Privacy

This Policy governs the relations between the owner of the website scanctd.ro, MEDAGORA CONSULTING SRL, based in Bucharest, District 1, Romania, registered at the Trade Register with no. J40/7292/2021, CUI 44154362, (from now on referred to as the "Company") and the persons using (from now on referred to as the "User") the website scanctd.ro (from now on referred to as the "Site" or "www. scanctd.ro”) and/or the services offered by the Company through the Site (from now on referred to as the “Services”).
This Policy describes what types of personal data are processed, how they are used, your options about such processing, and how the Company will respect your rights as a data subject under the EU Regulation 2016/679 of the European Parliament and the Council on the protection of individuals about the processing of personal data and on the free movement of such data ("GDPR").
We, therefore, recommend that you read this Policy carefully before using our scanctd.ro website to understand how your data is processed.
For the activity of personal data processing, the Company has appointed a data protection officer (from now on referred to as the Data Protection Officer or the "DPO"), by the provisions of the GDPR, who can be contacted by email.

The company processes the personal data you provide to us when you use the site, when you register on our page, when you subscribe to a subscription, or when you subscribe to the newsletter.
The personal data processed by the Company are: name, surname, e-mail address and home address (street, city, county/district, postal code, country).
We also use cookies and similar technologies to recognise you and your devices. How we use these technologies is described in the Cookies Policy section.
All data you provide by filling in the online forms will be used only for your use of the site's services or for subscribing to the newsletter.

By law, you are granted the following rights as a data subject:
1. The right to information and the right of access to obtain from the Company, upon request and free of charge, the confirmation of the fact that the data concerning it are or are not processed by the Company;
2. Right to rectification - The data subject has the right to obtain from the Company, without undue delay, the rectification of inaccurate personal data concerning him. Taking into account the purposes for which the data were processed, the data subject has the right to obtain the completion of incomplete personal data, including by providing an additional statement;
3. The right to delete data ("the right to be forgotten")
(1) The data subject has the right to obtain from the Company the deletion of personal data concerning him without undue delay, and the operator must delete personal data without undue delay if one of the following reasons applies. :
a) personal data are no longer necessary for the purpose for which they were collected or processed;
(b) the data subject withdraws their consent based on which processing takes place by Article 6 (1) (a) or Article 9 (2) (a), and there is no other legal basis for the processing;
c) the data subject opposes the processing under Article 21 (1), and no legitimate reasons are prevailing in respect of the processing, or the data subject opposes the processing under Article 21 (2);
d) personal data have been processed illegally;
e) personal data must be deleted to comply with a legal obligation incumbent on the controller under Union or national law under which the controller is subject;
f) personal data have been collected in connection with the provision of information society services referred to in Article 8 (1).
(2) If the controller has made his data public and is obliged, under paragraph (1), to delete them, the controller, taking into account the available technology and the cost of implementation, shall take reasonable measures, including technical measures, to inform the operators who process the personal data that the data subject has requested the deletion by these operators of any links to the respective data or of any copies or reproductions of these personal data.
(3) Paragraphs 1 and 2 shall not apply in so far as processing is necessary:
a) for exercising the right to free expression and information;
b) to comply with a legal obligation which provides for processing under Union or national law applicable to the controller or for the performance of a task performed in the public interest or in the exercise of official authority with which the controller is vested;
c) for reasons of public interest in the field of public health, by Article 9 (2) (h) and (i) and Article 9 (3);
d) for archiving purposes in the public interest, for scientific or historical research or statistical purposes, by Article 89 (1), in so far as the right referred to in paragraph 1 is likely to make it impossible or seriously affects the achievement of the respective processing objectives; or
e) for ascertaining, exercising or defending a right in court;
4. The right of opposition - the right to oppose at any time, for good and legitimate reasons, that the data concerning it be the subject of processing, except in cases where there are contrary legal provisions;
5. The right not to be subjected to an individual decision - any person has the right to request and obtain:
a) the withdrawal or annulment of any decision which produces legal effects in respect of him, adopted exclusively based on the processing of personal data, carried out by automatic means, intended to assess some aspects of his personality, such as professional competence, credibility, behaviour or other such issues;
b) the re-evaluation of any other decision taken regarding it, which significantly affects it, if the decision was adopted exclusively based on a data processing that meets the conditions provided in letter a);
6. The right to restrict processing
(1) The data subject has the right to obtain from the Company the restriction of the processing in case one of the following cases applies:
a) the data subject disputes the accuracy of the data for a period that allows the operator to verify the accuracy of the data;
b) the processing is illegal, and the data subject opposes the deletion of personal data, requesting in return the restriction of their use;
c) the operator no longer needs the personal data for processing, but the data subject requests them for the ascertainment, exercise or defence of a right in court; or
d) the data subject has objected to the processing by Article 21 (1) for the period during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
(2) Where processing has been restricted under paragraph 1, such personal data may, except for storage, be processed only with the consent of the data subject or for the establishment, exercise or defence of a right in court; or for the protection of the rights of another natural or legal person or reasons of significant public interest of the Union or a Member State.
(3) A data subject who has obtained a processing restriction according to paragraph 1 shall be informed by the controller before the processing restriction is lifted;
7. Right to data portability - The data subject has the right to receive personal data that they have provided to the controller in a structured format, frequently used and which can be read automatically.

If you have any questions regarding data protection, cookies policy or our website, you can contact us.

published: 28 October 2022