{"id":3674506,"date":"2023-03-08T11:51:01","date_gmt":"2023-03-08T11:51:01","guid":{"rendered":"https:\/\/www.arb.ro\/?page_id=3674506"},"modified":"2024-04-04T10:44:02","modified_gmt":"2024-04-04T07:44:02","slug":"politica-confidentialitate-prelucrare-date-caracter-personal","status":"publish","type":"page","link":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/","title":{"rendered":"Politica de Confiden\u021bialitate"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"3674506\" class=\"elementor elementor-3674506\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa7d516 e-flex e-con-boxed e-con e-parent\" data-id=\"aa7d516\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bad0656 elementor-widget elementor-widget-heading\" data-id=\"bad0656\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Politica de Confiden\u021bialitate<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-986a0bf e-flex e-con-boxed e-con e-parent\" data-id=\"986a0bf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b080f5e elementor-widget elementor-widget-text-editor\" data-id=\"b080f5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Prezentare general\u0103<\/strong><\/p><p>ASOCIA\u021aIA ROM\u00c2N\u0102 A B\u0102NCILOR (<span style=\"text-decoration: underline;\"><em>denumit\u0103 \u00een continuare &#8222;ARB&#8221;<\/em><\/span>) a stabilit un program de confiden\u021bialitate \u0219i protec\u021bie a datelor cu caracter personal personale (\u201ddate personale\u201d), sus\u021binut de o Politic\u0103 privind Securitatea Informa\u021biilor care define\u0219te politici, standarde, proceduri, controale \u0219i linii directoare pentru a proteja informa\u021biile esen\u021biale \u0219i tehnologiile informa\u021bionale, precum \u0219i datele colectate, prelucrate \u0219i stocate de ARB. Aceste politici, descriu a\u0219tept\u0103rile \u0219i rezultatele pentru un program de succes \u00een materie de confiden\u021bialitate \u0219i protec\u021bia datelor personale.<\/p><p style=\"padding-left: 40px;\">1.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Scop<\/p><p style=\"padding-left: 80px;\">1.1.1\u00a0\u00a0\u00a0\u00a0 ARB recunoa\u0219te \u0219i respect\u0103 drepturile de confiden\u021bialitate \u0219i protec\u021bia datelor personale ale persoanelor fizice. &#8222;Datele personale&#8221; sunt definite ca orice informa\u021bie care identific\u0103 direct sau indirect o persoan\u0103 fizic\u0103.<\/p><p style=\"padding-left: 80px;\">1.1.2\u00a0\u00a0\u00a0\u00a0 Aceast\u0103 Politic\u0103 de confiden\u021bialitate \u0219i protec\u021bie a datelor stabile\u0219te cerin\u021bele minime pentru a asigura respectarea de c\u0103tre ARB a legisla\u021biei interne \u0219i europene cu privire la confiden\u021bialitatea \u0219i protec\u021bia datelor (&#8222;Cerin\u021bele de protec\u021bie a datelor&#8221;).<\/p><p style=\"padding-left: 40px;\">1.2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Domeniul de aplicare<\/p><p style=\"padding-left: 40px;\">Politica de confiden\u021bialitate \u0219i protec\u021bia datelor (&#8222;Politica&#8221;) face parte din programul privind confiden\u021bialitatea \u0219i protec\u021bia datelor, care ofer\u0103 politici, procese, proceduri \u0219i \u00eendrum\u0103ri pentru protejarea datelor, conform Regulamentului general privind protec\u021bia datelor (GDPR) al Uniunii Europene \u0219i legisla\u021biei na\u021bionale \u00een materie.<\/p><p style=\"padding-left: 80px;\">1.2.1\u00a0\u00a0\u00a0\u00a0 ARB se angajeaz\u0103 s\u0103 respecte cerin\u021bele de protec\u021bie a datelor \u0219i aceast\u0103 Politic\u0103 stabile\u0219te politici \u0219i proceduri pentru \u00eendeplinirea acestor cerin\u021be.<\/p><p style=\"padding-left: 80px;\">1.2.2\u00a0\u00a0\u00a0\u00a0 Aceast\u0103 Politic\u0103 se aplic\u0103 datelor personale prelucrate electronic prin mijloace automate sau de\u021binute manual de ARB \u00een leg\u0103tur\u0103 cu opera\u021biunile sale comerciale.<\/p><p style=\"padding-left: 80px;\">1.2.3\u00a0\u00a0\u00a0\u00a0 Defini\u021bia prelucr\u0103rii este foarte larg\u0103 \u0219i include orice opera\u021biune efectuat\u0103 asupra datelor personale, cum ar fi colectarea, \u00eenregistrarea, organizarea, structurarea, stocarea, adaptarea sau modificarea, extragerea, consultarea, utilizarea, divulgarea prin transmitere, diseminarea sau punerea la dispozi\u021bie \u00een orice alt mod, alinierea sau combinarea, restric\u021bionarea, \u0219tergerea sau distrugerea.<\/p><p style=\"padding-left: 80px;\">1.2.4\u00a0\u00a0\u00a0\u00a0 Prin urmare, aceast\u0103 Politic\u0103 se aplic\u0103 tuturor prelucr\u0103rilor de date personale ob\u021binute de la angaja\u021bi, agen\u021bi, consultan\u021bi, contractan\u021bi, furnizori, furnizori de servicii, investitori clien\u021bi \u0219i al\u021bi ter\u021bi din Uniunea European\u0103.<\/p><p style=\"padding-left: 80px;\">1.2.5\u00a0\u00a0\u00a0\u00a0 Aceast\u0103 Politic\u0103 trebuie implementat\u0103 \u0219i urmat\u0103 de to\u021bi angaja\u021bii ARB. Mai mult dec\u00e2t at\u00e2t, aceast\u0103 Politic\u0103 trebuie s\u0103 fie urmat\u0103 de personalul temporar al ARB, de c\u0103tre agen\u021bii, consultan\u021bii, contractan\u021bii, furnizorii \u0219i furnizorii de servicii atunci c\u00e2nd prelucreaz\u0103 date personale \u00een numele ARB.<\/p><p style=\"padding-left: 80px;\">1.2.6\u00a0\u00a0\u00a0\u00a0 Aceast\u0103 Politic\u0103 este completat\u0103 de alte politici \u0219i \u00eendrum\u0103ri ale ARB care abordeaz\u0103 aspecte specifice ale cerin\u021belor de protec\u021bie a datelor.<\/p><p style=\"padding-left: 80px;\">1.2.7\u00a0\u00a0\u00a0\u00a0 \u00cen cazul \u00een care un angajat ia cuno\u0219tin\u021b\u0103 de orice legi sau reglement\u0103ri care \u00eel \u00eempiedic\u0103 s\u0103 respecte aceast\u0103 Politic\u0103 sau orice \u00eenc\u0103lcare a acestei Politici, inclusiv orice \u00eenc\u0103lcare a securit\u0103\u021bii datelor, ace\u0219tia trebuie s\u0103 informeze Responsabilul cu protec\u021bia datelor imediat dup\u0103 ce au luat cuno\u0219tin\u021b\u0103 de aceste legi, reglement\u0103ri sau \u00eenc\u0103lc\u0103ri.<\/p><p style=\"padding-left: 40px;\">1.3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Destinatarii<\/p><p style=\"padding-left: 40px;\">Cu excep\u021bia cazului \u00een care se prevede altfel, to\u021bi angaja\u021bii ARB (inclusiv angaja\u021bii temporari, personalul contractant \u0219i consultan\u021bi) trebuie s\u0103 respecte Politica descris\u0103 \u00een acest document.