Information on the protection of personal data of candidates / students of Bachelor, Master, Postgraduate / Vocational Training / DPPD / DPPD / Conversion / Romanian language for foreigners / ERASMUS programs of Dimitrie Cantemir Christian University (UCDC)
The DIMITRIE CANTEMIR CHRISTIAN UNIVERSITY (UCDC) is pleased to inform you that in order to carry out the activities appropriate to fulfill its mission as a research and educational university, which aims to prepare young people for contemporary society and for the future, it processes personal data in accordance with the General Regulation on Personal Data Protection 679/2016 hereinafter referred to as GDPR.
The principles we have with regard to ensuring the protection and security of the personal data of candidates/studentsof undergraduate, master, postgraduate / vocational training / DPPD / DPPD / conversion / Romanian language for foreigners / ERASMUS programs arethe protection of confidentiality, integrity and availability of the data and information we collect, process, store and transmit.
In order to comply with GDPR, UCDC complies with the principles of personal data processing, as laid down in art. 5 GDPR, during the admission activities as well as during the studies at UCDC:
(a) processed lawfully, fairly and transparently in relation to the data subject (“lawfulness, fairness and transparency”);
(b) collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimization”);
(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
(f) processed in a way that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or accidental damage, by taking appropriate technical or organizational measures (“integrity and confidentiality”)
“Dimitrie Cantemir” Christian University of Bucharest (UCDC) is a private, autonomous institution of higher education and scientific research.
The University operates on the basis of the Romanian Constitution and Romanian legislation (Law no. 88/1993, Government Decision no. 568/1995, Law no. 84/1995, Law no. 238/2002 and Law no. 1/2011) respecting the principles enshrined in international treaties and covenants on human rights, in the Magna Charta of European Universities and in the Bologna Declaration. The process of teaching and scientific research is organized and carried out in accordance with the principles of university autonomy, the University Charter and the requirements of the higher education system aligned with the Bologna Process.
Christian University “Dimitrie Cantemir” has as its founders Prof. Dr. Momcilo Luburici and Prof. Dr. Corina-Adriana Dumitrescu (Radu), from whose initiative and with whose material and financial resources this particular higher education institution was founded in 1990, under the name of Independent University “Dimitrie Cantemir”.
The University operates under the auspices of the “Dimitrie Cantemir” Cultural Association The University also carries out activities related or complementary to teaching and research activities.
The University is located in Bucharest, Splaiul Unirii 176, sector 4.
The University Day is celebrated on February 10, the birthday of the President of the University, Prof. Dr. Momcilo Luburici, founder of the Christian University “Dimitrie Cantemir”, by organizing scientific, cultural and sports events.
In keeping with the traditions of European higher education, the University contributes to the scientific, professional and civic training of young people and to their integration into economic and social life, to the lifelong education of higher education graduates.
Through its activity, the University has contributed and still contributes significantly to the achievement of compatibility between the educational process in Romania and that of prestigious universities in Europe and worldwide. In this respect, UCDC has signed partnerships and collaboration agreements with universities in the European Union, USA, Turkey, China, Japan, etc. Students of all faculties of UCDC can benefit from mobilities within the ERASMUS+ program of the European Union.
The University has in its organizational structure 6 faculties based in two major university centers in the country: Bucharest and Cluj-Napoca.
Currently, the educational offer of the University comprises 8 Bachelor’s degree programs and 13 Master’s degree programs in the following fields: Business Administration, Accounting, Marketing, Law, Foreign Languages and Literatures, Education Sciences and Administrative Sciences.
The University offers the possibility to choose between full-time (IF) and part-time (IFR) study programs, each of them adapted to the needs, preferences and schedule of each student. The University was institutionally evaluated by the Agency for Quality Assurance in Higher Education in the academic year 2010-2011 (for the period 2010-2015), in the academic year 2014-2015 (for the period 2015-2020) and in the academic year 2021-2022 (for the period 2022-2027), successively obtaining the “High Degree of Confidence“, the highest qualification that can be awarded to a university in Romania.
