{"id":8090,"date":"2022-07-18T16:44:44","date_gmt":"2022-07-18T14:44:44","guid":{"rendered":"https:\/\/triplast.ro\/procedura-de-evidenta-a-prelucrarilor-de-date\/"},"modified":"2022-12-02T12:21:24","modified_gmt":"2022-12-02T10:21:24","slug":"procedura-de-evidenta-a-prelucrarilor-de-date","status":"publish","type":"page","link":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/","title":{"rendered":"GDPR – Procedure for record of data processing"},"content":{"rendered":"

[vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text]<\/p>\n

    \n
  1. DEFINITIONS \n

    “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in English General Data Protection Regulation);<\/p>\n

     <\/p>\n

    “personal data” – any information regarding an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to his physical, physiological, genetic, psychological, economic, cultural or social identity;<\/p>\n

     <\/p>\n

    “processing” – means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification , extract, consult, use, disclose by transmission, disseminate or otherwise make available, align or combine, restrict, delete or destroy;<\/p>\n

     <\/p>\n

    “operator” – means the natural or legal person, public authority, agency or other body that, alone or together with others, determines the purposes and means of personal data processing; when the purposes and means of processing are established by Union law or domestic law, the operator or the specific criteria for its designation may be provided for in Union law or domestic law;<\/p>\n

     <\/p>\n

    “person authorized by the operator” – means the natural or legal person, public authority, agency or other body that processes personal data on behalf of the operator;<\/p>\n

     <\/p>\n

    “recipient” – means the natural or legal person, public authority, agency or other body to whom (to whom) personal data is disclosed, whether or not it is a third party. However, the public authorities to whom personal data may be communicated within a<\/p>\n

    certain inquiries in accordance with Union or national law are not considered recipients; the processing of this data by the respective public authorities complies with the applicable data protection rules, in accordance with the purposes of the processing;<\/p>\n

     <\/p>\n

    “third party” – means a natural or legal person, public authority, agency or body other than the data subject, the operator, the person authorized by the operator and the persons who, under the direct authority of the operator or the person authorized by the operator, are authorized to process data personal;<\/p>\n

     <\/p>\n

    “consent” – of the data subject means any manifestation of the data subject’s free, specific, informed and unambiguous will by which he accepts, through a statement or an unequivocal action, that the personal data concerning him be processed;<\/p>\n

     <\/p>\n

    “breach of personal data security” – means a breach of security that leads, accidentally or unlawfully, to the destruction, loss, alteration, or unauthorized disclosure of personal data transmitted, stored or otherwise processed, or to unauthorized access to them;<\/p>\n

     <\/p>\n

    “representative” – \u200b\u200bmeans a natural or legal person established in the Union, designated in writing by the controller or the person authorized by the controller, who represents the controller or the authorized person with regard to their respective obligations under the GDPR;<\/li>\n<\/ol>\n

    \u00a0<\/em><\/p>\n

    “mandatory corporate rules” – means the personal data protection policies that must be followed by a controller or a person authorized by the controller established in the territory of a Member State, in relation to transfers or sets of transfers of personal data personally to an operator or a person authorized by the operator in one or more third countries within a group of enterprises or a group of enterprises involved in a joint economic activity;<\/p>\n

     <\/p>\n

    “supervisory authority” – means an independent public authority established by a Member State;<\/p>\n

     <\/p>\n

    “DPO” – data protection officer (in English, data protection officer);<\/p>\n

     <\/p>\n

    “DPIA” – data protection impact assessment (in English, data-protection impact assessment, DPIA);<\/p>\n

     <\/p>\n

    “Supervisory Authority” – the National Supervisory Authority for the Processing of Personal Data (ANSPDCP).<\/p>\n

     <\/p>\n

    PURPOSE AND SCOPE<\/p>\n

     <\/p>\n

    2.1. THE GOAL<\/p>\n

     <\/p>\n

    This procedure documents the requirements regarding the preparation of the document called “Data Processing Record Register” (Annex 1).<\/p>\n

     <\/p>\n

    2.2. APLICATION DOMAIN<\/p>\n

     <\/p>\n

    This procedure applies to all organizational structures of SC TRIPLAST SRL. This procedure will be considered as having a general character and will apply to all processing carried out by the Operator.<\/p>\n

     <\/p>\n

    If it is found that there are certain matters for which this procedure does not provide adequate guidance, Employees must immediately seek advice from the Data Protection Officer (DPO), if appointed, or the legal representative of the Operator.<\/p>\n

