The Rural Investment Financing Agency (RIFA) with headquarters in Știrbei Vodă no. 43, Bucharest, Sector 1, ensures the efficient management of European funds, the transparency of the management of European funds and equal opportunities in accessing European funds. In this context, our responsibility is also how we take care of the personal data you have made available to us.

 

What personal data do we process?

 

Depending on the purpose pursued, the Agency for the Financing of Rural Investments processes the personal data of the following categories of natural persons:

- representatives (natural persons) of applicants and beneficiaries of European funds through SAPARD or FEADR;

- representatives (natural persons) of suppliers or providers of services, goods or works, directly/indirectly involved in contractual relations with the Agency;

- media representatives;

- the representatives (individuals) of the public and private partners involved in the implementation of PNDR and PS PAC.

RIFA, in accordance with the provisions of EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the Regulation and applicable from May 25, 2018), legally processes your data with personal character, in accordance with art. 6 of the Regulation:

- "the data subject has given his consent for the processing of his personal data for one or more specific purposes;

- "the processing is necessary for the execution of a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract;"

- "the processing is necessary in order to fulfill a legal obligation incumbent on the operator;"

- "the processing is necessary for the performance of a task that serves a public interest or that results from the exercise of the public authority with which the operator is vested;"

How we use personal data and what is the legal basis for processing

 

The purposes for which personal data are processed by AFIR are technical implementation, financial implementation (payment) and monitoring for PNDR but also PS PAC, reporting, debt recovery, as well as ex-post monitoring for the SAPARD Program, in accordance with GEO no. 41/ 2014 regarding the establishment, organization and operation of the Agency for the Financing of Rural Investments, through the reorganization of the Payments Agency for Rural Development and Fisheries, approved by Law no. 43/ 2015. Thus, data processing is carried out, without limitation, for the following:

 

  • receiving funding applications;
  • verification of funding applications;
  • selection of financed projects;
  • establishing contractual obligations;
  • carrying out field visits;
  • verifying the awarding procedures carried out by the beneficiaries;
  • reporting on the progress of the measures;
  • authorization of payment to beneficiaries;
  • making the payment to the beneficiaries;
  • recording payment commitments and payments;
  • IT management of payments made to project beneficiaries;
  • information and promotion of PNDR;
  • evaluation of bids submitted within the award procedures;
  • execution of contracts for the purchase of services, goods or works.

The basis of the processing is constituted by the financing request, the financing contract, the supply/service/use contract, etc. and the applicable legal provisions. Thus, in order to facilitate the activities related to the financing request, the financing contract, supply, rendering, use, etc., and in order to fulfill legal obligations, we communicate this data to public authorities, third parties or their proxies.

 

In some cases, we will only process your personal data with your consent. In these cases, we will ask for your consent separately, at the time of providing your personal data. Afterwards, you will be able to withdraw your consent at any time via the e-mail address [email protected]. However, withdrawal of consent will not affect the lawfulness of any processing that took place prior to its withdrawal.

If we require personal data to comply with legal or contractual obligations, your provision of such personal data is mandatory. This means that if such personal data is not provided, we will not be able to manage the contractual relationship or fulfill the obligations imposed on us. In all other cases, the provision of personal data is optional and you are not obliged to provide it.

 

 

 

 

How and to whom we disclose your personal data

The collected information is intended only for use by the Agency and is communicated only to the following categories of recipients: suppliers, service providers, third parties or their proxies involved directly or indirectly in the processes related to the aforementioned purposes, rights holders, public authorities empowered by law or with which the Agency has concluded collaboration protocols/delegation agreements in order to fulfill the specific duties conferred by European and national legislation, as well as the European Commission, in order to monitor and control the SAPARD, PNDR and PS PAC Programs

 

Transfer of data outside the country

Your data may be transferred outside the country to the European Commission, according to applicable national and European legislation.

Personal data retention period

In the case of processing personal data based on consent, your data will be kept until the date on which you request the withdrawal of consent.

In the case of all other grounds for data processing, we note that in order to determine the period for which personal data will be processed and kept, we take into account the contractual duration until the fulfillment of the contractual obligations or the purpose and the archiving terms provided by the legal provisions in the matter.

Your rights

In order to ensure correct information, we inform you that the Regulation grants the following rights to the persons whose personal data is processed:

  • right of access;
  • the right to rectification of data;
  • the right to data deletion ("the right to be forgotten");
  • the right to restrict processing;
  • the right to data portability;
  • the right to opposition;
  • rights regarding automated individual decision-making, including the creation of profiles;
  • the right to withdraw consent in the case of processing for the purpose of information or promotion;
  • the right to lodge a complaint with a supervisory authority for the processing of personal data;
  • the right to a judicial remedy;
  • the right to be notified by the operator.

 

 

 

 

Contact

 

Starting from May 25, 2018, if you have requests related to the processing of personal data, you can contact the Data Protection Officer directly at [email protected].

We may update this notice periodically and will notify you of any changes by posting the new version on our website. Please refer to this notice periodically for any changes.