Institutul National de Cercetare-Dezvoltare pentru Fizica si Inginerie Nucleara - Horia Hulubei (IFIN-HH), cu sediul in Magurele, Str. Reactorului nr. 30, judetul Ilfov, in calitate de Operator, prelucreaza datele cu caracter personal in conformitate cu prevederile Regulamentului nr. 679/2016 privind privind protectia persoanelor fizice in ceea ce priveste prelucrarea datelor cu caracter personal si privind libera circulatie a acestor date (Regulament).

Inainte de a continua navigarea pe paginile noastre de web, va recomandam sa cititi cu atentie aceasta politica. In cazul in care nu sunteti de acord cu ea si nu doriti ca datele dvs. personale sa fie utilizate asa cum este detaliat mai jos va rugam sa nu continuati sa utilizati paginile noastre de web si sa nu ne furnizati datele dvs. personale. Cu fiecare accesare a paginilor site-ului nostru confirmati ca ati citit, ati inteles si ati consimtit sa respectati aceasta politica.

1. DEFINITII
Date cu caracter personal - orice informatii privind o persoana fizica identificata sau identificabila ("persoana vizata").
Persoana fizica identificabila - o persoana care poate fi identificata, direct sau indirect, in special prin referire la un element de identificare, cum ar fi un nume, un numar de identificare, date de localizare, un identificator online, sau la unul sau mai multe elemente specifice, proprii identitatii sale fizice, fiziologice, genetice, psihice, economice, culturale sau sociale.
Prelucrare - orice operatiune sau set de operatiuni efectuate asupra datelor cu caracter personal sau asupra seturilor de date cu caracter personal, cu sau fara utilizarea de mijloace automatizate, cum ar fi colectarea, inregistrarea, organizarea, structurarea, stocarea, adaptarea sau modificarea, extragerea, consultarea, utilizarea, divulgarea prin transmitere, diseminarea sau punerea la dispozitie in orice alt mod, alinierea sau combinarea, restrictionarea, stergerea sau distrugerea.
Operator - persoana fizica sau juridica, autoritatea publica, agentia sau alt organism care, singur sau impreuna cu altele, stabileste scopurile si mijloacele de prelucrare a datelor cu caracter personal; atunci cand scopurile si mijloacele prelucrarii sunt stabilite prin dreptul Uniunii sau dreptul intern, operatorul sau criteriile specifice pentru desemnarea acestuia pot fi prevazute in dreptul Uniunii sau in dreptul intern.
Persoana imputernicita de operator inseamna persoana fizica sau juridica, autoritatea publica, agentia sau alt organism care prelucreaza datele cu caracter personal in numele Operatorului.
Autoritate de Supraveghere inseamna autoritatea de reglementare sau de supraveghere responsabila cu aplicarea Regulamentului. In Romania, acest rol este asumat de catre Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP).

2. INFORMATII DESPRE PAGINILE NOASTRE WEB
Domeniile nipne.ro, ifin.ro si eli-np.ro, respectiv subdomeniile aferente lor, sunt proprietatea IFIN-HH, gazduirea si administrarea lor fiind realizata de catre departamentul intern de profil. Paginile noastre de web pot include link-uri catre alte pagini web care sunt gestionate de alte entitati/persoane juridice ce nu au legatura cu activitatea IFIN-HH si cu privire la care IFIN-HH nu poarta nici o responsabilitate. De asemenea, paginile noastre de web ofera link-uri catre alte pagini web partenere, care aplica politici separate in privinta prelucrarii datelor cu caracter personal. Daca accesati aceste portaluri prin intermediul paginilor noastre de web, ar trebui sa consultati politicile de confidentialitate ale acestor pagini de Internet pentru a putea intelege in ce mod colecteaza, utilizeaza si comunica informatiile dvs. Paginile noastre de web mentionate mai sus nu utilizeaza module de tip cookies sau tool-uri de analiza trafic.
In functie de paginile web pe care navigati doar o parte din categoriile de date cu caracter personal vor fi folosite.