In 34 years of existence, more than 90.000 bachelor and master graduates have diplomas recognized by the European labour market.
UCDC is a personal data controller as defined in Article 4(7) GDPR and carries out operations or sets of operations, by which it processes personal data. Depending on the purpose of the processing, we inform you about the types of personal data processed, the purpose of the processing and the legal grounds on the basis of which it processes, stores and transmits personal data.
The personal data collected by UCDC is necessary for the fulfillment of UCDC’s mission and the performance of UCDC’s contractual obligations to students. Requests for these categories of data are based on the need for UCDC to comply with legal requirements and to carry out activities for the benefit of students.
The processing of personal data carried out by UCDC is performed for all purposes provided for by Law no. 1/2011 or its subsequent legislation, as well as for purposes deriving from the mission of the higher education institution or closely related to this mission.
Depending on the purpose of the processing, we inform you about the main types of personal data processed, the purpose of the processing and the legal grounds on the basis of which we process, store and transmit personal data:
| No. Crt | Type of personal data processed | Requested document where the data are entered | Purpose of processing | Legal basis under Regulation 679/2016 (GDPR) and other legal obligations |
| 1 | Data on the person’s identity and marital status: name (current and previous name for married/divorced/adopted persons or persons whose name has been changed by court judgment or administrative decision), surname, father’s initial/ first name, date of birth, personal numeric code, ID card series. | – identity card/identity card for RO/EU/EEA citizens or passport for foreign students with citizenship other than RO/EU/EEA/travel document(only for foreign students); – birth certificate; – marriage certificate; – divorce/adoption decree/other civil status documents required by law; – passport/passport for foreign students with citizenship other than RO/EU/EEA/travel document(only for foreign students); – standard photographs; – other certificates required by law; | – the development/approval/fulfilment of the minimum conditions for enrolment in undergraduate, master, postgraduate, conversion, DPPD, Romanian language for foreigners, ERASMUS programs; – the completion/signing of study contracts and other study documents; – the issuing of competition identification cards / the issuing of student ID cards, transport cards, library access cards, passwords for access to the student account; – the establishment of citizenship; – the transmission to recipients provided by the legislation for statistical purposes; | 1. Article 6(1)(b) of GDPR: the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; 2. Law 1/2011, National Education Law, art 115, art 151 3. Framework Methodology on the Organization of Admission to Bachelor’s and Master’s cycles of university studies of 15.12.2016, art 16. (1) Registration for the admission competition is made in person, on the basis of the identity card/passport and other documents provided in the admission methodology itself. (3) In the case of candidates to higher education institutions opting for providing online facilities for enrollment/pre-enrollment, it is necessary to apply for personal identification data, as per identity card/passport travel document(only for foreign students. 4. Ordinance no. 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research no. 353/5202/2003 for the approval of the Methodology for the authorization of adult vocational training providers – MO no.774/2003; 2. Law 1/2011, Law on National Education, Art. 141 – The higher education institution shall sign with each student/student-master student/trainee/fellow/researcher enrolled in a study program a university study contract in accordance with the provisions of the regulations on the organization and conduct of study programs and in compliance with the legislation in force. Art 115 (2) The certificates of completion of studies issued in Romania are recognized by the state only if they are issued in accordance with the legal provisions in force, by accredited higher education institutions Art 200 (3) Following admission to a study program, a contract is concluded between the student and the university, specifying the rights and obligations of the parties. 3. ORDER No. 5561 of October 7, 2011 (with subsequent amendments) for the approval of the Methodology on continuous training of pre-university education staff |
