Introduction
This is the data protection policy of Media Med Publicis SRL. (“Media Med Publicis”).
Media Med Publicis respects your privacy and is committed to protecting the personal data you have provided to us. We are committed to collecting and using personal data in accordance with the General Data Protection Regulation (GDPR).
This policy will inform you about how we deal with your personal data and will detail your rights in relation to your personal data and how the law (including the GDPR) protects you.
This data protection policy concerns the personal data of our customers, business partners, other people who contact and visit us and their representatives and their employees, potential employees or interns and applies to data collected through our website (www.mediamed.ro), affiliate sites* and our events, as well as personal data collected via e-mail or other offline means.
1. [Important information and details about Media Med Publicis]
2. [Data we collect]
3. [How your data is collected]
4. [How your data is used]
5. [Disclosure of personal data]
6. [Security of your data]
7. [Data Retention]
8. [Your rights]
9. [Glossary]
—————— Detail —————–
1. Important information and details about Media Med Publicis
The purpose of this personal data protection policy
This policy regarding the protection of personal data aims to inform you about the way in which Media Med Publicis collects and uses personal data as a result of using the website, as a result of registering for Events (as defined in the Glossary) or courses organized by Media Med Publicis, as a result of subscribing to the Media Med Publicis newsletter or publications or as a result of collaboration of any kind, current or potential, with Media Med Publicis.
This website is not directed to minors and we do not knowingly collect personal data from minors.
It is important that you read this personal data protection policy together with any other personal data information notice or processing notice that we may provide from time to time when we collect or process personal data about you, so that you are fully informed of the manner and purpose of using this data. This personal data policy supplements the other notices and is not intended to replace them.
Operator
Media Med Publicis SRL is the operator of your personal data (collectively referred to as “Company”, “we”, “us” or “our” in this personal data protection policy).
Changes to the personal data protection policy
This version was last updated on 13/12/2023.
It is important that the personal data we hold is accurate and up-to-date. Please let us know if your personal data changes during your relationship with us.
2. The data we collect
Personal data or personal information means any information about an individual from which that individual can be identified. It does not include data where the identity has been removed (anonymous data).
In order to provide our services, we collect or receive your personal information in different ways. You often choose what information to provide, but sometimes we need certain information from you to use so that we can provide you with these services.
We may collect, use, store and process different types of personal data about you that we have grouped together (all or any):
• Identity datainclude first name, last name, username or similar identifier, personal numeric code, initial code, specialty, professional degree, job, date of birth and gender.
• Contact detailsinclude billing address, shipping address, email address and phone numbers.
• Financial datainclude bank account and payment card details.
• Transaction datainclude details of payments to and from you and other details of the products and services you have contracted from us.
• Technical datainclude [IP protocol] address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices you use the website.
• Profile datainclude your username and password, purchases or orders made by you, interests, preferences, feedback and survey responses, including user data for registration on the platforms where webcasts are organized.
• Usage datainclude information about how you use our website, products and services.
• Marketing and Communication Datainclude your preferences in receiving our communications from us and our third parties and your communication preferences.
• Media datainclude audio recordings, video recordings and photographs/pictures.
We also collect, use and share aggregate data such as Google Analytics, such as statistical or demographic data. Aggregate data can be obtained from your personal data, but it is not considered personal data under the law because this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users who access a Media Med service or product.
We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and biometric data and genetic). We also do not collect any information about criminal convictions and offences.