3. PERSOANE VIZATE
Categoriile de persoane vizate de prelucrarea datelor cu caracter personal sunt urmatoarele:
- salariati, membrii familiilor salariatilor, fosti salariati;
- candidatii la pozitii vacante din cadrul IFIN-HH;
- parti semnatare ale contractelor si persoanele implicate in incheierea si executarea contractelor;
- participantii la evenimentele organizate sau sustinute de IFIN-HH;
- elevi si studenti;
- utilizatori ai Bibliotecii Nationale de Fizica (BNF);
- participanti la cursurile de formare si specializare din cadrul Centrului de Pregatire si Specializare in Domeniul Nuclear (CPSDN);
- persoane cazate in Centrele Institutului;
- reprezentanti ai autoritatilor, institutiilor publice si mass-media;
- persoane ce acceseaza paginile web.

4. CATEGORII DE DATE CU CARACTER PERSONAL
IFIN-HH prelucreaza datele cu caracter personal pe care persoanele vizate le furnizeaza in mod direct, date care sunt generate pe baza acestora, precum si date din surse publice.
Categoriile de date cu caracter personal prelucrate sunt:
- date de identificare: nume, prenume, titlul academic, functia, departamentul, codul numeric personal, numar si serie BI/CI/pasaport/permis de conducere, numar marca, ID card acces;
- date de identificare informatice: adresa IP, nume de utilizator, parola;
- date privind persoana: data si locul nasterii, sex, cetatenie, stare civila, semnatura;
- date de contact: adresa de domiciliu/resedinta, adresa de E-mail, numar de telefon fix/mobil;
- date de recrutare: date continute in CV-uri, recomandari, carnet munca sau echivalent, cazier judiciar;
- date financiare: numar cont bancar si alte informatii financiare;
- date privind starea de sanatate;
- date biometrice: voce, imagine;
- date colectate cu ocazia inregistrarii si participarii la evenimentele organizate sau sprijinite de catre IFIN-HH (fotografii, video, citate, postari pe retele sociale etc.)

5. SCOPURILE PRELUCRARII DATELOR CU CARACTER PERSONAL
Scopul prelucrarii vizeaza indeplinirea obligagiilor legale in legatura cu obiectul de activitate al IFIN-HH; indeplinirea obiectivelor de comunicare, diseminare si marketing evenimente; asigurarea securitatii persoanelor si bunurilor, pazei si protectiei bunurilor, imobilelor, valorilor si a materialelor cu regim special care sunt utilizate in procesul de cercetare-dezvoltare stiintifica; asigurarea executarii contractelor.

6. TEMEIUL LEGAL AL PRELUCRARII DATELOR CU CARACTER PERSONAL
6.1 Executarea unui contract - prelucrarea este necesara pentru executarea unui contract la care persoana vizata este parte sau pentru a face demersuri la cererea persoanei vizate inainte de incheierea unui contract, inclusiv legate de realizare obiectului de activitate.
6.2 Obligatie legala - prelucrarea este necesara in vederea indeplinirii unei obligatii legale care ii revine operatorului.
6.3 Protejarea intereselor vitale - prelucrarea este necesara pentru a proteja interesele vitale ale persoanei vizate sau ale altei persoane fizice.
6.4 Interes public - prelucrarea este necesara pentru indeplinirea unei sarcini care serveste unui interes public sau care rezulta din exercitarea autoritatii publice cu care este investit operatorul, daca este cazul.
6.5 Interes legitim - prelucrarea este necesara in scopul intereselor legitime urmarite de operator sau de o parte terta, cu exceptia cazului in care prevaleaza interesele sau drepturile si libertatile fundamentale ale persoanei vizate, care necesita protejarea datelor cu caracter personal, in special atunci cand persoana vizata este un copil. In aceasta categorie pot intra indeplinirea obiectivelor de comunicare si diseminare, dupa caz marketing (in situatia activitatilor economice desfasurate de institut); asigurarea securitatii persoanelor si bunurilor, pazei si protectiei bunurilor, imobilelor, valorilor si a materialelor cu regim special care sunt utilizate in procesul cercetare-dezvoltare stiintifica; organizarea de evenimente; procesul de recrutare si resurse umane.
6.6 Consimtamant - persoana vizata si-a dat consimtamantul pentru prelucrarea datelor sale cu caracter personal pentru unul sau mai multe scopuri specifice. Conform Regulamentului consimtamantul este considerat acordat fie prin intermediul unui document scris sau printr-o actiune afirmativa fara echivoc. Consimtamantul astfel acordat poate fi retras potrivit prevederilor Regulamentului.

