POLITICA DE PRELUCRARE DATE CU CARACTER PERSONAL

 

CINE SUNTEM

 

Consiliul Patronatelor Bancare din Romania (CPBR) este organizatia patronala a sistemului bancar din Romania, infiintata in conformitate cu Legea dialogului social nr. 62/2011 inregistrata la Judecatoria Sector 1, Bucuresti, Romania, in baza Sentintei Civile nr. 6201/2014, cu sediul in Piata Montreal nr. 10, WTCB, intrarea D, parter, Sector 1, Bucuresti.

 

WHO WE ARE

 

Consiliul Patronatelor Bancare din România (CPBR), a Romanian Employers’ Association organized in accordance with Law No. 62/2011 regarding social dialog, registered with the Sector 1 Court, Bucharest, Romania under Decision No. 6201/2014, having its headquarters at World Trade Center, no. 10 Pia_a Montreal, Sector 1, Bucharest.

 

DATELE PE CARE LE COLECTAM DESPRE DUMNEAVOASTRA

 

In sensul legislatiei cu privire la protectia datelor, suntem operator atunci cand prelucram datele dumneavoastra cu caracter personal.

 

Orice prelucrare a datelor cu caracter personal in cadrul activitatii desfasurate de CPBR este efectuata in concordanta cu Regulamentul (UE) 2016/679 al Parlamentului European si al Consiliului din 27 aprilie 2016 privind protectia persoanelor fizice în ceea ce priveste prelucrarea datelor cu caracter personal si privind libera circula_ie a acestor date si de abrogare a Directivei 95/46/CE ("Regulamentul general privind protectia datelor" sau "GDPR", iar orice astfel de prelucrare are la baza urmatoarele principii:

-       prelucrarea se realizeaza in mod legal, echitabil si transparent;

-       colectarea este realizata in scopuri determinate, explicite si legitime;

-       prelucrarea si colectarea datelor se realizeaza doar pentru datele cu caracter personal necesare si relevante, limitate la scopul prelucrarii;

-       colectarea are la baza doar date cu caracter personal exacte si in cazul in care este necesar, actualizate;

-       pastrarea acestor date se realizezeaza atat timp cat scopul colectarii si prelucrarii este atins;

-       colectarea si prelucrarea datelor cu caracter personal este realizata de CPBR in conditii de integritate si confidentialitate fiind asigurata astfel o securitate adecvata a datelor cu caracter personal detinute.

 

DATA THAT WE COLLECT RELATED TO YOU

 

For the purpose of data protection legislation, we are an operator when processing your personal data.

 

Any processing of personal data by CPBR is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the processing of personal data related to the free movement of such data and the abrogation of the General Data Protection Directive 95/46 / EC ("General Data Protection Regulation" or GDPR), and any such processing is based on the following principles:

-       the processing is done legally, fairly and transparently;

-       the collection is done for determined, explicit and legitimate purposes;

-       the data processing and collection is only performed for the necessary and relevant personal data, limited to the purpose of the processing;

-       the collection is based only on accurate personal data and if necessary updated;

 

-       storage/preservation of these data is done as long as the purpose of the collection and processing is achieved;

-       the collection and processing of personal data is carried out by CPBR in conditions of integrity and confidentiality, thus ensuring an adequate security of the personal data held.

 

In acest sens, este important de stiut ca, exceptand situatiile expres mentionate in prezenta politica, site-ul www.cpbr.ro nu colecteaza informatii/date cu privire la persoanele fizice ce il viziteaza, nu colecteaza sau stocheaza datele utilizatorilor, IP-ul sau comportamentul acestora la navigarea pe site si nu utilizeaza cookies.

 

Un element important de avut in vedere de catre persoanele care acceseaza site-ul este faptul ca, pe unele pagini, tertii (ex. Facebook, YouTube, Google etc.) pot utiliza propriile cookie-uri. Astfel, in masura in care pe site-ul www.cpbr.ro folosim plugin-uri de la retele sociale (pentru a facilita partajarea informatiei) sau preluam anumite postari de pe aceste pagini, astfel de cookie-uri sau instrumente gen tracking ar putea fi utilizate de acesti terti prin intermediul site-ului nostru, fara ca CPBR sa poata controla acest lucru.

 

In relatia cu reprezentantii membrilor CPBR ce vor accesa sectiunea dedicata membrilor din site-ul www.cpbr.ro, vom prelucra datele cu caracter personal furnizate (nume, prenume si adresa de e-mail) pentru crearea datelor de acces si din motive de securitate. Totodata, la fiecare logare/incercare de logare in zona destinata membrilor vom prelucra date de tipul adresa de e-mail, parola si IP-ul utilizatorului.

