Although the members are legal entities, we need to collect personal data and information required by the specific of the activities and to best represent the interest of our contributors. Such data refer generally to membership and include specific information about individuals who join our task forces or sign up to our newsletters, surveys and events.
This Privacy Policy provides details on how Concordia collects and uses personal information from relevant individuals, continuously observing provisions of relevant local data protection legislation and (EU) Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”). Personal data represents any information relating to an identified or identifiable natural person, and an identifiable person is that person that may be identified directly or indirectly, particularly by reference to an identification number or to one or more factors specific to its physical, psychological, mental, economic, cultural or social identity.
This Privacy Policy regards the personal data of our members, partners, other persons in contact with Concordia and its’ representatives thereof, potential employees, interns or associates and it applies to data collected through Concordia website, https://www.concordia.ro (“the Website”), as well as to all other personal data Concordia collects through e-mail or other off-line contacts.
The Privacy Policy refers to:
- purposes for which personal data are collected and used
- processing grounds for such purposes
- categories of personal data collected and processed
- timeframe for processing such data
- users’ rights as data subjects and how such rights can be exercised
- disclosure of personal data.
Purposes for which personal data are collected and used
While interacting with the Website or with any of Concordia representatives, users, in their capacity of individuals, may be subject to data collection and processing, should any of the following condition applies:
1. The individual is member or potential member of Concordia
▪ relevant personal data is used to provide information on membership and activities conducted by Concordia
▪ contact details are used to communicate about membership, activity, task forces and any other relevant business-related matters. By having provided such data to Concordia, the user is presumed to have had implicitly accepted the grounds for processing them
▪ contact details may be used for providing access to electronic/online forms, newsletters, press releases, events, other relevant documents based on specific subscription of each user for such communication (express consent for such processing is considered provided thereof). Any user is allowed, at any time, to withdraw such consent, either by unsubscribing from a newsletter or by expressly asking it in writing to office@confederatia-concordia.ro.
Categories of data processed in the context of the abovementioned communication are name, e-mail, phone number, physical address (if specifically requested by a certain user), as well as other personal data one may provide directly to Concordia to this end.
2. The individual is a representative of a Concordia member
▪ relevant personal data is used to provide information on activity reports, meetings with officials, updates regarding legislation that is relevant for the business environment and any other specific information
▪ contact details are used to communicate about events, meetings with authorities, position papers, relevant legislation for business community and any other relevant business-related matter. By having provided such data to Concordia, the user is presumed to have had implicitly accepted the grounds for processing them
▪ contact details may be used for providing newsletters, minutes of meetings, press releases, position papers, events invitations and any other relevant information for the business environment, based on specific subscription of each user for such communication (express consent for such processing is considered provided thereof). Any user is allowed, at any time, to withdraw such consent, either by unsubscribing from a newsletter or by expressly asking it in writing to office@confederatia-concordia.ro.
In all the above cases, data is provided either directly by the user himself/herself or by the member represented. Categories of data processed in the context of the abovementioned communication are name, position, e-mail, phone, identification data.
3. The individual is either business partner or services provider of/for Concordia
▪ relevant personal data is used to maintain contractual relationship. By signing the contract, parties are considered to have expressly agreed on providing personal data and accept the grounds for processing.
▪ contact details are used to communicate about any relevant business/contract-related matters. By signing the contract, parties are considered to have expressly agreed on providing contact data and accept the grounds for processing.
Categories of data processed in the context of the abovementioned relationships are name, e-mail, phone, fax, physical address, as well as other personal data provided within the contract or in relation to it.
4. The individual is a representative, contact person, employee or another partner of a Concordia partner
▪ relevant personal data is used to maintain contractual relationship with the business partner. By signing the contract, parties are considered to have expressly agreed on providing personal data and accept the grounds for processing.
▪ contact details are used to communicate abo any relevant business-related matters. By signing the contract, parties are considered to have expressly agreed on providing contact data and accept the grounds for processing.
In all the above cases, data is provided either directly by the user himself/herself or by the partner represented. Categories of data processed in the context of the abovementioned communication are name, position, e-mail, phone, fax, physical address, identification data, as well as other personal data provided to Concordia, usually by the user, as required to fulfil the above purposes.
5. The individual is a user of the Website
Personal data collected when a user visits the Website are used to monitor the traffic and improve the content of the website. To this end, legitimate interest is ensuring the proper functioning of our Internet website, as well as improving it.
Categories of data processed in this context are the hour and date of accessing the Internet website, the IP address which accesses the Website, registration data in case of registered users.
For all above categories of data subjects, Concordia may also process personal data in the context of changes in structure or other similar transactions. In this case, the grounds for processing may be represented by the legal obligation (in case Concordia is legally obliged to disclose certain personal data to public authorities), the performance of certain agreements concluded by Concordia under such transaction (if the individual is a party of such agreement) or the legitimate interest of Concordia to carry out the transaction in the most effective manner.
Providing personal data
When the data is required directly from and/or provided directly by the individual, Concordia will kindly ask for all categories of aforementioned personal data, according to specific purposes, as otherwise we shall not be able to carry out our activity (including, among others, to provide you with information regarding our activity).
Should any personal data of other individual be provided by a Concordia member (e.g.: when the member is represented by a person specifically assigned to a certain task), the specific member is kindly asked to communicate with that individual before any disclosure, providing details on how Concordia intends to process such personal data, as described under this Privacy Policy.
Disclosure of personal data
As a rule, Concordia does not disclose personal data collected for various purposes to any third parties. However, if in someone’s interest and if deemed necessary, we may disclose relevant personal data to courts of law, relevant authorities and affiliates in the context of Concordia activities.
Duration of processing
Personal data will be stored over membership period, the assistance agreement, as well as a certain period of time afterwards, according to our internal policies and the legal provisions applicable.
In case data is not collected in the context of membership or an assistance agreement, such data will be kept as long as it is considered necessary to complete the purpose of the envisaged data collection.
Rights related to collection and processing of personal data
In their capacity of data subjects, individual are provided by GDPR regulations with a set of rights, including:
▪ the right of access – allowing data subjects to obtain confirmation that their personal data is being processed by us and, if affirmative, the relevant details of such processing activities;
▪ the right to rectification – allowing data subjects to rectify their personal data if inaccurate;
▪ the right to be forgotten – allowing data subjects to obtain the erasure of their personal data in certain cases (e.g.: if the data is no longer necessary in relation to the purposes for which it was collected);
▪ the right to restriction – allowing data subjects to obtain the restriction of processing their personal data in certain cases (e.g.: when they contest the accuracy of their personal data, enabling Concordia for a period to verify such accuracy);
▪ the right to object – allowing data subjects to object to further processing of their personal data within the conditions and limits set forth by law;
▪ the right to data portability – allowing data subjects to receive the personal data concerning them, which was previously provided to us, in a structured, commonly used and machine-readable format or to transmit this data to another data controller.
You may exercise the aforementioned rights and find out more about such rights by sending us in a written request at office@confederatia-concordia.ro.
You also have the right to file a complaint with the data protection authority.
We are committed to always treat your requests with the utmost attention and address any queries you may have in the shortest time possible.
This Privacy Policy is in force as of 16.08.2021.
Users understand and undertake that Concordia reserves its’ right to amend or replace this Privacy Policy without any prior notification. Changes apply from the date they become available on the Website.