Privacy Policy

Thank you for accessing the website of “Unirea” National High School in Târgu Mureș, Mureș County or for accessing one of the services of this public institution directly at one of our Offices.

Overview

When you visit the website www.colegiulunirea.ro, when you contact us or when you call on our services, you entrust us with your information. “Unirea” National High School in Târgu Mureș, as a Personal Data Operator, respects the particular character and security of the processing of personal data of each person with whom it comes into contact. The purpose of this Privacy Policy is to explain what data we process, why we process it and what we do with it. Access to the website of “Unirea” National High School in Târgu Mureș is free and free for all interested persons.

By browsing the website www.colegiulunirea.ro, by contacting us via an e-mail address provided in the Information section, or by reading this document, entitled “Privacy Policy”, you declare that you have been adequately informed about data processing. For any questions or requests regarding the Terms and Conditions and the Privacy Policy, the use of the site and the information posted on the website, please contact us using the e-mail address colegiulunirea45@colegiulunirea.ro.

In accordance with the provisions of GDPR (General Data Protection Regulation) and Law no. 506 / 2004 on the processing of personal data and protection of privacy in the electronic communications sector, the “Unirea” National High School in Târgu Mureș, Mureș county has the obligation to manage safely and only for the purposes specified below, the personal data we provide provide about yourself, a family member, or another person. Any information provided by you will be considered and will represent your express consent for your personal data to be used by the “Unirea” National High School in Târgu Mureș, in accordance with the purposes mentioned in this document.

Please note the following information:

Time period: we will try to respond to your request within 30 days. However, the time limit may be extended for specific reasons related to the specific legal right or complexity of your application;
Restricting access: In certain situations, we may not be able to give you access to all or some of your personal data due to legal provisions. If we deny your request for access, we will inform you of the reason for the refusal;
Unable to identify you: In some cases, we may not be able to find your personal data due to the identifiers you provide in the request. An example of personal data that we cannot consult when you provide us with your name and e-mail address is the data collected through browser cookies. In such cases, if we are unable to identify you as the data subject, we will not be able to comply with your request, unless you provide additional identification information;
“Unirea” National High School will not have to ask for explicit approval or consent to process personal data, as it has a legal basis for data processing (REGULATORY ACT) although the concept of consent for some of the activities of the Institution will remain important - for example, sending newsletters.

Definitions

By “GDPR” we mean Regulation (EU) 679 / 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. According to GDPR, “Unirea” National High School in Târgu Mureș is a Personal Data Operator. “Personal data” means any information relating to an identified or identifiable natural person (“data subject”).

According to the legislation, you, as a visitor of the site or beneficiary of a service provided by “Unirea” National High School in Târgu Mureș, are a “targeted person”, i.e. an identified or identifiable natural person. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity.

Legal terms for data processing

Regarding the data that you provide us voluntarily by filling in and sending the related form or by contacting us in any way, the legal basis is “to take steps at the request of the data subject before concluding a contract” (art. 6 line (1) letter b of the GDPR). Regarding the data that we collect automatically through the use of cookies or other similar technologies, the basis for processing is consent. By accessing the site, by accepting the Privacy Policy, you validly give your consent to the processing.

Information collected

What information do we collect?

Information you provide to us voluntarily: When you contact us by phone or e-mail or communicate with us in any way, you voluntarily give us the information we process. This information includes your last name, first name, home address, email address and phone number. By providing us with this information, we keep it secure and confidential in our database. We do not disclose or transfer information to third parties except to state institutions that have this right by law;
Information we collect automatically: When you access and browse the website of the “Unirea” National High School in Târgu Mureș, it is possible to collect information about your visits to the site. Whenever you access the site from a computer / laptop / mobile phone or any other electronic / smart communication device, there is also the possibility to collect and store information including the IP address, the type of engine search and / or the place from which the site is accessed, as well as information related to the sections you consult. The privacy policy applies to all activities and information that are linked / contained by our site. We may collect this information by using cookies or other similar technologies.