| 2 | Data on studies completed and school performance/professional experience: baccalaureate, bachelor, master, school competitions, attested qualification courses, refresher courses, specialization – data related to teaching – data on meeting the minimum conditions for enrolment for conversion / DPPD; | – baccalaureate diploma and transcript of records; – bachelor’s degree and descriptive supplement; – master’s degree and descriptive supplement; – copy of doctor’s degree(if applicable); – university transcripts and grades obtained during the faculty; – analytical syllabus of subjects studied; – diplomas of olympiads, school competitions; – certificates/ attestations of language proficiency; – course completion certificates; – Attestation of recognition of studies(letter of acceptance) – candidates who are foreign citizens or ethnic Romanians from other countries; – Certificate of linguistic competence(candidates who are foreign citizens); – Teacher’s certificate in pre-university education; – Attestation of recognition of studies for candidates who are foreign citizens from EU countries; – Letter of acceptance for candidates who are foreign citizens from non-EU countries | – establishing the minimum conditions for enrolment in undergraduate, master, postgraduate, conversion, DPPD, Romanian Language for Foreigners, ERASMUS programs; – granting financial incentives to deserving candidates; – establishing the admission average; – ranking candidates according to the established criteria: baccalaureate/licenciate average, grades obtained in subjects or average per year/year of study; – establishing by the teaching staff the initial level of preparation; – equivalence of some exams / colloquia / tests; | 1. Art 6 paragraph 1 letter c of GDPR: the processing is necessary for the fulfillment of a legal obligation incumbent on the controller; 2. Law 1/2011 Law on National Education with amendments: Art. 151. (1) High school graduates with baccalaureate or equivalent diploma may participate in the admission to the first cycle of university studies and (2) Within their own methodology, higher education institutions may establish special facilities or conditions regarding the admission of candidates to undergraduate programs of university studies, who have obtained during their high school studies distinctions in school olympiads and / or other national or international competitions. Art. 156. Graduates with a bachelor’s degree or equivalent may apply for master’s degree programs. Art. 163. Only graduates with a Master’s degree or its equivalent are entitled to take part in the admission competition for admission to doctoral programs. 3. Ordinance No. 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research No. 353/5202/2003 for the approval of the Methodology for the authorization of adult vocational training providers – MO No. 774/2003; Art 199, (3) A person may be admitted and enrolled as a student concurrently in no more than two study programs, regardless of the educational institutions offering them. Any financial subsidy or scholarship from public or private funds shall be awarded in accordance with the legal rules in force. 3. ORDER No. 5561 of October 7, 2011 (with subsequent amendments) for the approval of the Methodology on continuous training of pre-university education staff |
| 3 | Address data: Home address or address for correspondence | – identity card/passport; – application form; | – correspondence in letter format; | 1. Art 6 para 1 lit b of GDPR: the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; 2. Law 1/2011 National Education Law with amendments 3. Ordinance No. 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research No. 353/5202/2003 for the approval of the Methodology for the authorization of adult vocational training providers – MO No.774/2003; |
| 4 | Data on academic performance / grades obtained in each subject / averages obtained during the academic year or on admission | applications – excerpts from the matriculation register; – applications concerning the structure of the academic year, the structure of the exam sessions/exams/tests/re-examinations/license/dissertation, the subjects studied, credit points and analytical programs of the subjects studied; – diplomas and descriptive supplements; | – the awarding of scholarships; – the awarding of maintenance/support pensions or other benefits provided for by law; | 1. Art 6 paragraph 1 lit b of GDPR: the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; |
| 5 | Fiscal identity data: – for cash payment at UCDC cash desks: Name, surname, address, reason for payment – for payment at UCDC cash desks using card or payment applications: Name, surname, reason for payment (bank card number, expiration date, type of card, CW2 code) – for payment by payment order (bank) or money order (post): IBAN code, name and surname of the account holder, CNP, reason for the operation; | – bank card used for payment at UCDC cash desks; – bank account used for payment by payment order or postal money order | – payment by the candidate of the admission fee consisting of the application fee; – payment by the candidate of the fees stipulated in the study contract and UCDC regulations: – tuition fee; – tuition fee; – exam/re-examination fee; – penalties/licence/registration fee; – other fees set by UCDC; | 1. Art 6 para 1 lit b GDPR: the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; – Art 6 para 1 lit c GDPR: the processing is necessary for the purposes of complying with a legal obligation incumbent on the controller; 2. Law 1 (National Education)/2011 art 141 (5) Higher education institutions may charge candidates, in accordance with the legal provisions in force, application fees for the organization and conduct of admission, in the amounts approved by the university senates; 3. Accounting Law No 82/1991 republished and updated 4. Law no. 365/2002 on e-commerce, republished, with subsequent amendments 5. Ordinance No 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research No 353/5202/2003 for the approval of the Methodology for the authorization of adult vocational training providers – MO No 774/2003; |