If you do not provide us with personal data
If we are required to collect personal data by law or to perform a contract we have with you or organizations you are affiliated with and you fail to provide this data when requested, we may not be able to perform the contract we have (for example, to provide you with goods or services). In this case, we may need to cancel a product or service you have with us, but we will let you know if this is the case at that time.
3. How is personal data collected?
We use different methods to collect personal data including by:
• Direct interactions. We collect your data when you voluntarily provide us with contact data by filling in forms at the location of Events organized by Media Med Publicis, by filling in data on our website or by correspondence with us (including by post, telephone, email or other method of communication ). This includes personal data that you provide when, for example:
• participate in an Event or course organized by Media Med Publicis;
• interact with the panel at Media Med Publicis Events that are videotaped or have Media Med staff take photos at Med Publicis Media Events;
• apply for our products or services;
• create an account on our website;
• subscribe to our services or publications;
• request Media Med Publicis offers or promotional materials;
• participate in a contest, competition, survey organized by Media Med Publicis;
• download our apps;
• communicate specialized papers to us for editing or presentation at our Continuing Medical Education Events;
• candidates for a position within Media Med Publicis;
• provide feedback on our services and products;
• perform or offer to perform services for us;
There are also situations where we collect media data at Events organized by Media Med. For example, (i) if you accept the invitation to be a speaker at a presentation/workshop etc. within a Med Media Event, we will collect media data: respectively photos and video if that Event is recorded, (ii) if within a video recorded event you choose to ask questions to the panel, then your intervention will be recorded (iii) if in during an Event, there is a photo board and you will verbally request Media Med staff or Media Med collaborators to take photos. All media data collected will be collected during Med Media Events and only if you voluntarily take action in this regard.
• Automated Technologies or Interactions. As you interact with our site or application, we may automatically collect technical data about your equipment, actions and browsing patterns. We collect this personal data using cookies and other similar technologies. Please see our cookie policy for more details.
• Third parties or public sourcesWe may receive personal data about you from various third parties or from public sources (public records). These sources also include:
• Organizations and professional associations to which you are affiliated and which contact our services or products;
• Medical companies with whom you collaborate and who contact our services;
• Public authorities or institutions of any kind (for example, the College of Physicians, the Trade Registry Office);
• Pharmaceutical companies;
• Companies dealing with personnel recruitment;
• Credit institutions (for example when you make a payment to us by money order);
4. How we use personal data
We will only use your personal data when the law allows us to. We will most commonly use your personal data in the following situations:
• If we have to perform a contract concluded with you (or to be concluded);
• Where we need to perform a contract with an organisation, association or company to which you are affiliated; (eg participate in an Event organized by Media Med)
• Where it is necessary for our legitimate interests (or those of a third party) and your fundamental interests and rights do not override those interests;
• Where we need to comply with a legal or regulatory obligation;
• If you provide us with express prior consent or on the basis of fair proof of your consent provided by a third person who communicates this data to us;
• If we disseminate video or photo content from the Media Med Publicis Events on the media channels of Media Med or of the partners for whom Media Med organizes Events, for the purpose of media communication, or for educational and scientific purposes.
The purpose for which we use your personal data
We have presented below, in a table format, a description of all the ways in which we intend to use your personal data and what are the legal grounds on which the processing is based. We have also identified what our legitimate interests are where applicable.
Please note that we may process your personal data based on several legal grounds, depending on the specific purpose for which we use the data. Contact us if you require details of the specific legal grounds on which we rely to process personal data where more than one ground has been set out in the table below.

