Privacy Notice:

A. Controllers: Having regard to the provisions of Regulation (UE) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, we, Romanian-American Foundation, a corporation organized under the laws of the State of Delaware, United States of America and Organizația Non-Profit Romanian-American Foundation România, with headquarters in Bucharest, 6 Gina Patrichi Street, District 1, Romania (hereafter referred to as ,,we”, ,,us”  and/or the ,,Foundation”), in our capacity as joint-data controller, hereby inform you on how, when and why we process your personal data, the conditions in which we can disclose your personal data to others and how we keep it safe.

B. We are processing your personal data for specific purposes.

Given your capacity as a legal representative, proxy or contact person, we process your personal data for the following purposes:

a) performance of the contract concluded with the entity you represent/act for;

b) compliance with the rules, legal regulations, codes of conduct or guides that apply to us, or to enforce the law and cooperate with the competent authorities, including but not limited to tax and judicial authorities.

We process your personal data for the performance of the contract (including the pre-contractual interactions) concluded with the entity that you represent/act for and for compliance with our legal undertakings as a contracting party.

c) In addition, we may process your personal data in light of our specific legitimate interests such as (for example): preventing, detecting and investigating crime, including fraud and money-laundering or terrorist financing, and analyzing and managing commercial risks; OR in connection with any claims, actions or proceedings (including but not limited to drafting and reviewing documents, transaction documentation, obtaining legal advice, and facilitating dispute resolution), and/or protecting and enforcing our contractual and legal rights and obligations; OR managing and preparing reports for internal purposes, requesting feedback and taking part in surveys, conducting research and/or analysis for statistical, or other purposes for us to design our products, understand customer behavior, preferences and market trends, and to review, develop and improve our activity.

Whenever we rely on this legal basis to process personal data, we evaluate our interests to ensure that they do not prevail over your rights. In addition you have the right to object to this processing. For more information, see the “Your Rights” section.

C. We disclose your personal data to third parties.

In order to facilitate our activities for the purposes of processing detailed above, we communicate this data to third parties, including our affiliates and partners, such as:

Your personal data is transferred outside the European Economic Area, in the United States of America. These transfers take place in compliance with the legal provisions and applying appropriate protection measures.

D. Your Rights: We guarantee observance of your rights in what concerns your personal data.

Unless subject to an exemption provided by law, you have the following rights with respect to your personal data:

E. We keep the personal data for a limited period.

Your data shall be kept for the period of time necessary for complying with specific legal obligations applicable to our domain of activity or according to applicable statute of limitations (7 years following the termination of the contract) or for the time provided by archive law provisions (for example, for records and other financial and accounting documents).

F. We have implemented appropriate technical measures to ensure the security of personal data.

We will do everything that is necessary to protect your personal data or control by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copying, alteration or disposal, as well as other similar risks.

G. Controller Contact details

If you have any questions about the way we process your personal data or you may exercise your rights by submitting a written request by post to our address: Organizația Non-Profit Romanian-American Foundation România,  6 Gina Patrichi Street, District 1, Romania or by email to data.protection@rafonline.org

H. Supervisory authority: also, if your request has not been resolved or you are still dissatisfied, you may complain before the National supervisory authority for Personal data processing (http://www.dataprotection.ro/)

Copyright © 2010 - 2019 Romanian - American Foundation. All rights reserved