Personal data provided by you on www.vistiveri.com is processed by VISTIVERI CONSULTING S.R.L.(registered seat: Bucureşti Sectorul 6, Calea GIULEŞTI, Nr. 43, Bloc 14A, Ap. P08, company reg. no.: 50261126) (hereinafter referred to as the ‘Controller’ or ‘We’) in a confidential manner, in compliance with the provisions herein and the prevailing privacy laws.

VISTIVERI CONSULTING S.R.L. events, webinars and e-learning

This section informs you of our policies regarding the collection, use and disclosure of personal data we receive from you as participant of VISTIVERI CONSULTING S.R.L.’s events.

 

Processing the applicants’ personal data

Application to VISTIVERI CONSULTING S.R.L.’s face-to-face events, online event and live webinars is possible online, via this website.

When applying to an event and creating an account, the applicant (or the applicant’s legal representative) supplies his/her personal data for the purposes of conducting the event.

The Controller does not verify any of the personal data provided. The person providing supplying such data shall be fully liable for their accuracy. When providing the applicant’s e-mail address, the applicant takes responsibility for only using the services from the e-mail address provided by himself/herself. In this respect, the registered user of any e-mail address shall solely be liable for all logins into the website from that specific e-mail address. When the applicant provides the personal data of any third party, the applicant shall obtain the relevant data subject’s consent.

The purpose of data processing: Handling the applications through the website, issuing invoices, registration of the applicants, differentiation the applicants, performing orders, documenting payments, complying with accounting obligations, providing information about the events, liaising with the applicants and following up after the event.

The scope of the data processed:  In order to be able to register to a webinar we need you to provide us with certain personal data so that we can develop tailored event material and issue an invoice. The data we ask and handle are First Name, Surname, e-mail, postal address, institution name, country.

The legal basis of data processing: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

The term of data processing: The data will be processed by the Controller until the purpose of the data processing is achieved, i.e., until the completion of performance of obligations related to the event and until the expiry of the mandatory term of archiving prescribed by the respective laws and regulations.

 

Newsletter

If you wish to receive useful information on EU funding opportunities, tips for proposal development and project management, and stay informed about our upcoming events, new services, products and ongoing projects, you can subscribe to our newsletter via the website. You can unsubscribe from the Newsletter any time, with no charge applied.

The purpose of data processing: Sending of an electronic newsletter – provision of information on EU funds, calls for proposals, news, events and projects in an electronic newsletter.

The scope of the data processed: Name, Email Address

The legal basis of data processing: the consent of the data subject

The term of data processing: Until the cancellation of your subscription to the newsletter, but maximum 10 years.

We would also like to keep you up to date, by email, with details of our services using the information that you have supplied, but only with your permission. You have a right at any time to stop us from contacting you for marketing purposes – just click the Unsubscribe button at the foot of all our marketing emails.

 

Customer service

If you have any questions when trying to apply to our events or as a participant of the events, you can contact the Controller at the contact details provided herein, or on the website, or under the Contact Details page of the website, or by completing the contact form provided therein.

The purpose of data processing: The handling of questions, complaints and other issues related to applications/events.

The scope of the data processed:  Name, Email Address

The legal basis of data processing: the consent of the data subject

The term of data processing: 10 years

 

Website visitor data

Anyone can access this website (without a need for identification, or to supply personal data), and can gain information from there, or from any related websites, freely and without any restrictions applied. However, the website automatically collects general (not tied to the individual visitors’ person) information about the website visitors, in an unrestricted manner. Nonetheless, no such data allows the website operator to gain any personal information about the visitors.

The purpose of data processing: When visiting the website, the service provider records visitor data, for the purposes of monitoring the operability of services, facilitating and enhancing the website functions, and providing and individuated customer service, and for the prevention of abuse.

The scope of the data processed: date, timing, website address, any subpages previously visited on the Website, data related to the user’s operating system and web browser, the operating system used, and the user’s IP address, except for the last few digits.

The legal basis of data processing: the legitimate interest of the Controllers (for the above mentioned purposes)

The term of data processing: 7 days. In addition, the data will only be stored if it is necessary to investigate detected attacks on the website.

 

Cookies

To make this Website work properly, we sometimes place small data files called cookies on your device. Most big websites do this too.

What are cookies?

A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. See more under Cookies policy.

 

Transmission of data

The Controller may disclose personal data to any official authorities (provided that such authorities have clearly indicated the exact purpose, and the scope of data required), if this is necessary to fulfil the purposes indicated for such request.

 

Data security

The Controller and the data processor(s) shall handle all personal data in a confidential manner and observe the prevailing data protection laws and regulations, in particular Act CXII of 2011 on Informational Self-Determination and Freedom of Information, Act VI of 1998 on the ratification of Strasbourg Convention of 28 January 1981 for the Protection of Individuals with regard to Automatic Processing of Personal Data and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

In order to ensure the safe processing of data, the Controller shall take all IT and other measures related to the storage, processing, and transmission of data. The Controller shall take the expectable measures to protect the personal data processed by it against unauthorized use, alteration, disclosure, deletion, damage or destruction and to ensure the technical conditions required thereto.

