NOTICE

ON THE COLLECTION AND PROCESSING OF PERSONAL DATA

1. IDENTITY OF THE CONTROLLER FAPTE ASSOCIATION, with office in Cluj-Napoca, 192, Donath Street, bl. A4, ap. 12, having URC 31425230, represented by Chairman Alin Vaida.
2. WHAT ARE THE PERSONAL DATA WE PROCESS?

 

FAPTE ASSOCIATION collects, stores and processes the following personal data: surname, first name, domicile and/or residence address, date and place of birth, gender, citizenship, PIN, series and number of the identity card/document, e-mail, phone, fax, biometric data consisting of the image and voice of the person, captured through photos and/or audio – video recordings (automated means and/or means controlled by human operators, software and specialized devices) from the locations where the festival and competition Jazz in the Park 2019 Edition or other similar events organized by the Controller take place.
3. FOR WHAT PURPOSE DO YOU PROCESS YOUR PERSONAL DATA? Personal data consisting of surname, first name, domicile and/or residence address, date and place of birth, gender, citizenship, PIN, series and number of the identity card/document, e-mail, telephone, fax are processed in order to communicate with you, in particular to send you collaboration, marketing offers or newsletters regarding the Controller’s activity, to carry out the volunteer selection process, conclude volunteering agreements and other documents required by the legislation in force, respectively.

Biometric data consisting of the image and voice of the person, captured through photos and/or audio – video recordings, are processed in order to archive your agreement and to exercise legitimate rights and interests arising from the use of the photos and/or the audio – video recordings for the purpose of performing advertising, marketing and promotion activities for the festival and competition Jazz in the Park 2019 Edition and other events organized by the Controller. We mention that the promotion can be done both in the virtual environment (online) and in the physical environment, on the entire territory of Romania and abroad, only if it is the case.

4. WHAT IS THE LEGAL BASIS FOR THE DATA PROCESSING? The legal basis for the processing of personal data for the purposes described above is the express, voluntary and freely expressed consent, as required by Article 6 (a) of Regulation (EU) 2016/679.
5. FOR HOW LONG DO WE STORE YOUR DATA? Personal data consisting of surname, first name, domicile and/or residence address, date and place of birth, gender, citizenship, PIN, series and number of the identity card/document, e-mail, telephone and fax are kept for the period of time required to organize and hold the festival and competition Jazz in the Park 2019 Edition and other similar events organized by the Controller during which the data were collected and for a period of up to 5 years from the end date of the event. By way of exception, in the case of transport, accommodation and meal beneficiaries, these personal data will be kept for 10 years, according to the Order of the Ministry of Public Finance (MFP) no. 2634/2015 regarding the archiving and keeping of the accounting registers and of the other financial-accounting documents with subsequent amendments and completions.

Biometric data consisting of the image and voice of the person, captured through photos and/or audio – video recordings are kept for the period of the time required for organizing and holding the festival and competition Jazz in the Park 2019 Edition and other similar events organized by the Controller as well as a period of up to 10 years from the end date of the events where the data were collected.

6. WHO ARE THE RECEIVERS OF YOUR PERSONAL DATA? The Controller communicates your personal data to other private entities (collaborators, providers, co-organizers, etc.) involved in organizing and holding the festival and competition Jazz in the Park 2019 Edition and other similar events organized by the Controller, and to public entities (Inspectorate for Emergency Situations, Sanitary Veterinary Directorate, Police, Courts of Law, Public Prosecutor’s Offices, City Hall, Local Council, County Council, Ministries, etc.) involved in organizing and holding the festival and competition Jazz in the Park 2019 Edition and other similar events organized by the Controller or to public entities with powers of control and supervision of the activities carried out and which are entitled to request access under the law.
7. HOW DO WE ENSURE THE SECURITY OF YOUR DATA?

 

 

FAPTE ASSOCIATION applies an adequate level of security, implementing reasonable physical, electronic and administrative procedures to protect the collected information. Access to personal data is granted only to authorized personnel and only for the performance of specific tasks to meet those purposes under the obligation of confidentiality. In the event of a personal data breach, FAPTE ASSOCIATION undertakes to comply with the applicable law, notifying the security breach both to you and to the National Supervisory Authority for Personal Data Processing within 72 hours of its occurrence.
8. WHAT ARE YOUR RIGHTS?

 

 

Right to information – you may request information about the processing of your personal data, the identity of the controller and its representative, or about the recipients of your data;

Right to rectification – you may rectify inaccurate personal data or supplement them;

Right to erasure – you may obtain the erasure of the data by sending a request in this resect to the e-mail address gdpr@fapte.org  and/or the registered office of FAPTE ASSOCIATION.

Right to restriction of processing – you may request the restriction of processing if you dispute the accuracy of the data, as well as in other cases provided by the law;

Right to object – you may oppose in particular data processing operations that are based on the legitimate interest of the Controller;

Right to data portability – you may receive, under the applicable law, the personal data you have provided us in a format that can be read automatically, or you may request that the data be transmitted to another controller;

Right to lodge a complaint and turn to the courts of law – you may file a complaint in relation to the personal data processing method to the National Supervisory Authority for Personal Data Processing and/or turn to the courts of law for the compliance with your rights;

Right to withdraw consent – the previously expressed consent may be withdrawn at any time, unconditionally, by submitting a request in this respect to the e-mail address gdpr@fapte.org and/or the registered office of FAPTE ASSOCIATION.

Right not to be subject to automated decision-making or additional profiling related to automated decisions – you may ask for and obtain human intervention in relation to the processing or you may express your own point of view on this type of processing.

9. WHO SHOULD YOU TURN TO IN ORDER TO EXERCISE YOUR RIGHTS?

 

10. OTHER USEFUL INFORMATION

In order to exercise these rights, you may submit a written, dated and signed request to the following contact details:

Ø  Responsible person: Meda Corovei

Ø  E-mail: meda@fapte.org

Ø  Mail address:   Cluj-Napoca, Piața Ștefan cel Mare, nr. 5, bl. 6, ap. 62,

We do not use personal data for automated processing or profiling. You will never be subject to automated decision-making. We use safe technical means to store your data. We do not process data for secondary purposes, incompatible with the purposes for which we collected them.