Privacy Policy

Personal Data Protection Policy

Joint Action EUnetCCC considers the security of personal data a top priority. This Privacy Policy explains, at a practical level, what personal data may be processed in connection with the WP8 Network Activities public website and related communication activities, why it is used, and which systems or services may be involved. Processing is carried out only where a valid legal basis exists under applicable data-protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation.

Personal Data

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, IP address, email address, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data may also include professional information, such as an organisation, job title, professional role, work email address, or other contact details, where this information relates to an identified or identifiable natural person.

“Processing of personal data” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means. This includes collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

For the purposes of this Personal Data Protection Policy, the personal data controller is the Institutul Oncologic „Prof. Dr. Ion Chiricuță” Cluj-Napoca, with registered office at 34–36 Republicii Street, Cluj-Napoca, Cluj County, Romania, hereinafter referred to as “IOCN”, “the Controller” or “the Data Controller”. IOCN is responsible for the relevant WP8 Network Activities communication and dissemination activities and determines the purposes and means of the processing described in this Policy.

The WP8 Network Activities of the EUnetCCC project, hereinafter referred to as “WP8”, are implemented and coordinated, for the purposes of the communication and dissemination activities covered by this Policy, by IOCN. IOCN determines the purposes and means of the processing of personal data carried out in connection with the WP8 website, communication activities, event registrations, content submissions and related services, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (“GDPR”), and other applicable data-protection legislation.

Personal data may be processed when a data subject submits an enquiry, requests information, submits a communication or dissemination request, registers for or expresses interest in an event, subscribes to project-related communications available through the WP8 website. Depending on the service used, this may include your first name and surname, email address, organisation, country, professional role or capacity, contact details, submitted form information, correspondence, content submissions, and related technical data.

We use this data to operate and maintain the WP8 website, respond to enquiries, coordinate communication and dissemination activities, manage event and activity registrations, distribute project-related information, review and publish relevant content, maintain communication records, and support the operational and administrative implementation of EUnetCCC WP8 activities.

The WP8 website may use website hosting, form-management, email delivery, file-storage, cookie-management, analytics, and other technical services necessary to provide these functions. Where third-party service providers process personal data on behalf of the controller, they are expected to process the data only in accordance with documented instructions and applicable data-protection requirements.

The public website may use essential technical cookies or similar technologies required for the operation, security, and functionality of the website. Optional analytics cookies, including Google Analytics where enabled, are used only after you have provided consent through the applicable cookie controls. You may review or withdraw your consent through the available cookie settings.

Technical information may be processed automatically when you visit the website. This may include your IP address, browser and device information, date and time of access, pages visited, referring website, and technical information relating to website security and performance. This information is used to maintain website functionality, protect the website against misuse, troubleshoot technical issues, and understand website usage where the applicable legal basis and consent requirements are met.

If you submit your personal data through a form, contact request, mailing-list subscription, event registration, or content submission, the data will be used only for the purpose for which it was collected or for closely related operational purposes compatible with that purpose. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The legal basis for processing depends on the context. Processing may be based on your consent, the legitimate interests of the controller or the EUnetCCC project, the performance of an agreement or requested service, compliance with a legal obligation, or another legal basis applicable under Article 6 of the General Data Protection Regulation. Where consent is required, it will be requested before the relevant processing takes place.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including communication, project management, reporting, audit, accountability, and legal obligations. Personal data submitted for project communications may be retained for the duration of the EUnetCCC project, currently planned from 1 October 2024 to 30 September 2028, unless consent is withdrawn earlier or a different retention period is required by law. Contact requests and other submissions are retained for the period necessary to respond to the request and for any additional period required for administrative, reporting, audit, or legal purposes.

Our website may contain hyperlinks that redirect to third-party websites. These websites are not monitored or controlled by EUnetCCC or IOCN, and we cannot guarantee that their privacy policies are aligned with this Policy. We recommend reviewing the privacy policies and terms of use of those external websites carefully.

Regarding the protection of your personal data, you have the following rights, subject to the conditions and limitations established by applicable law: the right to access your personal data, the right to rectify inaccurate or incomplete personal data, the right to erase your personal data, the right to restrict processing, the right to data portability, and the right to object to processing. You also have the right not to be subject to a decision based solely on automated processing, including profiling, where the conditions of Article 22 GDPR apply.

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You may exercise your rights or request further information by contacting the Data Protection Officer of the Institutul Oncologic “Prof. Dr. Ion Chiricuță” at dpo@iocn.ro or by post at Institutul Oncologic “Prof. Dr. Ion Chiricuță”, 34–36 Republicii Street, 400015 Cluj-Napoca, Romania. For general enquiries concerning the WP8 website or related communication and dissemination activities, the WP8 Team may be contacted at contact@wp8.eunetccc.eu.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). Further information is available at https://www.dataprotection.ro/.

Data Controller and Contact Details

Download the consent form regarding the processing of personal data (PDF)

Personal data controller: The Oncology Institute ”Prof. Dr. Ion Chiricuță”, with registered office in Cluj-Napoca, 34-36 Republicii Street, Cluj County, Romania, telephone: +40 264 598 361, e-mail: office@iocn.ro, fiscal code (CUI) 4547125.

Data Protection Officer (DPO): Larisa Tămaș-Bobocea DPO email: dpo@iocn.ro DPO telephone: +40 264 591 281, extension 102

Personal data processed: first name and surname, e-mail address, the organisation you belong to, where applicable, country, and the capacity in which you complete the form.

Purpose of the data processing: providing information, by e-mail, about the activities carried out by all project partners, for the duration of the project.

Legal basis for the data processing for the purpose stated above: Article 6(1)(a) ”the data subject has given consent to the processing of his or her personal data for one or more specific purposes” of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Your rights are: the right of access to your data; the right to rectification; the right to erasure; the right to restriction of processing; the right to data portability; the right to object; the right not to be subject to a decision based solely on automated processing; the right to lodge a complaint with the National Supervisory Authority for the Processing of Personal Data; the right to withdraw your consent at any time.

Consent may be withdrawn by completing a request (available on the data controller’s website or written by hand) and sending it to the data controller, The Oncology Institute ”Prof. Dr. Ion Chiricuță”, Cluj-Napoca, at the e-mail address: dpo@iocn.ro or by post to: 34-36 Republicii Street, Cluj-Napoca, Cluj County, postal code 400015, Romania. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Link to the consent withdrawal request: https://iocn.ro/wp-content/uploads/2026/02/art.-7-Cerere-retragere-consim%C8%9B%C4%83m%C3%A2nt.pdf.

Recipients of the personal data are the staff of the EUnetCCC project The European Network of Comprehensive Cancer Centres.

Data retention period: for the duration of the project, 1 October 2024-30 September 2028

For any further information regarding the processing of personal data by the data controller, you may contact the Data Protection Officer at the e-mail address: dpo@iocn.ro.

Updates to Privacy Policy

We may update this Privacy Policy from time to time. You will be notified of any significant changes by posting the updated Privacy Policy on this page. We encourage you to review this Privacy Policy periodically to stay informed of any updates. Changes take effect as soon as they are posted on this page.

Contact

For further clarification regarding EUnetCCC project activities, you may contact the EUnetCCC Coordination Team at EUnetCCC@institutcancer.fr or the EUnetCCC Communication Team at communication.eunetccc@ulsalg.min-saude.pt.

For questions concerning the processing of personal data by the WP8 website, you may contact the WP8 team at contact@wp8.eunetccc.eu or the IOCN Data Protection Officer at dpo@iocn.ro.