GDPR — Data Protection

Information on personal data processing

How we manage eUAT app user data

Who processes my data

Data Controller: Operator (your municipality)

Data Processor (App Provider): WOWZAAA SRL, registration number RO35929184, headquarters at Str. Alexandru Cel Bun 17, Bl. E33, Sc. A, Ap. 14, Brașov, Romania.

Data Protection Contact: dpo@wowzaaa.ro

What data we process

• Identification data: first name, last name, national ID (if required by law), ID card series and number (if required by law), signature
• Contact data: address, email, phone
• Request and complaint data: request type, content, attached documents, received responses
• Technical data: username, role, authentication logs, IP address, system actions

National ID and ID card details are collected only when there is a clear legal basis and they are strictly necessary for processing the request.

Why we process the data

• Creating and managing the eUAT app account
• Managing citizen relations (requests, complaints, petitions, responses)
• Electronic registry and appointments (if applicable)
• Communications and notifications related to submitted requests
• Security and proper functioning of the information system
• Fulfilling the Controller’s legal obligations and aggregated reports/statistics

Legal basis

• Art. 6(1)(c) GDPR — legal obligation of the controller
• Art. 6(1)(e) GDPR — public interest task / exercise of public authority
• Art. 6(1)(b) GDPR — performance of a contractual relationship (account use)
• Art. 6(1)(a) GDPR — consent, for optional communications when needed

Data retention

For the duration necessary for the above purposes and according to legal archiving obligations. After expiration, data is deleted or anonymized, except in cases where the law requires retention.

Data recipients

• Operator (your municipality) employees who need it to process requests
• WOWZAAA SRL and sub-processors (hosting, transactional email) under art. 28 GDPR
• Public authorities/institutions, when legally required

Data is stored in the EU/EEA. Transfers outside the EEA are made only with appropriate safeguards and after informing the operator.

Your rights

• Right of access
• Right to rectification
• Right to erasure (“to be forgotten”), in cases provided by law
• Right to restriction
• Right to object
• Right to data portability (where applicable)
• Right to lodge a complaint with ANSPDCP

To exercise your rights, write to: dpo@wowzaaa.ro

Useful documents

• Privacy Policy
• Terms and Conditions