In accordance with the provisions of Law 129/2018 and of the GDPR Regulation No 679 of 27 April 2016,the Company DC INVEST INFORMATION SRL, processes personal data, in compliance with the principles referred to below, for legitimate purposes.
The processing of personal data is carried out by automatic/manual means, in compliance with legal requirements and in conditions that ensure the security, confidentiality, and observance of the rights of the persons concerned.
The processing of personal data shall be subject to the following principles:
- Notification. The Personal Data Operator shall be notified to the National Supervisory Authority for the Processing of Personal Data;
- Legality. The processing of personal data shall be made pursuant to and in accordance with the legal provisions;
- Well-determined purpose. Any processing of personal data shall be carried out for purposes which are clearly stated, explicit and legitimate, adequate, relevant and non-excessive in relation with the purposes for which it is collected and subsequently processed;
- Confidentiality. The internal regulations of organization and functioning of the institution contain rules with regard to the confidentiality of information.
- Data subject’s consent. Any processing of personal data, with the exception of processing which affects data from the categories strictly referred to in Law 129/2018 and Regulation 679/2016, can only be performed if the data subject has given his or her unambiguous and express consent for that processing;
- Notification. Notification of the persons shall be carried out by the institution which processes the personal data of the data subject;
- Protecting the data subject. The data subjects shall have the right to access the data which is processed, to change them, to object, and not to be subjected to an individual decision, as well as the right to address the National Supervisory Authority for the Processing of Personal Data or to the court of law for the defense of any rights guaranteed by the law, which have been breached;
- Security. The security measures of personal data shall be laid down so as to ensure an adequate level of security of the personal data processed.
THE RIGHTS OF THE DATA SUBJECT (governed by Law 129/2018 and Regulation 679/2016)
- the right to obtain from DC INVEST INFORMATION SRL, upon request and free of charge for one request per year, the confirmation of the fact that the data which concern them is or is not being processed by DC INVEST INFORMATION SRL;
- the right to obtain from DC INVEST INFORMATION SRL, upon request and free of charge, the rectification, update, blocking or erasure of the data whose processing does not comply with Law 129/2018 and Regulation 679/2016, in particular, the incomplete or inaccurate data;
- the right to obtain from DC INVEST INFORMATION SRL, upon request and free of charge, the transformation into anonymous data of the data whose processing does not comply with Law 129/2018 and Regulation 679/2016;
- the right to object at any time, for legitimate grounds, that data which concern you make the object of processing operations, with the exception of cases where there are legal provisions to the contrary; in the event of justified objection the processing can no longer target the data in question;
- the right to address the court of law for the defense of the rights guaranteed by this law, and which have been breached;
Also, in order to complain about the failure to comply with the rights guaranteed by Law no. 129/2018 and Regulation 679/2016 you can address the National Supervisory Authority for the Processing of Personal Data and / or the courts of law.
SECURITY OF PERSONAL DATA
- PDC INVEST INFORMATION SRL certifies that they satisfy the minimum requirements for the security of personal data;
- DC INVEST INFORMATION SRL uses security methods and technologies, together with policies applied to the employees and working procedures, in order to protect the personal data collected in accordance with the provisions of the laws in force;
- The internal regulations of organization and functioning of DC INVEST INFORMATION SRL contain rules with regard to the confidentiality of personal data which is processed within the institution;
- The staff of DC INVEST INFORMATION SRL is trained as regards the security and privacy of personal data which is processed;
- Access to computers containing the personal data databases is restricted with account/user and password;
- Personal data will not be alienated in any form to foreign third parties, without the consent of the owner of the data, and access to the databases is allowed only to persons authorized for this purpose;
For more details and information, any person concerned may refer the matter to the National Supervisory Authority for the Processing of Personal Data.