| 6 | Dates for carrying out specialized practice | – certificates/assessments from the internship organizer and/or workplace; | – Demonstration of specialized practice; | 1. Article 6(1)(b) GDPR: the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; c GDPR: the processing is necessary for the purposes of complying with a legal obligation incumbent on the controller; 2. Law 258/2007 on the practice of pupils and students |
| 7 | Health data | – medical certificate, other medical documents proving the existence of a special medical situation; | – fulfilling the minimum conditions for admission; – participation in courses / sports classes or sports competitions; – motivating absences from courses / exams / tests / examinations; – certification of the existence of a disability in order to obtain some facilities; | 1. Article 6(1)(b) of GDPR: the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; 2. Ordinance No. 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research No. 353/5202/2003 approving the Methodology for the Authorization of Adult Vocational Training Providers – MO No. 774/2003; |
| 8 | Data proving the candidate’s status for tuition/tuition/license/dissertation fee exemption Data on the special situation of students | Supporting documents/ supporting documents/ pension coupons of parents/ legal guardians; – certificate attesting that the candidate is an employee or child/ spouse/ first degree spouse/ first degree relative of employees; – copies of death certificates of parents/ legal guardians; – certificate of coming from a foster home; – court judgments; – birth/ marriage certificates. | Granting facilities (scholarships, exemption from admission fees, tuition fees, etc) | 1. Art 6, para 1 lit c GDPR: processing is necessary for the purposes of complying with a legal obligation incumbent on the controller; 2. Law 1/2011, Art. 12. (1) The State shall support …… students with social problems and needs, as well as those with special educational needs. (2) The State shall grant social scholarships to pupils and students from disadvantaged families, as well as to institutionalized students, under the conditions provided by law. (3) The State shall grant prizes, scholarships, places in camps and other such incentives to pupils and students with school and university achievements, as well as with outstanding results in their education and vocational training or in cultural and sports activities. (4) Pupils and students who receive social scholarships may also receive scholarships for school and university achievements. (5) The State and other stakeholders shall financially support the national and international performance activities of pupils and students Art 118 (3) Students with physical disabilities have the right to have access ways adapted to them in all university premises, as well as conditions for the normal conduct of academic, social and cultural activities in higher education institutions 3. Framework Methodology on the organization of admission to bachelor, master and doctoral cycles of 15.12.2016, art 20 aln (4) Exemption from payment of these fees is made only on the basis of supporting documents submitted by candidates and provided for in the admission methodologies. |
| 9. | Data obtained from audio-video recordings of the physiognomy of data subjects accessing the premises of the UCDC guarded by the controller | – video footage taken during access to UCDC premises; | – fulfill the conditions regarding the security of objectives, goods and valuables and the protection of persons; | 1. Art 6, paragraph 1 letter c GDPR: the processing is necessary for the fulfillment of a legal obligation incumbent on the controller; 2. Art 1 para 2 of Law 333/2003 on the security of objectives, goods and valuables and the protection of persons 3. HG 301/2012 Methodological rules for the application of Law 333/2003 4. Instruction 9/2013 on conducting risk analysis on Physical Security |
| 10. | Data obtained from audio-video recordings of physiognomy and voice obtained during online admission activities / during online teaching activities online courses/seminars/exams/lectures/lectures/check tests – only with explicit prior information. | – webcams of the IT equipment used for online teaching activities | – in order to fulfill the contractual and legal obligation to provide educational services to the beneficiaries (students, trainees, trainees) – the online recording of teaching activity becomes an educational resource available to the teaching staff and students/proof of support of teaching activities and compliance with UCDC Internal Regulations and legislation in force | 1. Art 6, paragraph 1 lit f GDPR, (f) the processing is necessary for the purposes of the legitimate interests pursued by UCDC (quality education). Note: there is a relevant relationship between students and UCDC the students being direct beneficiaries of UCDC and the teachers being part of UCDC, together forming the UCDC academic community with common goals and interests. 2. National Education Law no 1/2011 with subsequent amendments and additions. 3. ARACIS standards for distance and reduced attendance education 3. Ordinance No 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research No 353/5202/2003 for the approval of the Methodology for the authorization of adult vocational training providers – MO No 774/2003; |