 

Totodata, in masura in care ne contactati la adresa de contact afisata pe pagina web  sau participati la vreunul dintre demersurile de consultare publica lansate de catre CPBR si, in acest sens, ne furnizati date cu caracter personal, vom procesa aceste date exclusiv in acord cu scopul pentru care ni le-ati furnizat.

 

CPBR nu dezvaluie unor terti informatiile furnizate de catre o persoana fizica conform celor de mai sus, decat daca acest lucru este necesar pentru atingerea scopului (scopurilor) pentru care ni le-ati furnizat. CPBR nu va dezvalui datele dumneavoastra personale pentru activitati de marketing.

 

CPBR va dedica toate resursele si eforturile necesare pentru a prelucra datele dumneavoastra in deplina concordanta cu GDPR, precum si cu orice alta legislatie aplicabila pe teritoriul Romaniei.

 

CPBR isi rezerva dreptul de a actualiza si modifica periodic aceasta politica, pentru a reflecta orice modificari ale modului in care prelucram datele dumneavoastra cu caracter personal sau orice modificari ale cerintelor legale. In cazul oricarei astfel de modificari, vom afisa pe website-ul nostru versiunea modificata a politicii, motiv pentru care va rugam sa verificati, la fiecare accesare a site-ului, continutul acestei Politici de prelucrare date cu caracter personal.

In this respect, it is important to note that, except for the situations expressly mentioned in this policy, the website www.cpbr.ro does not collect information/data regarding the natural persons who visit it, does not collect or store user data, the IP or their behavior when browsing the site and is not using "cookies".

 

However, an important element to be considered by the natural persons who access the site is that, on some pages, third parties (e.g. Facebook, YouTube, Google etc.) can use their own cookies. Thus, to the extent that we use social networking plug-ins (to facilitate the sharing of information) on the www.cpbr.ro site or download certain posts from these pages, such cookies or tracking tools" could be used by these third parties through our site, while the CPBR cannot control such policies.

 

 

In relation to CPBR members' representatives who will access the section dedicated to the members of the www.cpbr.ro site, we will process the personal data provided (name, surname and e-mail address) to create the access data and for security reasons.  At the same time, on every login/attempt of login in the user area, we will process data such as email address, password, and user IP.

 

Also, if you contact us at the contact address displayed on the web site or participate in any of the public consultation steps launched by CPBR and in this respect provide us with personal data, we will only process these data exclusively in accordance with the purpose for which you have supplied it to us.

 

 

CPBR does not disclose to third parties the information provided by a natural person as described above, unless this is necessary to achieve the purpose (purposes) for which you have provided us the data. CPBR will not disclose your personal data for marketing activities.

 

CPBR will dedicate all resources and efforts to process your data in full compliance with the GDPR, as well as with any other applicable law on the Romanian territory.

 

CPBR reserves the right to periodically update and modify this policy to reflect any changes in the way we process your personal data or any changes to the legal requirements. In the event of any such change, we will display on our website the modified version of the policy, therefore please check the content of this Personal Data Processing Policy every time you access the site.

 

DREPTURILE PERSOANEI VIZATE

 

Prin persoana vizata, in sensul GDPR, se intelege persoana fizica ale carei date cu caracter personal sunt colectate/procesate de catre CPBR.

 

In acest sens, drepturile pe care le are aveti in calitate de persoana vizata sunt:

 

a) Dreptul de acces - inseamna ca aveti dreptul de a obtine o confirmare/infirmare din partea noastra ca prelucram sau nu datele dumneavoastra cu caracter personal iar, in cazul unui raspuns pozitiv, aveti dreptul de a afla informatii privitoare la scopurile prelucrarii; categoriile de date personale vizate; destinatarii sau categoriile de destinatari carora datele cu caracter personal le-au fost sau urmeaza sa le fie divulgate, perioada pentru care se preconizeaza ca vor fi stocate datele cu caracter personal sau, daca acest lucru nu este posibil, criteriile utilizate pentru a stabili aceasta perioada;

b) Dreptul la rectificare inseamna ca aveti dreptul de a cere sa rectificam sau sa completam datele dumneavoastra cu caracter personal, inexacte, neactualizate sau incomplete

c) Dreptul la stergerea datelor (dreptul de a fi uitat) insemna ca aveti dreptul de a ne cere sa va stergem datele dumneavoastra cu caracter personal, dar numai in cazul in care se aplica unul dintre urmatoarele motive:

-       acestea nu mai sunt necesare pentru indeplinirea scopului/scopurilor pentru care au fost colectate;

 

-       va retrageti consimtamantul (in cazul in care prelucrarea datelor se baza pe consimtamant);

-       va opuneti la o prelucrare ulterioara a datelor dumneavoastra cu caracter personal si nu exista alt temei legal care sa prevaleze in ceea ce priveste prelucrarea;

-       datele cu caracter personal au fost prelucrate fara un temei legal;

-       datele cu caracter personal trebuie sterse in vederea respectarii unei obligatii legale, in temeiul dreptului Uniunii sau al dreptului intern.

