Romanian-American University Privacy Policy
This policy describes how the Romanian-American University (RAU) collects, uses, transfers, and protects your personal data. It also explains the options you have regarding these data and how you can contact us.
Who is responsible for processing your personal data?
The Romanian-American University is responsible for processing your personal data, depending on how you interact with our websites and applications, as well as your geographical location. In this document, our organization is referred to as: “we,” “our,” “ours,” “the university,” or “Romanian-American University.”
What personal data do we collect and when?
We collect certain personal data to provide you with the information, products, or services you request. For example, we collect data to ensure participation in certain activities, the creation of personal accounts, electronic communication, or the purchase of certain products or services.
These personal data may include information about:
- Contact details, including name, email address, phone number, contact address, social media accounts;
- Login details, including username, passwords, unique codes;
- Personal details, including gender, city of residence, date of birth, or access history;
- Credit card/payment methods;
- Images, photos, or video files;
- Details regarding physical characteristics, including weight, height, age;
- Personal preferences, including marketing settings and cookies.
When you interact with our websites and applications, certain information is automatically collected from your device or browser. This information may include:
- Device identifier, call status, type of network to which it is connected, information about storage location or battery level;
- Cookies, IP address, referrer headers, browser type.
Children
We comply with applicable laws and do not allow the registration of individuals under the legal age limit in their country of residence on our websites and applications. We will seek parental consent for any activity involving the participation of children.
Tools used for managing the data we collect
When using our websites and applications, we provide specific messages or obtain consent for various procedures. For example, we ask for consent to use your location information or to send push notifications. This consent is obtained through applications, websites, or standard permissions on your device.
Why and how do we use your personal data and on what legal basis?
We use your personal data in the following ways:
- To provide you with the capabilities of the websites, applications, or services you request: When you use our websites and applications, we use your data to provide the requested service. For example, if you register for an event organized by us, we will use your contact details to keep you informed of any program changes.
- To implement, improve, and maintain our services and products: We use personal data to implement our services. For example, when you purchase a ticket online for an event organized by us, we use the information for accounting, auditing, and other internal functions.
- To protect the rights, property, or safety of ourselves or others: We may use personal data related to how you use our websites or applications to prevent or detect potential fraud, abuse, illegal activities, or violations of our terms and conditions.
- Processing data for the purposes described above is done in accordance with the provisions of Article 6(1)(f) of the GDPR, in the legitimate interest of the Romanian-American University to adapt the services provided online according to the interests and devices of users, as well as to ensure the security of these services.
- For research and analysis activities: We use information about the use of our websites, applications, or services to better understand the behavior and preferences of our visitors. Processing data for this purpose is done in accordance with the provisions of Article 81(1) of the GDPR.
- To communicate information about our services, products, events, or for other promotional purposes: When you consent, we may send marketing communications and news about our services, products, or events. You can choose to withdraw your consent at any time.
- Other purposes: We may use personal data in other ways, specifying the request for consent when necessary. Processing data for the purposes above is done in accordance with the provisions of Article 6(1)(a) of the GDPR, based on your consent, which we explicitly request or which you provide through various actions on the website as outlined in the site’s notices, or based on Article 6(1)(c) of the GDPR for the purpose of complying with legal provisions, such as – but not limited to – those regarding the processing of data necessary for online purchases.
- To comply with fiscal legislation: We will use personal data provided for the purchase of services or products available through our websites and online platforms, in accordance with the requirements imposed for the issuance and processing of payment documents (such as invoices, commercial contracts, etc.). Processing data for this purpose is done in accordance with the provisions of Article 6(1)(c) of the GDPR, which establishes the legality of any personal data processing carried out to fulfill the legal obligations of the personal data controller.
Sharing your personal data
We share your personal data with:
- Other entities within our organization, for the purposes and under the conditions outlined above.
- Third-party service providers processing data on our behalf, such as for processing online payments, deliveries, message distribution, research and analysis studies.
- Other third parties when necessary to comply with a government request, court order, or applicable law.
- Other third parties for which you have given prior consent.
Any sharing of your data with third parties is done only after ensuring legally valid agreements are in place according to Articles 26 and 28 of the GDPR, where our partners commit to providing at least the same level of personal data protection as provided by the Romanian-American University.
Protecting and managing your personal data
Encryption and security: We use a variety of security measures, both technical and organizational, including encryption and authentication tools, to protect your personal data.
International transfers: The personal data we collect or process through our websites and applications are stored in Romania and other countries. In all circumstances, if we transfer your personal data to locations in countries other than where you provided the data, we will protect your personal data according to the specifications in this policy and in compliance with applicable law.
Data retention: Personal information will be retained as long as necessary to fulfill the purposes stipulated in this document. In general, this means that we retain your data for up to 3 years from the date of closing the account held on our websites or applications, in accordance with Article 15(4) of Law 102/2005 (updated) on the establishment, organization, and functioning of the National Authority for the Supervision of Personal Data Processing. In certain particular situations, your data may be kept for more than 3 years, when the data collected from you were processed for purposes for which the applicable law requires their retention for specific periods (such as data necessary for concluding commercial contracts, issuing payment documents, etc.).
Your rights regarding personal data
You have the right to request:
- Access to your personal data.
- An electronic copy of your personal data (portability).
- Correction of your personal data if they are incomplete or inaccurate.
- Deletion or restriction of your personal data in certain circumstances as presented by applicable law.
If you wish to request a copy of your personal data or exercise any other rights, please contact us at dpo [at] rau [dot] ro.
Use of our websites and applications with third-party services or products
Our websites and applications allow you to interact with a variety of other digital products and services. If you choose to connect your account on one of our websites/applications to a third party, your rights regarding personal data protection will be governed by the third party’s policies.
Changes to our data protection policy
Applicable law and our practices change over time. If we decide to modify our policies, we will publish these changes on our websites and applications. We encourage you to read our data protection policy and stay informed about this topic.
Romanian-American University General Policy: https://privacy.rau.ro/index.html
This policy was last modified in September 2024.