Personal data protection
INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA
As per the requirements of Law no. 677/2001 on the protection of individuals as regards the processing of personal data and the free movement of such data, with its later amendments and modifications, and as per the requirements of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, the Ministry of Foreign Affairs – registered as personal data operator in the Registry of the National Supervisory Authority for Personal Data Protection under no. 5285 – has the obligation to manage safely and only for the specified purposes the personal data that you, a member of your family or any other person, provides us with.
The purpose of the data collection is: the facilitation of the receipt and processing of Romanian entry visa applications.
The persons targeted by the personal data protection for the aforementioned reasons who opt to apply for a Romanian entry visa online, via the E-VIZA online electronic visa application facilitation portal, have an obligation to provide the data requested via the visa application forms*, refusal to provide the requested data resulting in the inadmissibility of the visa application request which shall not be accepted by the diplomatic missions/consular posts of Romania.
The recorded information is meant to be used by the operator and is communicated, after being received in the E-VIZA electronic portal, solely to the diplomatic missions and consular posts of Romania.
As per Law no. 677/2001, you benefit from the right of access to data, the right of intervention upon the data, the right not to be the subject of an individual decision, and the right to refer to a court of law. You also have the right to object to the processing of your personal data and to request deletion of the data**. In order to exercise these rights you must submit a written, dated and signed request to the diplomatic mission/consular post of Romania to which you sent your visa request. Your right to refer to a court of law is also recognized.
The data you communicate via the E-VIZA electronic portal shall not be transferred abroad.
If any of your data is incorrect, please inform us as soon as possible.
* The fields from the visa application form marked with an asterisk (*) do not have to be filled in by third-state applicants who are family members of European Union or European Economic Area citizens (spouse, child or dependent ascendant).
** Should you not agree to the processing of personal data regarding you, you must take into consideration the fact that your visa application request becomes inadmissible. At the same time, should you request the deletion of your personal data, while holding a valid visa obtained as per that data, your visa shall be revoked. Should your visa application request not have yet been decided upon, a decision regarding that application shall no longer be taken and you must take into consideration that the visa processing fee is nonrefundable.
IMPORTANT INFORMATION – THE MINISTRY OF FOREIGN AFFAIRS OF ROMANIA – REGISTERED AS PERSONAL DATA OPERATOR IN RELATION TO THE VISA ACTIVITY, UNDER REGISTRATION NUMBER 5285:
As per national legislation in force, personal data is processed in accordance with the provisions of Law no. 677/2001 of November 21st 2001 on the Protection of Individuals with Regard to the Processing of Personal Data and the Free Movement of Such Data, as amended and modified.
Personal data submitted via the E-VIZA external portal by third state nationals who require a visa in order to travel to Romania, is provided to the Ministry of Foreign Affairs of Romania (MFA) and processed by this institution, for the well-defined purpose of processing, examining and issuing visas.
The MFA of Romania is registered as a personal data operator with the National Supervisory Authority for Personal Data Processing - www.dataprotection.ro.
The number, under which the Ministry of Foreign Affairs of Romania is registered in the Notification Register of the National Supervisory Authority for Personal Data Processing for the purpose of processing visa applications and issuing Romanian entry visas, is 5285.
SUPPLYING PERSONAL DATA VIA THE E-VIZA PORTAL, SHOULD YOU CHOOSE TO SUBMIT AN ONLINE VISA APPLICATION:
Categories of persons whose personal data is to be processed for the purpose of processing and issuing Romanian entry visas: third state nationals that fall under the incidence of laws regulating the status of aliens in Romania, by submitting visa applications, regardless of the purpose of their travel.
When using the external E-VIZA www.eviza.ro portal, upon launching the process of applying for a visa online, it is necessary to read and agree to the terms and conditions regarding the provision of your personal data, for the purpose of processing and issuing Romanian entry visas.
The personal data provided via the E-VIZA external portal is used solely for the purpose of processing, examining and issuing Romanian entry visas. This data will be sent to the Romanian MFA and later examined, solely after that person has given their consent in this respect, by agreeing to the terms and conditions regarding this aspect.
The Romanian MFA solely processes the categories of personal data necessary for examining a visa application, as established at European level, for the purpose of issuing a Romanian entry visa. The MFA does not require nor process personal data regarding racial or ethnic origin, political opinions, religious or philosophical beliefs or similar, trade-union membership, as well as personal data regarding health or sex life.
DETAILS OF INTEREST:
- All personal data requested through the forms available on the E-VIZA external portal, is made available to the diplomatic missions and consular posts of Romania where the visa applicant whose data is being processed chooses to present oneself.
- Data from the external E-VIZA portal will be stored on a centralized secure server that belongs to the Ministry of Foreign Affairs of Romania. When a visa file is sent to a diplomatic mission/consular post of Romania, it will in fact be transferred in the internal E-VIZA portal, being stored on a secured central server in the intranet of the MFA. At this time, personal data from the external portal will be fully transferred to the secure network of the MFA, and will no longer be available online.