     <\/p>\n

    2.3. REFERENCE DOCUMENTS<\/p>\n

     <\/p>\n

    – GDPR<\/p>\n

    – Internal regulation<\/p>\n

    – Internal procedures<\/p>\n

     <\/p>\n

    GENERAL RULES<\/p>\n

     <\/p>\n

    3.1. GENERAL. The SC TRIPLAST SRL operator will prepare a table (preferably in excel format), in which it will list each line of business (e.g. “activity” carried out within each business process) together with the information related to collection, storage, use, transfer and destruction of critical data content for each department.<\/p>\n

     <\/p>\n

    IMPORTANT: The operator will go through the points below for each type of document that contains personal data.<\/p>\n

     <\/p>\n

    3.2. TYPE\/NAME OF DOCUMENTS FOR PERSONAL DATA COLLECTION<\/p>\n

     <\/p>\n

    The SC TRIPLAST SRL operator will identify the type\/name of the documents for the collection of personal data, the categories of data from the Data Classification Scheme will be selected.<\/p>\n

     <\/p>\n

    3.3. DATA CATEGORIES<\/p>\n

     <\/p>\n

    The SC TRIPLAST SRL operator will select the categories of personal data. In order to identify the categories of personal data collected, the Data Classification Scheme will be considered.<\/p>\n

     <\/p>\n

    3.4. DATA TYPE<\/p>\n

     <\/p>\n

    The SC TRIPLAST SRL operator will select the type of personal data. In order to identify the type of personal data collected, the Data Classification Scheme will be considered.<\/p>\n

     <\/p>\n

    3.5. DATA SOURCE<\/p>\n

     <\/p>\n

    The SC TRIPLAST SRL operator will select where the personal data comes from (eg input source)? Tick \u200b\u200b”X” the data input source (multiple options are possible).<\/p>\n

    \u2610 Clients (PF or PJ)<\/p>\n

    \u2610 Employees<\/p>\n

    \u2610 Third parties (suppliers, partners, service providers)<\/p>\n

     <\/p>\n

    3.6. DATA COLLECTION METHOD<\/p>\n

    The SC TRIPLAST SRL operator will select the method of collecting personal data. Tick \u200b\u200bwith an “X” the support type of data collection (multiple options are possible).<\/p>\n

    \u2610 Physical (Paper Support)<\/p>\n

    \u2610 Post\/Courier<\/p>\n

    \u2610 Fax<\/p>\n

    \u2610 Email<\/p>\n

     <\/p>\n

    \u2610 Web portal<\/p>\n

    \u2610 Online form<\/p>\n

    \u2610 USB Drive<\/p>\n

    \u2610 Hard drive<\/p>\n

    \u2610 CDs\/DVDs<\/p>\n

    \u2610 FTP server<\/p>\n

    \u2610 Social Media<\/p>\n

    \u2610 Call Center<\/p>\n

     <\/p>\n

    3.7. NEXT TRANSFER LOCATION<\/p>\n

    The SC TRIPLAST SRL operator will select the location of the transfer of personal data. Tick \u200b\u200b”X” the data transfer location (multiple options are possible).<\/p>\n

    \u2610 Offices (Files)<\/p>\n

    \u2610 Email Server<\/p>\n

    \u2610 IT applications (name of applications used)<\/p>\n

    \u2610 Databases<\/p>\n

    \u2610 Electronic Files<\/p>\n

    \u2610 Mobile phones<\/p>\n

     <\/p>\n

    3.8. STORAGE LOCATION<\/p>\n

    The SC TRIPLAST SRL operator will select the storage location of personal data. Tick \u200b\u200b”X” the data storage location (multiple options are possible).<\/p>\n

    \u2610 Offices (Files)<\/p>\n

    \u2610 Email Server<\/p>\n

    \u2610 IT applications (name of applications used)<\/p>\n

    \u2610 Generic System\/Server<\/p>\n

    \u2610 Electronic Files<\/p>\n

    \u2610 Databases<\/p>\n

    \u2610 Web server<\/p>\n

    \u2610 Electronic Archive (back-up)<\/p>\n

    \u2610 Cloud<\/p>\n

     <\/p>\n

     <\/p>\n

    3.9. DATA USE (Internal)<\/p>\n

    The SC TRIPLAST SRL operator will select the method of using personal data. Tick \u200b\u200bwith an “X” the method of use (multiple options are possible).<\/p>\n

    \u2610 Department<\/p>\n

    \u2610 Internal transfer to another department<\/p>\n

    \u2610 How many employees have access to personal data?<\/p>\n

     <\/p>\n

    3.10. DATA TRANSFER (External)<\/p>\n

    The SC TRIPLAST SRL operator will select the method of transfer of personal data. Tick \u200b\u200bwith “X” the method of transfer (several options are possible).<\/p>\n

