I. General Information
The confidentiality of your personal data is one of the main concerns of OSM Cluj, headquartered in Cluj-Napoca, Str. Emil Isac 13, as a data controller. This document aims to inform you about the processing of your personal data in the context of using the website www.medicde10km.ro ("the Website").
II. Categories of Processed Personal Data
If you are a visitor to the Website, OSM Cluj will process the personal data that you provide directly when using the Website, such as the data entered in the contact section when reaching out to us.
III. Purposes and Legal Basis for Processing
If you are a visitor to the Website, OSM Cluj processes your personal data for the following purposes:
- Marketing activities, specifically for sending commercial communications via email or SMS regarding the products and services offered by OSM Cluj through the Website. Legal basis: Your data is processed based on your consent, if you choose to provide it. You can express your consent by checking the appropriate box in the contact form. You may unsubscribe from receiving such communications at any time by using the opt-out option included at the end of each email/SMS. Refusing to provide consent for this purpose will not have negative consequences for you.
- Handling complaints and monitoring website traffic to improve your experience. Legal basis: This processing is based on the legitimate interest of OSM Cluj to ensure the proper functioning of the Website and continuously improve the user experience. Providing your data for this purpose is voluntary, and refusal will not negatively impact you.
IV. Data Retention Period
As a general rule, OSM Cluj will process your personal data for as long as necessary to fulfill the processing purposes mentioned above.
If you wish to stop data processing or request data deletion, you can exercise your rights as detailed in Section VII below. If you withdraw your consent for marketing-related processing, OSM Cluj will stop processing your data for this purpose but will not affect previous processing activities carried out before your withdrawal.
V. Disclosure of Personal Data
To fulfill the processing purposes, OSM Cluj may disclose your data to partners, third parties, or entities that support OSM Cluj in its activities through the Website (e.g., courier companies, IT service providers), as well as to public authorities, in the following cases:
- To administer the Website.
- When necessary to award prizes or benefits in promotional campaigns.
- To personalize and improve the Website and its services.
- To conduct data analysis, research, and security enhancements.
- To send commercial communications within legal limits.
- When legally required.
VI. Transfer of Personal Data
Personal data collected by OSM Cluj may be transferred outside Romania, but only to countries within the European Union.
VII. Your Rights
Under the conditions set out in data protection legislation, as a data subject, you have the following rights:
- Right to information – The right to receive details regarding the data processing activities carried out by OSM Cluj, as described in this document.
- Right of access to data – The right to obtain confirmation from OSM Cluj regarding the processing of your personal data, as well as details about how the data is processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.
- Right to rectification – The right to obtain the correction, without undue delay, of inaccurate or unjustified personal data by OSM Cluj, as well as the completion of incomplete data. The rectification/completion will be communicated to each recipient to whom the data has been transmitted, unless this proves impossible or involves disproportionate efforts.
- Right to erasure of data ("right to be forgotten"), without undue delay, if one of the following reasons applies:
- The data is no longer necessary for the purposes for which it was collected or processed.
- The data subject withdraws their consent, and there is no other legal basis for processing.
- The data subject objects to the processing, and there are no overriding legitimate grounds for the processing.
- The personal data has been processed unlawfully.
- The personal data must be erased to comply with a legal obligation.
- The personal data was collected in relation to the provision of information society services, under Union law or national law applicable to the controller.
- Following a request for data deletion, OSM Cluj may anonymize the data (removing its personal character) and continue processing it for statistical purposes.
- Right to restriction of processing, in the following cases:
- The data subject contests the accuracy of the data, for a period that allows us to verify its correctness.
- The processing is unlawful, and the data subject opposes the erasure of personal data, requesting instead the restriction of its use.
- The controller no longer needs the personal data for processing purposes, but the data subject requests it for the establishment, exercise, or defense of legal claims.
- The data subject has objected to processing (except for direct marketing), for the period in which it is verified whether the legitimate rights of the controller override those of the data subject.
- Right to data portability, meaning:
- (i) The right to receive personal data in a structured, commonly used, and machine-readable format, and
- (ii) The right to have these data transmitted by OSM Cluj to another data controller, where legally applicable.
- Right to object – This right can be exercised by submitting a request as indicated below:
- At any time, for reasons related to the particular situation of the data subject, to object to the processing of their data based on OSM Cluj's legitimate interest or public interest, except where OSM Cluj demonstrates compelling legitimate grounds that override the data subject's interests, rights, and freedoms, or when the processing is for the establishment, exercise, or defense of legal claims.
- At any time, free of charge and without justification, to object to the processing of their data for direct marketing purposes.
- Right not to be subject to automated individual decision-making, meaning the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning the data subject or significantly affects them in a similar way.
- Right to file a complaint with the National Authority for the Supervision of Personal Data Processing or with the competent courts if you consider it necessary.
For any questions or to exercise your rights, please contact us at medicde10@osmcluj.ro.
This website uses cookies. For more information on how cookies are used, please visit the Cookies Policy section.