{"id":4542,"date":"2026-10-05T22:26:33","date_gmt":"2026-10-05T20:26:33","guid":{"rendered":"https:\/\/eu.klytic.com\/?page_id=4542"},"modified":"2026-10-06T17:38:35","modified_gmt":"2026-10-06T15:38:35","slug":"gdpr-microsoft-365","status":"publish","type":"page","link":"https:\/\/eu.klytic.com\/ro\/gdpr-microsoft-365\/","title":{"rendered":"GDPR \u0219i Microsoft 365: ce trebuie s\u0103 verifice o companie"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"4542\" class=\"elementor elementor-4542 elementor-3215\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7b65992 e-con-full kly-g e-flex e-con e-parent\" data-id=\"7b65992\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-e0b0afc e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"e0b0afc\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-d034cdc e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"d034cdc\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8b927eb elementor-widget elementor-widget-text-editor\" data-id=\"8b927eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/ro\/\">Acas\u0103<\/a><span>\u203a<\/span><a href=\"\/ro\/ghiduri\/\">Ghiduri<\/a><span>\u203a<\/span><a href=\"\/ro\/ghiduri\/#souverainete\">Suveranitate<\/a><\/p><p class=\"kly-g-pill\" style=\"--pill:#38bdf8\">Suveranitate<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ccc7fc elementor-widget elementor-widget-heading\" data-id=\"6ccc7fc\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">GDPR \u0219i Microsoft 365: ce trebuie s\u0103 verifice o companie<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b8b64b elementor-widget elementor-widget-text-editor\" data-id=\"6b8b64b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">Microsoft 365 poate fi utilizat \u00eentr-un cadru conform GDPR (Regulamentul general privind protec\u021bia datelor). Regulamentul nu interzice produc\u0103torii americani de software. El impune s\u0103 \u0219ti\u021bi cine prelucreaz\u0103 ce, pe ce temei p\u0103r\u0103sesc datele Uniunea \u0219i cum \u00ee\u0219i exercit\u0103 persoanele drepturile. Iat\u0103 ce trebuie s\u0103 verifice o companie, \u00een ordine, \u0219i ce trebuie s\u0103 consemneze \u00een registru.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3e347a2 elementor-widget elementor-widget-text-editor\" data-id=\"3e347a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Actualizat \u00een <b>octombrie 2026<\/b><\/span><span><b>9 min<\/b> de lectur\u0103<\/span><span>Surse oficiale citate<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ac90a80 e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"ac90a80\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-d43a251 e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"d43a251\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b3b7ad7 elementor-widget elementor-widget-text-editor\" data-id=\"b3b7ad7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>1. Rolul fiec\u0103ruia<\/h2><p>Pentru con\u021binutul c\u0103su\u021belor po\u0219tale, al fi\u0219ierelor \u0219i al echipelor pe care le administra\u021bi, clientul este \u00een general operator (\u00een sensul GDPR). Microsoft este persoan\u0103 \u00eemputernicit\u0103 de operator. Pentru anumite date privind contul, facturarea, securitatea \u0219i m\u0103surarea serviciului, Microsoft poate fi operator distinct. Data Processing Addendum \u0219i Microsoft Privacy Statement separ\u0103 aceste cazuri.<\/p><p><strong>Cum verifica\u021bi.<\/strong> Rolul determin\u0103 obliga\u021biile. Citi\u021bi cele dou\u0103 documente \u00een paralel \u0219i \u00eencadra\u021bi fiecare categorie de date \u00eentr-o rubric\u0103. O firm\u0103 de expertiz\u0103 contabil\u0103 cu 25 de persoane, de exemplu, va avea pe de o parte e-mailurile \u0219i dosarele clien\u021bilor (Microsoft persoan\u0103 \u00eemputernicit\u0103 de operator), pe de alt\u0103 parte facturarea abonamentului (Microsoft operator distinct).