- When a visa applicant does not wrap up an online visa application file, the partial personal data filled-in on the external portal, is stored on the central server that corresponds to the external portal of the MFA for a time period of 30 days. Upon expiration of this time period, the incomplete file and any and all related data filled-in, will be automatically deleted and no longer be available online.
- Personal data supplied via online visa application files, in the E-VIZA portal, will be made available solely to the competent Romanian authorities and will be processed by these authorities solely for the purpose of deciding as regards visa applications sent via this portal. This data may also be input and stored into databases accessible solely to the national Romanian authorities that exercise competencies in the field of visas, as per national legislation in force.
- The identity of the personal data operator: solely the Ministry of Foreign Affairs of Romania, through the Romanian diplomatic missions and consular posts.
- The purpose for which personal data is processed by the operator registered under nº 5285: solely the processing / examination of visa applications lodged by third state nationals who require a visa in order to travel to Romania, in view of issuing an entry visa for Romania.
- The recipients of personal data submitted for the purpose of requesting entry visas for Romania: solely the competent national authorities as regulated under art. 30 of Emergency Government Ordinance no. 194/2002 regarding the regime of aliens in Romania, as modified and amended.
- Visa applicants who do not wish to provide the personal data necessary for filling-in the standard visa application form, must take note of the fact that failure to fill-in all necessary data may lead to their visa application being refused.
THE RIGHTS THAT INDIVIDUALS SUBJECT TO THE PROCESSING OF THEIR PERSONAL DATA BENEFIT FROM, AS PER THE PROVISIONS OF LAW NO. 677/2001:
In accordance with the provisions of Law no. 677/2001 of November 21st 2001 on the Protection of Individuals with Regard to the Processing of Personal Data and the Free Movement of Such Data, as amended and modified. individuals subject to the processing of their personal data, benefit from the following rights:
- the right to be informed;
- the right of access to data;
- the right of intervention upon the data;
- the right to object;
- the right not to be subject to an individual decision;
- the right to address the Supervisory Authority and courts of law.
1. The right to be informed:
The Ministry of Foreign Affairs of Romania is registered as a personal data operator under no. 5285, for the purpose of carrying out specific activities in the visa field. Personal data collected to this end is necessary for processing/examining visa applications and taking subsequent decisions as regards the granting of entry visas for Romania. Personal data provided for the purpose related to notification no. 5285 shall not be shared with third parties. In addition, there are no third parties acting under the authority of the Ministry of Foreign Affairs, in this domain.
2. The right of access to data:
Individuals whose personal data is being processed benefits from the right to request information from the operator, via a signed, dated and written request, as regards the following aspects: whether their data is being processed, the type of data being processed, the purpose for which the processing is being made, the recipients of the data, the automated processing mechanisms employed by the operator and the rights they benefit from. The personal data operator shall provide the requested details within 15 days from receiving the request from the person whose personal data is being processed.
3. The right of intervention upon the data:
Any person whose data is being processed benefits from the right to obtain from the operator, upon request and free of charge:
- as the case may be, a rectification, updating, blocking or deletion of data whose processing is not consistent with Law no. 677/2001, especially as regards incomplete or inexact data;
- as the case may be, anonymizing the data whose processing is not consistent with Law no. 677/2001;
- notifying the third parties to whom data regarding any operation has been shared, should such notification not prove impossible to make or involve a disproportionate effort to the legitimate interest that would be harmed.
The personal data operator shall inform the person as regards the measures executed within 15 days of receiving the request from the person whose data is being processed.
4. The right to object:
The person whose data is being processed shall have the right to object at any time, free of charge and without providing any justification, to data regarding him being processed for direct marketing, on behalf of the operator or a third party, or such data being shared to third parties for this purpose. The personal data operator shall inform the person as regards the measures undertaken within 15 days from the date of receipt of the request from the person whose data is being processed.
5. The right not to be subject to an individual decision:
According to the provisions of article 15 from Law no. 677/2001, any person shall have the right to demand and obtain: a) the withdrawal or annulment of any and all legal decisions concerning oneself that is/are adopted solely as per a processing of personal data, conducted by automated means, meant to evaluate certain aspects of their personality such as professional ability, credibility, behaviour or any other such aspects; b) the re-evaluation of any and all decisions taken concerning oneself, which significantly affects the respective individual, if the decision was adopted solely based on a processing of data that meets the conditions established as per letter a). The personal data operator shall inform the person as regards the measures undertaken, within 15 days from the date of receipt of the request from the person whose data is being processed.
6. The right to address the Supervisory Authority and the courts of law:
In case of any violation of their rights as regards the processing of personal data, individuals may file complaints as regards the breaching of their rights, as guaranteed by Law no. 677/2001, both to the personal data operator and to the National Supervisory Authority for Personal Data Processing. The person whose data is being processed may also address the competent court of law, should their rights not be respected or damages be caused through unlawful data processing.