Review: Oct 2020

Your privacy is important to us. This Privacy Policy explains how the National Administration “Romanian Waters” (hereinafter also referred to as “ Romanian Waters” or the “Organization”) manages and treats your personal data. When you visit our website, www.rowater.ro the “Site”); or partner with us to use services our organization provides (the “Services”); or candidates for a position within our organization; or provide us with goods or services or act as a representative, employee or any agent of a company providing goods or services to us; or we process your data on the instructions or as a result of the actions of third parties.

  1. Purpose of this policy

This Privacy Policy (“Privacy Policy”, “Policy”) explains our handling of any personal data we collect from you. or that we have obtained about you. from a third party and the purposes for which we process your personal data. Personal. It also indicates the rights you have regarding the processing of your personal data. Personal.

This Privacy Policy will inform you of the nature of your personal data. personal information processed by us and how you can request deletion, updating, transfer and/or provision of access to them.

In this Policy we use the term “processing” to cover all activities involving your personal data. personal data, including collecting, handling, storing, sharing, accessing, using, transferring and removing data.

This Privacy Policy is intended to assist you in making informed decisions when using our Site and Services, to understand how your personal data is displayed. Your personal data may be processed by us during or as a result of providing the Services or when you request to work at or with our Organization.

  1. Who we are and what we do

The National Administration “Romanian Waters” manages the assets in the public domain of the state of the nature provided by art. 136 para. 3 of the Romanian Constitution, republished, public property provided by Law nr. 213/1998 on public property and its legal regime, with subsequent amendments and completions, as well as its own patrimony.

  1. How to contact us

Our contact details: Str. Edgar Quinet No. 6, Sector 1, CP 010018, Bucharest,

Phone/Fax: +40 21 312 21 74; Phone: +40 21 311 03 96;

Mailing address: Str. Ion Campineanu nr. 11, Sector 1, CP 010031, Bucharest

If you have any questions about this privacy policy or would like to exercise your rights set out therein, please contact us by sending an email to our Data Protection Officer at gdpr@rowater.ro.

  1. What personal data we collect

We may collect personal data from you. in the course of our business, including through your use of our website, when you contact us or request information from us, when you engage in our services, or as a result of your relationship. with one or more staff members or with our beneficiaries.

Both the Site and our Services are addressed to persons over 18 years of age, so we do not intend to collect and process through our Site data of persons under this age.

Our main purpose in collecting personal data from you. is to help us to:

  1. identity verification;
  2. providing our Services;
  3. improvement and development of services;
  4. resolving requests, disputes and complaints;
  5. compliance with any applicable law, court order, judicial act or requirements of an authority;
  6. performance of our contracts with you;
  7. recruitment purposes;
  8. use in other cases where required or permitted by law.

In order to achieve these objectives, we may process the following personal data:

  1. If you are a visitor to the site:
    1. Information obtained through cookies or similar technologies, such as: site display preferences, consent to data processing by cookies or information that cannot be used to identify you with a unique profile;
    2. All information about the cookies used on our site can be found in the “Cookies Policy”.

We inform you that, by accessing our website, third parties may collect data about you. as a result of integrating social media plugins such as “Like” and “Share” buttons, even if you have not clicked on them or are not a member of the respective social networks. Our organization is not involved in any way in data processing operations by social networks, apart from collection and transmission, which take place automatically, without us having access or control over the data collected by the social networks. For more information, please refer to the privacy policies of the social networks whose plugins appear on our website (Facebook, Linked In, etc.).

  1. b) If you are an individual and enter into a relationship with us, as a beneficiary, to use services that our organization offers (beneficiary or potential beneficiary):
    1. Name and surname
    2. Contact details (email address and phone number)
    3. Any other personal information relating to you or other third parties you may provide to us in connection with receiving our services
  2. c) If you are a potential candidate for employment:

Romanian Waters collects information from and about candidates in relation to available employment or collaboration opportunities. This information may include resumes, identification documents, academic records, courses or certifications obtained, work history, employment, and references.

Romanian Waters uses your personal data. to overlap your skills, experience and education with the specific positions offered. This information is passed on to hiring managers and people involved in the recruitment process to decide on your employment. Romanian Waters may collect additional data from you. if you are invited to the interview stage (or equivalent) and afterwards.

In connection with our recruitment activities, we may also collect special categories of personal data from candidates for whom we have an obligation under employment law to do so, if the information is relevant to their future working environment at Romanian Waters or offering future employment-related benefits or with the person’s explicit consent. For example, we may need to collect information about a candidate’s health to provide an appropriate work environment for that candidate if recruited.

Romanian Waters may collect personal data about you directly from you. – for example, information you provide when applying for a position.

Failure to provide this information automatically leads to the impossibility of concluding and/or performing the contract.

In connection with our recruitment activities, we may also process special categories of personal data from candidates when:

  1. processing is necessary for the purpose of fulfilling our specific obligations in the field of employment (health data, for example)
  2. Processing refers to personal data that is manifestly made public by you. (e.g. sexual orientation, philosophical or religious beliefs, etc.)

