Security
The Association will implement appropriate measures to protect data against any “Security Incident”: accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, unauthorized access, or any other breach of personal data security. Upon becoming aware of a personal data security breach, the Association will immediately inform the Beneficiary, cooperate with them, and take reasonable steps to provide assistance in investigating, mitigating, and remedying the breach, provided that the Beneficiary fully reimburses the Association in each case for all costs reasonably incurred (including internal resources and any third-party costs) in connection with fulfilling the obligations under this section, to the extent that the personal data breach was not caused by the Association.
International Transfers
The Association does not transfer data, nor does it allow the transfer of data outside the European Economic Area.
Recipients
The transferred personal data may be disclosed only to the following recipients or categories of recipients: members of the Association who need access to the data in order to process them for the performance of legal obligations; the College of Psychologists of Romania; the accounting firm with which the Association collaborates; administrative and public institutions for the fulfillment of legal obligations.
Purpose of Data Collection
It concerns the provision of services within professional events and training courses organized by the Association, as well as for statistical, evaluation, and marketing purposes, issuing invoices, maintaining financial records related to contractual relationships (due invoices, debts), and for fulfilling the Association’s legal obligations.
Legal basis – Art. 6(1)(c) GDPR – compliance with a legal obligation; Art. 6(1)(f) GDPR – for the purposes of a legitimate interest; Art. 6(1)(a) GDPR – consent.
Duration
Unless applicable legislation requires otherwise, the Association will cease processing the Beneficiary’s personal data within 60 days from the conclusion of the professional event and/or training courses. The Association will retain the data after this date in accordance with the minimum retention period required by law for document storage, as well as for the purpose of exercising its right of defense in the event of a dispute regarding the services provided.
After the legal retention period expires, the Association will either return or delete the Beneficiary’s personal data and any copies thereof from its systems.
Rights of the Data Subject
The data subject may contact the person responsible for data protection at any time and free of charge, by means of a notification, using the contact details provided above, in order to exercise their rights in accordance with the GDPR. These rights are:
Control over
Personal Data
- The right to receive information regarding data processing and a copy of the processed data (right of access, Art. 15 GDPR);
- The right to request the rectification of inaccurate data or the completion of incomplete data (right to rectification, Art. 16 GDPR);
- The right to request the deletion of personal data and, where the personal data have been made public, the communication of the deletion request to other controllers (right to erasure, Art. 17 GDPR);
- The right to request restriction of data processing (right to restriction of processing, Art. 18 GDPR);
- The right to object to data processing with the intention of stopping the processing (right to object, Art. 21 GDPR);
- The right to data portability (Art. 20 GDPR);
- The right to withdraw consent at any time in order to stop processing based on your consent. Withdrawal does not affect the lawfulness of processing carried out based on consent before its withdrawal (right to withdraw consent, Art. 7 GDPR).
Legal Protection
and Remedies
- The right to lodge a complaint: If you wish to make a complaint regarding the way we have handled your personal data, you may contact us using the details provided above, and we will investigate your complaint.
- The right to file a complaint with the supervisory authority: If you believe that your legitimate rights in relation to personal data processing activities have been violated, you may submit a complaint to the National Supervisory Authority for Personal Data Processing, headquartered at 28–30 G-ral. Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania, email address: anspdcp@dataprotection.ro.
[important]
Due to possible changes in legislation, amendments to these data protection notices may become necessary. In such cases, we will inform you of these changes. To the extent that the amendments affect processing based on your consent, we will request new consent from you, if required.
Considering that the provision of personal data is necessary for the Association to deliver its services, failure by the data subject to provide personal data will have the direct consequence of making it impossible to provide those services.
About
Confidentiality
We inform you that the Romanian Association of Clinical Psychology processes your personal data both offline and online, in accordance with the legal provisions in force. The parties agree to sign this Agreement, complying with the following provisions regarding all personal data processed.
The contact details of the Association’s data protection officer are: email: contactarpc@gmail.com.
The Association undertakes, in accordance with Law no. 677/2001, as amended and supplemented, and with the General Data Protection Regulation, to manage the Beneficiary’s personal data, which they provide by completing the registration form for professional events and/or training courses organized by the Association (name, surname, home address, phone number, email address, IP, data relating to or resulting from the identity card – series, number, date of issue, issuing authority, personal identification number; bank account, signature), under secure conditions and only for the purposes specified in this Agreement.