 

d) Dreptul la restrictionarea prelucrarii - inseamna ca ne puteti cere sa restrictionam prelucrarea datelor dumneavoastra cu caracter personal, dar numai intr-unul din urmatoarele cazuri:

-       Dumneavoastra contestati exactitatea datelor cu caracter personal pe care le detinem in ceea ce va priveste, pentru perioada de timp necesara pentru a verifica exactitatea datelor;

-       Prelucrarea nu ar avea la baza un temei legal, iar dumneavoastra va opuneti stergerii datelor personale, solicitand in schimb restrictionarea utilizarii lor;

 

e) Dreptul la portabilitatea datelor inseamna ca aveti dreptul de a ne cere sa va furnizam datele cu caracter personal intr-un format anume structurat si care poate fi citit automat, sau puteti solicita ca acestea sa fie transferate direct catre un alt operator, insa numai in cazul in care prelucrarea se bazeaza pe consimtamantul dumneavoastra sau in baza unui contract incheiat cu dumneavoastra si prelucrarea se face prin mijloace automate;

 

f) Dreptul de a va opune inseamna ca aveti dreptul de a va opune, din motive legate de situatia particulara in care va aflati, prelucrarii datelor personale care va privesc;

 

g) Dreptul de a va retrage consimtamantul - cu privire la prelucrarea datelor dumneavoastra cu caracter personal, fara a afecta legalitatea prelucrarii efectuate pe baza consimtamantului inainte de retragerea acestuia.

RIGHTS OF THE DATA SUBJECT

 

The data subject, in the GDPR sense, is the natural person whose personal data is collected/processed by CPBR.

 

In this sense, the rights that you have as the data subject concerned are:

 

a) The right of access means that the data subject shall have the right to obtain from the controller confirmation/information as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the information related to the purposes of the processing; the recipients or categories of recipients to whom personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

 

 

b) The right to rectification means that you have the right to request rectification or addition of your personal data, which is inaccurate, outdated or incomplete;

 

c) Right to erasure (right to be forgotten) - the data subject shall have the right to request the erasure of personal data concerning him or her without undue delay, where one of the following grounds applies:

 

-       the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

-       the data subject withdraws consent (in case the data processing is based on consent);

-       the data subject objects to the later processing of personal data and there are no overriding legitimate grounds for the processing;

 

-       the personal data have been unlawfully processed;

-       the personal data have to be erased for compliance with a legal obligation in the Union or Member State legislation to which the controller is subject;

 

 

d) Right to restriction of processing - the data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

-       the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

-       the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

 

 

e) Right to data portability - the data subject shall have the right to receive the personal data concerning him or her, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means;

 

f) Right to object - the data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her;

 

g) Right to withdraw your consent - to the processing of your personal data without affecting the legality of the processing performed under consent prior to its withdrawal.

 

 

Daca aveti nelamuriri sau ingrijorari cu privire la modul in care va gestionam datele cu caracter personal pe care ni le-ati furnizat sau doriti sa faceti o reclamatie va stam la dispozitie la adresa de e-mail: office@cpbr.ro

De asemenea, in cazul in care considerati ca datele dumneavoastra cu caracter personal nu sunt prelucrate in conformitate cu prevederile legale, aveti dreptul de a depune o reclamatie la autoritatea competenta de supraveghere a prelucrarii datelor cu caracter personal, ale carei date de contact le puteti gasi la adresa de web: 

http://www.dataprotection.ro/?page=contact&lang=ro

 

If you have any queries or concerns about how we will handle the personal data you have provided us or wish to make a complaint, please sned us an e-mail to the following address: office@cpbr.ro

 

Also, if you consider that your personal data is not processed in accordance with the legal provisions, you have the right to file a complaint with the competent authority for personal data processing supervision, whose contact details you can find at the web address:

http://www.dataprotection.ro/contact&lang=en

 

 

 

Copyright © 2018 CPBR.
Toate Drepturile Rezervate

    ACASA  |   RO   |   EN