We may process data relating to criminal convictions and offences when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects.

  1. d) If you act as a representative (any staff member – employee, manager, agent, collaborator, consultant and the like) of a company that is our Beneficiary or that provides us with goods or services or of a Person empowered by our beneficiaries / suppliers.

In the course of our relationship with other legal entities, personal data may be transmitted to us, such as personal data relating to the personnel (employees, managers, agents, collaborators, consultants and the like) to our suppliers or beneficiaries or to their Processors.

Data processed about you In this context are:

  1. Name and surname
  2. Contact details (email address and phone number)
  3. Position and/or relationship you are in with the Organization – Beneficiary or Supplier or Processor, any identification data from a power of attorney granted to you. by them
  4. Data necessary to resolve complaints, including a complaint identifier
  5. Audio and/or video recordings, photos

Depending on the needs, other types of data transmitted by our contractual partner may also be processed.

How we use personal data

  1. To fulfill services and resolve your requests.

We collect and retain the personal data you submit to us during the use of the Site and/or the performance of our Services to enable us to perform the services you request from us and to resolve the requests you submit to us.

Our website uses different user interfaces to allow you to request information about our Services. Contact details may be requested in each case and other details of personal data that are relevant to your request. This information is used to enable us to respond to your requests.

What is our legal basis?

If you contact us on your own behalf, it is necessary to process your personal data. personal data to fulfill our obligations in accordance with legal provisions. If you contact us as a representative of a company, it is in our legitimate interest to process your personal data. personal data to be able to respond to the request that your Organization addresses it to us through you. Failure to provide this data automatically leads to the impossibility of concluding and / or executing the contract, respectively to the impossibility of solving your request.

We may use your personal data. personal data for the following activities:

  1. To resolve disputes or complaints
  2. To protect the rights, safety or property of our organization or its constituents, employees, suppliers or the like
  3. To comply with legal obligations and requests from authorities
  4. For establishing, exercising or defending a right in court

What is our legal basis?

Where we use your personal data. In order to comply with our legal obligations, we do it precisely because it is our legal obligation to use your personal data. personal data for this purpose. In other cases, we process personal data because it is in our legitimate interest to do so or the processing is necessary for the establishment, exercise or defense of a right in court.

  1. Analysis

We use cookies to provide you with a personalized experience of browsing and using our Site or services. These are generally text files, modules, or similar technologies that your computer, tablet, or phone’s browser needs. Mobile may store them when you visit our website. Files of this type have fixed retention times and remain passive, do not contain malware and do not access information on your hard drive. These types of files can only be accessed by the webserver that placed them.

The information contained in cookies may include the following:

  1. a session ID to track usage statistics on our website
  2. Display or browsing preferences
  3. General demographic data that cannot uniquely identify you

By using this information, we can measure the effectiveness of our content and how visitors use our website and services. This allows us to find out which pages of our website are most attractive to our visitors and which parts of our website are most interesting.

Please see our Cookies Policy for further information.

What is our legal basis?

Where your personal data Your personal data is not in an anonymous form, we use your personal data. personal data based on your consent.

  1. What is the legal basis on which we process your personal data? Personal

We need to use your personal data. personal data on the following grounds:

  1. To perform our obligations under any contract we may have with you.
  2. It is in our legitimate interests to use personal data so as to ensure that we provide the Services in the best possible way
  3. It is our legal obligation to use your personal data. personal data to comply with applicable legal regulations
  4. You have given us your consent to processing

We may process special categories of data when providing our services when:

  1. processing is necessary for the purpose of fulfilling our specific obligations in the field of employment (health data, for example)
  2. processing is necessary for the establishment, exercise or defence of legal claims
  3. Processing refers to personal data that is manifestly made public by you. (e.g. sexual orientation, philosophical or religious beliefs, etc.)

We may process data relating to criminal convictions and offences in the course of providing our Services when the processing is authorised by Union or Member State law providing appropriate safeguards for the rights and freedoms of data subjects.

  1. Who do we share your data with? Personal

Romanian Waters may share personal data with various categories of third parties, as required:

  1. Service providers, information systems and software, cloud and hosting, IT support, document and information storage, platforms and/or providers of document and activity review or management, audit, training, etc.
  2. Human resources and payroll platforms, security companies and building management bodies, delegates, postal suppliers or couriers
  3. Third party service providers who assist us in carrying out the processes of the Romanian Waters National Administration;
  4. Public or regulatory authorities.

Please note that this list is not exhaustive and there may be other examples where we need to share personal data with other parties in order to provide the services as efficiently as possible or to protect the rights, safety, property of the Apele Romane National Administration or its persons, employees, suppliers or the like, to respond to complaints or prevent fraud and illegal activities.