    \u2610 Authorities<\/p>\n

    \u2610 Third parties (suppliers, partners, service providers)<\/p>\n

    \u2610 Cross-border (in the EU\/EEA or outside the EU\/EEA)<\/p>\n

     <\/p>\n

    3.11. DATA RETENTION AND ARCHIVING<\/p>\n

    The SC TRIPLAST SRL operator will select the data retention\/storage location. “X” the data retention\/storage location (multiple options are possible).<\/p>\n

    \u2610 Offices (Archive)<\/p>\n

    \u2610 Email Server<\/p>\n

    \u2610 IT applications (name of applications used)<\/p>\n

    \u2610 Generic System\/Server<\/p>\n

    \u2610 Electronic Files<\/p>\n

    \u2610 Databases<\/p>\n

    \u2610 Web server<\/p>\n

    \u2610 Electronic archiving (back-up)<\/p>\n

    \u2610 Cloud<\/p>\n

     <\/p>\n

    3.12. STORAGE\/RETENTION PERIOD<\/p>\n

    The SC TRIPLAST SRL operator will complete the storage\/retention period for each basis of personal data processing.<\/p>\n

    \u2610 Consent<\/p>\n

    \u2610 Legal obligation<\/p>\n

    \u2610 Contractual obligation<\/p>\n

    \u2610 Public interest<\/p>\n

    \u2610 Public authorities<\/p>\n

    \u2610 Protecting vital interests<\/p>\n

    \u2610 Legitimate interest<\/p>\n

     <\/p>\n

    3.13. DESTRUCTION\/DELETION<\/p>\n

    The SC TRIPLAST SRL operator will complete the method of destruction\/deletion of personal data. Tick \u200b\u200bwith an “X” the method of data deletion\/destruction (multiple options are possible).<\/p>\n

    \u2610 Trash can<\/p>\n

    \u2610 Paper shredder<\/p>\n

    \u2610 Delete computer systems<\/p>\n

     <\/p>\n

     <\/p>\n

    [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

    [vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text] DEFINITIONS  “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-8090","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nGDPR - Procedure for record of data processing - Triplast<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR - Procedure for record of data processing - Triplast\" \/>\n<meta property=\"og:description\" content=\"[vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text] DEFINITIONS  “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/\" \/>\n<meta property=\"og:site_name\" content=\"Triplast\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-02T10:21:24+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-evidenta-a-prelucrarilor-de-date\\\/\",\"url\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-evidenta-a-prelucrarilor-de-date\\\/\",\"name\":\"GDPR - Procedure for record of data processing - Triplast\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/triplast.ro\\\/#website\"},\"datePublished\":\"2022-07-18T14:44:44+00:00\",\"dateModified\":\"2022-12-02T10:21:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-evidenta-a-prelucrarilor-de-date\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-evidenta-a-prelucrarilor-de-date\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/triplast.ro\\\/en\\\/procedura-de-evidenta-a-prelucrarilor-de-date\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Prima pagin\u0103\",\"item\":\"https:\\\/\\\/triplast.ro\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR – Procedure for record of data processing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/triplast.ro\\\/#website\",\"url\":\"https:\\\/\\\/triplast.ro\\\/\",\"name\":\"Triplast\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/triplast.ro\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR - Procedure for record of data processing - Triplast","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/","og_locale":"en_US","og_type":"article","og_title":"GDPR - Procedure for record of data processing - Triplast","og_description":"[vc_row][vc_column width=”1\/3″][vc_wp_custommenu nav_menu=”1664″][\/vc_column][vc_column width=”2\/3″][vc_column_text] DEFINITIONS  “GDPR”, “Regulation” – Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95\/46\/CE (General Data Protection Regulation, in […]","og_url":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/","og_site_name":"Triplast","article_modified_time":"2022-12-02T10:21:24+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/","url":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/","name":"GDPR - Procedure for record of data processing - Triplast","isPartOf":{"@id":"https:\/\/triplast.ro\/#website"},"datePublished":"2022-07-18T14:44:44+00:00","dateModified":"2022-12-02T10:21:24+00:00","breadcrumb":{"@id":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/triplast.ro\/en\/procedura-de-evidenta-a-prelucrarilor-de-date\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Prima pagin\u0103","item":"https:\/\/triplast.ro\/en\/"},{"@type":"ListItem","position":2,"name":"GDPR – Procedure for record of data processing"}]},{"@type":"WebSite","@id":"https:\/\/triplast.ro\/#website","url":"https:\/\/triplast.ro\/","name":"Triplast","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/triplast.ro\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages\/8090","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/comments?post=8090"}],"version-history":[{"count":4,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages\/8090\/revisions"}],"predecessor-version":[{"id":8292,"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/pages\/8090\/revisions\/8292"}],"wp:attachment":[{"href":"https:\/\/triplast.ro\/en\/wp-json\/wp\/v2\/media?parent=8090"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}