The persons entitled to have access to data:

The data provided by you will be available only for those employees and agents of the Controller, the performance of whose tasks and duties require the knowledge of such data.

Your rights, as data subject

The aim of this information is to provide proper information on facts and particulars related to data processing for the data subjects (hereinafter referred to as the ‘Data Subject’), already prior to the commencement thereof.

You are entitled to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and to the following information:

1. the purposes of data processing:
2. categories of the affected personal data;
3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. where the personal data are not collected from the data subject, any available information as to their source;
8. the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Upon request, the Controller shall provide you with a copy of the personal data undergoing processing.

You may request at any time the correction or supplementation of erroneous personal data; the Controller shall take the requested measures without undue delay.

You are entitled to withdraw your consent at any time.

The consent may be withdrawn by using the adequate link or by sending your request for the withdrawal of your consent to the Controller, as described herein.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

In case you withdraw your consent, the Controller shall delete your personal data from their database within 30 days.

Upon the request of the Data Subject, the Controller shall delete the personal data concerning him or her, without undue delay, if

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the Data Subject withdraws consent on which the processing is based, and there is no other legal ground for the processing;
• the processing of the personal data is for direct marketing purposes, and the Data Subject objects to the processing, and there are no overriding legitimate grounds for the processing;
• the personal data have been unlawfully processed; or
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Controller are subject;

Where the Controller have made the personal data public and are obliged pursuant to the present section to erase the personal data, the Controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform Controller which are processing the personal data that the data subject has requested the erasure by such Controller of any links to, or copy or replication of, those personal data.

The above provisions shall not apply to the extent that processing is necessary:

(a) for exercising the right of freedom of expression and information;
(b) for compliance with a legal obligation which requires processing by Union or Member State law to which the Controller are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
(c) for reasons of public interest in the area of public health;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, in so far as the right to deletion is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(e) for the establishment, exercise or defense of legal claims.

The Controller shall restrict data processing upon the request of the Data Subject, if

• the accuracy of the personal data is contested by the Data Subject, for a period enabling the Controller to verify the accuracy of the personal data;
• the processing is unlawful, and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead;
• the Controller no longer need the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; or
• if the processing of personal data takes place for direct marketing purposes and the Data Subject has objected to processing; in this case, the restriction shall be valid as long as it is verified whether the legitimate grounds of the Controller override those of the data subject.

Where processing has been restricted according to the above, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. A data subject, who has obtained restriction of processing pursuant to the above provisions, shall be informed by the Controller before the restriction of processing is lifted.

In addition to the above, the Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another Controller without hindrance from the Controller to which the personal data have been provided.

Requests may be submitted addressed to: VISTIVERI CONSULTING S.R.L., Bucureşti Sectorul 6, Calea GIULEŞTI, Nr. 43, Bloc 14A, Ap. P08, Romania via post, or to contact@vistiveri.com via e-mail.

For the sake of identification, correct and specific personal data shall be provided.

The Controller shall notify the Data Subject of the measures taken upon the request for exercising his/her rights without undue delay, but in any case, within 30 days of the receipt of the request.

Where the Data Subject makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the Data Subject.

The correction, restriction, and deletion of data shall be reported by the Controller to the concerned Data Subject and those, to whom the affected data were previously transmitted for data processing purposes.

The Data Subject shall have the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her, which is based on a legitimate interest. In such a case, the Controllers may no longer process the personal data unless the Controllers demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

The Controllers shall suspend the data processing and examine the objection within the shortest possible deadline, but within maximum 30 days and inform the requesting party of the result thereof in writing. If the objection is well-grounded, the Controllers shall terminate the processing (including any further collection or transmission of data) and shall restrict the affected data. Furthermore, the Controllers shall notify of the objection and the measures taken in response thereto those, to whom the personal data affected by the objection were transmitted previously; these recipients shall also provide for the enforcement of the right to object.

If the Controllers do not take action on the request of the Data Subject, the Controllers shall inform the data subject without delay and at the latest within 30 days of receipt of the request of the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

In case of infringement of the above-mentioned rights, you may turn to a court or the NATIONAL PERSONAL DATA SUPERVISORY AUTHORITY (ANSPDCP).

ROMANIAN NATIONAL PERSONAL DATA SUPERVISORY AUTHORITY (ANSPDCP)

Address: B-dul G-ral. Gheorghe Magheru 28-30, RO- 010336 Bucharest, RomaniaRO – 010336 Bucuresti
Phone: +40.318.059.211
www: http://www.dataprotection.ro/