Nota de informare suplimentara in contextul COVID-19 si a necesitatii implementarii unor masuri de protectie a sanatatii

 

 

  • Informare suplimentara privire prelucrarea datelor cu caracter personal in contextul special privind raspandirea virusului COVID-19 si a necesitatii implementarii unor masuri de protectie a sanatatii (RO)
  • Additional information concerning the personal data processing in the special context related to the spread of the virus COVID-19 and the need of implementation of health protection actions (EN)

 

 

Informare suplimentara privire prelucrarea datelor cu caracter personal in contextul special privind raspandirea virusului COVID-19 si necesitatea implementarii unor masuri de protectie a sanatatii

 

In contextul evenimentelor din ultima perioadă privind răspândirea și eforturile de diminuare a efectelor virusului COVID-19 si necesitatea instituirii unor masuri de protectie in acest sens, Arctic S.A, (“Compania”, “noi”), in calitate de operator de date cu caracter personal, in conformitate cu cerintele legale cele privind asigurarea securitatii si sanatatii la locul de munca, cu prevederile speciale de urgență de sănătate publică internațională determinată de infecția cu COVID-19, dar si cu dispozitiile legislatiei privind prelucrarea datelor, a implementat o serie de măsuri de urgență si de conduita sociala responsabila, care implica prelucrarea datelor cu caracter personal.

 

 

 

  1.  Pentru ce vom folosi datele tale si pe ce ne bazam atunci cand le folosim (temei legal)?

 

In contextul situatiei de criza privind raspandirea virusului COVID-19, a informarilor, recomandarilor si masurilor de protectie dispuse de catre Ministerul Sanatatii (a se vedea in special Ordinul nr. 414/2020 privind instituirea măsurii de carantină pentru persoanele aflate in situatia de urgenta publica internationala determinata de infectia cu COVID-19 si stabilirea unor masuri in vederea prevenirii si limitarii efectelor epidemiei) si a altor autoritati publice abilitate in acest sens, Arctic prelucreaza date cu caracter personal, inclusiv date privind starea de sanatate, in scopul asigurarii securitatii si sanatatii propriilor angajati si a persoanelor vizate, cu respectarea conditiei prevazute de art. 9 (2) lit. (b) din Regulamentul nr. 679/2016, potrivit careia prelucrarea este necesară în scopul îndeplinirii obligațiilor și al exercitării unor drepturi specifice ale operatorului sau ale persoanei vizate în domeniul ocupării forței de muncă și al securității sociale și protecției sociale, în măsura în care acest lucru este autorizat de dreptul Uniunii sau de dreptul intern ori de un acord colectiv de muncă încheiat în temeiul dreptului intern care prevede garanții adecvate pentru drepturile fundamentale și interesele persoanei vizate.

Astfel, Arctic prelucreaza date cu privire la starea dumneavoastra de sanatate in momentul in care urmeaza a se stabili o intalnire care implica o interactiune directa cu dumnevoastra (spre exemplu, pentru efectuarea unei interventii service, pentru o inlocuire de produs, pentru un interviu , alta actiune care implica contact fizic direct cu dumnevoastra), in scopul asigurarii sigurantei si protectiei vietii, sanatatii si integritatii fizice a angajatilor sai legate de locul de munca si cu privire la orice situatie de munca despre care exista motive intemeiate sa fie considerata un pericol pentru securitatea si sanatatea lucratorilor, in virtutea obligatiilor legale prezentate mai sus.

In plus, Arctic prelucreaza, in baza interesului legitim, date privind categoria de varsta, pentru a va facilita cu prioritate accesul la serviciile noastre de interventii service, daca aveti varsta de peste 65 ani, ca masura de conduita sociala responsabila.

 

 

 

  1. Ce date cu caracter personal folosim?

 

Vom limita prelucrarea datelor in acest context special la cele strict necesare pentru a putea implementa cele mai potrivite masuri de sănătate si securitate a angajaților nostri, respectiv: date de identificare (nume, prenume, adresa, categorie de varsta), date privind existenta sau inexistenta starii de carantina sau autoizolare, informatii privind expunerea la riscul COVID-19 prin efectuarea de calatorii in zonele cu risc (Zona Rosie si Zona Galbena) dispuse de autoritatile publice sau prin intrarea in contact direct cu persoane care s-au expus la riscul COVID-19 prin calatorii in ultimele 14 zile in zone cu transmitere comunitara extinsa sau regiuni din zonele afectate de COVID-19 sau care prezinta simptomele specifice virusului.

