Data Protection Policy

Introduction

This is the data protection policy of Media Med Publicis SRL (“Media Med Publicis”).

Media Med Publicis respects your privacy and is committed to protecting the personal data you provide to us. We are committed to collecting and using personal data in accordance with the General Data Protection Regulation (GDPR).

This policy will inform you about how we handle your personal data and will detail your rights regarding personal data and how the law (including the GDPR) protects you.

This data protection policy applies to the personal data of our customers, business partners, other individuals who contact or visit us, and their representatives and employees, as well as potential employees or interns. It applies to data collected through our website (www.mediamed.ro), affiliated websites*, and at our events, as well as to personal data collected by email or through other offline methods.

Important Information and Details About Media Med Publicis

Purpose of this data protection policy

The purpose of this policy is to inform you about how Media Med Publicis collects and uses your personal data as a result of using the website, registering for Events (as defined in the Glossary), subscribing to Media Med Publicis newsletters or publications, or collaborating with Media Med Publicis in any way, current or potential.

This website is not intended for minors, and we do not knowingly collect personal data from minors.

It is important to read this data protection policy together with any other privacy notice or processing notice we may provide on specific occasions when we collect or process personal data about you, so that you are fully informed about how and why we use your data. This policy supplements other notices and is not intended to override them.

Controller

Media Med Publicis SRL is the data controller responsible for your personal data (collectively referred to as “the Company”, “we”, “us”, or “our” in this data protection policy).

Changes to the privacy policy

This version was last updated on 13.12.2023.

It is important that the personal data we hold is accurate and current. Please inform us if your personal data changes during your relationship with us.

The Data We Collect

Personal data or personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

To provide our services, we collect or receive your personal data in different ways. You often choose which information to provide, but sometimes we need certain data to deliver our services.

We may collect, use, store, and process different categories of personal data grouped as follows:

• Identity Data: first name, last name, username or similar identifier, personal identification number, professional license number, specialty, professional grade, workplace, date of birth, and gender.
• Contact Data: billing address, delivery address, email address, and phone numbers.
• Financial Data: bank account and payment card details.
• Transaction Data: details about payments to and from you and other details about products and services you have contracted from us.
• Technical Data: IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, platform, and other technology on the devices you use.
• Profile Data: username and password, purchases or orders made by you, interests, preferences, feedback, and survey responses, including user data for webinar platforms.
• Usage Data: information about how you use our website, products, and services.
• Marketing and Communications Data: your preferences in receiving marketing from us and third parties and your communication preferences.
• Media Data: audio recordings, video recordings, and photos/images.

We also collect, use, and share aggregated data such as statistical or demographic data for purposes like Google Analytics. Aggregated data may be derived from your personal data but is not considered personal data by law as it does not directly or indirectly reveal your identity.

We do not collect any special categories of personal data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, and genetic and biometric data). Nor do we collect information about criminal convictions and offenses.

If You Fail to Provide Personal Data

Where we need to collect personal data by law or under the terms of a contract and you fail to provide that data when requested, we may not be able to perform the contract. In such a case, we may need to cancel a product or service, but we will notify you if this is the case.

How Is Your Personal Data Collected?

We use different methods to collect data from and about you, including through:

• Direct interactions: You provide data by filling in forms at Media Med Publicis events, on our website, or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
  • participate in a Media Med Publicis event or course;
  • interact with event panels (video recorded) or request photos at events;
  • apply for our products or services;
  • create an account on our websites;
  • subscribe to our services or publications;
  • request marketing materials;
  • enter a competition, promotion, or survey;
  • download our applications;
  • submit academic work for editing or presentation;
  • apply for a job at Media Med Publicis;
  • provide feedback;
  • offer or provide services to us.
• Automated technologies or interactions: As you interact with our website or applications, we may automatically collect Technical Data using cookies and other similar technologies. Please refer to our cookie policy for more details.
• Third parties or publicly available sources: We may receive personal data about you from various third parties or public sources, such as:
  • professional organizations with which you are affiliated;
  • medical companies we collaborate with;
  • regulatory authorities (e.g., Medical Council);
  • credit institutions (e.g., when making payments).