Purpose/Activity
Category of personal data The legal basis for processing, including
legitimate interest where applicable
Registration of a new client/participant/learner
(a) Identity Data
(b) Contact details
Entering into or executing a contract.

Contract processing and execution, including:
(a) Administration of costs, fees, taxes;
(b) Organizing Events;

(a) Identity Data
(b) Contact details
(c) Financial data;
(d) Transaction Data;
(e) Marketing and Communication Data
(f) Media Data
(g) Profile Data (a) performance of a contract;
(b) legitimate interest;
(c) legal obligation.
To administer the relationship with you, including:
(a) notices about changes to personal data protection policies;
(b) to solicit your feedback or participate in surveys;
(c) to communicate requests or other matters related to our partnership. (a) Identity data;
(b) Contact details;
(c) Profile Date;
(d) Marketing and communication data;
(a) performance of a contract;
(b) legal obligation;
(c) legitimate interest (to keep up-to-date records
and analyze how customers use our products and
services)

To administer the business and this website (including troubleshooting, data analysis, testing, system maintenance, support) (a) Identity data;
(b) Contact Data
(c) Technical Data
(d) Profile Data
(a) Necessary for legitimate interest (business administration, IT infrastructure administration)
(b) Necessary to comply with a legal obligation;
Fulfilling legal reporting obligations to professional organizations and competent authorities (a) Identity data;
(b) Contact Data
(a) Necessary to comply with a legal obligation;
Communicating suggestions and recommendations about Media Med Publicis products and services that are of interest (a) Identification Data
(b) Contact Data
(a) Necessary for legitimate interest (business administration)
(b) Based on Consent;
Media communication (online/offline) (a) Average Data (a) Execution of a contract;
(b) Legitimate Interest
(c) Consent
Marketing
We strive to provide you with choices regarding the use of your personal data, particularly in relation to marketing and advertising.
Promotional offers
We may use your identity, contact, technical, usage and profile data to form a picture of what we think you might want or need or might be of interest to you. This is how which we decide which products, services and offers may be relevant to you.
You will receive marketing communications from us if you have requested information from us or participated in Events or courses organized by us, or if you have provided us with your details when entering a competition or registering for a promotion and, in each case, if you have not withdrawn consent.

Choices
You can ask us to stop sending you marketing messages at any time by sending an email to the address [email protected] or by unsubscribing via the UNSUBSCRIBE link in the newsletter.
If you opt out of receiving these marketing messages, we may continue to process your personal data on another legal basis where we have at least two legal bases on which we process the personal data.
Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is compatible with the original purpose. If you would like an explanation of how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for undisclosed purposes, we will notify you and explain the legal basis that allows us to do so.
Please note that we may process your personal data without your knowledge or consent in accordance with the rules above where this is required or permitted by law.
5. Disclosure of Personal Data
We may share your personal data with the parties set out below for the purposes set out in the table in point 4 above.
• Internal Third Parties, as defined in[Glossary].
• External third parties as defined in[Glossary].
• Third parties to whom we may choose to transfer or merge parts of our business or assets. Alternatively, we may seek to acquire or merge with other businesses. If there is a change in our business, then the new owners may use your personal data in the same way as described in this privacy notice.
We require all collaborators and partners to respect the security of your personal data and treat it in accordance with the law. We do not allow collaborators to use your personal data for their own purposes. They can only use your personal data if we give them permission to process it and only for the purposes stated by us.
6. Data security
We have implemented appropriate security measures to prevent the accidental loss of your personal data, unauthorized use or access, modification or disclosure of your personal data. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a clear need for such data. They will only process your personal data according to our instructions and will be subject to an obligation of confidentiality.
We have procedures in place to deal with a suspected personal data breach and will notify you and any applicable regulatory authority of a breach where we are legally required to do so.
7. Data Retention
How long we keep personal data
We will retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including to fulfill any legal, accounting or reporting requirements.
To appropriately determine the retention period for personal data, we take into account the value, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and if we can achieve these goals by other means.
8. Your rights
In certain circumstances, you have rights under data protection laws in relation to your personal data. Click on the links below to learn more about these rights:
• The right to access your personal data.
• The right to rectify your personal data.
• The right to request the erasure of your personal data.
• The right to object to the processing of your personal data.
• The right to request the restriction of the processing of your personal data.
• The right to request the transfer of your personal data (portability).
• Right to withdraw consent.
• The right not to be the subject of any individual decision or automated individual decision-making, including profiling.
If you wish to exercise any of the rights stated above, please complete the related form and send it to us.
Without taxes
You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
What can we request from you?
We may request specific information from you to help confirm your identity and to ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it.
We try to respond to all legitimate requests within one month. Occasionally it can take more than a month if your request is particularly complex or if you have made several requests. In this case, we will notify you and keep you updated on the status of your request.
9. Glossary
MEDIA MED PUBLICIS EVENTS
Event(s) means any kind of event organized by us including virtual events, in collaboration with our clients or with our partners, regardless of the way in which it is organized, online (virtual), offline, or any kind of combination between the two variants, respectively : conference, seminar, congress, webinar, workshop, presentation, conference with a speaker in the room and participants connecting online, etc.

