The National Agency of Civil Servants processes personal data in a lawful, fair and transparent manner, in accordance with the provisions of Regulation (EU)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC(General Data Protection Regulation)  and of Law no. 190/2018 of 18 July 2018 on measures to implement Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (General Data Protection Regulation).

Art. 5 para. (1) lit. a) of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data establishes the principle of fair and transparent processing, whereby the data subject is informed about the existence of an operation processing and its purposes.

The principle of transparency stipulates that any information and communications relating to the processing of personal data are easily accessible and easy to understand, using plain and clear language. This principle concerns in particular to informing the data subjects about the identity of the controller and the purposes of the processing, as well as providing additional information in order to ensure fair and transparent processing with regard to data subjects and their right to have their personal and processed data confirmed and communicated.

Natural persons must be informed about the risks, rules, safeguards and rights regarding the processing of personal data, as well as the ways in which they may exercise their rights in relation to such processing. In particular, the specific purposes for which the data are processed should be explicit and legitimate and determined at the time of the collection of the data. Personal data must be adequate, relevant and limited to what is necessary for the purposes for which they are processed.

The controller must provide the data subject with any additional information necessary to ensure fair and transparent processing, taking into account the specific circumstances and the context in which the personal data are processed. In addition, the data subject must be informed profiling activities, as well as their consequences.

When personal data are collected from the data subject, the individual must also be informed whether the provision of personal data is mandatory and what the consequences are in the event of a refusal.

More information

on the protection of individuals with regard to the processing of personal data and on the free movement of such data can be found on the website of the National Supervisory Authority for Personal Data Processing.