7. DESTINATARII DATELOR CU CARACTER PERSONAL
Pentru indeplinirea scopurilor de prelucrare, IFIN-HH poate sa dezvaluie anumite categorii de date cu caracter personal catre urmatoarele categorii de destinatari: persoana vizata si/sau reprezentantii sai legali, reprezentantii IFIN-HH, entitatile din IFIN-HH, autoritati judecatoresti sau alte autoritati publice, organizatii internationale, clinici medicale, societati de asigurare si reasigurare, organizatii profesionale, organizatii de cercetare a pietei, parteneri contractuali si/sau imputerniciti ai IFIN-HH.

8. DURATA PRELUCRARII DATELOR
In vederea realizarii scopurilor de prelucrare mentionate, IFIN-HH prelucreaza datele cu caracter personal identificate mai sus conform nomenclatorului arhivistic propriu, intocmit conform Legii Arhivelor Nationale nr. 16/1996, cu modificarile si completarile ulterioare. De asemenea, IFIN-HH prelucreaza si date cu caracter personal in scopuri statistice.

9. SECURITATEA DATELOR
IFIN-HH acorda o importanta sporita datelor cu caracter personal si intelege sa asigure securitatea adecvata pe parcursul activitatilor de prelucrare. In acest sens, IFIN-HH implementeaza masuri adecvate pentru protectia impotriva prelucrarii neautorizate sau ilegale si impotriva pierderii, a distrugerii sau a deteriorarii accidentale a datelor cu caracter personal.

10. DREPTURILE PERSOANEI VIZATE
10.1 Dreptul de informare reprezinta dreptul de a fi informat cu privire la prelucrarea si protejarea datelor cu caracter personal.
10.2 Dreptul de acces la date reprezinta dreptul de a obtine de la operatorul de date confirmarea faptului ca datele cu caracter personal sunt sau nu prelucrate de catre acesta.
10.3 Dreptul la rectificarea datelor reprezinta dreptul de a obtine rectificarea datelor inexacte, precum si completarea datelor incomplete.
10.4 Dreptul la stergerea datelor ("dreptul de a fi uitat") reprezinta dreptul de a obtine, in masura in care sunt indeplinite conditiile legale, stergerea datelor cu caracter personal.
10.5 Dreptul la restrictionarea prelucrarii reprezinta dreptul persoanei vizate de a obtine din partea Operatorului restrictionarea prelucrarii in cazuri precum : contestarea exactitatii datelor, pastrarea datelor dar restrictionarea prelucrarii.
10.6 Dreptul la portabilitatea datelor reprezinta dreptul de a primi datele cu caracter personal intr-o modalitate structurata, folosita in mod obisnuit si intr-un format usor de citit, precum si dreptul ca aceste date sa fie transmise catre alt operator de date, in masura in care sunt indeplinite conditiile legale.
10.7 Dreptul de opozitie la prelucrarea datelor reprezinta dreptul de a se opune in orice moment, din motive intemeiate si legitime legate de situatia particulara, ca datele cu caracter personal sa faca obiectul unei prelucrari, in masura in care sunt indeplinite conditiile legale.
10.8 Dreptul de a nu fi supus unor decizii automatizate, inclusiv profilarea reprezinta dreptul de a cere si de a obtine retragerea, anularea sau reevaluarea oricarei decizii bazate exclusiv pe prelucrari efectuate prin mijloace automate (incluzand crearea de profiluri) care produce efecte juridice sau afecteaza in mod similar, intr-o masura semnificativa, persoanele vizate.
10.9 Dreptul de a se adresa autoritatilor in domeniu/justitiei reprezinta dreptul de a adresa o plangere Autoritatii Nationale de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP) conform http://www.dataprotection.ro/?page=Plangeri_RGPD&lang=ro, respectiv de a se adresa justitiei pentru apararea oricaror drepturi garantate de legislatia aplicabila in domeniul protectiei datelor cu caracter personal, care au fost incalcate.

Cererile prin care va exercitati aceste drepturi trebuie sa contina datele dvs de identitate necesare pentru a ne asigura ca cererea vine de la dvs.

