Protection of personal data
On May 25, 2018, Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC applicable to any data operator or authorized person located in the European Union and to any person who processes data personal data of data subjects located in the European Union or providing services to them.
DASM Cluj-Napoca, based in str. Venus fn, Cluj county, Fiscal Code 4305857, telephone 0264-599316, contact@dasmclujnapoca.ro, processes the personal data necessary to provide services and information for taxpayers/citizens/petitioners, for carrying out the specific activity of the public administration and for fulfilling the obligations legal.
Depending on the department to which the data subject applies, we collect the following categories of personal data of data subjects from outside the institution:
- first and last name, address, CNP, series and bulletin number, fiscal data and real estate data, mobile phone number, e-mail address, education and profession data, image, criminal data, criminal convictions, record, origin ethnic, health, citizen and employee data;
- within the partners with whom we have collaborations for the provision of products and services, we collect personal data of legal representatives or delegates, position held, mobile phone, email address.
Principles of personal data processing
DASM Cluj-Napoca processes personal data:
- legally, fairly and transparently to the data subject, which involves identifying the legal basis before processing, making available to the data subject information on the identity and contact details of the operator, the contact details of the data protection officer, the purposes of the processing , recipients, the rights of the data subject, the possibility of withdrawing consent, the possibility of filing a complaint before a supervisory authority as well as any other additional information necessary for transparent and fair processing;
- for specific, precise, explicit and legitimate purposes, which implies that the processing is carried out only for the purpose defined before the start of data collection; subsequent processing for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered incompatible with the initial purposes;
- in an appropriate way and limited to the purposes of the processing, for a duration limited to the period necessary to fulfill the purposes, which implies the processing of the data strictly the data necessary to achieve the purpose for which it is carried out;
- in a manner to ensure adequate security of the data, by maintaining the secrecy of the data and implementing appropriate organizational and technical measures to prevent unauthorized access, illegal processing or distribution, as well as accidental loss, modification or destruction.
DASM Cluj-Napoca periodically updates the principles and technical and organizational measures applicable to the security of personal data, these principles containing our commitment to protect the confidentiality, integrity, availability of the data of our taxpayers and partners, online and offline.
The processing of personal data by DASM Cluj-Napoca is based on the following legitimate grounds:
- the processing is necessary for the fulfillment of legal obligations incumbent on the operator, serves the legitimate interest and/or serves the public interest, is necessary for the execution of a contract (in the interest of the data subject);
- consent: when the processing is not based on a legal obligation or does not result from the fulfillment of obligations related to the performance of our services, only based on the consent of the data subject. In order to express consent, DASM Cluj-Napoca makes available to the data subject the sample form - request and declaration regarding the expression of consent to the processing of personal data.
Purpose of processing / Duration of data retention
DASM Cluj-Napoca processes personal data for the purpose of carrying out the specific activities of the institution, namely:
- representation before the courts;
- social protection;
- public relations;
- protection of disabled people;
- child protection;
- payment;
- project management, monitoring public services, investments and public procurement;
- administration of public or private patrimony, conclusion of contracts;
- human resources;
- specific activities in relations with education;
- information and communication technology;
- press activities;
- administrative services, as well as any other activities specific to the institution deriving from other normative acts.
DASM Cluj-Napoca will store the personal data necessary to provide public services according to the object of activity, to keep in touch with the persons concerned and to comply with the applicable legal obligations. Personal data will be stored for the period of time necessary to achieve the processing purposes set out above, while respecting the legal requirements in force and the interest in protecting the rights of the data subjects.
The operator does not keep data longer than necessary, ensuring the implementation of data retention periods, where there is no mandatory period provided by law.
At the same time, personal data can be kept for a longer period for archiving purposes in the public interest or for scientific or historical research purposes, subject to the application of appropriate technical and organizational measures (such as anonymization, encryption, etc.).
If DASM Cluj-Napoca determines that it has a legitimate interest or a legal obligation to further process your personal data for other purposes, you will be informed about the secondary purpose.
Once the processing period expires, DASM Cluj-Napoca no longer has legal or legitimate reasons to process your personal data, measures aimed at deletion, anonymization, archiving, destruction in accordance with the applicable legal procedures and the requirements of protection of the interests of the concerned persons.
Origin of personal data
DASM Cluj-Napoca processes the personal data of taxpayers, commercial partners, visitors to the premises, people who access the institution's website or communicate with the operator through various communication channels (email, fax, post, meetings, participation in events, etc.) .), employees and collaborators, other natural persons.
The personal data processed by the operator are obtained:
- directly from the person concerned by the processing by providing data during meetings at the institution's headquarters, by telephone, receiving data by email/fax, sending requests and filling in documents necessary for the provision of local public administration services, filling in online forms, visiting headquarters or sending CVs for employment on vacant positions within the institution;
- indirectly, from other sources: through disclosures made by other institutions (data transfer), disclosures made in your interest or legitimate interest, by querying national databases where we have access regulated by law. These categories of information may include your name and identification data, email address, other information about you.
The rights of the data subject
The person concerned by the processing of personal data can at any time exercise the following rights:
- the right to be informed about the period for which the personal data will be stored according to the legal provisions, the recipients or categories of recipients of the data, the contact details of the data protection officer;
- the right to request access to personal data, the right to their rectification or deletion, restriction of processing, the right to oppose processing, as well as the right to data portability; these rights can be exercised by filling out standard applications posted on the institution's website and registering them at the DASM Cluj-Napoca headquarters;
- the right to withdraw consent at any time, without affecting the legality of the processing carried out on the basis of the consent given before its withdrawal;
- the right to lodge a complaint with a supervisory authority – the National Authority for the Protection of Personal Data or the judiciary for the defense of any rights guaranteed by the legislation on the protection of personal data that have been violated. The National Authority for the Supervision of the Processing of Personal Data can be contacted at the address G-ral Blvd. Gheorghe Magheru, no. 28-30, sector 1, Bucharest, Romania or by e-mail atanspdcp@dataprotection.ro;
- has the possibility to contact the person responsible for the protection of personal data (DPO), by sending a request to the address of the institution in Cluj-Napoca, str. Venus fn, Cluj county or to the e-mail addresscontact@dasmclujnapoca.ro.
The security measures used by DASM Cluj-Napoca to protect personal data
DASM Cluj-Napoca is committed to protecting personal data as soon as it comes into its possession by implementing technical and organizational security measures. Despite the operator's best efforts, if we identify a security breach, the operator will take appropriate corrective action.
To protect personal data, DASM Cluj-Napoca has taken organizational and technical measures aimed at several directions of action:
- user identification and authentication, type of access, data operation, backup execution, computers and access terminals, communication networks, staff training. It also uses pseudonymization measures, safe storage of information, so that an adequate level of protection and security is ensured.
DASM Cluj-Napoca uses the security procedures and guarantees it considers appropriate to protect the personal data of the persons concerned.
Our goal is to prevent unauthorized access, maintain data accuracy, ensure appropriate use of data, and protect data against loss of confidentiality, deletion, misuse, or alteration of information under the control of DASM Cluj-Napoca.
This material was prepared for the purpose of informing the data subjects by posting it on the institution's website regarding the implementation of Regulation no. 679/April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.