<\/p><p style=\"padding-left: 40px;\">Politica este conceput\u0103 pentru a oferi un nivel minim acceptabil de protec\u021bie organiza\u021biei, indic\u00e2nd proceduri pentru a se asigura c\u0103 aceste niveluri sunt men\u021binute \u00een permanen\u021b\u0103.<\/p><p style=\"padding-left: 40px;\">Politica trebuie s\u0103 fie \u00een perfecta concordan\u021b\u0103 cu nevoile activit\u0103\u021bilor ARB \u00een acest moment \u0219i \u00een viitorul previzibil.<\/p><p style=\"padding-left: 40px;\">1.4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Excep\u021bii<\/p><p style=\"padding-left: 40px;\">Excep\u021biile de la aceast\u0103 Politic\u0103 trebuie s\u0103 fie documentate complet \u0219i motivate prin raportare la interesele legitime care le justific\u0103 \u0219i trimise Responsabilului cu protec\u021bie a datelor pentru examinare.<\/p><p style=\"padding-left: 40px;\">Persoana care solicit\u0103 excep\u021bia trebuie s\u0103 transmit\u0103 cererea \u00eenso\u021bit\u0103 de documentele justificative c\u0103tre conducerea ARB pentru revizuire, aprobare sau respingere final\u0103. Toate excep\u021biile trebuie aprobate \u00een prealabil.<\/p><p style=\"padding-left: 40px;\">Tuturor solicit\u0103rilor li se vor identifica \u0219i analiza riscurile poten\u021biale asupra activit\u0103\u021bilor economice \u0219i asupra\u00a0 securit\u0103\u021bii \u0219i se va stabili dac\u0103 pot fi sau nu acceptate. Acest proces necesit\u0103 un memoriu de acceptare a riscurilor semnat de un director de departament \u0219i aprobat de c\u0103tre Responsabilul cu protec\u021bia datelor, departamentul IT \u0219i departamentul de audit intern.<\/p><p style=\"padding-left: 40px;\">1.5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Consecin\u021bele neconformit\u0103\u021bii<\/p><p style=\"padding-left: 40px;\">To\u021bi angaja\u021bii, contractan\u021bii, consultan\u021bii, furnizorii de servicii, partenerii \u0219i \/ sau entit\u0103\u021bile care ac\u021bioneaz\u0103 \u00een numele ARB sau cei care au acces la date personale sau confiden\u021biale controlate de ARB sunt obliga\u021bi s\u0103 respecte aceast\u0103 Politic\u0103.<\/p><p style=\"padding-left: 40px;\">1.6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Conformitatea<\/p><p style=\"padding-left: 40px;\">Aceast\u0103 politic\u0103 respect\u0103 legisla\u021bia \u0219i reglement\u0103rile interne \u0219i europene relevante, standardele industriale specifice, obliga\u021biile de certificare \u0219i contractuale \u0219i toate politicile de securitate ale ARB.<\/p><p style=\"padding-left: 40px;\">1.7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Monitorizare<\/p><p style=\"padding-left: 40px;\">ARB \u00ee\u0219i rezerv\u0103 dreptul de a verifica respectarea sau nerespectarea acestei Politici, cu sau f\u0103r\u0103 consim\u021b\u0103m\u00e2nt \u0219i\/sau notificare anterioar\u0103.<\/p><p style=\"padding-left: 40px;\">1.8\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Suport<\/p><p style=\"padding-left: 40px;\">Pentru orice \u00eentreb\u0103ri, comentarii sau preocup\u0103ri, contacta\u021bi ARB la datele de contact din Anexa 1.<\/p><p style=\"padding-left: 40px;\">1.9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Actualizare<\/p><p style=\"padding-left: 40px;\">Conducerea executiva a ARB este responsabila cu actualizarea \u0219i revizuirea acestei Politici \u0219i a tuturor politicilor, procedurilor, standardelor \u0219i liniilor directoare.<\/p><p><strong>2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Informa\u021bii generale<\/strong><\/p><p>Urm\u0103toarele informa\u021bii sunt furnizate pentru o parcurgere \u0219i o \u00een\u021belegere mai u\u0219oar\u0103 a acestei politici.<\/p><p style=\"padding-left: 40px;\">2.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Referin\u021be corelative<\/p><p style=\"padding-left: 40px;\">Politicile, procedurile, standardele \u0219i regulamentele de mai jos pot fi men\u021bionate \u00een sec\u021biunile de politic\u0103, subsec\u021biunile \u0219i declara\u021biile din acest document.<\/p><p style=\"padding-left: 40px;\">2.1.1\u00a0\u00a0\u00a0\u00a0 Politicile, procedurile, standardele \u0219i orient\u0103rile ARB<\/p><ol><li style=\"list-style-type: none;\"><ol><li>Statutul Asocia\u021biei Rom\u00e2ne a B\u0103ncilor (ARB)<\/li><li>Regulamentul de Organizare \u0219i Func\u021bionare al ARB V3.0 aprobat de Consiliul Director al ARB la data de 25 iunie 2018 (<em>actualizat conform prevederilor Regulamentului pentru Protec\u021bia Datelor Personale \u2013 GDPR<\/em>)<\/li><li>Politica Asocia\u021biei Rom\u00e2ne a B\u0103ncilor (ARB) privind Securitatea informa\u021biilor<\/li><li>Politica de utilizare a computerului \u0219i Politica privind comunica\u021biile electronice ale Asocia\u021biei Rom\u00e2ne a B\u0103ncilor<\/li><li>Politica de confiden\u021bialitate \u0219i de protec\u021bie a datelor cu caracter personal<\/li><\/ol><\/li><\/ol><p style=\"padding-left: 40px;\">2.1.2\u00a0\u00a0\u00a0\u00a0 Cerin\u021be de reglementare<\/p><ol><li style=\"list-style-type: none;\"><ol><li>Regulamentul (UE) 2016\/679 al Parlamentului european \u0219i al Consiliului din 27 aprilie 2016 privind protec\u021bia persoanelor fizice \u00een ceea ce prive\u0219te prelucrarea datelor cu caracter personal \u0219i privind libera circula\u021bie a acestor date \u0219i de abrogare a Directivei 95\/46\/CE (Regulamentul general privind protec\u021bia datelor),<\/li><li>Ghiduri, opinii si alte documente emise de EuropeanData Protection Board (EDPB),<\/li><li>Legea nr. 129\/2018 pentru modificarea \u0219i completarea Legii nr. 102\/2005 privind \u00eenfiin\u021barea, organizarea \u0219i func\u021bionarea Autorit\u0103\u021bii Na\u021bionale de Supraveghere a Prelucr\u0103rii Datelor cu Caracter Personal, precum \u0219i pentru abrogarea Legii nr. 677\/2001 pentru protec\u021bia persoanelor cu privire la prelucrarea datelor cu caracter personal \u0219i libera circula\u021bie a acestor date,<\/li><li>Deciziile, ghidurile precum si alte documente emise de Autoritatea Na\u0163ional\u0103 de Supraveghere a Prelucr\u0103rii Datelor cu Caracter Personal.<\/li><\/ol><\/li><\/ol><p><strong>3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Politica<\/strong><\/p><p>Toate informa\u021biile despre ARB trebuie s\u0103 fie gestionate \u0219i controlate corespunz\u0103tor pentru a proteja confiden\u021bialitatea, integritatea \u0219i disponibilitatea acestora.