GDPR · Your rights

1. Data controller

The Romanian Smart City Association (Asociația Română pentru Smart City, ARSC), as operator of the DEFNET.RO platform, processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

Data protection questions: [email protected].

2. Legal basis and purposes

We process your data on the basis of:

• Your consent (Art. 6(1)(a) GDPR) · when you fill in forms or subscribe to communications;
• Performance of a contract (Art. 6(1)(b)) · to provide you with membership services;
• Legitimate interest (Art. 6(1)(f)) · to maintain and improve the platform, reply to requests and keep it secure.

3. Data categories and retention

Categories processed: identification data (first name, surname), contact data (email, phone), professional data (company, role), the content of your messages to us.

Retention: for the duration of membership or of an active relationship with us, plus a maximum of 3 years after the last contact. After that, the data is deleted or anonymised.

4. Your rights

Under the GDPR, you have the following rights:

• Right of access · to find out what data we process about you;
• Right to rectification · to correct inaccurate data;
• Right to erasure (the “right to be forgotten”);
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing;
• Right to withdraw your consent at any time (without affecting earlier processing).

To exercise any of these rights, write to us at [email protected]. We reply within a maximum of 30 days.

5. Complaints

If you consider that your data has been processed improperly, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), Romania's data protection authority:

• Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, Romania;
• Web: www.dataprotection.ro;
• Email: [email protected].