| 11. | Identifying electronic addresses – E-mail addresses; – IP addresses, identifiers of local internet networks or hubs, geographical location, referrer source (where the UCDC web page was accessed from) | – Application form; – UCDC website access/admission form; – Browsing UCDC websites – e-learning platforms | – effective, pragmatic, rapid communication; – statistical work; – protection and security against intruders or against accidental or intentional digital attacks – online full-time/part-time online education(as required by law). | 1. Art 6, para 1 lit b(processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and lit c GDPR(processing is necessary for the purposes of complying with a legal obligation incumbent on the controller); 2. Law 1/2011 National Education Law with amendments; 3. Accounting Law No 82/1991 with subsequent amendments and additions valid from 01.01.2018, in compliance with MFP order No 2634/2015 art 1 regarding the use of specialized IT systems for the automatic processing of identification data provided for in the Tax Code in art 39 |
| 12. | Personal fixed or mobile phone | – application form | – effective, pragmatic, fast communication; | 1. Art 6, para 1 lit b (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and lit c GDPR(processing is necessary for the purposes of complying with a legal obligation incumbent on the controller); 2. Ordinance No 129/2000 on adult vocational training with amendments; Joint Order of the Minister of Labor, Social Solidarity and Family and the Minister of Education and Research No 353/5202/2003 approving the Methodology for the Authorization of Adult Vocational Training Providers – MO No 774/2003; |
| 13. | Data for the allocation of the individual Enrolment Code – surname at birth (from the birth certificate – current surname (after marriage, marriage, change on request, if necessary, according to the supporting document) – first name – father’s full name – father’s full surname – CNP – date of birth – place of birth (country of origin, county/country code, town) – gender F/M – marital status (married/not married/divorced, widowed (may not be declaredspecial social status (only students with special social status): orphan (by one or both parents) / from a children’s home / from a single-parent family; from disadvantaged groups/disadvantaged background – citizenship (Romanian, residing in Romania or abroad, other citizenship, previous citizenship, if applicable) – ethnicity: only for Romanian citizens – (may not be declared) – permanent domicile: country, county (Romania only), country code (foreigners only), city, town, commune, village, address (street, no., block, staircase, floor, apartment, sector) – and foreign students – identity card/travel document – travel document only for foreign students (identity card for EU/EEA citizens or passport for foreign students with non-EU/EEA citizenship): series, nr, issued, date of issue, expiry date; – other personal data: tf, e-mail address – special medical situation: disabled person, serious and incurable diseases, other situations 2. Schooling data | – birth certificate – marriage certificate (for married couples) – identity card or passport for foreign citizens – certificates, statements, etc. attesting to special social status | Allocation of the individual enrolment code Collection and processing of primary data on students and trainees through the Single Enrolment Register of Romania (RMUR) system | 1. Art 6, para 1 lit b(processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and lit c GDPR(processing is necessary for the purposes of complying with a legal obligation incumbent on the controller); 2. Law 1/2011, Art 201 Student enrollment. The single register of universities in Romania Alin. 1) The Single Register of Universities in Romania, hereinafter referred to as RMUR, is hereby established. RMUR is an electronic database in which all students in Romania from accredited state or private universities or private universities authorized to operate provisionally are registered. The university registers become part of RMUR, ensuring a rigorous control of diplomas. 3. ORDER No. 3714/2018 of 21 May 2018 on the approval of the Regulation on the organization, functioning and operationalization of the Single Matriculation Register of Romanian Universities, Annex, art 2 The collection and processing of primary data on students and trainees from IIS and AR, through the RMUR system, are done for the following purposes: – The visualization by the MEN of the educational path of students and trainees in higher education institutions in Romania and the Romanian Academy in order to base, formulate and implement public policies in the field and, implicitly, to correlate the educational offer with the requirements of the labor market, and to verify the authenticity of the study documents, school documents and the school path in order to apply the visa of the Ministry of National Education through the National Center for the Recognition and Equivalence of Diplomas (CNRED); – identification of situations of double financing of students in state higher education institutions; – transmission of data to rail and metro operators, according to Government Decision no. 42/2017pentru pentru aprobarea Normelor metodologice privind acordarea