Freedom and Respect for Every Earthling (F.R.E.E.), a Romanian legal entity, headquartered in Timișoara, str. Preot Alexandru Bălaş, nr. 6-8, et. 2, ap. 12, registered in the Register of Associations and Foundations with no. 24277 / A / 2017, fiscal code 38020161, is updating its policy of processing personal data in order to comply with the new rules introduced by the General Data Protection Regulation, no. 679 of 27 April 2016, applicable in the European Union (GDPR) for the protection of individuals with regard to the processing of personal data and the free flow of such data.
Through this Policy we are informing you of:
- Important concepts regarding personal data;
- What personal data we process;
- What purpose we use this data for;
- To whom can we transmit the data;
- Your rights regarding the data.
What is personal data?
Personal data means any information that identifies you or may identify you directly or indirectly. This means that personal information can include: surname, first name, identification number, email address, home address, mobile phone, username, profile photos, location data etc.
What does personal data processing mean?
Processing means any operation or set of operations performed on personal data or on personal data sets, with or without the use of automated means such as collecting, recording, organizing, structuring, storing, adapting or modifying, extracting, consultation, use, disclosure by transmission, dissemination or otherwise making it available, alignment or combination, restriction, erasure or destruction.
What personal data do we process?
The categories of personal data that F.R.E.E. is processing are:
- Identification and contact information;
- Data on the collaboration history;
- Photos and videos.
For what purpose do we process the data?
Your personal data is processed by F.R.E.E. for the following purposes:
- Transmitting information on the program, fund or event held within the Association;
- Communicating the activities carried out by F.R.E.E. in Romania, which may be of interest to you;
- Fulfillment of the donation and sponsorship obligations;
- Sending informative materials through Poșta Română (national operator in the field of postal services) / fast delivery to members and volunteers.
Data processing is done on the basis of donation and sponsorship contracts, by accepting the personal data processing policy on the Association’s sites. In other cases, the processing of personal data is carried out in accordance with the legislation in civil, fiscal or administrative matter etc.
The length of processing of personal data
The data required for processing will be kept for a maximum of 5 years, depending on the category of the processed personal data. They may be erased on demand during this period, if applicable, unless this contradicts other applicable national laws.
Transferring personal data
After collecting contact details as a result of completing a newsletter list during events such as film screenings, tablings, as well as collecting members’ and volunteers’ data, F.R.E.E. will not transmit the data to other entities. F.R.E.E. processes your personal data exclusively on the territory of Romania.
Your rights regarding the processed data
Based on GDPR and related data protection legislation, you have the following rights:
The right of access – this means that you have the right to obtain confirmation from us that we process your personal data or not, and if so, you have access to the data and to the information on how it is processed.
The right to data portability – you can receive your data in a structured format, how it is currently used, and the data may be transmitted directly to another operator if this is technically feasible.
Right to opposition – You can oppose the processing of personal data when processing is necessary for the performance of a task that is in the public interest or when it concerns a legitimate interest of the operator.
Right to rectification – you may ask us to correct, without undue delay, inaccurate personal data. Correction shall be communicated to each recipient to whom the data was transmitted, unless this proves impossible or involves disproportionate efforts.
Right to data deletion – the right to ask us, without undue delay, to erase your personal data if it is no longer necessary to fulfill the purposes for which it was collected or processed by us. Also, at any time, you can oppose processing if there are no legitimate reasons to prevail, or your personal data has been processed in violation of the law, or they must be deleted to comply with a legal obligation that we have.
The right to restricted processing – the possibility to obtain restriction of processing in any of the following situations expressly provided:
- the accuracy of the data we process is being disputed;
- data processing by us is illegal and you request that we limit our use of it;
- if you request the data for finding, exercising or defending a right in court.
Restriction of processing is applied for the time frame during which we verify that our legitimate rights overweigh your rights.
For any clarifications, suggestions or requests regarding personal data, please contact us at: firstname.lastname@example.org.