Purposes for data collection:

to take the necessary steps in order to conclude a contract, a collaboration or the purchase of services / products that we offer / request;
to answer questions and requests;
to defend ourselves against cyber attacks;
for marketing purposes, but only if you have given your prior consent;
to provide and improve the services we provide;
to provide and improve our website.

How long is the data stored?

We store personal data only for the period necessary to fulfill the purposes, depending on the provisions of the Law governing the activity we carry out jointly, as Operator - Person concerned.

To whom do we disclose your data?

We will not disclose your information to third parties for use in their own marketing or commercial purposes without your consent. However, we may disclose your information to the following entities:

Service Providers - We may disclose your information to other companies that provide us with services and act as authorized persons, such as the company that helps us with hosting our site. These entities are selected with particular care to ensure that they meet specific personal data protection requirements. These entities have a limited ability to use your information for purposes other than providing us with services;
Courts, prosecutor's offices or other public authorities to comply with the law or in response to a mandatory legal procedure (such as a search warrant or a court decision);
To other parties, with your consent or instructions. In addition to the disclosures described in this Privacy Policy, we may disclose information to third parties to whom you consent or request us to make such disclosure.

Do we transfer data to third countries?

We do not currently transfer your data to countries outside the European Union. If this policy changes, we will inform you accordingly and ask for your consent.

Legality of processing

Processing is legal only if and to the extent that at least one of the following conditions applies:

the data subject has given his / her consent to the processing of his / her personal data for one or more specific purposes;
the processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before concluding a contract;
the processing is necessary in order to fulfill a legal obligation incumbent on the operator;
processing is necessary to protect the vital interests of the data subject or another natural person;
the processing is necessary for the performance of a task which serves a public interest or which results from the exercise of the public authority with which the operator is vested;
the processing is necessary for the legitimate interests pursued by the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject prevail, which require the protection of personal data, especially when the data subject is a child.

Letter f. does not apply in the case of processing performed by public authorities in the performance of their duties.

What are your rights?

Right of withdrawal of consent - If the processing is based on consent, you may withdraw your consent at any time and free of charge unless otherwise provided by law;
The right to file a complaint with the National Authority for the Supervision of Personal Data Processing;
The right to go to court;
Right of access - You have the right to obtain from us a confirmation that personal data concerning you are processed or not and, if so, you have the right to access those data;
Right to rectification - You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data were processed, you have the right to obtain the completion of personal data that are incomplete, including by providing an additional statement;
Right to erasure of data (“right to be forgotten”) - In situations where the data are no longer necessary for the purpose, the consent has been withdrawn and there is no other legal basis for the processing, you object to the processing and there are no legitimate reasons prevailing in terms of processing or personal data have been processed illegally, you have the right to obtain the deletion of data concerning you, without undue delay;
Right to restrict processing - You have the right to obtain from us the restriction of processing if one of the following cases applies:

challenge the accuracy of the data, for a period that allows us to verify the accuracy of the data;
the processing is illegal, and you object to the deletion of personal data, instead requesting a restriction on their use;
we no longer need personal data for the purpose of processing, but you request it from us in order to establish, exercise or defend a right in court;
you have objected to the processing in accordance with Article 21 (1) of the GDPR, for the period of time during which it is verified that our legitimate rights prevail over your rights.

Right to data portability - You have the right to receive personal data concerning you and which you have provided to us, in a structured, commonly used and automatically readable format and you have the right to transmit this data another operator, without hindrance on our part, if:

processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR or a contract pursuant to Article 6 (1) (b) of the GDPR;
the processing is performed by automatic means.

The right not to be subject to a decision based solely on automatic processing, including profiling, which produces legal effects that affect or similarly affect you to a significant extent. You do not have this right if the decision:

is required for the conclusion or performance of a contract between you and a data controller;
is authorized by Union or national law applicable to the controller and also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject;
it is based on your explicit consent.