1. “Personal data” or “data” means any information relating to an identified or identifiable natural person (‘data subject’); a natural person identifiable individual is a person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;

2. “Processing of personal data” or “data processing” means any operation or set of operations on personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

3.”GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC;

4.”Controller” means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of processing are determined by the European Union (EU) law or the domestic law of an EU Member State, the controller or the specific criteria for its designation may be laid down in EU or domestic law.

In this document, when we use the term “controller” we usually mean GLOBAL CONSULTING WEB PRODUCTION LABS SRL (abbreviated as “the Company”) – when it processes personal data for purposes established by itself or by the law applicable to it – or, as the case may be, the Company and the entities that are associated operators for certain personal data processing operations when the purposes and means of the processing have been jointly established by us and these entities;

5.”Data subject” means any natural person whose personal data are processed. The category of data subjects also includes entities such as individuals (P.F.A.), sole proprietorships, individual forms of exercising specific liberal professions – “professionals”, such as individual medical practices, lawyer, notary, bailiff, accountant, certified translator, etc.; legal persons are not usually included in the category of ‘data subjects’ and information about them is usually not personal data.

6.”Processor” means the natural or legal person, authority, or body responsible for the processing operation. public authority, agency, or other body that processes personal data on behalf of the controller;

7.”Third party” means a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and who, under the direct authority of the controller or the processor, is authorized to process personal data;

8.“Recipient” means the natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether or not it is a third party. However, the public authorities to whom personal data may be disclosed in the framework of a specific investigation under the EU or national law of an EU Member State are not considered recipients;

9.”Supervisory Authority” means an independent public authority established by an EU Member State responsible for monitoring the application of the GDPR. In Romania, the Supervisory Authority is the National Supervisory Authority for the Processing of Personal Data – “A.N.S.P.D.C.P.”;

10.”Biometric data” means personal data resulting from specific processing techniques relating to the physical, physiological, or behavioral characteristics of a person which enable or confirm the unique identification of that person, such as facial images or dactyloscopic data being subjected to such techniques;

11.”Health data” means personal data relating to the physical or mental health of an individual, including the provision of healthcare services, that reveal information about the health of the individual;

12.”Real beneficiary” as referred to in Article 4(4) of the Directive. 1 of Law no. 129/2019 on preventing and combating money laundering and terrorist financing, as well as on amending and supplementing certain legal acts, means any natural person who ultimately owns or controls a legal person and/or natural person on whose behalf a transaction, operation or activity is carried out and includes at least the categories of natural persons referred to in Art. 4 para. 2 of this normative act;