<br \/>Pentru a \u00eendeplini aceste cerin\u021be, ARB va implementa principiile de confiden\u021bialitate \u0219i controalele de securitate. Principiile vor proteja, de asemenea, datele personale pe care ARB le stocheaz\u0103 \u0219i le prelucreaz\u0103 \u00een cursul activit\u0103\u021bilor economice curente.<\/p><p style=\"padding-left: 40px;\">3.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Principiile de protec\u021bie a datelor personale<\/p><p style=\"padding-left: 40px;\">ARB a adoptat urm\u0103toarele principii care vor fi respectate \u00een procedura de prelucrare a datelor personale:<\/p><ol><li style=\"list-style-type: none;\"><ol><li>Datele personale vor fi prelucrate \u00een mod corect \u0219i legal, \u00een conformitate cu cerin\u021bele legislative privind protec\u021bia datelor.<\/li><li>Prelucrarea datelor personale sensibile (care este definit\u0103 \u00een sec\u021biunea 3.3 &#8211; Date personale sensibile) face obiectul unor cerin\u021be suplimentare privind protec\u021bia datelor \u0219i trebuie s\u0103 se acorde o aten\u021bie deosebit\u0103 prelucr\u0103rii datelor personale sensibile (de exemplu, date privind s\u0103n\u0103tatea).<\/li><li>Datele personale vor fi prelucrate numai \u00een scopuri specificate, explicite, legale \u0219i legitime \u0219i nu vor fi prelucrate \u00een nici un fel incompatibil cu aceste scopuri, cu excep\u021bia situa\u021biei \u00een care: (i) persoana ale c\u0103rei date personale (&#8222;Persoana vizat\u0103&#8221;) sunt prelucrate \u0219i exprimat consim\u021b\u0103m\u00e2ntul valabil al persoanei la care se raporteaz\u0103 datele personale; sau (ii) dac\u0103 prelucrarea este necesar\u0103 \u00een scopul intereselor legitime urm\u0103rite de ARB sau de o parte ter\u021b\u0103, cu excep\u021bia cazului \u00een care prevaleaz\u0103 interesele sau drepturile \u0219i libert\u0103\u021bile fundamentale ale Persoanei vizate, care necesit\u0103 protejarea datelor personale.<\/li><li>Datele personale trebuie s\u0103 fie adecvate, relevante \u0219i nu excesive \u00een raport cu scopurile pentru care sunt prelucrate datele personale.<\/li><li>Datele personale trebuie s\u0103 fie corecte, complete \u0219i actualizate \u00een func\u021bie de scopurile pentru care sunt prelucrate datele personale.<\/li><li>Datele personale nu trebuie p\u0103strate \u00eentr-o form\u0103 care s\u0103 permit\u0103 identificarea persoanei vizate mai mult dec\u00e2t este necesar \u00een scopurile autorizate.<\/li><li>Datele personale sunt colectate \u0219i prelucrate \u00een conformitate cu drepturile Persoanelor vizate. Consulta\u021bi sec\u021biunea 3.7 &#8211; Drepturile persoanelor vizate din aceast\u0103 Politic\u0103.<\/li><li>\u00cen ceea ce prive\u0219te datele personale, se vor lua m\u0103suri tehnice \u0219i organizatorice corespunz\u0103toare. Vezi sec\u021biunea 3.9 &#8211; Securitatea datelor a acestei Politici.<\/li><li>Datele personale nu trebuie transferate din Spa\u021biul Economic European (&#8222;SEE&#8221;) \u00eentr-o \u021bar\u0103 din afara SEE, cu excep\u021bia cazului \u00een care se consider\u0103 c\u0103 aceast\u0103 \u021bar\u0103 ofer\u0103 un nivel adecvat de protec\u021bie a datelor sau dac\u0103 nu se afl\u0103 \u00eentr-una dintre cazurile descrise \u00een sec\u021biunea 3.6. 3 (<em>Transferuri de date personale din SEE<\/em>) a acestei Politici.<\/li><\/ol><\/li><\/ol><p style=\"padding-left: 40px;\">3.2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Consim\u021b\u0103m\u00e2ntul persoanei vizate \u0219i dreptul de a retrage consim\u021b\u0103m\u00e2ntul<\/p><p style=\"padding-left: 40px;\">3.2.1\u00a0\u00a0\u00a0\u00a0 \u00cen cazul \u00een care consim\u021b\u0103m\u00e2ntul persoanei vizate este dat \u00een contextul unei declara\u021bii scrise care se refer\u0103 \u0219i la alte aspecte, cererea privind consim\u021b\u0103m\u00e2ntul trebuie s\u0103 fie prezentat\u0103 \u00eentr-o form\u0103 care o diferen\u021biaz\u0103 \u00een mod clar de celelalte aspecte, \u00eentr-o form\u0103 inteligibil\u0103 \u0219i u\u0219or accesibil\u0103, utiliz\u00e2nd un limbaj clar \u0219i simplu. Persoana vizat\u0103 trebuie s\u0103 exprime c\u0103 aceasta este sau nu de acord cu prelucrarea datelor sale personale. Consim\u021b\u0103m\u00e2ntul trebuie s\u0103 fie exprimat \u00een scris sau prin alte mijloace legale permise. Persoana vizat\u0103 are dreptul s\u0103 \u00ee\u0219i retrag\u0103 \u00een orice moment consim\u021b\u0103m\u00e2ntul. Retragerea consim\u021b\u0103m\u00e2ntului nu afecteaz\u0103 legalitatea prelucr\u0103rii efectuate pe baza consim\u021b\u0103m\u00e2ntului \u00eenainte de retragerea acestuia. \u00cenainte de acordarea consim\u021b\u0103m\u00e2ntului, persoana vizat\u0103 este informat\u0103 cu privire la acest lucru. Retragerea consim\u021b\u0103m\u00e2ntului se face la fel de simplu ca acordarea acestuia.<\/p><p style=\"padding-left: 40px;\">3.2.2\u00a0\u00a0\u00a0\u00a0 ARB, atunci c\u00e2nd elaboreaz\u0103 un sistem de ob\u021binere a consim\u021b\u0103m\u00e2ntului, se asigur\u0103 c\u0103:<\/p><p style=\"padding-left: 80px;\">(a)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sunt ob\u021binute consim\u021b\u0103minte separate pentru activit\u0103\u021bi de prelucrare distincte;<\/p><p style=\"padding-left: 80px;\">(b)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0consim\u021b\u0103m\u00e2ntul se distinge \u00een mod clar de orice alte aspecte \u00eentr-un document scris;<\/p><p style=\"padding-left: 80px;\">(c)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 cererea pentru ob\u021binerea consim\u021b\u0103m\u00e2ntului este \u00eentr-o form\u0103 inteligibil\u0103 \u0219i accesibil\u0103, \u00een limbaj clar;<\/p><p style=\"padding-left: 80px;\">(d)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0este la fel de u\u0219or pentru Persoana vizat\u0103 s\u0103-\u0219i dea \u0219i s\u0103-\u0219i retrag\u0103 consim\u021b\u0103m\u00e2ntul;<\/p><p style=\"padding-left: 80px;\">(e)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0consim\u021b\u0103m\u00e2ntul nu este condi\u021bionat de executarea unui contract, iar Persoanele vizate trebuie s\u0103 aib\u0103 o alegere real\u0103 liber\u0103 de a-\u0219i da consim\u021b\u0103m\u00e2ntul;<\/p><p style=\"padding-left: 80px;\">(f)\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0informa\u021biile \u0219i dezv\u0103luirile necesare descrise \u00een sec\u021biunea 3.4 &#8211; Notific\u0103ri privind protec\u021bia datelor sunt furnizate sub forma consim\u021b\u0103m\u00e2ntului;<\/p><p style=\"padding-left: 80px;\">(g)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0se poate dovedi c\u0103 a fost ob\u021binut consim\u021b\u0103m\u00e2ntul, inclusiv forma consim\u021b\u0103m\u00e2ntului \u0219i c\u0103 nu a fost primit\u0103 nicio solicitare de retragere a consim\u021b\u0103m\u00e2ntului; \u0219i<\/p><p style=\"padding-left: 80px;\">(h)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0consim\u021b\u0103m\u00e2ntul este dat pentru toate scopurile atunci c\u00e2nd exist\u0103 multiple scopuri \u0219i prelucrarea datelor personale este limitat\u0103 la acele scopuri specifice \u0219i, prin urmare, \u00een conformitate cu consim\u021b\u0103m\u00e2ntul ob\u021binut.