Skip to main content
search

Privacy policy

on the processing of personal data through the INCDTIM website

Last updated: August 2026
The National Institute for Research and Development of Isotopic and Molecular Technologies – INCDTIM Cluj-Napoca pays particular attention to the protection of personal data and the privacy of individuals who use the Institute’s websites.
This Privacy Policy explains how personal data are processed when using the websites ro.itim-cj.ro and en.itim-cj.ro, in accordance with Regulation (EU) 2016/679 on the protection of personal data (GDPR) and applicable legislation.

  1. Personal data controller

The personal data controller is:
National Institute for Research and Development of Isotopic and Molecular Technologies – INCDTIM Cluj-Napoca
Address: 67-103 Donat Street, Cluj-Napoca, 400293, Romania
E-mail: itim@itim-cj.ro
Phone: +40 264 58 40 37
For matters concerning personal data protection, the Data Protection Officer (DPO) may be contacted at: E-mail: dpo@itim-cj.ro

  1. Personal data we process through the website

INCDTIM may process personal data provided directly by users through the contact form available on the website.
The form may include the following data:

  • name;
  • e-mail address;
  • subject of the message;
  • content of the message.

We recommend that you do not submit through the contact form personal data that are not necessary for handling your request.
The website does not allow users to create accounts and is not used for online purchases or payments.

  1. Purpose and legal basis of processing

Data submitted through the contact form are used exclusively for:

  • receiving and reviewing the request;
  • providing a response;
  • forwarding the request to the appropriate person or department within INCDTIM, where necessary.

The legal basis for processing is determined according to the nature of the request, in accordance with Article 6(1) of Regulation (EU) 2016/679 and INCDTIM’s statutory responsibilities.

  1. Recipients of the data

Messages received through the contact form are delivered via the institutional e-mail system.
Depending on the nature of the request, the message may be forwarded to the INCDTIM employees or departments responsible for handling it.
The data are not disclosed to third parties for commercial or marketing purposes.
Where required by law, data may be disclosed to competent public authorities or institutions.

  1. Data retention period

Personal data submitted through the contact form are generally retained for a maximum period of 12 months after the request has been resolved, unless longer retention is necessary to comply with a legal obligation or to establish, exercise or defend a legal claim.

  1. Technical data and server logs

For the operation and security of the website, the server may automatically record technical information relating to access, such as the IP address, date and time of access, requested resource and technical information concerning the browser/device.
Under the current technical configuration, standard server logs are retained for one month, with access restricted to authorised IT administrators.
This information is used for the operation, administration and security of the IT infrastructure.

  1. Cookies and external services

The website uses cookies and may integrate services provided by third parties.
Detailed information on the cookies used, their purposes, storage periods and the options available to users is provided separately in the Cookie Policy.
Cookies or similar technologies that are not strictly necessary for the operation of the website are used on the basis of the user’s choices expressed through the cookie management mechanism.

  1. Rights of data subjects

Under the conditions provided by the GDPR, data subjects may, as applicable, have:

  • the right of access to personal data;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object;
  • the right to data portability, where the legal conditions are met;
  • the right to withdraw consent where processing is based on consent;
  • the right to lodge a complaint with the competent supervisory authority.

Requests to exercise data protection rights may be sent to: dpo@itim-cj.ro
Data subjects also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). The Authority provides for the possibility of lodging complaints where personal data are processed in breach of applicable legislation.
National Supervisory Authority for Personal Data Processing

  1. Data security

INCDTIM implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or unauthorised destruction.
Access to data is granted only to persons who require it in order to perform their professional duties.

  1. Amendments to the Privacy Policy

This Policy may be updated when changes occur in the way data are processed, in the services used through the website or in applicable legal requirements.
The updated version will be published on the website together with the date of the latest update.

Close Menu