1. Personal Data Processing Policy

The Regional Development Agency, as the author, owner, and administrator of the inno.ro website, respects the privacy and security of personal data processing for each individual accessing the website for online orders.

To create an account on the INNO platform, it is necessary to provide the following personal data: name, surname, email address.

Customer information may only be used by the North-West Regional Development Agency for purposes associated with promoting its own services and products, specifically for:

• Sending current information via notifications;
• Promoting events in which the North-West Regional Development Agency participates, through occasional notifications.

In accordance with Regulation no. 679/2016, the North-West Regional Development Agency informs the user of the following:

• Personal data will be stored for 5 years after being made available to the North-West Regional Development Agency;
• The user has the right to request access to, rectification, or deletion of their personal data, as well as restriction of processing. The user also has the right to object to processing and data portability. Please send such requests to inno@nord-vest.ro.
• The user has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if they believe there has been a breach of obligations regarding the protection of personal data by the North-West Regional Development Agency;
• The personal data of the user is provided to the North-West Regional Development Agency based on these general conditions.

2. Purpose of Data Collection

• Creating a user account on the platform;
• Sending notifications, information, and updates within the platform.

The North-West Regional Development Agency will not disclose any of your data (personal or optional information) to a third party without your consent, except where we believe in good faith that the law requires us to do so or it is necessary to protect our rights or property.

3. Security of Collected and Processed Data

The North-West Regional Development Agency uses advanced security methods and technologies, including regular audits, to protect personal data collected and processed in accordance with applicable legal provisions.

The server equipment hosting the website through which we collect personal data is protected against physical and limited remote access, installed in a data center, and subject to periodic security audits.

We make all commercially justified efforts to protect your collected personal data, analyze new technologies in the field, and apply them as necessary to upgrade our security systems.

4. Cookies

Our website uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies can be "persistent" or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed. Cookies usually do not contain information that identifies a user personally, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

5. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity.
• Personal Data Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, blocking, erasure, or destruction.
• Storage: Keeping personal data collected on any kind of medium.
• Controller: Any natural or legal person, private or public authority, agency, or other body which determines the purposes and means of the processing of personal data.

This Privacy Policy outlines how the North-West Regional Development Agency manages and protects personal data in compliance with applicable laws and regulations.