11. RESPONSABILUL CU PROTECTIA DATELOR
Pentru a va exercita drepturile cu privire la prelucrarea datelor cu caracter personal efectuate de catre IFIN-HH, ne puteti transmite o solicitare scrisa, datata si semnata, astfel:
- prin posta, la adresa Institutul National de Cercetare-Dezvoltare pentru Fizica si Inginerie Nucleara - Horia Hulubei, cu sediul in Magurele, Str. Reactorului nr. 30, judetul Ilfov, cu mentiunea "In atentia Responsabilului cu protectia datelor"
- prin E-mail, la adresa gdpr@nipne.ro.

Fiecare solicitare va fi analizata si vi se vor comunica actiunile intreprinse in acest sens, respectand prevederile Regulamentului.
Pentru intrebari sau alte informatii legate de prelucrarea datelor cu caracter personal ne puteti apela la telefon (+4)0214046188 .

Horia Hulubei National Institute for Research and Development in Physics and Nuclear Engineering (IFIN-HH), with headquarters in Magurele, 30 Reactorului St., Ilfov county, as Controller, processes personal data in accordance with the provisions of Regulation No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation).

Before continuing navigation on our webpages, we recommend that you read these policy carefully. Should you not agree to them and wish that your personal data be not used as detailed below please do not continue using our webpages and do not provide us your personal data Each accessing of our website pages is a confirmation that you have read, understood and consented to comply wih this policy.

1. DEFINITIONS
Personal data - any information about an identified or identifiable natural person ("data subject").
Identifiable natural person - an identifiable individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
Processing - any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller - the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor shall mean a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the Controller.
Supervisory Authority shall mean the regulatory or supervisory authority responsible for enforcing the Regulation. In Romania, this role is undertaken by the National Supervisory Authority for Personal Data Processing (ANSPDCP).

2. INFORMATION ON OUR WEBPAGES
The domains nipne.ro, ifin.ro and eli-np.ro and their related subdomains are the property of IFIN-HH, hosting and administration thereof being made by the internal specialised department. Our webpages may include links to other pages that are managed by other entities/legal persons which do not have any connection with the activity of IFIN-HH and regarding which IFIN-HH does not bear any responsibility. Also, our webpages provide links to other partner webpages, which enforce separate confidentiality policies. If you access these portals via our webpages, you should read the confidentiality policies of those Internet pages to be able to understand how they collect, use and communicate your information. Our webpages mentioned above do not use cookies modules or traffic analysis tools.
Depending on the webpages on which you navigate only part of the personal data categories will be used.

3. DATA SUBJECTS
The categories of data subjects to which the personal data processing refers are:
- employees, employees' family members, former employees;
- candidates for vacancies in IFIN-HH;
- parties to contracts and persons involved in the conclusion and execution of contracts;
- participants to events organised or supported by IFIN-HH;
- high school and college students;
- users of National Physics Library (BNF);
- participants in the training and specialization courses of the Center for Training and Specialization in the Nuclear Field (CPSDN);
- persons accommodated in the Institute's Centers;
- representatives of the authorities, public institutions and mass media;
- individuals accessing webpages.

4. PERSONAL DATA CATEGORIES
IFIN-HH processes the personal data provided directly by the data subjects, such data being generated on their basis, as well as from public sources.
The categories of personal data processed are:
- identification data: surname, given name, academic title, position, department, personal numerical code, number and series of ID card/passport/driving licence, mark number, access card ID;
- computer identification data: IP address, username, password;
- data regarding the person: date and place of birth, gender, citizenship, civil status, signature;
- contact information: domicile/residence address, e-mail address, landline/mobile phone;
- recruitment data: data contained in CVs, recommendations, employment history book or equivalent, criminal record;
- financial data: bank account number and other financial information;
- data regarding health condition;
- biometric data: voice, image;
- data collected upon registration and attendance to events organised or supported by IFIN-HH (photos, videos, quotations, social network posts etc.)

5. PURPOSES OF PERSONAL DATA PROCESSING
The purpose of the processing is to fulfil the legal obligations regarding the object of activity of IFIN-HH; to achieve the communication and dissemination objectives, including marketing for events; to ensure the security of individuals and property, the guard and protection of property, buildings, assets and materials with special regime which are used in the scientific research and development process; to ensure the performance of contracts.

