Thank you for accessing the website of “Unirea” National High School
in Târgu Mureș, Mureș County or for accessing one of the services of this public
institution directly at one of our Offices.
When you visit the website www.colegiulunirea.ro,
when you contact us or when you call on our services, you entrust us with your
information. “Unirea” National High School in Târgu Mureș, as a Personal Data Operator,
respects the particular character and security of the processing of personal data of
to explain what data we process, why we process it and what we do with it. Access to
the website of “Unirea” National High School in Târgu Mureș is free and free for all
By browsing the website www.colegiulunirea.ro,
by contacting us via an e-mail address provided in the Information section, or by
adequately informed about data processing. For any questions or requests regarding
information posted on the website, please contact us using the e-mail address
In accordance with the provisions of GDPR (General Data Protection Regulation) and
Law no. 506 / 2004 on the processing of personal data and protection of privacy in
the electronic communications sector, the “Unirea” National High School in Târgu
Mureș, Mureș county has the obligation to manage safely and only for the purposes
specified below, the personal data we provide provide about yourself, a family
member, or another person. Any information provided by you will be considered and
will represent your express consent for your personal data to be used by the
“Unirea” National High School in Târgu Mureș, in accordance with the purposes
mentioned in this document.
Please note the following information:
Time period: we will try to respond to your request within 30 days. However, the
time limit may be extended for specific reasons related to the specific legal
right or complexity of your application;
Restricting access: In certain situations, we may not be able to give you access
to all or some of your personal data due to legal provisions. If we deny your
request for access, we will inform you of the reason for the refusal;
Unable to identify you: In some cases, we may not be able to find your personal
data due to the identifiers you provide in the request. An example of personal
data that we cannot consult when you provide us with your name and e-mail address
is the data collected through browser cookies. In such cases, if we are unable to
identify you as the data subject, we will not be able to comply with your
request, unless you provide additional identification information;
“Unirea” National High School will not have to ask for explicit approval or
consent to process personal data, as it has a legal basis for data processing
(REGULATORY ACT) although the concept of consent for some of the activities of
the Institution will remain important - for example, sending newsletters.
By “GDPR” we mean Regulation (EU) 679 / 2016 on the protection of individuals with
regard to the processing of personal data and on the free movement of such data.
According to GDPR, “Unirea” National High School in Târgu Mureș is a Personal Data
Operator. “Personal data” means any information relating to an identified or
identifiable natural person (“data subject”).
According to the legislation, you, as a visitor of the site or beneficiary of a
service provided by “Unirea” National High School in Târgu Mureș, are a
“targeted person”, i.e. an identified or identifiable natural person. An
identifiable natural person is a person who can be identified, directly or
indirectly, in particular by reference to an identifying element, such as a name, an
identification number, location data, an online identifier, or one or more many
specific elements, specific to his physical, physiological, genetic, mental,
economic, cultural or social identity.
Legal terms for data processing
Regarding the data that you provide us voluntarily by filling in and sending the
related form or by contacting us in any way, the legal basis is “to take steps at
the request of the data subject before concluding a contract” (art. 6 line (1)
letter b of the GDPR). Regarding the data that we collect automatically through the
consent to the processing.
What information do we collect?
Information you provide to us voluntarily:
When you contact us by phone or e-mail or communicate with us in any way, you
voluntarily give us the information we process. This information includes your
last name, first name, home address, email address and phone number. By
providing us with this information, we keep it secure and confidential in our
database. We do not disclose or transfer information to third parties except to
state institutions that have this right by law;
Information we collect automatically:
When you access and browse the website of the “Unirea” National High School in
Târgu Mureș, it is possible to collect information about your visits to the site.
Whenever you access the site from a computer / laptop / mobile phone or any other
electronic / smart communication device, there is also the possibility to collect
and store information including the IP address, the type of engine search and / or
the place from which the site is accessed, as well as information related to the
that are linked / contained by our site. We may collect this information by using
cookies or other similar technologies.
