1. ANCOM processes personal data for the purpose of fulfilling its legal obligations, as well as in the context of labour relations and of partnerships/contracts. ANCOM processes personal data only for the purpose for which it requests them, in compliance with the relevant legal provisions, internal rules and procedures.
2. The Regulation provides certain rights for those whose personal data are processed. A brief description of your new rights in relation to ANCOM is presented below:

• Right to information – you have the right to be informed as regards the identity and contact data of the controller and of the data protection officer, the purpose of the data processing, the personal data categories envisaged, the data recipients or categories of recipients, the existence of rights provided by the personal data protection legislation and the conditions for exercising these rights.
• Right of access to personal data – you have the right to get our confirmation whether we process your personal data or not and - if we do process them - you have the right of access to the respective data and to information on the way they are processed;
• Right to data portability – you have the right to receive for free, upon request,  your personal data in a structured, regularly used and easy to read format, as well as the right to have these data transmitted by ANCOM to another data controller, to the extent the legal conditions are fulfilled and such transmission is technically feasible;
• Right to object – you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data, including profiling. ANCOM will no longer process your personal data, except for the case where ANCOM demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
• Right to rectification – you have the right to obtain - upon request and free of charge - the rectification of inaccurate personal data concerning yourself, and the completion of incomplete data. Such rectification will be communicated to each recipient of the respective data, excepting the case where this proves to be impossible or requires disproportionate effort.
• Right to erasure ("right to be forgotten") – you have the right to ask the erasure of your personal data without undue delay, where one of the following grounds applies:
  • they are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you withdraw your consent on which the processing is based and where there is no other legal ground for the processing;
  • you object to the processing and there are no overriding legitimate grounds for the processing,
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation;
  • the personal data have been collected in relation to the offer of information society services.
• Right to restriction of processing – you have the right to obtain, free of charge and upon request, the restriction of processing – to the extent the legal provisions are fulfilled - the marking of stored personal data with the aim of limiting their processing in the future.
• Right to go to Court or to the National Supervisory Authority for Personal Data Processing – you have the right to complain to the National Supervisory Authority for Personal Data Processing, respectively to go to Court for the protection of any rights guaranteed by the applicable legislation in the field of personal data protection, rights that have been infringed.

3. Where ANCOM subsequently processes your personal data for other purposes than those for which they have been collected, you will be duly informed in detail thereon, before the initiation of the processing.ANCOM collects, uses and stores only those personal data that are strictly necessary to achieve the legal, legitimate and specific objectives of the institution.

4. ANCOM processes personal data in good faith and applies appropriate technical and organizational measures to ensure their security, protection against unauthorized destruction, modification, disclosure or unauthorized access.