PERSONAL DATA PROTECTION
1. Who are we?
The data operator is the Elite Art Club UNESCO Association, a non-governmental, non-profit organization which aims to promote fundamental UNESCO principles by organizing complex cultural projects which meet the needs of national civil society and contribute to the cultural and educational development of Romania. Our information is: Fiscal number: 15317229, Registration Number: 17 PJ /2003, headquarters in Valea Cascadelor street, no. 4, building 1, floor 6, apartment 18, sector 6, Bucharest, Romania.
You can contact us at our working point in Piata Natiunilor Unite 3-5, Bucharest, Romania, at +40 748 100 279; +40 748 100 280 or email firstname.lastname@example.org.
In order to be completely transparent in regards to the way we process personal data and in order to permit you to easily exercise, at any given time, your rights in accordance with the EU REGULATION 2016/679 (Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data) hereafter referred to as the GDPR Regulation, we have implemented measures for the security and the protection of said data and in order to facilitate communication between us.
This declaration of confidentiality explains the reason for processing your personal data, the way we collect, manage and ensure the protection of all the personal data you provide us, the way the data is used and the rights you have in regards to your data. It also specifies the contact details for the data operator and the National Authority for Supervising the Management of Personal Data.
- What personal data do we collect and for what purpose?
We collect your personal data only for the declared purpose of the events/projects in which you willingly participate and enroll, purpose described in the statute and presentation of each event.
We collect personal data such as: contact data (name, surname, phone, email), data regarding your activity (CV, biography, presentation, studies), video materials and photos necessary for your enrollment and participation, bank details if monetary awards are presented, your national ID or passport, etc. The detailed description of the type of data we collect is specified in the statute and presentation for each event.
- The legal basis for collecting your data
We process your personal data because:
By filling in the application form and sending the attached documents and by willingly sending your personal data to our mail address you have given your consent for the processing of your data for one or several specific purposes. At the same time you confirm that you have read, understood and accepted our Personal Data Protection Policy outlined in this document.
It is necessary for you to accept this policy before transmitting any information or personal data to us, by using the application forms on our website or our email addresses. You have given the above mentioned consent by accepting the present Personal Data Protection Policy.
You may exert your right to withdraw your consent by contacting the data operator the Elite Art Club UNESCO Association using the data presented at point 8 of this document.
- How long do we store your personal data?
Elite Art Club UNESCO stores your personal data only for the time necessary to accomplish the declared purpose as stated in the statute or the presentation of the event/project and according to specific legal provisions. For example contact details are kept for 5 years but contracts are kept according to fiscal law and archive laws. Video recordings and photos which have been published on our websites may be kept for a 10 years period. Notwithstanding, you may at any moment request the deletion of your personal data if you wish to do so. In this case we will respect your request and your data will be permanently deleted.
- How do we protect your personal data?
All your personal data is stored on our secured server. All data processing operations take place in conformity with internal policies and procedures which conform to the provisions of the GDPR Regulation.
In order to protect your personal data we have adopted a series of technical and organizational measures. The technical measures include adequate actions for tackling online security, the risk of losing data, data modification or unauthorized access, taking into account the risk presented by the processing process and the nature of the personal data which is being processed. The organizational measures include restricting access to personal data; access is granted solely to authorized personnel who have a legitimate need to use this data in order to accomplish specific work tasks.
The security of your personal data is important for us, but we ask you to keep in mind that no method of Internet transmission and no method of electronic storage is not 100% safe. While we are using the best means in order to protect your personal data, we cannot guarantee their absolute security.
- Who has access to your personal data and who do we share your data with?
Access to your personal data is granted to the hired personnel responsible for performing data processing operations of and to authorized personnel on a “need to know” basis. All personnel respect the signed confidentiality agreements which are required by the internal regulations.
As a result, the personnel with access to your personal data includes: project manager, accountant and jury members.
The information we collect will not be made available to any third party, with the exception of the cases when we are required to do so by law.
The Elite Art Club UNESCO Association will not share your personal data with third parties for marketing purposes. In other words, we will not use your personal data in order to contact you with news bulletins, marketing information or promotions. We may use your email address in order to contact you with information or updates regarding the events or projects in which you are participating or you have participated in the past.
- What are your rights and how can you exercise them?
You have specific rights, especially the right to access your personal data and update them in case your personal data are inexact or incomplete. If applied, you have the right to delete your personal data, to restrict the processing of your personal data, to oppose the processing and the right to data portability.
You can exercise your right by contacting the data operator using the ways listed in chapter 8: Contact information.
This data protection policy will remain in force until future changes, changes which will enter into effect after being posted on the website. The new version will be announced on the website by placing a warning message. We recommend you read and accept the new personal data protection policy.
Please keep in mind that:
– You can withdraw your consent for direct marketing – newsletter at any time by pressing the unsubscribe button present in every email.
– The rights listed above are not absolute. There are exceptions, and for that reason every request will be analyzed in order to assert whether or not it is justified. In the case of a justified request we will facilitate the exercise of your rights. If the request is unjustified we will reject it but you will be notified about our reasons and your right to file a complaint with the National Authority for Supervising the Management of Personal Data (https://www.dataprotection.ro/ ) and pursue legal means.
– We will try to reply to your request within 30 days. Nonetheless, the deadline may be prolonged based on various aspects such as the complexity of your request, the large number of requests or the impossibility of identifying you in due time.
– If, notwithstanding our best efforts, we are unable to identify you and you do not supply us with additional information that would enable us to identify you we are not obligated to reply to your request.
- Contact information
If you have any questions or concerns regarding the way we process your personal data or you wish to exercise your legal rights or you have any concerns regarding confidentiality please write us at email@example.com.
Our contact data are: Bucharest, Piata Natiunilor Unite 3-5, Bl B2, Parter, Sector 4, telephone: 0748.100.279