delle agevolazioni de transport intern ferroviario și cu metro metro metroului pentru elevi și studenți; – transmission of data to the National Institute of Statistics according to Regulation (EU) 2015/759 of the European Parliament and of the Council of April 29, 2015 amending Regulation (EC) no. 223/2009 and the MEN – National Statistical Institute (NSI) Convention on data processing for the production of official statistics on education and vocational training; – the transmission of data, based on written requests, to public institutions authorized to maintain public control and public order under the conditions of special laws regulating these areas, in accordance with the legislative regulations on the processing of personal data and the free movement of such data; – processing for statistical and historical or scientific research purposes or for other purposes at the request of the MEN, in accordance with the legal provisions. Art. 3(1) The primary data shall be updated only for the period during which the data subject has the status of student or learner in other forms of study provided by the university. (2) Thereafter, the data collected shall be archived, without the possibility of intervention on them, and shall be used only for public interest, statistical and historical or scientific research purposes, in accordance with the legislative regulations on data protection and the circulation of such data. State and private higher education institutions in Romania, accredited or authorized to operate provisionally (HEIs) and the Romanian Academy (RA) have the following responsibilities, rights and obligations in relation to RMUR: i) to ensure data confidentiality in accordance with the legal provisions in the field; j) under no circumstances, even at the express written request of the student/course, the university has the right to delete any information about him/her ; k) may request specific reports based on the data registered in RMUR; l) to inform by their own mechanisms (posting on the notice board, mention in the study contracts, etc.) the students enrolled in all university cycles that their personal data are nominally reported to the MEN through UEFISCDI; ART. 11(1) The individual enrolment code is automatically assigned upon entry into the system, using a generation algorithm that will ensure its uniqueness (5) If the student or learner data are already in the system, being associated to another study program, respectively to another form of study provided by higher education institutions, the same individual enrolment code will be assigned to the student or learner, after identification, common data retrieval and validation by the university. Official documents held by the higher education institution on the student or learner concerned will be used for data validation |
The recipients and third parties to whom UCDCle may transfer certain personal data are public authorities or service providers that request such data, in accordance with the laws governing their activity, namely:
a. state authorities and public institutions, as a result of legal obligations of the Operator;
b. service providers directly/indirectly involved in the educational activity and administration of www.ucdc.ro website (e.g. medical clinics with which UCDC has contracts, e-learning platform owners, IT service providers (maintenance, software development), archiving in physical and/or electronic format; audit; transportation companies that provide free transportation (free of charge/reductions offered by specific legislation, the Romanian National Postal Company or various courier companies (for letter mail or dispatch of goods), banks with which teachers, employees and students have contracts for the payment of fees and the intermediation of payment by card of tuition fees and admission fees);
c. judicial bodies in Romania and in other countries (EU, recognized by the EU as complying with the personal data protection rules or having personal data protection agreements with Romania), as well as courts of law, public prosecutors , notaries public, lawyers, bailiffs, translation offices, etc., if necessary Central and local public authorities in Romania (e.g.: MAI, ANAF, ONPCSB, Competition Council, National Archives), police bodies; Institutions investigating and supporting cybersecurity incidents.
d. third party providers of cookies and similar technologies as described in the Cookie Policy; in these situations, your personal data collected through cookies / similar technologies of third parties may be transferred to third countries (i.e. outside the European Union). The Controller may transfer personal data to countries outside the European Union or the European Economic Area. For such transfers, the Controller takes a number of measures to ensure an adequate level of protection of the personal data of individuals. These measures may include the conclusion of standard contractual clauses approved at European level. The transfer of data to third countries may also take place where it is necessary for the performance of a contract between you and the Controller or for the implementation of pre-contractual measures taken at your request, or where the transfer is necessary for the conclusion of a contract or the performance of a contract concluded in your interest between the Controller and another natural or legal person.