 

 

 

  1. Cui vom transmite datele tale cu caracter personal?

In vederea asigurarii confidentialitatii, datele tale cu caracter personal vor fi colectate doar de catre angajatii Arctic, care necesita sa cunoasca astfel de informatii avand in vedere responsabilitatile acestora, cu respectarea cerintelor politicilor si procedurilor noastre interne, dar si a prevederilor legislatiei aplicabile in materie.

 

Destinatarii datelor cu caracter personal ar putea include si diverse categorii de auditori, consultanti sau institutii, inclusiv institutii cu competente in realizarea de inspectii si controale asupra activitatii si activelor Arctic.

 

 

 

  1. Transferul datelor cu caracter personal in strainatate

 

Pentru indeplinirea scopului prevazut in prezenta Nota, Arctic nu transfera Datele tale cu Caracter Personal in afara Spatiului Economic European („SEE”), UK sau Elvetia.

 

 

 

  1. Cat timp vom pastra datele tale?

Datele tale cu caracter personal prelucrate in acest context special vor fi pastrate timp de 6 saptamani dupa declarea de către autoritățile publice a faptului că România nu se mai află în situație de criza. Dupa expirarea acestei durate, datele tale vor fi anonimizate/sterse, atat timp cat nu mai sunt necesare pentru alte scopuri, in conformitate cu legile aplicabile, inclusiv in scopul indeplinirii oricaror cerinte legale, de reglementare, contabile, de raportare, de arhivare ori pentru protejarea unui drept in justitie, pe care Arctic le va putea avea.

 

 

 

  1. Securitatea prelucrarii datelor

Arctic te informeaza ca evalueaza si actualizeaza constant masurile de securitate implementate pentru a asigura o prelucrare a datelor cu caracter personal in conditii de siguranta si securitate.

 

 

 

  1. Drepturile tale legate de datele prelucrate

Sub rezerva conditionarilor si limitarilor prevazute de legea aplicabila, ai dreptul de a solicita oricand accesarea (poti afla ce date prelucram despre tine), rectificarea (atunci cand nu mai sunt de actualitate) sau stergerea datelor tale cu caracter personal, precum si restrictionarea prelucrarii acestora (de ex. atunci cand contesti exactitatea datelor tale, pe perioada de timp in care vom verifica exactitatea datelor) sau dreptul de a te opune prelucrarii de catre noi a datelor tale cu caracter personal. Poti de asemenea sa soliciti portabilitatea datelor (o copie a datelor intr-un format care poate fi citit automat) si sa contesti anumite decizii automate pe care le-am putea adopta in ceea ce te priveste, daca respectivele decizii au efecte juridice sau consecinte de o insemnatate similara. Noi nu desfasuram un astfel de proces decizional automatizat dar, in cazul in care vom face acest lucru, iti vom comunica intr-un mod clar cazurile in care sunt luate astfel de decizii.

 

Solicitarile legate de drepturi trebuie depuse in scris folosind datele de contact din sectiunea „Date de Contact” de mai jos.

 

Ai de asemenea dreptul de a depune o plangere la autoritatea de supraveghere a protectiei datelor din tara ta de resedinta. In Romania, autoritatea de supraveghere este Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal.

 

Daca ne pui la dispozitie datele cu caracter personal ale unor terte parti, trebuie sa te asiguri ca notifici respectiva terta persoana inainte de a ne comunica datele sale personale, prezentandu-i acesteia prezenta Nota de Informare.

 

 

 

  1. Datele de Contact

In cazul in care doresti sa afli mai multe despre operatiunile noastre de prelucrare a datelor si angajamentul nostru de mentinere a confidentialitatii, poti contacta Responsabilul cu Confidentialitatea Datelor la: privacy@arctic.ro .

 

Poti, de asemenea, sa ne scrii la: ARCTIC S.A. Romania, judetul Dambovita, orasul Gaesti, str. 13 Decembrie nr. 210. 

 

 

Additional information concerning the personal data processing in the special context related to the spread of the virus COVID-19 and the need of implementation of health protection actions

 

 

In the context of the events occurred lately concerning the spread and the efforts of reduction of the effects of the virus COVID-19 and the need of the implementation of protection actions in this regard, Arctic S.A (“The Company”, “we”) in the position of personal data controller, according to the legal requirements about the insurance of the work health and safety atrat the work place, with the special emergency stipulations of international public health caused by the contamination with COVID-19, as well as with the stipulations of the legislation concerning the data processing,  implemented a series of emergency actions and of socially responsible behavior, which involve the personal data processing.

