Privacy Policy

Inim Foundation
Dumitru Brăharu Street, No. 11, Cluj-Napoca
CIF: 49268554

 

Regarding the Protection of Personal Data

In accordance with the legal provisions in force as of May 25, 2018 (General Data Protection Regulation No. 679/2016), a series of measures have been defined and implemented with the aim of ensuring compliance with the Regulation’s provisions.

 

Ensuring the protection and appropriate use of personal data is a continuous priority for us. We consistently improve the security and confidentiality measures of data at both a technical and organizational level to ensure the highest standards. Currently, our efforts are focused on ensuring compliance with the provisions of the Regulation, which strengthens the rights of data subjects and the security of personal data processing within the European Union.

 

In accordance with the Regulation, personal data refers to any information regarding an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more specific factors—physical, physiological, genetic, mental, economic, cultural, or social of that natural person.

 

Thus, the Inim Foundation respects its obligations under national legislation and, in accordance with the Regulation, undertakes the following actions:

  • Updates personal data;
  • Safely stores and destroys these data;
  • Avoids collecting or storing excessive amounts of data;
  • Applies appropriate technical measures to protect personal data;
  • Protects personal data against loss, misuse, unauthorized access, and disclosure.

 

The Legal Basis for Processing Your Personal Data

The Inim Foundation may process your personal data using one or more of the legal grounds presented below:

  • The data subject has given consent for the processing of their personal data for one or more specific purposes;
  • Execution of a contract: processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject before entering into a contract;
  • Compliance with legal obligations: processing is necessary to comply with obligations of the operator arising from laws or other normative acts;
  • The vital interests of the data subject: processing is necessary to protect the vital interests of the data subject or another natural person;
  • Public interest or public authority: processing is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the operator;
  • The legitimate interest of the operator: processing is necessary for the purposes of the legitimate interests pursued by the operator or a third party, except where such interests are overridden by the fundamental rights and freedoms of the data subject that require protection of personal data, especially where the data subject is a child.

 

Transfer of Personal Data to Other Entities

There may also be circumstances where we need to transfer your personal data to certain service providers that perform services on our behalf. Any third parties to whom we disclose your data are required to keep the data secure and only use it to perform the service they provide on our behalf. When they no longer need your data to provide this service, they will dispose of the data according to applicable procedures. If we need to transfer your sensitive personal data to these providers, we will only do so after obtaining your consent, unless there is a legal basis for this transfer.

 

The Duration of Processing/Retention of Your Personal Data

Additionally, we inform you that we will not retain your personal data longer than is reasonably necessary, in accordance with the purpose of this processing or applicable legal obligations.

 

Your Rights Regarding Personal Data

Unless you are subject to an exemption under the Regulation, you have the following rights regarding your personal data:

  • The right to access – you have the right to request a copy of the information we hold about you;
  • The right to rectification – you have the right to correct the data we hold about you if it becomes inaccurate, incorrect, or incomplete;
  • The right to be forgotten – in certain circumstances, you can request that the data we hold be deleted from our records;
  • The right to restrict processing – under certain conditions, you have the right to request the restriction of the processing of your personal data;
  • The right to data portability – you have the right to request the transfer of the data we hold about you to another organization, if the applicable conditions regarding such data are met;
  • The right to object – you have the right to object to certain types of processing, such as processing for direct marketing purposes.
    Your right to object to the processing of your personal data for direct marketing purposes is absolute and will not be denied under any circumstances;
  • The right to object to processing involving automated decision-making (e.g., profiling) – you also have the right to oppose being subject to the legal effects of automated processing or profiling;
  • The right to lodge a complaint – if we refuse your request for access to your personal data, we will provide you with a reason for the refusal. If you are dissatisfied with our response, you can contact the Data Protection Officer of the Inim Foundation and subsequently the relevant authorities (ANSPDCP).

 

Special Circumstances

Transfer of data abroad – If personal data is transferred to countries or territories outside the European Union, we will inform you of the details regarding how the data will be protected, along with details on how to obtain relevant safeguards.

 

Automated decision-making – If we implement a process for automated decision-making involving the processing of your personal data, we will provide details about such processing, along with information about the logic involved and the significance and consequences of the processing.

 

Further processing – If we intend to use your personal data for a new purpose not covered by this data protection notification, we will provide you with a new notice explaining this new use before commencing the processing and setting out the relevant purposes and processing conditions. When and whenever necessary, we will seek your prior consent for the new processing.