GDPR - UVT

Basic legislation and supporting documents regarding Personal Data Protection

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Regulation on data protection) (Text with EEA relevance).

Reg 679 / 2016 – Read more here!

Law no. 190/2018 on measures to implement Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and its repeal of Directive 95/46/EC (General Data Protection Regulation)

Leg 190 / 2018 – Read more

DECISION no. 174 of October 18, 2018 regarding the list of operations for which the assessment of the impact on the protection of personal data is mandatory. Clarifies the need to ensure effective protection of the rights of individuals whose personal data is subject to processing, especially in the case of certain personal data processing operations that present risks for the rights and freedoms of individuals, due to the nature of the data processed, the purpose processing, the specific nature of the categories of data subjects or the mechanisms used for data processing.

Provision 174 / 2018 ANSPDCP - Read more

Indicative guide for the application of the General Regulation on Data Protection intended for operators issued by the National Supervisory Authority for the processing of personal data (FIELD OF APPLICATION, Principles, Obligations, Methods of protection)

ANSPDCP personal data processing guide – Read more

The manual of European legislation on data protection is drawn up through the cooperation between the Agency for Fundamental Rights of the European Union (FRA) and the Council of Europe together with the Registry of the European Court of Human Rights. It is the manual number three in a series of legal manuals drawn up through the cooperation between the FRA and the Council of Europe. The purpose of the manual is to raise awareness and improve knowledge of data protection regulations within the European Union and in the member states of the Council of Europe, serving as the main point of reference for readers.

DP Handbook – 2014 – Read more

It is a manual of European legislation in English, regarding data protection, it is drawn up through the cooperation between the Agency for Fundamental Rights of the European Union (FRA) and the Council of Europe together with the Registry of the European Court of Human Rights, the 2018 edition compared to the previous manual published in 2014.

DP Handbook – 2018 – Read more

g) The recommendations of the European working groups. We have several recommendations of European working groups from the perspective of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, namely:

WP 242.1,242244244.1243248249250,

 251253,254256257259260

Steps in GDPR compliance

1. Management meeting
2. Staff provision regarding the appointment of the DPO
3. The phased compliance plan of the organization's GDPR compliance
4. Decision establishing the work/support team – Heads of departments /
services
5. Training specific to the protection of personal data with the team
work and heads of departments / services
6. Training specific to the protection of personal data with whole
staff (takes place periodically at deadlines set by management)
7. Completion of the record register of character data processing
personnel (traceability tables)
8. Evaluation of the computer system from the point of view of protection
personal data
9. Evaluation from the point of view of the protection of personal data
physical document security personnel
10. Elaboration and implementation of a risk treatment plan
11. Identification, analysis, evaluation of informational risks
12. Risk assessment at DCP
13. Policies, procedures, appendices to the procedures (from what I had from
traceability tables)
14. Carrying out DPIA (Data privacy Impact Assessment)
15. Carrying out IT vulnerability scans and penetration tests
16. Business continuity plan following breakdowns
major / Disaster recovery plan
17. Establishing indicators for permanent improvement of the system
18. Auditing of continuous improvement indicators
19. Proposals for permanent improvement

FAQ

1. Presentation of UVT as a data operator

The spirit of the Western University of Timișoara is one of performance and excellence, as a gradual and permanent result of the effort to be better. UVT advocates for an education correlated with the immediate needs of the labor market, an education that aims, in addition to scientific performance and socio-economic employment, to reveal the human personality as a whole.

In addition to the role of a training institution for specialists in specific areas of competence, we also assume that of a vital institution for the western region of the country, which actively participates in the great regional and national socio-economic challenges, aware of its role in Romanian society. We propose that our activity closely reflects the importance given to the development of the community in which we operate, a space in which we imprint our cultural and social values ​​acquired over time.

Beyond its educational mission, the Western University of Timișoara promotes a set of values ​​and moral principles to transmit and guide future generations: Professionalism and excellence; Solidarity and mutual respect; Recognition of merit; Academic freedom¸ Individual and public responsibility; Transparency; Honesty; Diversity; Personalization; Advanced knowledge and transdisciplinarity; Solidarity and mutual respect.

UVT is the largest university in the west of the country, a diverse and multicultural academic environment. The University of the West was established in 1944 by Decree Law no. 660 given by King Mihai I, published in the Official Gazette no. 302 of December 30, 1944, with the faculties of Law, Letters and Philosophy, Sciences, Human Medicine, Veterinary Medicine, Pharmacy and Theology.

The UVT structure includes: 11 faculties, offering 75 bachelor's degree programs and over 90 master's degree programs from 34 different fields of study, as well as doctoral studies in 22 fields, alongside the new master's program didactic, organized in the five different fields of undergraduate studies.

With 27 advanced research centers, UVT generates and transfers knowledge to society through scientific research, development, innovation and technology transfer.

UVT has 8 dormitories, offering accommodation for 3000 students.

