GDPR - Personal Data Protection
Your rights under the General Data Protection Regulation
What is GDPR?
The General Data Protection Regulation (GDPR) is European legislation that protects the personal data of EU citizens. UP2DATE SOFTWARE fully complies with all GDPR provisions and guarantees the exercise of your rights.
Why is GDPR important?
GDPR gives you complete control over your personal data and guarantees transparency in how companies use it.
Your GDPR Rights
Under GDPR, you have the following fundamental rights over your personal data:
1. Right of Access
You can request a complete copy of all personal data we hold about you.
Includes: data type, processing purpose, recipients, retention period and data source.
2. Right to Rectification
You can request correction or completion of inaccurate or incomplete data.
Response time: maximum 30 days from request.
3. Right to Erasure ("Right to be Forgotten")
You can request deletion of your data under certain specific conditions.
Exceptions: legal retention obligations (invoices, contracts) - 10 years.
4. Right to Restriction
You can request limitation of data processing in certain circumstances.
When applicable: when you contest data accuracy or when processing is unlawful.
5. Right to Data Portability
You can receive your data in a structured and easily readable format.
Available formats: JSON, CSV, PDF according to your request.
6. Right to Object
You can object to data processing for certain purposes.
Applicable for: direct marketing, profiling, processing based on legitimate interest.
How to Exercise Your Rights
Step by Step Process
Send request: Email to gdpr@up2date.ro with your specific request
Identity confirmation: We ask you to confirm your identity for security
Processing: We analyze the request within maximum 30 days
Response: We send you the complete response and implement the request
Required Information in Request
- • Full name and email address
- • Request type (access, rectification, deletion, etc.)
- • Detailed description of the request
- • Identity document (for verification)
- • Period for which you request information (if applicable)
Response Time
Simple Requests
5-10 business days
- • Newsletter unsubscription
- • Simple corrections
- • Consent withdrawal
Complex Requests
Maximum 30 days
- • Complete data export
- • Deletion from multiple systems
- • Restriction requests
Data Security
UP2DATE SOFTWARE implements advanced technical and organizational measures for the protection of your personal data:
End-to-End Encryption
All data is encrypted using SSL/TLS protocols
Restricted Access
Only authorized personnel have access to personal data
Secure Backup
Automatic backups and disaster recovery plans
Security Breaches
Incident Procedure
Detection: 24/7 monitoring systems for rapid detection
Assessment: Immediate analysis of impact and risks
ANSPDCP Notification: Within maximum 72 hours if there is risk to rights
User notification: Direct notification if there is increased risk
Remediation: Immediate measures to stop and remediate the incident
Complaints and Grievances
If you believe your GDPR rights are not being respected, you can:
Contact us directly
Email: gdpr@up2date.ro - we try to resolve within 15 days
Complaint to ANSPDCP
National Supervisory Authority for Personal Data Processing
ANSPDCP Contact:
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro
Phone: +40 318 059 211
Address: B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest
GDPR Contact
Dedicated GDPR Contact
Email: gdpr@up2date.ro
Phone: +40 723 534 609
Schedule: Monday-Friday, 09:00-18:00
Response: Maximum 48 hours for confirmation of receipt
Do you have questions about your GDPR rights?
Our GDPR team is ready to help you exercise your rights in accordance with the regulation.