<\/p><p style=\"padding-left: 40px;\">3.2.3\u00a0\u00a0\u00a0\u00a0 Consim\u021b\u0103mintele cu privire la datele personale sensibile trebuie, de asemenea, s\u0103 respecte cerin\u021bele din sec\u021biunea 3.3 &#8211; Date personale sensibile din aceast\u0103 Politic\u0103.<\/p><p style=\"padding-left: 40px;\">3.2.4\u00a0\u00a0\u00a0\u00a0 Datele personale pot fi de\u021binute \u0219i\/sau stocate, dac\u0103 acest lucru este cerut de legisla\u021bie, investiga\u021bii legale sau la cererea unei autorit\u0103\u021bi legale care are jurisdic\u021bie asupra datelor.<\/p><p style=\"padding-left: 40px;\">3.3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Categoriile speciale de date cu caracter personal<\/p><p style=\"padding-left: 40px;\">3.3.1\u00a0\u00a0\u00a0\u00a0 Categoriile speciale de date cu caracter personal reprezint\u0103 date cu caracter personal care dezv\u0103luie originea rasial\u0103 sau etnic\u0103, opiniile politice, confesiunea religioas\u0103 sau convingerile filozofice sau apartenen\u021ba la sindicate \u0219i prelucrarea de date genetice, de date biometrice pentru identificarea unic\u0103 a unei persoane fizice, de date privind s\u0103n\u0103tatea sau de date privind via\u021ba sexual\u0103 sau orientarea sexual\u0103 ale unei persoane fizice.<\/p><p style=\"padding-left: 40px;\">3.3.2\u00a0\u00a0\u00a0\u00a0 ARB va avea \u00een general posibilitatea de a procesa categoriile speciale de date cu caracter personal doar atunci c\u00e2nd:<\/p><p style=\"padding-left: 80px;\">(a)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Persoana vizat\u0103 \u0219i-a dat consim\u021b\u0103m\u00e2ntul expres; sau<\/p><p style=\"padding-left: 80px;\">(b)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 prelucrarea este necesar\u0103, astfel \u00eenc\u00e2t ARB s\u0103 poat\u0103 respecta legisla\u021bia muncii \u0219i aceast\u0103 prelucrare este autorizat\u0103 \u00een mod specific sau impus\u0103 de lege.<\/p><p style=\"padding-left: 40px;\">3.3.3\u00a0\u00a0\u00a0\u00a0 Prelucrarea categoriile speciale de date cu caracter personal trebuie s\u0103 fie redus\u0103 la minimum \u0219i, \u00een orice caz, doar \u00een limitele strict necesare. Astfel, \u00een cazul \u00een care este posibil\u0103 prelucrarea datelor personale sensibile \u00een mod anonim sau ca date agregate, acest lucru ar trebui luat \u00een considerare.<\/p><p style=\"padding-left: 40px;\">3.3.4\u00a0\u00a0\u00a0\u00a0 Datele personale incluse \u00een categorii speciale:<\/p><p style=\"padding-left: 80px;\">(a)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0trebuie s\u0103 fie procesate \u00een conformitate cu cele mai \u00eenalte standarde de securitate, dup\u0103 cum este specificat \u00een sec\u021biunea 3.8 &#8211; Securitatea datelor a prezentei Politici; \u0219i<\/p><p style=\"padding-left: 80px;\">(b)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0accesul la datele personale se limiteaz\u0103 numai la acei angaja\u021bi care au nevoie de astfel de date pentru a-\u0219i \u00eendeplini sarcinile legate de munc\u0103.<\/p><p style=\"padding-left: 40px;\">3.4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Notific\u0103ri privind protec\u021bia datelor<\/p><p style=\"padding-left: 40px;\">3.4.1\u00a0\u00a0\u00a0\u00a0 Trebuie furnizat\u0103 o notificare privind protec\u021bia datelor care con\u021bine informa\u021biile din sec\u021biunea 3.4.2 &#8211; Notific\u0103ri privind protec\u021bia datelor. Persoanelor vizate \u00eenainte de prelucrarea datelor lor personale sau, \u00een cazul \u00een care sunt primite de la o ter\u021b\u0103 parte, c\u00e2t mai cur\u00e2nd posibil dup\u0103 primirea datelor lor personale, cu excep\u021bia cazului \u00een care Persoana vizat\u0103 are deja astfel de informa\u021bii.<\/p><p style=\"padding-left: 40px;\">3.4.2\u00a0\u00a0\u00a0\u00a0 Notificarea privind protec\u021bia datelor trebuie s\u0103 fie clar\u0103 \u0219i trebuie s\u0103 includ\u0103 urm\u0103toarele informa\u021bii minime:<\/p><p style=\"padding-left: 80px;\">(a)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0identitatea \u0219i datele de contact ale operatorului (adic\u0103 persoana care determin\u0103 scopul \u0219i modul \u00een care sunt procesate datele personale) \u0219i, dac\u0103 este cazul, Responsabilul cu protec\u021bia datelor;<\/p><p style=\"padding-left: 80px;\">(b)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0scopurile \u0219i temeiul juridic al prelucr\u0103rii, inclusiv interesul sau interesele legitime urm\u0103rite prin intermediul informa\u021biilor, dac\u0103 acesta este temeiul juridic al prelucr\u0103rii;<\/p><p style=\"padding-left: 80px;\">(c)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destinatarii sau categoriile de destinatari ai datelor personale;<\/p><p style=\"padding-left: 80px;\">(d)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0detaliile transferurilor interna\u021bionale \u00een afara SEE \u0219i modul de ob\u021binere a unei copii a garan\u021biilor relevante;<\/p><p style=\"padding-left: 80px;\">(e)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0perioada de p\u0103strare a datelor personale sau, \u00een cazul \u00een care acest lucru nu este posibil, criteriile utilizate pentru stabilirea acestei perioade;<\/p><p style=\"padding-left: 80px;\">(f)\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0existen\u021ba drepturilor Persoanelor vizate (enun\u021bate la punctul 3.7 de mai jos) \u0219i dreptul de a retrage consim\u021b\u0103m\u00e2ntul;<\/p><p style=\"padding-left: 80px;\">(g)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0dreptul de a depune o pl\u00e2ngere la autoritatea de protec\u021bie a datelor (&#8222;APD&#8221;);<\/p><p style=\"padding-left: 80px;\">(h)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0dac\u0103 furnizarea de date personale este o cerin\u021b\u0103 legal\u0103 sau contractual\u0103 sau o cerin\u021b\u0103 necesar\u0103 pentru a \u00eencheia un contract, precum \u0219i dac\u0103 Persoana vizat\u0103 este obligat\u0103 s\u0103 furnizeze datele personale \u0219i posibilele consecin\u021be ale nefurniz\u0103rii acestor informa\u021bii ; \u0219i<\/p><p style=\"padding-left: 80px;\">(i)\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0existen\u021ba unui proces de luare a deciziilor automat care presupune inclusiv elaborarea de profiluri \u0219i selectarea informa\u021biilor semnificative cu privire la logica implicat\u0103, precum \u0219i semnifica\u021bia \u0219i consecin\u021bele preconizate ale unei astfel de proces\u0103ri.