Privacy & cookie Policy

- "Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

- "Processing" means any operation or set of operations that is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

- "Restriction of processing" means the marking of stored personal data for the purpose of restricting their future processing

- 'Profiling' means any form of automated processing of personal data by which personal data are used to evaluate certain personal aspects relating to a natural person, in particular, to analyze or predict characteristics associated with the work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements of that natural person

- 'Pseudonymization' means the processing of personal data in such a way that it is no longer possible to identify the natural person to whom the personal data relate without further information being required, provided that such further information is stored separately and technical and organizational measures are taken to ensure that no association with identified or identifiable natural persons is possible

- 'Filing system' means a set of personal data, structured in any way, whether centralized, decentralized or structured according to functional or geographical criteria, which is accessible based on specified criteria; 7. 'controller' means the natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for the designation of the controller may also be determined by Union or Member State law; 8. 'processor' means the natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller

- "Recipient" means a natural or legal person, public authority, agency, or any other body to whom or with which personal data is disclosed, whether or not a third party. Public authorities which may have access to personal data in the framework of an individual inquiry in accordance with Union or Member State law shall not be considered recipients; the processing of such data by those public authorities shall comply with the applicable data protection rules in accordance with the purposes of the processing

- 'Third party' means a natural or legal person, public authority, agency, or any other body other than the data subject, the controller, the processor, or the persons who, under the direct authority of the controller or processor, are authorized to process personal data

- 'Consent of the data subject' means a freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she signifies his or her agreement to the processing of personal data relating to him or her by means of a statement or an unambiguous act of affirmation

- 'Personal data breach' means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed

- 'Genetic data' means any personal data relating to the inherited or acquired genetic characteristics of a natural person which contains specific information about the physiology or state of health of that person and which results primarily from the analysis of a biological sample taken from that natural person

- 'Biometric data' means any personal data relating to the physical, physiological, or behavioral characteristics of a natural person obtained by means of specific technical procedures that allow or confirm the unique identification of a natural person, such as facial image or dactyloscopy data

- 'Health data' means personal data relating to the physical or mental health of a natural person, including data relating to the provision of health services to a natural person, which contain information about the health of the natural person

- "activity center": (a) in the case of a controller having establishments in more than one Member State, the place of its central administration within the Union; however, where decisions on the purposes and means of the processing of personal data are taken at another place of activity of the controller within the Union, and the latter place of activity has the competence to implement those decisions, the place of activity which took those decisions shall be considered the center of activity; (b) in the case of a processor having its place of business in more than one Member State, the place of its central administration within the Union or, where the processor does not have a central administration in the Union, the place of business of the processor within the Union where the main processing activities in relation to the activities carried out at the place of business of the processor take place, where the processor is subject to obligations under this Regulation

- 'Representative' means a natural or legal person established or resident in the Union and designated in writing by the controller or processor pursuant to Article 27 to represent the controller or processor in relation to the obligations incumbent on the controller or processor under this Regulation

- 'Undertaking' means any natural or legal person engaged in an economic activity, regardless of the legal form of that person, including partnerships or associations of persons engaged in a regular economic activity

- 'Group of undertakings' means the controlling undertaking and the undertakings controlled by it

- 'Binding Corporate Rules' means the rules on the protection of personal data that a controller or processor established in the territory of a Member State of the Union follows in one or more third countries in respect of the transfer or series of transfers of personal data by a controller or processor within the same group of undertakings or the same group of undertakings engaged in joint economic activities

- 'Supervisory authority' means an independent public authority established by a Member State in accordance with Article 51.

- 'Supervisory authority concerned' means a supervisory authority that is concerned with the processing of personal data for one of the following reasons: a) the controller or processor is established in the territory of the Member State of that supervisory authority; b) the processing significantly affects or is likely to significantly affect data subjects residing in the Member State of the supervisory authority; or c) a complaint has been lodged with that supervisory authority.

- 'Cross-border processing of personal data' means: (a) the processing of personal data within the Union in the context of activities carried out by a controller or processor established in more than one Member State at sites located in more than one Member State; or (b) the processing of personal data within the Union in the context of activities carried out by a controller or processor at a single site in more than one Member State which substantially affects or is likely to substantially affect data subjects in more than one Member State.

- 'Relevant and well-founded objection' means an objection to a draft decision raised with regard to whether this Regulation has been infringed or whether the envisaged measure concerning the controller or processor is in compliance with this Regulation; the objection must clearly demonstrate the significance of the risks posed by the draft decision to the fundamental rights and freedoms of data subjects and, where applicable, to the free flow of personal data within the Union.

- 'International organization' means an organization governed by public international law or its subsidiary bodies or any other body which is established by or under an agreement between two or more countries.