ℹ
This policy applies to the esg.arsc.ro platform, operated by Asociația Română pentru Smart City (Romanian Smart City Association, ARSC). Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

Asociația Română pentru Smart City (ARSC), registered office at Integral Business Center, Bd. Pipera nr. 1-IA, Voluntari 077190, Ilfov, Romania; email: [email protected]; phone: +40 31 425 42 63.

2. Data we collect

We collect the data you provide through the certification request form and the contact form:

We do not collect special categories of personal data within the meaning of Article 9 GDPR. We do not use third-party tracking cookies without your consent.

3. Purpose of processing

The data collected is used solely to:

4. Legal basis

We process data on the following grounds: (a) the performance of a contract or steps taken prior to entering into a contract (Article 6(1)(b) GDPR), for the certification process; (b) your consent (Article 6(1)(a) GDPR), for public listing in the ARSC ESG Register.

5. Retention period

Data relating to the certification process is kept for the validity period of the certificate and for 3 years after it expires, for audit purposes and to verify authenticity. Data submitted through the contact form is kept for a maximum of 12 months.

6. Your rights

Under the GDPR, you have the right to access your data and the rights to rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

7. Contact

For any question about how your data is processed: [email protected] or +40 31 425 42 63.