<\/p><p style=\"padding-left: 40px;\">3.5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Dezv\u0103luirea datelor personale c\u0103tre operatorii de date \u0219i ter\u021bi<\/p><p style=\"padding-left: 40px;\">3.5.1\u00a0\u00a0\u00a0\u00a0 Un operator de date proceseaz\u0103 date personale \u00een numele \u0219i \u00een conformitate cu instruc\u021biunile unui operator de date, de exemplu un furnizor care p\u0103streaz\u0103 date personale pentru ARB. Datele personale nu pot fi furnizate de c\u0103tre ARB niciunui operator de date dec\u00e2t dac\u0103 a fost \u00eencheiat un acord de prelucrare a datelor \u00een scris con\u021bin\u00e2nd cel pu\u021bin urm\u0103toarele:<\/p><p style=\"padding-left: 40px;\">(a)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0operatorul de date va procesa datele personale numai \u00een conformitate cu instruc\u021biunile documentate ale ARB;<\/p><p style=\"padding-left: 40px;\">(b)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0operatorul de date va ob\u021bine consim\u021b\u0103m\u00e2ntul ARB \u00eenainte de a numi un sub-operator;<\/p><p style=\"padding-left: 40px;\">(c)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0operatorul de date va lua m\u0103surile de securitate tehnice \u0219i organizatorice adecvate, astfel cum se specific\u0103 \u00een acordul de prelucrare a datelor;<\/p><p style=\"padding-left: 40px;\">(d)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0operatorul de date va sprijini ARB \u00een obliga\u021biile sale de a r\u0103spunde solicit\u0103rilor formulate de Persoanele vizate, de a raporta \u00eenc\u0103lc\u0103rile securit\u0103\u021bii, de a efectua evalu\u0103ri de impact privind protec\u021bia datelor \u0219i de a se consulta cu APD;<\/p><p style=\"padding-left: 40px;\">(e)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0operatorul de date va \u0219terge sau va returna toate datele personale prelucrate \u00een numele ARB odat\u0103 ce a \u00eencetat prelucrarea;<\/p><p style=\"padding-left: 40px;\">(f)\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ARB are dreptul de a revizui m\u0103surile de securitate tehnice \u0219i organiza\u021bionale implementate, iar operatorul de date va pune la dispozi\u021bie facilit\u0103\u021bile sale de prelucrare a datelor pentru sprijinirea opera\u021biunilor de audit efectuate de c\u0103tre sau \u00een numele ARB;<\/p><p style=\"padding-left: 40px;\">(g)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0operatorul de date trebuie s\u0103 respecte aceast\u0103 Politic\u0103 (\u00een m\u0103sura \u00een care este relevant), precum \u0219i toate celelalte politici \u0219i proceduri relevante ale ARB, precum \u0219i legile aplicabile.<\/p><p style=\"padding-left: 40px;\">3.5.2\u00a0\u00a0\u00a0\u00a0 Dispozi\u021biile standard privind prelucrarea datelor care con\u021bin cerin\u021be minime de securitate pe care to\u021bi operatorii de date trebuie s\u0103 accepte s\u0103 le respecte pot fi ob\u021binute de la Responsabilul cu protec\u021bia datelor.<\/p><p style=\"padding-left: 40px;\">3.5.3\u00a0\u00a0\u00a0\u00a0 Responsabilul cu protec\u021bia datelor, va efectua verific\u0103ri periodice privind prelucrarea datelor personale de c\u0103tre operatorii de date.<\/p><p style=\"padding-left: 40px;\">3.5.4\u00a0\u00a0\u00a0\u00a0 \u00cen m\u0103sura \u00een care ARB divulg\u0103 date personale unor ter\u021be p\u0103r\u021bi care nu ac\u021bioneaz\u0103 ca operatori de date care prelucreaz\u0103 astfel de date personale \u00een numele ARB (de exemplu, dezv\u0103luiri ca r\u0103spuns la o cerere f\u0103cut\u0103 de poli\u021bie sau de un autor de reglementare), ARB va lua m\u0103suri rezonabile \u0219i adecvate pentru a men\u021bine nivelul cerut de confiden\u021bialitate \u00een conformitate cu prevederile prezentei Politici, iar Responsabilul cu protec\u021bia datelor ar trebui s\u0103 fie consultat \u00eenainte de a face astfel de dezv\u0103luiri pentru a stabili c\u0103 toate condi\u021biile legale au fost \u00eentrunite.<\/p><p style=\"padding-left: 40px;\">3.6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Transferuri ale datelor personale din SEE<\/p><p style=\"padding-left: 40px;\">3.6.1\u00a0\u00a0\u00a0\u00a0 Cerin\u021bele UE privind protec\u021bia datelor interzic transferul de date personale din SEE c\u0103tre \u021b\u0103rile din afara SEE, care nu asigur\u0103 un nivel adecvat de protec\u021bie cu excep\u021bia cazului \u00een care se aplic\u0103 anumite scutiri.<\/p><p style=\"padding-left: 40px;\">3.6.2\u00a0\u00a0\u00a0\u00a0 Un num\u0103r mic de \u021b\u0103ri sunt considerate de c\u0103tre Comisia European\u0103 a asigura un nivel adecvat de protec\u021bie, inclusiv Andorra, Argentina, Canada, Insulele Feroe, Guernsey, Insula Man, Israel, Jersey, Noua Zeeland\u0103, Elve\u021bia \u0219i Uruguay.