GDPR

An HTTP cookie or cookie module is a special, often encoded, piece of text sent by a server to a web browser and then sent back (unchanged) by the browser each time it accesses that server. On our website:

https://mega-mag.ro cookies are used to track user behaviour. For more details, please visit: cookie article on Wikipedia These modules allow fast and efficient navigation between pages, remembering your choices, options and preferences, as well as optimising the use of the website. Cookie modules are kept in the browser's memory and contain information such as: the name of the server from which the cookie was sent, the retention period of the cookie, a value — usually a uniquely generated random number. Cookie files do not allow your personal identification. Our website https://mega-mag.ro uses cookies to keep the login valid for a long time, and to remember the browsing and usage preferences for the site. Regarding third parties: (i) traffic on our site is monitored with Google Analytics, which sets its own cookies. For more details, please visit: google developers, (ii) Facebook also uses cookies on this site. For more details, please visit: facebook cookie If you have agreed to the inclusion of cookies in your browser through the banner on the first page of the website, please note that your consent may be withdrawn at any time. Current browsers (web browsers) offer the option to set/disable cookies. To do this, you generally go to the Options or Preferences section. What are your rights and how you can exercise them In accordance with the provisions of the Regulation, the data subject has the following rights

• Right of access to data – You have the right to request information about the personal data we hold about you, including information about the categories of data we hold or control, what they are used for, the source from which we obtained them if we obtained them indirectly, and to whom these data are disclosed, where applicable. We will provide you with a copy of your personal data upon request. If you request more copies of your personal data, we may charge a reasonable fee based on administrative costs.
• Right to rectification of data – You have the right to obtain the rectification of your data that we process or control, if they are not correct.
• Right to erasure of data (“right to be forgotten”) – You have the right to obtain from us the erasure of your data that we process or control.
• Right to restriction of processing – You may obtain from us the restriction of processing of your personal data where: (i) you contest the accuracy of your personal data, for the period we need to verify its accuracy, (ii) the processing is unlawful but you oppose the erasure of the personal data, requesting instead the restriction of their use, (iii) we no longer need your personal data but you require them for the establishment, exercise or defence of a legal claim in court, or (iv) you object to the processing, for the period during which we check whether our legitimate interests override yours.
• Right to object to the use of personal data – In certain circumstances, you have the right to object to the processing of your data by us or on our behalf. Where the processing is not based on your consent but on our legitimate interests or those of a third party, you may object at any time to the processing of your personal data on grounds relating to your particular situation. In that case we will no longer process your personal data, unless: (a) we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or (b) the purpose is the establishment, exercise or defence of a legal claim in court.
• Right to data portability – You have the right to receive the personal data you have provided to us and, where technically feasible, to ask us to transmit your personal data (that you provided to us) to another organisation/clinic.
• Right to withdraw consent – Where we process your data on the basis of your consent, you have the right to withdraw your consent; you may do so at any time, at least as easily as you originally gave it. The withdrawal of consent will not affect the lawfulness of the processing of your data that we carried out before the withdrawal.
• Right to lodge a complaint with the supervisory authority – If you are dissatisfied with the way we process your data, we would prefer that you contact us directly so that we can resolve your issue. However, if you still have concerns, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) www.dataprotection.ro Address: B-dul G-ral. Gheorghe Magheru, București, România; Phone: +40.318.059.211 / +40.318.059.212 Fax: +40.318.059.602; E-mail: [email protected]

DEFINITION OF TERMS USED IN THIS NOTE What does personal data processing mean? Personal data processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. What does personal data mean? Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. What does personal data controller mean? A personal data controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data. What does Processor mean? The natural or legal person, authority or other body which, alone or jointly with others, decides why (for what purpose) and how (by what means) personal data are processed. By law, responsibility for complying with personal data legislation lies primarily with the controller. In our relationship with you, we are the controller and you are the data subject. What does Data subject mean? The data subject is the natural person to whom certain personal data relate (to whom they “belong”). In our relationship with us (the controller), you are the data subject. What is the Supervisory Authority? An independent public authority which, by law, is responsible for supervising compliance with personal data protection legislation. In Romania, this supervisory authority for the processing of personal data is the National Supervisory Authority for Personal Data Processing (ANSPDCP)