<\/p><p><strong>\u00cen registru.<\/strong> C\u00e2te un r\u00e2nd pentru fiecare prelucrare, cu rolul Microsoft \u0219i documentul pe care se \u00eentemeiaz\u0103.<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A scrie \u201eMicrosoft este persoana noastr\u0103 \u00eemputernicit\u0103\u201d pentru \u00eentregul serviciu.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c69c247 elementor-widget elementor-widget-text-editor\" data-id=\"c69c247\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>2. DPA este semnat \u0219i acoper\u0103 serviciile efectiv activate<\/h2><p>DPA Microsoft este \u00eencorporat \u00een condi\u021biile online. Verifica\u021bi dac\u0103 acoper\u0103 serviciile pe care le-a\u021bi activat: Exchange, SharePoint, OneDrive, Teams, Planner, Copilot, Power Automate \u0219i orice conector.<\/p><p><strong>Cum verifica\u021bi.<\/strong> Un tenant evolueaz\u0103 dincolo de comanda ini\u021bial\u0103. Compara\u021bi lista serviciilor activate \u00een centrul de administrare cu perimetrul DPA \u0219i arhiva\u021bi versiunea DPA \u00een vigoare la data verific\u0103rii.<\/p><p><strong>\u00cen registru.<\/strong> Serviciul, data activ\u0103rii, scopul. Un serviciu activat de un administrator \u201eca s\u0103 \u00eencerce\u201d intr\u0103 \u00een registru din ziua \u00een care prelucreaz\u0103 date ale angaja\u021bilor sau ale clien\u021bilor dumneavoastr\u0103.<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A considera c\u0103 un conector c\u0103tre un instrument ter\u021b \u021bine de DPA Microsoft. Ter\u021bul are propriile condi\u021bii, care trebuie citite separat.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7cf5f2e elementor-widget elementor-widget-text-editor\" data-id=\"7cf5f2e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>3. Unde sunt datele, serviciu cu serviciu<\/h2><p>Pentru un tenant eligibil, Microsoft descrie EU Data Boundary: datele clien\u021bilor \u0219i datele cu caracter personal pseudonimizate stocate \u0219i prelucrate \u00een UE sau AELS, datele serviciilor profesionale stocate \u00een repaus \u00een aceast\u0103 zon\u0103. Trei verific\u0103ri evit\u0103 confundarea anun\u021bului cu un perimetru total.<\/p><ul><li>Se afl\u0103 tenantul \u00een perimetru? Un client Multi-Geo nu se afl\u0103, potrivit documenta\u021biei Microsoft, chiar dac\u0103 \u021bara de \u00eenregistrare este european\u0103.<\/li><li>Ce excep\u021bii continu\u0103? Accesul de la distan\u021b\u0103 al suportului din afara zonei pentru anumite incidente, elemente din tichetele escaladate stocate \u00een afara zonei, mesaje vocale de suport, func\u021bii op\u021bionale.<\/li><li>Ce servicii din afara nucleului (Copilot, telefonia Teams, conectori) genereaz\u0103 un transfer pentru c\u0103 administratorul le-a activat?<\/li><\/ul><p><strong>De ce.<\/strong> Frontiera este un perimetru cu excep\u021bii publicate, iar pe acestea trebuie s\u0103 \u0219i le asume registrul dumneavoastr\u0103. Pagina <a href='\/ro\/date-gazduite-in-europa\/'>date g\u0103zduite \u00een Europa<\/a> explic\u0103 de ce aceast\u0103 list\u0103 este adev\u0103ratul subiect.<\/p><p><strong>Cum verifica\u021bi \u0219i consemna\u021bi.<\/strong> Compara\u021bi configura\u021bia tenantului (Multi-Geo sau nu, func\u021bii op\u021bionale activate) cu pagina de excep\u021bii a Microsoft, r\u00e2nd cu r\u00e2nd, \u0219i nota\u021bi \u00een registru excep\u021biile care v\u0103 privesc.<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A copia \u201edate \u00een Europa\u201d \u00een politica de confiden\u021bialitate f\u0103r\u0103 a men\u021biona suportul sau func\u021biile op\u021bionale.