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following situations:

• where we need to perform the contract we are about to enter into or have entered into with you or your organization;
• where it is necessary for our legitimate interests (or those of a third party) and your fundamental rights do not override those interests;
• where we need to comply with a legal or regulatory obligation;
• where you have given us prior express consent;
• when sharing media content (photos/videos) from Media Med Publicis events on our or partners’ media channels for communication, educational, or scientific purposes.

Purposes and Legal Basis for Data Processing

Below is a table describing all the ways we plan to use your personal data and the legal bases we rely on to do so. We have also identified our legitimate interests where appropriate.

Please note that we may process your personal data based on more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on where more than one ground has been set out in the table below.

Purpose/Activity	Categories of Personal Data	Legal Basis for Processing (Including Legitimate Interest)
Registering a new client/participant/trainee	(a) Identity Data (b) Contact Data	Performance of a contract
Processing and performing a contract, including: (a) Cost, fee, tax administration; (b) Event organization	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data (e) Marketing & Communications Data (f) Media Data (g) Profile Data	(a) Performance of a contract (b) Legitimate interest (c) Legal obligation
Managing our relationship with you, including: (a) Notifying you about changes to our privacy policy (b) Requesting feedback or survey participation (c) Communicating partnership matters	(a) Identity Data (b) Contact Data (c) Profile Data (d) Marketing & Communications Data	(a) Performance of a contract (b) Legal obligation (c) Legitimate interest (to keep records up-to-date and analyze service usage)
Administering the business and website (including troubleshooting, data analysis, testing, system maintenance, and support)	(a) Identity Data (b) Contact Data (c) Technical Data (d) Profile Data	(a) Legitimate interest (business and IT infrastructure management) (b) Legal obligation
Fulfilling legal reporting obligations to professional organizations and authorities	(a) Identity Data (b) Contact Data	Legal obligation
Communicating suggestions and recommendations about Media Med Publicis products and services that may interest you	(a) Identity Data (b) Contact Data	(a) Legitimate interest (business development) (b) Consent
Media communication (online/offline)	(a) Media Data	(a) Performance of a contract (b) Legitimate interest (c) Consent

Here is the English translation of your provided Romanian text:

Marketing

We strive to offer you choices regarding the use of your personal data, especially when it comes to marketing and advertising.

Promotional Offers

We may use your identity, contact, technical, usage, and profile data to create a picture of what we think you may want, need, or find interesting. This is how we determine which products, services, and offers may be relevant to you.

You will receive marketing communications from us if you have requested information from us, participated in events or courses organized by us, or provided your data when entering a competition or registering for a promotion—and in each case, if you have not withdrawn your consent.

Choices

You may request that we stop sending you marketing messages at any time by emailing us at [email protected] or by unsubscribing via the UNSUBSCRIBE link in the newsletter.

If you opt out of receiving these marketing messages, we may still process your personal data on another legal basis, in cases where we have at least two legal grounds for processing personal data.

Purpose Change

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another purpose and that the purpose is compatible with the original one. If you would like an explanation as to how processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for unrelated purposes, we will notify you and explain the legal basis that allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Disclosure of Personal Data

We may share your personal data with the parties listed below for the purposes set out in the table in section 4 above.

• Internal third parties, as defined in the [Glossary].
• External third parties, as defined in the [Glossary].
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change in our business occurs, then the new owners may use your personal data in the same way as set out in this privacy notice.

We require all collaborators and partners to respect the security of your personal data and to treat it in accordance with the law. We do not allow our collaborators to use your personal data for their own purposes. They may only process your personal data upon our instruction and only for the purposes we have specified.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a legitimate business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulatory authority of a breach where we are legally required to do so.

Data Retention

How long we keep your personal data

We will retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including to meet any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means.

Your Rights
In certain circumstances, you have rights under data protection laws in relation to your personal data. Click the links below to learn more about these rights:

• The right to access your personal data.
• The right to rectify your personal data.
• The right to request the erasure of your personal data.
• The right to object to the processing of your personal data.
• The right to request the restriction of processing of your personal data.
• The right to request the transfer of your personal data (data portability).
• The right to withdraw consent.
• The right not to be subject to any individual decision-making or automated individual decision-making, including profiling.

If you wish to exercise any of the rights listed above, please complete the relevant form and send it to us.

