Compliance & Data ProtectionGDPR
Rights of Data Subjects
The eight GDPR rights and how to exercise them
Any data subject whose data is processed through the SSM.ro platform benefits from the rights provided by GDPR.
Guaranteed rights
| Right | Description |
|---|---|
| Right to be informed | The right to be informed about processing (through the Privacy Policy) |
| Right of access | Confirmation of processing and access to details; response within 1 month |
| Rectification | Correction of inaccurate data; changes are also transmitted to relevant third parties |
| Erasure | Deletion of data in situations provided by GDPR (unnecessary data, withdrawal of consent) |
| Restriction of processing | Stopping processing while retaining the data, under the conditions of the law |
| Portability | Providing data in a portable format, to the extent technically possible |
| Objection | Stopping processing based on legitimate interest or for direct marketing purposes |
| Automated decisions | The right not to be subject to a decision based solely on automated processing |
How to exercise them
- Operators' email (personal data / GDPR): dpo@ssm.ro
- DPO: Neoprivacy SRL — marius.dumitrescu@neoprivacy.ro
- Response deadline: one month from the request (extendable under GDPR conditions for complex requests)
Requests regarding employee data (processor role)
When SSM.ro processes data on behalf of an employer (controller), data subjects' requests are directed to the controller (the employer), and SSM.ro assists them in resolving these, in accordance with the DPA.
Complaints
Data subjects have the right to file a complaint with ANSPDCP (the Romanian National Supervisory Authority for Personal Data Processing) — www.dataprotection.ro.