GDPR Data Protection

1. Principles we apply

We process personal data lawfully, fairly and transparently, only for specified purposes, limited to what is necessary, kept accurate and up to date, stored no longer than necessary, and protected by appropriate security measures.

2. Legal basis for processing

• Your consent (Art. 6(1)(a) and, for health data, Art. 9(2)(a));
• The performance of a contract with you (Art. 6(1)(b));
• Compliance with a legal obligation (Art. 6(1)(c));
• Our legitimate interests (Art. 6(1)(f)).

3. Your rights under the GDPR

• Right of access — to know what data we hold about you.
• Right to rectification — to correct inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent at any time.
• Right not to be subject to automated decision-making.

4. How to exercise your rights

Send a request to nectora.center.mark2022@gmail.com. We will respond within 30 days. To protect your data, we may ask you to confirm your identity.

5. Right to lodge a complaint

If you believe your rights have been infringed, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral Gheorghe Magheru 28-30, Bucharest — www.dataprotection.ro.

6. Security measures

We apply technical and organisational measures (access control, secure storage, staff confidentiality) to keep your data safe. We periodically review these measures.