  1. Use of cookies

Our website uses cookies in order to analyze traffic trends and preferences of our users. Please refer to our Cookies Policy to find out all the information about the cookies we use, their purpose and duration, and how you can exercise your preferences.

  1. 9. Processors, independent controllers and joint controllers

Privacy of your personal data is important to us, which is why the transmission of personal data to processors, independent controllers and joint controllers is carried out only on the basis of a confidentiality commitment with them, which guarantees that this data is kept secure and that the management of this information is done in accordance with applicable law and applicable policies. In any case, we will always transmit only the information strictly necessary to achieve that purpose.

We may appoint processors, subcontractors, as necessary to carry out certain activities. We perform due diligence and provide the necessary contractual documentation in relation to any subcontractor to ensure that they process personal data properly and in accordance with legal and regulatory obligations.

  1. How long do we keep your personal data? Personal

We retain the personal data we collect from and about you. for as long as necessary to fulfil the purpose for which we collected them and to satisfy any legal requirements. In order to determine the appropriate retention period for the personal data we process, we take into account the nature, scope, context and purposes of the processing, the risks of varying likelihood and severity for your rights and freedoms, the applicable legal requirements, as well as whether we can achieve the purposes of processing by other means.

We constantly review the need to keep your personal data. personal data and, upon expiry of retention periods, we destroy your personal data. personal data in such a way that they can no longer be recovered or reconstituted. If it is reasonably apparent that the data is no longer needed, we may destroy it immediately without notice.

  1. Privacy and security of your personal data Personal

We apply appropriate technical, physical and organizational measures that are reasonably designed to protect personal data against destruction, loss, alteration, unauthorized disclosure or access and against other unlawful forms of processing. Access to personal data is limited to authorized persons on a need-to-know basis. We maintain a comprehensive information security program commensurate with the risks associated with the processing. The program is continuously adapted to mitigate operational risks and protect personal data, taking into account accepted practices in the field. We also use enhanced security measures when processing any special categories of personal data.

All our partners, employees, suppliers, or empowered persons (ie those who process your personal data on our behalf, for the purposes listed above), are obliged to respect the confidentiality of such personal data and to guarantee the same level of protection as that provided by the Romanian Waters National Administration.

  1. Right of access and other rights

You have the following rights in relation to the personal data we process or hold about you:

Right of access

If you ask us, we will confirm whether we process your personal data. and, where permitted by law, we will provide you with a copy of such personal data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee based on administrative costs.

Right to rectification

If the personal data we hold about you are inaccurate or incomplete, you have the right to request rectification. If you have the right to rectification and if we have shared your personal data. We will inform them of the rectification if possible. If you ask us, where it is possible and legal to do so, we will also tell you with whom we have shared your data. so you can contact them directly.

Right to erasure

You can ask us to delete or suppress your personal data. personal in certain circumstances, such as when we no longer need them. If you have the right to erasure and if we have shared your personal data. We will inform others about the deletion of data where possible. If you ask us, where it is possible and legal to do this, we will tell you with whom we have shared your data. so you can contact them directly.

Your right restrict processing

You can ask us to “block” or stop processing your personal data. personal data in certain circumstances, such as where you dispute the accuracy of such personal data or have objected. If you have the right to restriction and if we have shared your personal data. We will inform them of the restriction where we may do so. If you ask us, where it is possible and legal to do this, we will also tell you with whom we have shared your data. so you can contact them directly.

Right to data portability

You have the right, under certain circumstances, to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and to reuse it elsewhere or to ask us to transfer it to a third party of your choice.

Right to object

You can ask us to stop processing your personal data. and we will do this if:

  • We rely on our legitimate interests or those of third parties to process personal data, unless we can demonstrate compelling legitimate grounds justifying the processing

In the context of events organized within the Romanian Waters National Administration, photo/video images may be taken to help us promote our organization and services. It is not our intention to take images that highlight a particular person. If, however, your person is identifiable in the photo/video materials disseminated by us, you have the right to object to processing for reasons related to your situation. Private. In any case, in compliance with your right. In private life, before any photo and or video session, we will announce in advance that images are to be taken.

Romanian Waters will never use your personal data. personal data to subject you to an automated individual decision.

Your right withdraw your consent

If we rely on your consent. as a legal basis for processing your personal data. You have the right to withdraw this consent at any time.

Your right lodge a complaint with the supervisory authority

If you are concerned about any aspect of our privacy practices, including how we have handled your personal data. personally, you can report it to the competent supervisory authority.

If you wish to exercise your rights set out in this Privacy Policy, please contact us by sending an email to gdpr@rowater.ro .

  1. Changes to this Privacy Policy

We may make changes to this Privacy Policy from time to time. To ensure that you are always aware of how we use your personal data. We will update this Privacy Policy from time to time to reflect any changes to our use of your personal data. Personal. We may also make changes to comply with changes in applicable law or regulatory requirements. However, we recommend that you periodically review this privacy policy on our website to be informed about how we use your data. Personal.