No Fees
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What We May Need from You
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to anyone who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or if you have made multiple requests. In this case, we will notify you and keep you updated.

Glossary

MMP EVENTS
“Event(s)” means any kind of event organized by us, including virtual events, in collaboration with our clients or partners, regardless of the format in which it is held—online (virtual), offline, or any combination of the two—such as: conference, seminar, congress, webinar, workshop, presentation, in-person conference with live speaker and participants connected online, etc.

LEGAL BASIS

Legitimate Interest means the interest of our business in conducting and managing our operations to allow us to provide you with the best service/product and the most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in relation to specific activities by contacting us.

Contract Performance means processing your data where it is necessary for the performance of a contract to which you are a party, or where an association or company to which you are affiliated is a party, or to take steps at your request before entering into such a contract.

Compliance with a Legal or Regulatory Obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation to which we are subject.

THIRD PARTIES

Internal Third Parties
Other companies within the Media Med Publicis group that act as controllers or processors and are headquartered in Romania, as well as associates, employees, or collaborators of Media Med Publicis.

External Third Parties

• Service providers who provide IT systems administration and management services.
• Professional consultants including lawyers, accountants, bankers, auditors, and insurers who offer consultancy, banking, legal, insurance, and accounting services.
• Regulatory authorities and public institutions, and other public authorities from Romania or the European Union.
• The Medical College or other similar medical authorities requesting information about continuing medical education events under their regulations.
• Collaborators or business partners with whom Media Med Publicis works to carry out its activities.

YOUR RIGHTS

You have the following rights:

• Right of Access to personal data, which means you have the right to obtain a copy of the personal data we hold about you and to verify that it is being processed lawfully.
• Right to Rectification allowing you to request correction of any personal data we hold about you. This lets you ask for incomplete or inaccurate data to be corrected. Please note that we may need to verify the accuracy of any new data you provide.
• Right to Erasure (“right to be forgotten”). This allows you to ask us to delete or remove your personal data if there are no legitimate grounds for us to continue processing. However, note that we may not always be able to comply with your request due to specific legal reasons, which will be notified to you if applicable at the time of your request.
• Right to Object to the processing of personal data when we process data based on legitimate interest (ours or a third party’s) and in your particular situation you believe your fundamental rights and freedoms are infringed. You can also object to processing your data for marketing purposes. In some cases, we may demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
• Right to Restrict Processing. This right allows you to request that we suspend the processing of your personal data in the following cases:
  (a) if you want us to verify the accuracy and correctness of the data;
  (b) if the processing of the data by us is unlawful but you oppose deletion;
  (c) if you need us to retain the data even though we no longer process it because you need it to establish, exercise, or defend legal claims;
  (d) if you have objected to the processing of your data but we need to verify whether we have legitimate grounds to continue processing.
• Right to Data Portability. We will provide you or a third party you choose with your personal data in a structured, commonly used, and machine-readable format. Please note this right applies to automated processing where you have given consent or where we have used data to perform a contract with you.
• Right to Withdraw Consent when we process data based on your consent. However, this will not affect the legality of processing done before your consent withdrawal.
• Right not to be Subject to Automated Individual Decision-Making, including profiling, which produces legal effects concerning you or similarly significantly affects you.

bantao-congress.com
boli-cardiace.mediamed.ro
cabinetulvirtual.ro
chipromania.com
conferinta-nefrocall.ro
conferintaprimavara.ro
conferinte-diabet.ro
conferinte-srp.ro
congres-cmstm.ro
congres-glaucom.ro
congres-srh.mediamed.ro
congres-srim.ro
congres-srp.ro
congrescardiologie.ro
congresnefrologie.ro
congresumf.ro
curs-cardiogenetica.ro
curs-cardiooncologie.ro
cursuri.mediamed.ro
e-chip.ro
ecocard.ro
evenimente-arpp.ro
evenimentesrc.ro
hf-forum.mediamed.ro
imagistica2024.ro
interdiab.mediamed.ro
interdiab.ro
live.mediamed.ro
mastercourse-hf.com
mediamed.ro
nefrodiab.mediamed.ro
romanianheart.ro
simpozion-snrir.ro
societateadeglaucom.ro
sraic.eu
srnefro.ro
urgemed.ro
vhdforum.ro