<\/p><p style=\"padding-left: 40px;\">3.6.3\u00a0\u00a0\u00a0\u00a0 Datele personale nu ar trebui transferate din SEE c\u0103tre o \u021bar\u0103 care nu este considerat\u0103 a oferi un nivel adecvat de protec\u021bie, cu excep\u021bia cazului \u00een care se aplic\u0103 una dintre urm\u0103toarele excep\u021bii:<\/p><p style=\"padding-left: 40px;\">(a)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 persoana vizat\u0103 \u0219i-a dat consim\u021b\u0103m\u00e2ntul pentru realizarea transferului;<\/p><p style=\"padding-left: 40px;\">(b)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 transferul este necesar pentru executarea unui contract \u00eentre Persoana vizat\u0103 \u0219i operator sau pentru punerea \u00een aplicare a m\u0103surilor precontractuale luate ca r\u0103spuns la solicitarea Persoanei vizate;<\/p><p style=\"padding-left: 40px;\">(c)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 transferul este necesar pentru \u00eencheierea sau executarea unui contract \u00eencheiat \u00een interesul Persoanei vizate \u00eentre operator \u0219i o ter\u021b\u0103 parte;<\/p><p style=\"padding-left: 40px;\">(d)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 transferul este necesar sau cerut de lege \u00een baza unor motive de interes public importante sau pentru stabilirea, exercitarea sau ap\u0103rarea solicit\u0103rilor judiciare;<\/p><p style=\"padding-left: 40px;\">(e)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 transferul este necesar pentru protejarea intereselor esen\u021biale ale Persoanelor vizate:<\/p><p style=\"padding-left: 40px;\">(f)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 exportatorul de date din SEE \u0219i importatorul de date din afara SEE s-au angajat la respectarea Clauzele contractuale standard ale Uniunii Europene (&#8222;Contractele-model&#8221;); sau<\/p><p style=\"padding-left: 40px;\">(g)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 importatorul de date din Statele Unite este certificat \u00een conformitate cu deciziile de adecvare ale C.E..<\/p><p style=\"padding-left: 40px;\">3.7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Drepturile persoanelor vizate<\/p><p style=\"padding-left: 40px;\">3.7.1\u00a0\u00a0\u00a0\u00a0 Persoanele vizate au anumite drepturi \u00een conformitate cu Cerin\u021bele de protec\u021bie a datelor care pot fi supuse limit\u0103rilor \u0219i \/ sau restric\u021biilor. Aceste drepturi includ dreptul de a:<\/p><p style=\"padding-left: 40px;\">(a)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 solicita acces la \u0219i de a rectifica sau \u0219terge informa\u021biile lor personale;<\/p><p style=\"padding-left: 40px;\">(b)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ob\u021bine limitarea prelucr\u0103rii sau de a se opune prelucr\u0103rii informa\u021biilor personale;<\/p><p style=\"padding-left: 40px;\">(c)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 dreptul la portabilitatea datelor ;<\/p><p style=\"padding-left: 40px;\">(d)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 dreptul de a nu fi subiectul unei decizii bazat\u0103 exclusiv pe prelucrare automat\u0103, inclusiv elaborarea de profiluri, care produce efecte legale cu privire la Persoana vizat\u0103 sau afecteaz\u0103 \u00een mod semnificativ Persoana vizat\u0103.<\/p><p style=\"padding-left: 40px;\">3.8\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Activit\u0103\u021bi de marketing<\/p><p style=\"padding-left: 40px;\">3.8.1\u00a0\u00a0\u00a0\u00a0 Sub rezerva legilor aplicabile \u0219i a politicilor \u0219i \u00eendrum\u0103rilor ARB cu privire la activit\u0103\u021bile promo\u021bionale, datele personale pot fi prelucrate doar pentru a trimite informa\u021bii de marketing unei Persoane vizate (inclusiv orice angajat) \u00een cazul \u00een care cerin\u021bele prezentei Politici, inclusiv \u00een special \u00een sec\u021biunile 3.2 &#8211; Consim\u021b\u0103m\u00e2ntul persoanei vizate \u0219i dreptul de a retrage consim\u021b\u0103m\u00e2ntul \u0219i 3.4 &#8211; Notific\u0103ri privind protec\u021bia datelor sunt respectate.<\/p><p style=\"padding-left: 40px;\">3.8.2\u00a0\u00a0\u00a0\u00a0 Destinatarii comunic\u0103rilor de marketing expediate prin e-mail trebuie s\u0103 aib\u0103 posibilitatea de a se opune, gratuit, utiliz\u0103rii datelor lor de contact electronice la momentul colect\u0103rii datelor de contact \u0219i la trimiterea fiec\u0103rui mesaj.<\/p><p style=\"padding-left: 40px;\">3.8.3\u00a0\u00a0\u00a0\u00a0 Prelucrarea datelor personale \u00een scopuri de marketing direct trebuie s\u0103 se opreasc\u0103 \u00een cazul \u00een care acest lucru este solicitat de c\u0103tre Persoana vizat\u0103.<\/p><p style=\"padding-left: 40px;\">3.9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Securitatea datelor<\/p><p style=\"padding-left: 40px;\">3.9.1\u00a0\u00a0\u00a0\u00a0 Trebuie adoptate m\u0103suri fizice, tehnice \u0219i organiza\u021bionale adecvate pentru protejarea datelor personale \u00eempotriva distrugerii accidentale sau ilegale sau a pierderii accidentale, modific\u0103rii, dezv\u0103luirii sau accesului neautorizat, av\u00e2nd \u00een vedere costurile de implementare, natura datelor \u0219i riscuri la care sunt expuse.<\/p><p style=\"padding-left: 40px;\">3.9.2\u00a0\u00a0\u00a0\u00a0 Aceste m\u0103suri de securitate trebuie s\u0103 fie \u00een conformitate cu cerin\u021bele din Politica privind Securitate Informa\u021biilor a ARB.<\/p><p style=\"padding-left: 40px;\">3.9.3\u00a0\u00a0\u00a0\u00a0 Angaja\u021bii care sunt solicita\u021bi, \u00een virtutea fi\u0219ei postului lor, s\u0103 prelucreze date personale vor primi instruire \u0219i \u00eendrumare cu privire la securitatea datelor. Angaja\u021bii ARB vor aplica <span style=\"text-decoration: line-through;\">s\u0103i s\u0103 con\u0219tientizeze<\/span> principiile de securitate de baz\u0103 stabilite \u00een aceast\u0103 Politic\u0103 \u0219i \u00een Politica privind Securitatea Informa\u021biilor a ARB.<\/p><p style=\"padding-left: 40px;\">3.9.4\u00a0\u00a0\u00a0\u00a0 Este responsabilitatea tuturor angaja\u021bilor de a raporta, c\u00e2t mai cur\u00e2nd posibil, toate \u00eenc\u0103lc\u0103rilor de securitate sau poten\u021bialele \u00eenc\u0103lc\u0103ri ale securit\u0103\u021bii legate de pierderea sau accesul neautorizat la date sau de divulgarea datelor personale c\u0103tre Responsabilul cu protec\u021bia datelor.<\/p><p style=\"padding-left: 40px;\">3.9.5\u00a0\u00a0\u00a0\u00a0 ARB va notifica ANSPDCP corespunz\u0103tor f\u0103r\u0103 \u00eent\u00e2rzieri nejustificate \u0219i nu mai t\u00e2rziu de 72 de ore de la constatarea unei \u00eenc\u0103lc\u0103ri a datelor personale care conduce la distrugerea, pierderea, modificarea accidentale sau nelegale, dezv\u0103luirea neautorizat\u0103 sau accesul la datele personale transmise, stocate sau prelucrate \u00een alt mod.