 

 

 

  1. For what we will use your data and on what we rely when we use them (legal ground)

 

In the context of the crisis situation concerning the spreading of the virus COVID-19, of the information, recommendations and safety actions required by the Ministry of Heath (see especially the Order no. 414/2020 concerning the setting up of the quarantine action for the people in the international public emergency situation caused by the contamination with COVID-19 and decision of actions with a view of the prevention and limitation of the effects of the epidemic) and of other public authorities entitled in this respect, Arctic processes personal data, including data concerning the health condition, with the purpose to ensure the health and safety of the own employees and data subjects, with the observance of the condition specified by art. 9 (2) letter (b) in the Regulation no. 679/2016, according to which the processing is required in order to fulfill the obligations and to exercise some specific rights of the controller or of the data subject in the field of the employment and of the social security and social protection, to the extent that this is authorized by the law of the Union or by the internal law or by a collective labour agreement concluded based on the internal law which stipulates suitable warranties for the fundamental rights and interests of the data subject.

 

Thus, Arctic processes data concerning your health condition at the moment when a meeting is to be agreed, which means a direct interaction with you (e.g. when the service technicians is performing service interventions, product replacement actions, during an interview, other actions that require direct contact with you), with the purpose to ensure the safety and the protection of the life, health and physical integrity of our employees related to the work place and concerning any work situation about which there are good reasons to be considered as a danger for the safety and health of the workers, by virtue of the above-mentioned legal obligations.

 

In addition, Arctic processes, based on legitimate interest, personal data regarding age category, in order to facilitate your access to our service intervention services, if you are over 65 years old, as a measure of socially responsible behavior.

 

 

  1. What personal data do we use?

We will limit the processing of the data in this special context to what is strictly required to be able to implement the most appropriate health and safety actions for our employees, namely the following: identification data (name, surname, address, age category), data concerning the existence or non-existence of the status on quarantine or self-isolation, information concerning the exposure to the risk of COVID-19 by performing trips to the risk areas (Red Area and Yellow Area) required by public authorities or by coming into direct contact with people who exposed themselves to the risk of COVID-19 by travelling during the last 14 days to areas with extended community transmission or regions affected by COVID-19 or which present the symptoms specific to the virus. 

 

 

  1. To whom will we send your personal data?

In order to ensure the confidentiality, your personal data will be collected only by Arctic employees who need to know such information, keeping in mind their responsibilities, wiith the observance of the requirements of our internal policies and procedures, as well as of the stipulations of the applicable laws.

 

The recipients of the personal data might also include different categories of auditors, consultants or institutions, including institutions competent in the performance of inspections and checking on the activity and assets of Arctic.

 

 

 

  1. Transfer of the personal data abroad

In order to fulfill the purpose specified in this Privacy Notice, Arctic does not distribute your personal data outside the European Economic Area („EEA”), UK or Switzerland.

 

 

 

  1. How long will we keep your data?

Your personal data processed in this special context will be kept for 6 weeks after the statement by the public authorities of the fact that Romania is not in a crisis situation any more. After the expiry of this period, your data will be anonymized/cancelled, as long as they are not required for other purposes, according to the applicable laws, including for the purpose of fulfilling any legal requirements, of regulation, accounting, reporting, archiving or for the protection of a right in the justice, which Arctic might have.

 

 

 

  1. Security of data processing

Arctic informs you that it evaluates and updates constantly the implemented security actions to ensure a personal data processing in conditions of safety and security.

 

 

 

  1. Your rights concerning the processed data

Under the reserve of the conditions and limitations stipulated by the applicable law, you have the right to ask anytime the access (you can find out what data we are processing about you), the correction (when the data is not up to date) or the cancellation of your personal data as well as the restriction of its processing (for ex. when you contest the accuracy of your data, for the period of time when we will check the accuracy of the data) or the right to oppose to the processing by us of your personal data. You can also ask the portability of the data (a copy of the data in a format which can be read automatically) and claim certain automatic decisions which we might make concerning you, if those decisions have legal effects or consequences of a similar meaning. We do not perform such an automatic decision process, but in case we will perform it, we will inform you clearly about the cases when such decisions are made.

 

The requests concerning the rights must be submitted in written using the contact data in the section „Contact data” below.

 

You have also the right to submit a claim to the Supervisory Authority of Data Protection in your residence country. In Romania, the supervisory authority is the National Supervisory Authority of Personal Data Processing.

 

If you provide to us the personal data of third parties, you must make sure to notify that third party before advising us its personal data, by submitting this Information Note to it.

 

 

 

  1. Contact data

If you would like to know more about our data processing operations and our commitment of confidentiality keeping, you can contact the Data Confidentiality Responsible by sending an e-mail to: privacy@arctic.ro .

 

You can also write to us at the address: ARCTIC S.A. Romania, Dambovita county, Gaesti, no. 210, 13 Decembrie Street.