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c5a454d elementor-widget elementor-widget-text-editor\" data-id=\"c5a454d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>4. Temeiul transferului<\/h2><p>Atunci c\u00e2nd datele cu caracter personal sunt accesibile din Statele Unite sau transferate c\u0103tre o organiza\u021bie american\u0103, transferul trebuie s\u0103 aib\u0103 un temei: decizie privind caracterul adecvat, clauze contractuale standard sau un alt instrument prev\u0103zut la articolul 46 din GDPR.<\/p><p>La 5 octombrie 2026, decizia (UE) 2023\/1795 (Data Privacy Framework) este \u00een vigoare pentru organiza\u021biile americane certificate. Ea este contestat\u0103 \u00een fa\u021ba Cur\u021bii de Justi\u021bie \u0219i face obiectul unei reexamin\u0103ri politice. Potrivit unui comentariu al casei de avocatur\u0103 WilmerHale, Tribunalul Uniunii Europene a respins o ac\u021biune \u00een anulare la 3 septembrie 2025, iar la 31 octombrie 2025 a fost formulat un recurs \u00een fa\u021ba Cur\u021bii de Justi\u021bie. Casa de avocatur\u0103 DAC Beachcroft rezum\u0103 situa\u021bia \u00een titlul propriului comentariu: stabilitate deocamdat\u0103, incertitudine ulterior. At\u00e2ta timp c\u00e2t decizia nu este nici retras\u0103, nici anulat\u0103, transferurile pe care le acoper\u0103 se pot baza pe ea.<\/p><p>Precedentul explic\u0103 pruden\u021ba. La 16 iulie 2020, prin hot\u0103r\u00e2rea C-311\/18 (numit\u0103 Schrems II), Curtea de Justi\u021bie a invalidat decizia 2016\/1250 (Privacy Shield), \u00een special din cauza amplorii programelor americane de supraveghere \u0219i a absen\u021bei unei c\u0103i de atac efective. Clauzele contractuale standard au r\u0103mas valabile, dar impun o evaluare de la caz la caz.<\/p><p>CLOUD Act nu se \u201esemneaz\u0103\u201d \u00een DPA. El se aplic\u0103, dac\u0103 este cazul, Microsoft \u00een calitate de societate american\u0103 care de\u021bine sau controleaz\u0103 datele. Articolul 48 din GDPR prevede, la r\u00e2ndul s\u0103u, c\u0103 o hot\u0103r\u00e2re a unei instan\u021be sau o decizie a unei autorit\u0103\u021bi dintr-o \u021bar\u0103 ter\u021b\u0103 care impune divulgarea datelor cu caracter personal poate fi recunoscut\u0103 sau executorie numai dac\u0103 se \u00eentemeiaz\u0103 pe un acord interna\u021bional, de exemplu un tratat de asisten\u021b\u0103 judiciar\u0103 reciproc\u0103, \u00een vigoare \u00eentre acea \u021bar\u0103 \u0219i Uniune sau statul membru. Un furnizor american care opereaz\u0103 \u00een Europa se poate afla, a\u0219adar, prins \u00eentre dou\u0103 reguli. Articolul 48 descrie acest conflict; nu \u00eel rezolv\u0103.<\/p><p>La 10 iunie 2025, \u00een fa\u021ba comisiei de anchet\u0103 a Senatului privind achizi\u021biile publice, directorul pentru afaceri publice \u0219i juridice al Microsoft France a fost \u00eentrebat dac\u0103 poate garanta sub jur\u0103m\u00e2nt c\u0103 datele cet\u0103\u021benilor francezi \u00eencredin\u021bate Microsoft prin intermediul Ugap nu vor fi niciodat\u0103 transmise, \u00een urma unui ordin al guvernului american, f\u0103r\u0103 acordul explicit al autorit\u0103\u021bilor franceze. El a r\u0103spuns: \u201eNu, nu pot garanta acest lucru, dar, \u00eenc\u0103 o dat\u0103, acest lucru nu s-a \u00eent\u00e2mplat niciodat\u0103 p\u00e2n\u0103 acum.\u201d Detaliile se afl\u0103 \u00een <a href='\/ro\/protejarea-companiei-de-cloud-act\/'>protejarea unei companii de CLOUD Act<\/a>.<\/p><p><strong>\u00cen registru.<\/strong> Temeiul fiec\u0103rui transfer \u0219i planul de rezerv\u0103: instrumentul prev\u0103zut la articolul 46 pe care v-a\u021bi baza dac\u0103 decizia ar c\u0103dea.