personal data.

We will refuse to delete your personal data under the following conditions expressly provided by art. 17, para. 2 GDPR:

  • whether the processing of personal data is necessary for the exercise of the right to freedom of expression and information;
  • if the processing of personal data is necessary in order to comply with a legal obligation which provides for processing under Union or national law applicable to us or for the performance of a task performed in the public interest or in the exercise of official authority the case;
  • if the processing of personal data is necessary for reasons of public interest in the field of public health, in accordance with Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
  • if the processing of personal data is necessary for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89 (1), in so far as the exercise of your right to the deletion of personal data is likely make it impossible or seriously affect the achievement of the objectives of that processing;
  • if the processing of personal data is necessary for the establishment, exercise or defense of a right in court.
  • You have the right to request the restriction of the data processed in the following cases:
  • challenge the accuracy of the data and we will restrict its processing for a period that allows us to verify the accuracy of the data;
  • the processing is illegal, and you object to the deletion of personal data, instead requesting a restriction on their use;
  • we no longer need personal data for the purpose of processing, but you request it from us in order to establish, exercise or defend a right in court;
  • you object to the processing in accordance with art. 21 para. 1 GDPR, for the time period in which we verify that our legitimate rights prevail over your rights.

If processing has been restricted for the reasons set out above, your personal data may, except for storage, be processed only with your consent or for the establishment, exercise or defense of a right in court or for the protection of rights another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you obtained the processing restriction from us, you will be informed by us before the processing restriction is lifted.

  • You have the right to data portability . You can request at any time to receive personal data concerning you and which you have provided to us in a structured, commonly used and automatically readable format and you have the right to transmit this data to another operator without obstacles on our part, if:
  • processing is based on consent;
  • processing is based on a contract between us and you.
  • the processing is performed by automatic means.

In exercising your right to data portability, you have the right to have personal data transmitted directly from one operator to another where this is technically feasible.

Exercising your right to data portability is without prejudice to Article 17 GDPR (right to delete personal data), as that right does not apply to the processing necessary to perform a task performed in the public interest or in the exercise of official authority vested in the controller.

Your right to data portability is without prejudice to the rights and freedoms of others. 

  • You have the right to oppose , at any time, for reasons related to the particular situation you are in, the processing of personal data carried out pursuant to art. 6, para. 1, lit. e) or f) of the GDPR, including the creation of profiles based on those provisions.

We immediately stop processing your personal data if you object to the processing, unless we demonstrate that we have legitimate and compelling reasons justifying the processing and prevailing over your interests, rights and freedoms or that the purpose is to establish, exercise or defend a right in court.

When the processing of personal data is for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for this purpose, including the creation of profiles, insofar as it is related to that direct marketing. , and we will immediately stop processing your personal data for direct marketing purposes.

In the context of using the information society services, you can exercise your right to object to the processing of personal data by automatic means using technical specifications.

If we process your personal data for the purposes of scientific or historical research or for statistical purposes, you may, for reasons related to your particular situation, object to the processing of personal data concerning you, unless the processing it is necessary for the performance of a task for reasons of public interest.

  • You have the right not to be subject to a decision based solely on automatic processing, including profiling , which produces legal effects that affect or similarly affect you to a significant extent.

Your right not to be subject to a decision based solely on automatic processing does not apply if the decision:

  1. is required for the conclusion or performance of a contract between you and us;
  2. is authorized by Union or national law applicable to us and which also provides for appropriate measures to protect your rights, freedoms and legitimate interests;
  3. if it is based on your explicit consent.

In the cases referred to in points (a) and (c), we implement appropriate measures to protect your legitimate rights, freedoms and interests and we guarantee at least your right to obtain human intervention from us to express your point of view. view and challenge the decision.

  1. You have the right to file a complaint with ANSPCP . The contact details of the National Authority for the Supervision of Personal Data Processing are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, Email: anspdcp@dataprotection.ro , Landline: +40.318.059.211, +40.318.059.212, Fax +40.318.059.602.

14. How can you exercise these rights?

You can exercise all your rights by applying at our headquarters or by e-mail, using the contact details in the preamble.