6. THE LAWFUL OF PERSONAL DATA PROCESSING
6.1 Performance of a contract - processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, including in relation to the achievement of the object of activity.
6.2 Legal obligation - processing is necessary for compliance with a legal obligation to which the controller is subject.
6.3 Protection of vital interests - processing is necessary in order to protect the vital interests of the data subject or of another natural person.
6.4 Public interest - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, if applicable.
6.5 Legitimate interest - processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This category may include the fulfilment of communication and dissemination objectives, as applicable marketing (for the economic activities carried out by the institute); the safeguarding of individuals' and property security, the guard and protection of property, real estates, assets and special regime materials used in the scientific research and development process; the organisation of events; the recruitment and human resources process.
6.6 Consent - the data subject has given consent to the processing of his or her personal data for one or more specific purposes. According to the Rules, consent is deemed given either by means of a written document or through an affirmative unequivocal action. The consent thus given can be withdrawn according to the provisions of the Rules.

7. RECIPIENTS OF PERSONAL DATA
In order to fulfil the processing purposes, IFIN-HH may disclose certain categories of personal data to the following categories of recipients: the data subject and/or his/her legal representatives, IFIN-HH representatives, the entities within the IFIN-HH, judicial authorities or other public authorities, international organisations, medical clinics, insurance and reinsurance companies, professional organisations, market research organisations, contractual partners and/or persons empowered by IFIN-HH.

8. DURATION OF DATA PROCESSING
In order to fulfil the said processing purposes, IFIN-HH processes the personal data identified above according to its own archival listing, drawn up according to the National Archives Law no. 16/1996, with further amendments and supplements. IFIN-HH also processes personal data for statistical purposes.

9. DATA SECURITY
IFIN-HH attaches utmost importance to personal data and understands to ensure proper security throughout the processing activities. In this respect, IFIN-HH implements adequate measures for protection against unauthorised or illegal processing and against loss, destruction or accidental damage.

10. RIGHTS OF THE DATA SUBJECT
10.1 The right to information represents the right to be informed regarding the processing and protection of personal data.
10.2 The right of access to personal data represents the right to obtain from the data controller the confirmation that the personal data are or are not being processed by it.
10.3 The right to rectification of personal data represents the right to obtain the rectification of inaccurate data, as well as the supplementation of incomplete data.
10.4 The right to erasure of personal data ("the right to be forgotten") represents the right to obtain, insofar as the legal conditions are met, the erasure of personal data.
10.5 The right to restriction of processing represents the data subject's right to obtain from the Controller the restriction of processing in cases such as: contesting data accuracy, data preservation but processing restriction.
10.6 The right to portability of data represents the right to receive personal data in a structured, commonly used manner, and in an easily readable format, as well as the right for such data to be sent to other data controller, insofar as the legal conditions are met.
10.7 The right to object to data processing represents the right to oppose at any time, for justified and lawful reasons connected with the particular situation, that the personal data be subject to processing, insofar as the legal conditions are met.
10.8 The right of not being subject to automated decisions, including profiling represents the right to ask for and obtain the withdrawal, cancellation or reassessment of any decision based exclusively on processing made by automatic means (including profiling) which causes legal effects or similarly affects the data subjects to a significant degree.
10.9 The right to refer the matter to the authorities in the field/the court of law represents the right to send a complaint to the National Supervisory Authority for Personal Data Processing (ANSPDCP) according http://www.dataprotection.ro/?page=Plangeri_RGPD&lang=ro, to go to court, respectively, in order to defend any rights secured by the applicable personal data protection legislation, which have been violated.

The requests whereby you exercise such rights must contain your identity data necessary to assure us that the request comes from you.

11. DATA PROTECTION OFFICER
In order to exercise your rights regarding the processing of personal data, you can send us a written, dated and signed request, as follows:
- by post, to the address of the Horia Hulubei National Institute for Research and Development in Physics and Nuclear Engineering, with headquarters in Magurele, 30 Reactorului St., Ilfov county, with the mention "For the attention of the Data Protection Officer"
- by e-mail, at gdpr@nipne.ro.

Each request will be analysed and you will be advised of the actions taken in this respect, in compliance with the provisions of the Regulation.
For questions or other information regarding the processing of your personal data, you can call us at (+4)0214046188 .