<\/p><p style=\"padding-left: 40px;\">3.9.6\u00a0\u00a0\u00a0\u00a0 ARB va notifica Persoanele vizate afectate de o \u00eenc\u0103lcare a securit\u0103\u021bii datelor f\u0103r\u0103 \u00eent\u00e2rzieri nejustificate atunci c\u00e2nd \u00eenc\u0103lcarea este susceptibil\u0103 s\u0103 genereze un factor de risc ridicat pentru drepturile \u0219i libert\u0103\u021bile Persoanelor vizate, cu excep\u021bia cazului \u00een care:<\/p><p style=\"padding-left: 40px;\">(a)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0au fost puse \u00een aplicare m\u0103suri adecvate de protec\u021bie tehnic\u0103 \u0219i organizatoric\u0103 cu privire la datele personale afectate de \u00eenc\u0103lcare; \u0219i \/ sau<\/p><p style=\"padding-left: 40px;\">(b)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ARB a luat m\u0103suri ulterioare prin care s\u0103 asigure c\u0103 factorul de risc ridicat pentru Persoanele vizate nu mai este posibil s\u0103 se materializeze; sau<\/p><p style=\"padding-left: 40px;\">(c)\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0notificarea ar implica un efort dispropor\u021bionat. \u00cen acest caz, Persoanele vizate vor fi informate \u00eentr-o manier\u0103 la fel de eficient\u0103.<\/p><p style=\"padding-left: 40px;\">3.9.7\u00a0\u00a0\u00a0\u00a0 Con\u021binutul tuturor datelor, comunic\u0103rilor \u0219i informa\u021biilor transmise, utilizate, primite prin sau stocate pe telefoanele, computerele, e-mailurile, mesageria instantanee, mesajele vocale, conexiunile Internet sau intranet, telefoane celulare \/ telefoane inteligente, tablete, dispozitive inteligente, pager-e sau alte sisteme ale ARB sunt \u00eenregistr\u0103ri \u0219i propriet\u0103\u021bi ale ARB.<\/p><p style=\"padding-left: 40px;\">3.9.8\u00a0\u00a0\u00a0\u00a0 Pentru unicul\u00a0 scop de a proteja angaja\u021bii \u0219i interesele legate de securitatea cibernetic\u0103 a ARB, ARB \u00ee\u0219i rezerv\u0103 dreptul absolut de a monitoriza, intercepta, revizui, bloca, filtra \u0219i dezv\u0103lui altor persoane orice date, comunic\u0103ri, tranzac\u021bii trimise, primite sau stocate pe aceste sisteme \u00een orice moment. Monitorizarea sistemului, efectuat\u0103 periodic, aleatoriu sau \u00een alt mod pentru orice activitate de \u00eentre\u021binere, securitate, investiga\u021bie sau alt scop, este stabilit\u0103 de ARB dup\u0103 propria apreciere.<\/p><p style=\"padding-left: 40px;\">3.10\u00a0\u00a0\u00a0\u00a0 Deschidere, transparen\u021b\u0103 \u0219i notificare<\/p><p style=\"padding-left: 40px;\">ARB va pune la dispozi\u021bie informa\u021bii legate de prelucrare, operatorii de date \u0219i punctul de contact din cadrul ARB pentru orice \u00eentreb\u0103ri legate de confiden\u021bialitatea datelor.<\/p><p style=\"padding-left: 40px;\">3.11\u00a0\u00a0\u00a0\u00a0 R\u0103spundere<\/p><p style=\"padding-left: 40px;\">ARB se va asigura c\u0103 to\u021bi angaja\u021bii c\u0103rora li se \u00eencredin\u021beaz\u0103 datele Persoanei vizate \u00eendeplinesc cerin\u021bele legale \u0219i politicile ARB referitoare la confiden\u021bialitatea \u0219i protec\u021bia datelor<\/p><p style=\"padding-left: 40px;\">Responsabilului cu protec\u021bie a datelor va monitoriza (conform Ghid referitor la aplicarea Regulamentului General privind Protec\u0163ia Datelor destinat operatorilor ANSPDCP) programul de confiden\u021bialitate a datelor \u0219i se va asigura c\u0103 exist\u0103 controale \u0219i procese care s\u0103 asigure un nivel ridicat de protec\u021bie pentru p\u0103strarea integrit\u0103\u021bii confiden\u021bialit\u0103\u021bii\u00a0 \u0219i disponibilit\u0103\u021bii datelor.<\/p><p style=\"padding-left: 40px;\">3.12\u00a0\u00a0\u00a0\u00a0 Raportarea incidentelor \u0219i r\u0103spunsul aferent<\/p><p style=\"padding-left: 40px;\">Va exista un proces formal \u0219i comunicat pentru a r\u0103spunde \u00eenc\u0103lc\u0103rilor securit\u0103\u021bii cibernetice. Un proces de raportare care va include orice Persoan\u0103 vizat\u0103 ale c\u0103rei date personale au fost afectate de \u00eenc\u0103lcare. Notificarea se va face \u00een termen de 72 de ore de la \u00eenc\u0103lcarea confirmat\u0103. Responsabilului\u00a0 cu protec\u021bie a datelor va fi responsabil pentru notificarea persoanelor \u0219i a conducerii.<\/p><p style=\"padding-left: 40px;\">3.13\u00a0\u00a0\u00a0\u00a0 Implementarea<\/p><p style=\"padding-left: 40px;\">3.13.1\u00a0 Aceast\u0103 Politic\u0103 va fi pus\u0103 la dispozi\u021bia angaja\u021bilor prin intermediul Departamentului de Resurse Umane \u0219i va fi pus\u0103 la dispozi\u021bia celor care nu sunt angaja\u021bi sau prin alte mijloace de notificare dup\u0103 cum poate considera necesar Responsabilul cu protec\u021bia datelor.<\/p><p style=\"padding-left: 40px;\">3.13.2\u00a0 Aceast\u0103 Politic\u0103 poate fi revizuit\u0103 oric\u00e2nd. Notific\u0103ri privind revizuirile semnificative sunt furnizate angaja\u021bilor prin intermediul Departamentului de resurse umane \u0219i ter\u021bilor prin intermediul unor mecanisme adecvate.<\/p><p style=\"padding-left: 40px;\">3.14\u00a0\u00a0\u00a0\u00a0 \u00centreb\u0103ri \u0219i reclama\u021bii<\/p><p style=\"padding-left: 40px;\">Aceast\u0103 Politic\u0103 este aplicat\u0103 de c\u0103tre Responsabilul cu protec\u021bia datelor, Compartimentul de Resurse Umane \u0219i Compartimentul IT.<\/p><p style=\"padding-left: 40px;\">\u00a0Orice \u00eentreb\u0103ri sau reclama\u021bii legate de aceast\u0103 Politic\u0103, aplicarea cerin\u021belor de protec\u021bie sau prelucrare a datelor personale pot fi adresate conducerii ARB \u0219i\/sau a persoanei desemnate \u00een rolul Responsabilului pentru protec\u021bia datelor, utiliz\u00e2nd datele de contact ale ARB disponibile la urm\u0103torul link &#8211; click <a title=\"link detalii contact ARB\" href=\"https:\/\/www.arb.ro\/en\/contact\/\" target=\"_blank\" rel=\"noopener\">aici<\/a>.<\/p><p>Observa\u021bie: acronimul SEE cuprinde urm\u0103toarele \u021b\u0103ri: Austria, Belgia, Bulgaria, Croa\u021bia, Republica Cipru, Republica Ceh\u0103, Danemarca, Estonia, Finlanda, Fran\u021ba, Germania, Grecia, Ungaria, Islanda, Irlanda, Italia, Letonia, Liechtenstein, Lituania, Luxemburg, Malta, Olanda, Norvegia, Polonia, Portugalia, Rom\u00e2nia, Slovacia, Slovenia, Spania, Suedia \u0219i Marea Britanie.