Who has these rights

Any person whose personal data is processed by the school has the rights below: pupils, parents, staff, visitors to the website or people who write to us.

For pupils who are minors, the rights are normally exercised by their parents or legal representatives.

The rights are provided for by Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), Articles 15–22 and Article 7(3).

Your rights in brief

Rights provided for by the GDPR
Right What it means GDPR article
Right of access To find out whether we process your data and to receive a copy of it Art. 15
Right to rectification To request the correction of inaccurate data or the completion of incomplete data Art. 16
Right to erasure To request the erasure of data, in certain situations Art. 17
Right to restriction of processing To request that data only be stored, and not used, for a period of time Art. 18
Notification of recipients That those to whom we have disclosed the data be informed of any rectification, erasure or restriction Art. 19
Right to data portability To receive the data in a commonly used electronic format, in certain situations Art. 20
Right to object To object to processing, on grounds relating to your situation Art. 21
Automated decisions Not to be subject to a decision based solely on automated processing which significantly affects you Art. 22
Withdrawal of consent To withdraw the consent you have given at any time Art. 7(3)

Right of access

You may ask whether the school processes data about you. If so, you have the right to receive a copy of the data and information about: the purpose of the processing, the categories of data, to whom we have disclosed it, how long we keep it, where we obtained it and what rights you have.

The first copy is free of charge.

Right to rectification

If the data is inaccurate or incomplete, you may ask us to correct or complete it. For example, a misspelt name or an old address.

Right to erasure (“right to be forgotten”)

You may request the erasure of data, for example when it is no longer necessary, when you have withdrawn your consent or when it has been processed without a legal basis.

Good to know: The right to erasure is not absolute. The school has a legal obligation to keep certain documents (for example, class registers, pupil record registers or educational certificates) for the period laid down by law. This data cannot be erased on request. We will explain the reason to you in each case.

Right to restriction of processing

You may request that the data only be stored, without being used, for example:

  • while we verify whether the data is accurate;
  • if the processing is unlawful but you do not want the data to be erased;
  • if you need the data to defend a right in court;
  • while we consider your objection.

Notification of recipients

If we rectify, erase or restrict your data, we also inform those to whom we have disclosed the data, unless this proves impossible or would involve disproportionate effort. On request, we will tell you who they are.

Right to data portability

You may request to receive the data you have provided to us in a structured, easy-to-use electronic format, or to have it transmitted directly to another controller, where technically feasible.

This right applies only to data processed by automated means on the basis of your consent or of a contract. It does not apply to data processed by the school in the performance of its tasks carried out in the public interest.

Right to object

If we process data for the performance of a task carried out in the public interest, you may object, on grounds relating to your particular situation.

In that case, we stop the processing, unless we demonstrate compelling legitimate grounds which override your interests, or the data is needed to defend a right in court.

Automated decisions

The school does not take decisions based solely on automated processing of data, including profiling, which produce legal effects concerning you or similarly affect you.

Where we process data on the basis of your consent (for example, for publishing photographs of pupils), you may withdraw your consent at any time. Withdrawing consent is as easy as giving it.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How to submit a request

Send a written request stating who you are, which right you wish to exercise and, if possible, which data the request concerns.

  • By email: scoalaionpopreteganul@yahoo.com
  • In person or by post: to the school office, Str. Gării nr. 138, Reteag, com. Petru Rareș, jud. Bistrița-Năsăud, 427220 (Monday – Friday, 8:00 – 16:00)
  • Data protection officer: through the school office, which forwards the request to the person responsible for data protection

Identity verification. So as not to disclose data to another person, we may ask you to confirm your identity, for example by presenting an identity document at the school office. We will not ask you for more data than is necessary.

Response time. We will reply without undue delay and within one month of receiving the request at the latest. If the request is complex or we receive many requests, this period may be extended by a further two months. We will inform you of the extension and the reasons for it within the first month.

Costs. Requests are free of charge. If a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may charge a reasonable fee or refuse the request, explaining the reasons.

Right to lodge a complaint

If you consider that we are infringing your rights, you may lodge a complaint with the supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) (National Supervisory Authority for Personal Data Processing)

You may also apply to a court of law. We encourage you to contact us first, so that we can try to resolve the issue together.

For information about the data processed through the website, read the Privacy policy.