UCDC has taken measures to ensure that, in the process of transferring personal data, their full security is ensured, in accordance with GDPR.
The personal data that has been or will be requested will be provided by you. or their legal processors and will be processed for the period of time provided for in European and national law, in accordance with the GDPR and other legal bases requiring it, respecting the principles of ensuring their security and respecting your rights.
The retention periods for these personal data are different depending on legal requirements:
- admission competition results: permanent
- admission register: permanent;
- PhD statistics: permanent
- PhD referees: permanent
- alphabetical index of PhD students: permanent
- inventory registers of doctoral referees: permanent
- number of study documents issued: permanent
- referrals, complaints requests with unfavorable resolution: 15 years
- admission forms and files: 10 years;
- proof of payment of admission fees: 10 years.
- study contracts: 10 years
- study extension requests: 10 years
- Tuition fee collection documents: 10 years
UCDC guarantees students the following rights in terms of personal data protection:
- the right to be informed (art 13 and 14 of the GDPR) – by UCDC about the type, purpose, and legal grounds of the processing;
- the right of access to data (art 15 of GDPR) – the individual has the right to obtain confirmation from UCDC whether it processes personal data concerning him/her;
- the right to rectification (art 16 of GDPR) – of personal data without undue delay;
- the right to erasure (“right to be forgotten“) – (art 17 of the GDPR) – to obtain from UCDC the erasure of personal data concerning you without undue delay, and UCDC is obliged to erase personal data without undue delay;
- the right to restriction of processing (art 18 of the GDPR) – when you consider that the personal data is inaccurate, or you consider that the processing is unlawful, or UCDC no longer needs this data;
- the right to notification of rectification or erasure of personal data or restriction of processing (art 19 of GDPR);
- the right to data portability (Article 20 of GDPR) – you have the right to receive the personal data concerning you that you have provided to UCDC in a structured, commonly used and machine-readable format so that it can be transmitted to another controller;
- the right to object (Art 21 of the GDPR) – you may object to the processing pursuant to Article 6(1)(e) or (f) or Article 6(1) of personal data concerning you, including the creation of profiles on the basis of those provisions;
- the right not to be subject to a decision based solely on automated processing – including profiling (Art. 22) – which produces legal effects concerning you or similarly affects you to a significant extent;
- the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (art 15) – anspdcp@dataprotection.ro or https://www.dataprotection.ro/
To exercise any of these rights, with the exception of the right to lodge a complaint to the Supervisory Authority, as well as if you have any questions or concerns regarding the processing of your personal data, you may contact the Personal Data Protection Officer (DPO) of the DCDC at the e-mail address dpo@ucdc.ro or by a request sent by courier/mail or to the UCDC headquarters, Str. 176 Splaiul Unirii, sector 4, Bucharest, Romania.
As part of these requests, please do not disclose sensitive personal data (information on religious beliefs, ethnic or racial origin or any other information related to health or trade union membership) when contacting us.
The UCDC, through the DPO, shall respond to data subjects’ requests without undue delay or shall give reasons to the data subject for the delay and, if it does not intend to comply with the request, shall give reasons for its refusal. Where the data subject submits a request in electronic format, the information shall be provided in electronic format where possible, unless the data subject requests another format.
Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive nature, the controller (UCDC) may: either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or refuse to comply with the request.
In such cases, the controller bears the burden of proving that the claim is manifestly unfounded or excessive.
The UCDC is also responsible for taking all reasonable steps to verify the identity of a data subject requesting access to data, in particular in the context of online services and online identifiers.