The processing of personal data by the UVT data operator is carried out by:

  • Law no. 1/2011 also known as the National Education Law with subsequent amendments and additions;
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC(GDPR);
  • Law no. 190/2018 on measures to implement the GDPR and repeal Directive 95/46/EC;
  • DECISION no. 174 of October 18, 2018 regarding the list of operations for which the assessment of the impact on the protection of personal data is mandatory.
  • ANSPDCP personal data processing guide
  • The manual of European legislation on data protection is drawn up through the cooperation between the Agency for Fundamental Rights of the European Union (FRA) and the Council of Europe together with the Registry of the European Court of Human Rights.
  • Recommendations of the European working groups from the perspective of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016
  • Regulation (EU) 2015/759 of the European Parliament and of the Council of April 29, 2015 amending Regulation (EC) no. 223/2009 and the MEN - National Institute of Statistics (INS) Convention regarding data processing for the production of official education and professional training statistics;
  • Government emergency ordinance no. 133/2000 regarding state university and postgraduate education with a fee
  • Law no. 288/2004 regarding the organization of university studies, with subsequent amendments and additions
  • LAW no. 53 of January 24, 2003 LABOR CODE republished 2011, updated 2018
  • EMERGENCY ORDINANCE no. 97 of July 14, 2005 regarding the record, domicile, residence and identity documents of Romanian citizens, published in the OFFICIAL GAZETTE no. 719 of October 12, 2011;
  • DECISION No. 286 of March 23, 2011, for the approval of the framework Regulation on the establishment of general principles for filling a vacant or temporarily vacant post;
  • ORDER of the Minister of Education No. 3714/2018 of May 21, 2018 regarding the approval of the Regulation on the organization, functioning and operationalization of the Single Matriculation Register of Romanian Universities;
  • Accounting LAW no. 82 of 24 December 1991 (republished)
  • Law no. 365/2002 on electronic commerce, republished, with subsequent changes
  • BNR Regulation no. 6/11.10.2006 – Regulation of the Romanian National Bank (BNR) no. 6/11.10.2006-regarding the issuance and use of electronic payment instruments and the relations between participants in transactions with these instruments
  • Framework law no. 153/2017 regarding the salary of staff paid from public funds
  • Law no. 129/2019 – for the prevention and combating of money laundering and the financing of terrorism, as well as for the amendment and completion of some normative acts

3. Purpose of data processing:

UVT ensures the processing of personal data for the purpose of carrying out university activities aimed at: admission to higher education; bachelor's, master's, doctoral, postdoctoral study programs; educational activities; graduation activities; employments; provision of services; implementing projects with internal or external funding; scientific activities.

4. What is personal data?

Personal data includes any information about an identified or identifiable person (data subject). Personal data includes: name, address, identity card/passport number, telephone, income, cultural profile, IP (Internet Protocol) address. The processing of personal data is carried out in legally and transparently, guaranteeing fairness regarding the natural persons whose personal data are processed.

Such data processed by our institution are:

  • personal data required for enrollment in studies or for employment: name, address, identity card/passport number, telephone, e-mail address, income, cultural profile, IP address;
  • data related to education and professional training necessary for enrollment in studies or for employment: transcripts, diplomas, professional attestations, certificates, certificates, etc.;
  • data related to the professional experience necessary for employment or studies: certificates, diplomas, descriptive supplement;
  • video data related to online activities in the institution, as well as the guarding and protection of the assets of the institution and people;
  • financial data required for the payment of financial rights of employees or students: certificates, accounts, medical leaves.
  • Personal data of employees or students regarding special situations: criminal record, certificates, declarations, certificates, etc.

5. When is personal data processed?

According to EU data protection rules, data processing is carried out fairly and lawfully, for a specific and legitimate purpose and only those data that are necessary to fulfill that purpose. UVT processes personal data, ensuring their security and confidentiality.

Data processing is carried out in one of the following situations:

  • With the consent of the data subject;
  • Personal data is required to fulfill a contractual obligation towards the data subject;
  • Data is required to protect the data subject;
  • In the interest of the institution, without affecting the fundamental rights and freedoms of the persons concerned.

6. The right of the persons whose data is processed:

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Optio, neque qui velit. Magni dolorum quidem ipsam Kezanne, totam, facilis laudantium cum accusamus ullam voluptatibus commodi numquam, error, est. Ea, consequatur.

7. How long can the data be kept? Is it necessary to update the data?

Depending on the reasons for which the data is processed, as well as the legal obligations to keep the data for a fixed period of time, the data is stored for as short a period as possible. The data is updated periodically.

DPO officer – West University of Timișoara

Email: gdpr@e-uvt.ro

UVT uses cookie files to personalize and improve your experience on our Website.

We inform you that we have updated our policies in order to integrate in them and in the current activity of UVT the latest changes proposed by Regulation (EU) 2016/679 regarding the protection of natural persons with regard to the processing of personal data and to read and understand the content of the Cookie Policy.

By continuing to browse our Website, you confirm acceptance of the use of cookie files according to the Cookie Policy.

However, do not forget that you can modify the settings of these cookie files at any time by following the instructions in the Cookie Policy.