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Politica de Confiden\u021bialitate 1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Prezentare general\u0103 ASOCIA\u021aIA ROM\u00c2N\u0102 A B\u0102NCILOR (denumit\u0103 \u00een continuare &#8222;ARB&#8221;) a stabilit un program de confiden\u021bialitate \u0219i protec\u021bie a datelor cu caracter personal personale (\u201ddate personale\u201d), sus\u021binut de o Politic\u0103 privind Securitatea Informa\u021biilor care define\u0219te politici, standarde, proceduri, controale \u0219i linii directoare pentru a proteja informa\u021biile esen\u021biale \u0219i tehnologiile informa\u021bionale, precum [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-3674506","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Politica de Confiden\u021bialitate - Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Politica de Confiden\u021bialitate - Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)\" \/>\n<meta property=\"og:description\" content=\"Politica de Confiden\u021bialitate 1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Prezentare general\u0103 ASOCIA\u021aIA ROM\u00c2N\u0102 A B\u0102NCILOR (denumit\u0103 \u00een continuare &#8222;ARB&#8221;) a stabilit un program de confiden\u021bialitate \u0219i protec\u021bie a datelor cu caracter personal personale (\u201ddate personale\u201d), sus\u021binut de o Politic\u0103 privind Securitatea Informa\u021biilor care define\u0219te politici, standarde, proceduri, controale \u0219i linii directoare pentru a proteja informa\u021biile esen\u021biale \u0219i tehnologiile informa\u021bionale, precum [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/\" \/>\n<meta property=\"og:site_name\" content=\"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-04T07:44:02+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"22 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.arb.ro\\\/en\\\/politica-confidentialitate-prelucrare-date-caracter-personal\\\/\",\"url\":\"https:\\\/\\\/www.arb.ro\\\/en\\\/politica-confidentialitate-prelucrare-date-caracter-personal\\\/\",\"name\":\"Politica de Confiden\u021bialitate - Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.arb.ro\\\/#website\"},\"datePublished\":\"2023-03-08T11:51:01+00:00\",\"dateModified\":\"2024-04-04T07:44:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.arb.ro\\\/en\\\/politica-confidentialitate-prelucrare-date-caracter-personal\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.arb.ro\\\/en\\\/politica-confidentialitate-prelucrare-date-caracter-personal\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.arb.ro\\\/en\\\/politica-confidentialitate-prelucrare-date-caracter-personal\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.arb.ro\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Politica de Confiden\u021bialitate\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.arb.ro\\\/#website\",\"url\":\"https:\\\/\\\/www.arb.ro\\\/\",\"name\":\"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)\",\"description\":\"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.arb.ro\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.arb.ro\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.arb.ro\\\/#organization\",\"name\":\"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)\",\"url\":\"https:\\\/\\\/www.arb.ro\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.arb.ro\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.arb.ro\\\/wp-content\\\/uploads\\\/ARB_35_TRANSPARENCY.png\",\"contentUrl\":\"https:\\\/\\\/www.arb.ro\\\/wp-content\\\/uploads\\\/ARB_35_TRANSPARENCY.png\",\"width\":1820,\"height\":1987,\"caption\":\"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)\"},\"image\":{\"@id\":\"https:\\\/\\\/www.arb.ro\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Politica de Confiden\u021bialitate - Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/","og_locale":"en_US","og_type":"article","og_title":"Politica de Confiden\u021bialitate - Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)","og_description":"Politica de Confiden\u021bialitate 1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Prezentare general\u0103 ASOCIA\u021aIA ROM\u00c2N\u0102 A B\u0102NCILOR (denumit\u0103 \u00een continuare &#8222;ARB&#8221;) a stabilit un program de confiden\u021bialitate \u0219i protec\u021bie a datelor cu caracter personal personale (\u201ddate personale\u201d), sus\u021binut de o Politic\u0103 privind Securitatea Informa\u021biilor care define\u0219te politici, standarde, proceduri, controale \u0219i linii directoare pentru a proteja informa\u021biile esen\u021biale \u0219i tehnologiile informa\u021bionale, precum [&hellip;]","og_url":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/","og_site_name":"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)","article_modified_time":"2024-04-04T07:44:02+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"22 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/","url":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/","name":"Politica de Confiden\u021bialitate - Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)","isPartOf":{"@id":"https:\/\/www.arb.ro\/#website"},"datePublished":"2023-03-08T11:51:01+00:00","dateModified":"2024-04-04T07:44:02+00:00","breadcrumb":{"@id":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.arb.ro\/en\/politica-confidentialitate-prelucrare-date-caracter-personal\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.arb.ro\/"},{"@type":"ListItem","position":2,"name":"Politica de Confiden\u021bialitate"}]},{"@type":"WebSite","@id":"https:\/\/www.arb.ro\/#website","url":"https:\/\/www.arb.ro\/","name":"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)","description":"Romanian Association of Banks","publisher":{"@id":"https:\/\/www.arb.ro\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.arb.ro\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.arb.ro\/#organization","name":"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)","url":"https:\/\/www.arb.ro\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.arb.ro\/#\/schema\/logo\/image\/","url":"https:\/\/www.arb.ro\/wp-content\/uploads\/ARB_35_TRANSPARENCY.png","contentUrl":"https:\/\/www.arb.ro\/wp-content\/uploads\/ARB_35_TRANSPARENCY.png","width":1820,"height":1987,"caption":"Asocia\u021bia Rom\u00e2n\u0103 a B\u0103ncilor (ARB)"},"image":{"@id":"https:\/\/www.arb.ro\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/pages\/3674506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/comments?post=3674506"}],"version-history":[{"count":0,"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/pages\/3674506\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.arb.ro\/en\/wp-json\/wp\/v2\/media?parent=3674506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}