In brief
- The website is for information purposes. We do not ask you to create an account and we do not ask you for personal data.
- We do not use cookies, traffic statistics programs, advertising or social media plug-ins.
- So that the pages can reach you, the hosting provider (Google, through its Firebase Hosting service) automatically processes your IP address and technical data about the request.
- The Google map loads only if you press the “Load the map” button.
- You may exercise your rights at any time through the school office.
Who the controller is
The data controller is Școala Gimnazială „Ion Pop Reteganul” Reteag (“Ion Pop Reteganul” Lower Secondary School, Reteag), a state educational institution.
| Item | Details |
|---|---|
| Address | Str. Gării nr. 138, Reteag, com. Petru Rareș, jud. Bistrița-Năsăud, 427220 |
| Telephone | 0263 344 072 |
| scoalaionpopreteganul@yahoo.com | |
| Opening hours | School office: Monday – Friday, 8:00 – 16:00 |
Data protection officer
Requests and questions concerning personal data should be sent to the school office, which forwards them to the person responsible for data protection:
- By post or in person: Str. Gării nr. 138, Reteag, com. Petru Rareș, jud. Bistrița-Năsăud, 427220, marked „În atenția responsabilului cu protecția datelor” (For the attention of the data protection officer)
- Telephone: 0263 344 072 (Monday – Friday, 8:00 – 16:00)
- Email: scoalaionpopreteganul@yahoo.com
What this policy covers
This policy explains only the processing of data through this website.
The school also processes the data of pupils, parents and staff in the course of its ordinary activity (enrolment, class registers, scholarships, examinations and others). For this processing, the school informs the data subjects separately, through its own documents.
The rules apply in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Law no. 190/2018 on measures implementing this regulation.
What data we process and why
| Situation | What data | Purpose | Legal basis |
|---|---|---|---|
| You visit any page | IP address, date and time, page requested, browser and device type, the page you came from | Delivering the pages, secure operation of the website, preventing abuse | Art. 6(1)(e) GDPR: performance of a task carried out in the public interest (informing the public about the school’s activity) |
| You save accessibility settings | The preferences you choose (text size, contrast and others), saved only in your browser | Keeping the settings from one page to the next | They do not reach the school or the server; see the Cookie policy |
| You press “Load the map” | IP address and technical data sent directly to Google | Displaying the map with the school’s location | Your action; Google processes the data according to its own rules |
| You email or telephone us | The data you send us | Answering your request | Art. 6(1)(e) GDPR and, where applicable, the school’s legal obligations |
We do not use the data for advertising, for profiling or for automated decision-making.
Good to know: The website currently has no contact form, user account or password-protected area for visitors. If we introduce such services, we will first update this policy.
Who receives the data
Google (the hosting provider). The website is hosted on Firebase Hosting, a Google service. Google processes IP addresses and the technical data of requests on behalf of the school, as a processor, on the basis of its data processing terms.
Google Maps. Only if you press “Load the map” does your browser connect directly to Google. From that moment, Google receives the technical data of the request and may use cookies. Google alone decides how it uses this data, in accordance with its privacy policy.
External links. Some documents are published on Google Drive, and the school’s page has a link to Facebook. These are plain links: nothing is loaded from these providers until you open them. Once you open them, the rules of those websites apply.
Authorities. We may disclose data to authorities only where the law requires us to do so.
We do not sell or rent personal data.
Transfers outside the European Union
Google may also process hosting data in data centres outside the European Economic Area, including in the United States.
Google states that for these transfers it uses safeguards provided for by the GDPR: standard contractual clauses approved by the European Commission and the certification of Google LLC under the EU-U.S. Data Privacy Framework.
For services we add in the future, we intend to store data in data centres within the European Union.
How long we keep the data
- Server logs: these are kept by Google, not by the school. According to the Firebase documentation, IP addresses in hosting logs are kept for a few months and then deleted.
- Accessibility settings: these remain in your browser until you delete them. The state of the closed alert message is deleted when you close the tab.
- Correspondence with the school: this is kept for as long as necessary to resolve the request and then in accordance with the archiving rules applicable to the school.
Your rights
You have the right:
- to find out what data we hold about you (access);
- to request the correction of inaccurate data (rectification);
- to request the erasure of data, under the conditions laid down by law;
- to request the restriction of processing;
- to object to processing based on the public interest;
- to lodge a complaint with the supervisory authority.
Plain-language explanations can be found on the Rights of data subjects page.
How to exercise your rights
Send a written request:
- by email, to scoalaionpopreteganul@yahoo.com;
- by post or in person, to the school office: Str. Gării nr. 138, Reteag, jud. Bistrița-Năsăud, 427220.
We reply within one month of receiving the request at the latest. This period may be extended by a further two months for complex or numerous requests; in that case, we will inform you within the first month. The request is free of charge.
To protect your data, we may ask you to confirm your identity.
Good to know: Please note that the school cannot identify a visitor by IP address alone and has no direct access to the detailed server logs. If your request concerns this data, we will explain what we can do.
Right to lodge a complaint
If you consider that your data is being processed in breach of the law, you may lodge a complaint with:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) (National Supervisory Authority for Personal Data Processing)
- B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, cod poștal 010336, București
- Email: anspdcp@dataprotection.ro
- Website: www.dataprotection.ro
Please contact us first. We can often resolve the issue more quickly. You also have the right to apply to a court of law.
Data security
The website is served only over an encrypted connection (HTTPS). The server sends the browser security instructions which prevent, among other things, the website from being framed within other pages and pages from accessing the camera, microphone or location.
The fonts are hosted on the same server as the website, so they are not loaded from third parties.
Changes to this policy
We will update this policy when the way the website works changes, for example if we introduce new services. The date of the last update appears on this page.