Starting May 25, 2018, the General Data Protection Regulation (EU) 2016/679 (GDPR) became applicable. GDPR is a unique regulation, directly applicable in all member states of the Union, and replaces Directive 95/46/EC and, implicitly, the provisions of Law No. 677/2001 for the protection of individuals regarding the processing of personal data and the free movement of such data.
Company Information
The Society of Pharmaceutical Sciences of Romania, identified with Authorization 73/1994 No. 2/23890, VAT: 6174758, with its registered office in Bucharest, Sector 2, Str. Traian Vuia No. 6, email address: office@ssfr.ro, applies a privacy and personal data security policy in strict accordance with GDPR provisions. As part of our commitment to respecting the rights of individuals whose personal data we process, we provide below relevant information regarding how, the purpose, the legal basis, and the duration for which we process your personal data, as well as regarding the rights you have and how you can exercise these rights.
From May 25, 2018, to be able to provide you with our services, as well as news, campaigns, invitations to various events, it is necessary to obtain your explicit consent.
Processing of Personal Data
Personal data means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, particularly by reference to an identification number or one or more factors specific to his/her physical, physiological, mental, economic, cultural, or social identity.
Processing of personal data means any operation or set of operations performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, blocking, erasure, or destruction.
The Society of Pharmaceutical Sciences of Romania records only personal information voluntarily provided by visitors/users/clients, for which they have given their express consent. The legal grounds for processing personal data are:
- The consent of the data subject;
- The conclusion or performance of contracts entered into with us;
- The fulfillment of a legal obligation;
- Vital interests;
- Public interest;
- Legitimate interest.
Our group may process personal data based on one or more of the above-mentioned grounds, as applicable. Explicit consent for processing is required only when no other grounds among those mentioned apply.
According to the requirements of Regulation (EU) 2016/679 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, we have the obligation to manage safely and only for the specified purposes the personal data provided by users/clients.
The Society of Pharmaceutical Sciences of Romania respects the right to data privacy of every person accessing the site, as provided in the Privacy Policy displayed on the site.
What Personal Data Do We Use?
When you browse our site, register as a user, send us a request via email, or contact us for any purpose and through any communication channel, you may communicate one or more of the following personal data to us, which we collect directly from you:
- Name and surname;
- Email address;
- Phone number;
- Photo/video image;
- Medical documents, under strict confidentiality and security conditions, proving your fitness for physical activity;
- Copy of ID;
- Additional data resulting from documents you send us in the “Careers” section, including information from your CV.
In every contact section (or others similar offering the possibility to transmit personal data to us), there is a checkbox to accept the terms and conditions of personal data processing (with a link directed to the relevant page) before any information/documents transfer to us. The checkbox must be expressly checked by you to be able to transmit any information to us.
Also, when you visit our site, we may process information about the devices used to access the sites and your interaction with the sites.
Why Do We Process Your Data?
- To conclude or perform a contract between you and us, for fulfilling the company’s business objectives, according to the client’s request.
- Marketing activities – sending information or commercial messages (offers, promotions, advertising, and marketing messages regarding our companies’ activities and third parties we have relationships with);
- Participation in contests, promotions;
- Sending non-commercial or administrative messages (regarding changes on the site, administration, etc.);
- Internal statistics necessary to improve the quality of services offered and the image of the companies/site and to create new features, promotions, functionalities, and services;
- To ensure access to restricted sections of the site;
- Market research;
- To ensure the proper functioning of the site and improve its performance.
Also, if you have requested an offer or benefited from a service from our companies, we process your data to respond to your requests and provide the respective service or product, as well as to maintain contact in the future.
We may contact you or transmit your personal data for fulfilling our business objectives and the aforementioned purposes, both during the contract period and afterward, until your express withdrawal of consent.
How Long Do We Process Your Data?
To ensure a personalized experience in your interaction with us, we retain your personal data for a maximum period of five years from your last interaction with us, except when applicable legal regulations require a longer storage period. However, we do not commit to keeping these data for the entire period mentioned above and may delete or anonymize your data earlier.
To Whom Do We Disclose Your Data?
Our group does not sell, transfer, disclose, or allow access to your personal data to third parties unrelated to our activity.
To achieve the purposes described above, we may disclose your personal data to product and service providers engaged by us or collaborators for interacting with you, namely:
- Specialized companies conducting marketing or market research campaigns on behalf of our companies;
- IT service providers assisting us in the operation and maintenance of systems and the site;
In all the above cases, the disclosure of your personal data is based on a contract concluded with the data recipients, which obliges them to use the data exclusively for the purpose they were entrusted with, to respect the confidentiality obligation and ensure data security, and to comply with all applicable legal provisions regarding data protection.
The Society of Pharmaceutical Sciences of Romania’s site may contain links to other sites whose data processing policies may differ from ours. Please consider and consult the personal data protection policies of these other sites, as our group does not assume responsibility for the information sent or collected by these third parties.
Also, based on and within the limits of legal provisions and as a result of express requests from them, we may disclose your personal data to public authorities (Prosecutor’s Office, Police, courts, and other competent state bodies).
What Rights Do You Have and How Can You Exercise Them?
According to Regulation (EU) 2016/679 on the protection of natural persons regarding the processing of personal data and the free movement of such data, USERS/CLIENTS have the following rights:
- The right to withdraw consent;
- The right to be informed about your data processing;
- The right to access your data;
- The right to rectify inaccurate or incomplete data;
- The right to erasure (“right to be forgotten”);
- The right to restrict processing;
- The right to transmit your data to another operator;
- The right to object to data processing;
- The right not to be subject to a decision based solely on automated processing, including profiling;
- The right to address the courts;
- The right to file a complaint with a Supervisory Authority (http://www.dataprotection.ro/; tel: +40.318.059.211; +40.318.059.212; e-mail: anspdcp[at]dataprotection.ro).
To exercise these rights, any person can send a written, dated, and signed request to our headquarters or email address: office@ssfr.ro.
To protect your personal data and interests, we may request additional information for identification purposes.
Data Confidentiality
When we process your data, we use technical and organizational measures to ensure the confidentiality, availability, and correctness of your data.
Personal data benefiting from a special protection regime (personal identification number, identity document data, information in medical certificates) are processed under limited conditions, accessed only by certain individuals within the companies, and in accordance with applicable legal provisions, with appropriate technical measures for their protection (passwords/back-up).
However, no information security system is infallible, so we continuously work to keep our security measures at an appropriate level.
Regarding data confidentiality, please visit the dedicated section on this topic: https://ssfr.ro/confidentialitate/.