LEGAL BASIS
Legitimate interest means our business interest in running and managing our business to enable us to provide you with the best service / product and the best and safest experience. We ensure that we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or unless otherwise required by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in relation to certain activities by contacting us.

Execution of the Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to which an association or company to which you are affiliated is a party, or to take steps at your request before entering into such a contract.

Compliance with a legal or regulatory obligation means processing your personal data where it is necessary to comply with a legal or regulatory obligation to which we are subject.
THIRD PARTIES.
Internal third parties
Other companies in the Media Med Publicis group that act as operators or processors and are based in Romania, associates, employees or collaborators of Media Med Publicis.
External third parties
• Service providers providing IT systems administration and management services.
• Professional consultants including lawyers, accountants, bankers, auditors and insurers providing consultancy, banking, legal, insurance and accounting services.
• Public regulatory authorities and institutions and other public authorities in Romania or the European Union.
• The College of Physicians or other similar medical authorities requesting information about continuing medical education events under its regulations.
• Collaborators or business partners with whom Media Med Publicis works in order to carry out its activity.

YOUR RIGHTS
You have the following rights:
Right of accessto personal data which states that you have the right to a copy of the personal data held by us and to verify that it is being processed lawfully.
The right to rectificationwhereby you can request the correction of the personal data we hold about you. This allows you to request the correction of any incomplete or inaccurate data we hold about you. Please note that we may need to check the accuracy of the data us that you provide us.
The right to data deletion (“the right to be forgotten”). This allows you to ask us to delete or remove your personal data if there are no longer good reasons for us to continue processing. Please note, however, that we may not always be able to comply with your deletion request for specific legal reasons, which will be notified to you, if applicable, at the time of your request.
The right to oppositionregarding the processing of personal data when we process data based on legitimate interest (ours or a third party’s) when in your particular situation you consider that fundamental rights and freedoms are being violated. You can also object to the processing of your data for marketing purposes. In some situations we can demonstrate legitimate and compelling reasons that justify the processing and that prevail over personal interests, rights and freedoms.
The right to restrict processing. This right allows you to request that we suspend the processing of your personal data in the following cases: (a) if you want us to establish the accuracy and correctness of the data or; (b) where our processing of the data is unlawful, but you object to its deletion; (c) if you need us to keep the data, even if we no longer process it, because you need it to establish, exercise or defend rights in court; or (d) you have objected to the processing of your data, but we need to check whether we have compelling legal grounds to process it.
The right to data portability. We will provide you or a third party of your choice with your personal data in a structured, commonly used, machine-readable format. Please note that this right applies to automated data processing for which you have given us your consent or, where we have used the data, to perform a contract with you.
Right to withdraw consentwhen we base our processing on your consent. However, this right will not affect the lawfulness of processing carried out before the withdrawal of consent.
The right not to be the subject of any individual decision or automated individual decision-making process, including the creation of profiles that produce legal effects that concern or affect you in a similar manner.

The Media Med Publicis websites are:
cnmf.mediamed.ro
cardioculture.mediamed.ro
cabinetul virtual.ro
conferinta-nefrocall.ro
conferinte-srp.ro
conferintaprimavara.ro
congres-endocrinologie.ro
congres-glaucom.ro
congres-srp.ro
congrescardiologie.ro
congresnefrologie.ro
congresumf.ro
curs-cardiooncologie.ro
ecocard.ro
e-chip.ro
evenimentesrc.ro
hf-forum.mediamed.ro
imagistica2023.ro
interdiab.mediamed.ro
iscp2022.ro
live.mediamed.ro
mediamed.ro
societate-hipertensiune.ro
societateadeglaucom.ro
srnefro.ro
urgemed.ro
vhdforum.ro