Purposes for data collection:
to take the necessary steps in order to conclude a contract, a collaboration or
the purchase of services / products that we offer / request;
to answer questions and requests;
to defend ourselves against cyber attacks;
for marketing purposes, but only if you have given your prior consent;
to provide and improve the services we provide;
to provide and improve our website.
How long is the data stored?
We store personal data only for the period necessary to fulfill the purposes,
depending on the provisions of the Law governing the activity we carry out jointly,
as Operator - Person concerned.
To whom do we disclose your data?
We will not disclose your information to third parties for use in their own
marketing or commercial purposes without your consent. However, we may disclose your
information to the following entities:
Service Providers - We may disclose your information to other companies that
provide us with services and act as authorized persons, such as the company that
helps us with hosting our site. These entities are selected with particular care
to ensure that they meet specific personal data protection requirements. These
entities have a limited ability to use your information for purposes other than
providing us with services;
Courts, prosecutor's offices or other public authorities to comply with the law
or in response to a mandatory legal procedure (such as a search warrant or a
To other parties, with your consent or instructions. In addition to the
third parties to whom you consent or request us to make such disclosure.
Do we transfer data to third countries?
We do not currently transfer your data to countries outside the European Union.
If this policy changes, we will inform you accordingly and ask for your consent.
Legality of processing
Processing is legal only if and to the extent that at least one of the following
the data subject has given his / her consent to the processing of his / her
personal data for one or more specific purposes;
the processing is necessary for the performance of a contract to which the data
subject is a party or to take action at the request of the data subject before
concluding a contract;
the processing is necessary in order to fulfill a legal obligation incumbent on
processing is necessary to protect the vital interests of the data subject or
another natural person;
the processing is necessary for the performance of a task which serves a public
interest or which results from the exercise of the public authority with which
the operator is vested;
the processing is necessary for the legitimate interests pursued by the
controller or a third party, unless the interests or fundamental rights and
freedoms of the data subject prevail, which require the protection of personal
data, especially when the data subject is a child.
Letter f. does not apply in the case of processing performed by public authorities in
the performance of their duties.
What are your rights?
Right of withdrawal of consent - If the processing is based on consent, you may
withdraw your consent at any time and free of charge unless otherwise provided
The right to file a complaint with the National Authority for the Supervision of
Personal Data Processing;
The right to go to court;
Right of access - You have the right to obtain from us a confirmation that
personal data concerning you are processed or not and, if so, you have the right
to access those data;
Right to rectification - You have the right to obtain from us, without undue
delay, the rectification of inaccurate personal data concerning you. Taking into
account the purposes for which the data were processed, you have the right to
obtain the completion of personal data that are incomplete, including by
providing an additional statement;
Right to erasure of data (“right to be forgotten”) - In situations where the
data are no longer necessary for the purpose, the consent has been withdrawn and
there is no other legal basis for the processing, you object to the processing
and there are no legitimate reasons prevailing in terms of processing or
personal data have been processed illegally, you have the right to obtain the
deletion of data concerning you, without undue delay;
Right to restrict processing - You have the right to obtain from us the
restriction of processing if one of the following cases applies:
challenge the accuracy of the data, for a period that allows us to verify the accuracy of the data;
the processing is illegal, and you object to the deletion of personal data,
instead requesting a restriction on their use;
we no longer need personal data for the purpose of processing, but you request
it from us in order to establish, exercise or defend a right in court;
you have objected to the processing in accordance with Article 21 (1) of the
GDPR, for the period of time during which it is verified that our legitimate
rights prevail over your rights.
Right to data portability - You have the right to receive personal data
concerning you and which you have provided to us, in a structured, commonly used
and automatically readable format and you have the right to transmit this data
another operator, without hindrance on our part, if:
processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2)
(a) of the GDPR or a contract pursuant to Article 6 (1) (b) of the GDPR;
the processing is performed by automatic means.
The right not to be subject to a decision based solely on automatic processing,
including profiling, which produces legal effects that affect or similarly
affect you to a significant extent. You do not have this right if the decision:
is required for the conclusion or performance of a contract between you and a
is authorized by Union or national law applicable to the controller and also
provides for appropriate measures to protect the rights, freedoms and legitimate
interests of the data subject;
it is based on your explicit consent.