<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A confunda localizarea (punctul 3) cu temeiul transferului. Datele stocate \u00een Europa pot r\u0103m\u00e2ne accesibile din Statele Unite.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1bce0c6 elementor-widget elementor-widget-text-editor\" data-id=\"1bce0c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>5. Drepturile persoanelor, \u00een practic\u0103<\/h2><p>Un angajat sau un client poate solicita accesul, rectificarea, \u0219tergerea, restric\u021bionarea sau portabilitatea. \u00cen Microsoft 365, o parte se face \u00een centrul de administrare \u0219i \u00een instrumentul de c\u0103utare a con\u021binutului.<\/p><p><strong>Cum verifica\u021bi.<\/strong> Termenul este de o lun\u0103. Persoana \u00eemputernicit\u0103 de operator furnizeaz\u0103 mijloacele; operatorul \u00eei r\u0103spunde persoanei vizate. Face\u021bi un test la rece: persoana desemnat\u0103 extrage, pentru un cont de test, c\u0103su\u021ba po\u0219tal\u0103, OneDrive \u0219i fi\u0219ierele Teams.<\/p><p><strong>\u00cen registru.<\/strong> Procedura, numele persoanei responsabile \u0219i al \u00eenlocuitorului s\u0103u.<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A a\u0219tepta ca un fost angajat aflat \u00een litigiu s\u0103 fac\u0103 o cerere pentru a descoperi instrumentul de c\u0103utare.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19bd235 elementor-widget elementor-widget-text-editor\" data-id=\"19bd235\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>6. Durata \u0219i ie\u0219irea<\/h2><p>P\u0103strarea c\u0103su\u021belor po\u0219tale partajate, a jurnalelor, a \u00eenregistr\u0103rilor \u0219edin\u021belor, a copiilor p\u0103strate \u00een scop de litigiu (litigation hold). La reziliere, ce se \u00eent\u00e2mpl\u0103 cu tenantul, \u00een ce termen \u0219i \u00een ce format recupera\u021bi mesajele, fi\u0219ierele \u0219i ceea ce nu se export\u0103 (istoricul complet al conversa\u021biilor Teams, anumite fluxuri Power Automate)?<\/p><p><strong>Cum verifica\u021bi.<\/strong> Nota\u021bi duratele efectiv configurate, nu pe cele din politica intern\u0103, \u0219i testa\u021bi exportul complet al unui cont.<\/p><p><strong>\u00cen registru.<\/strong> O durat\u0103 pentru fiecare categorie, justificarea fiec\u0103rei p\u0103str\u0103ri \u00een scop de litigiu, procedura de ie\u0219ire.<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A l\u0103sa activ\u0103 o p\u0103strare \u00een scop de litigiu ani de zile dup\u0103 \u00eencheierea litigiului care a justificat-o.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ddbb85c elementor-widget elementor-widget-text-editor\" data-id=\"ddbb85c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>7. Instruc\u021biunile pentru utilizatori<\/h2><p>Copilot \u0219i func\u021biile de analiz\u0103 prelucreaz\u0103 con\u021binutul pe care li-l \u00eencredin\u021ba\u021bi. Dac\u0103 le activa\u021bi, informarea angaja\u021bilor \u0219i cadrul de utilizare fac parte din conformitate. Acest aspect este intern companiei dumneavoastr\u0103. Nu depinde de \u021bara centrului de date.<\/p><p><strong>Cum verifica\u021bi.<\/strong> Exist\u0103 o not\u0103 de informare \u0219i o regul\u0103 care spune ce date pot fi supuse acestor func\u021bii?<\/p><p><strong>Eroare frecvent\u0103.<\/strong> A deschide un pilot Copilot pentru o echip\u0103 f\u0103r\u0103 a le informa pe celelalte persoane ale c\u0103ror date figureaz\u0103 \u00een fi\u0219ierele prelucrate.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-271f66c elementor-widget elementor-widget-text-editor\" data-id=\"271f66c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>\u00centreb\u0103ri frecvente<\/h2><h3>Interzice GDPR Microsoft 365?<\/h3><p>Nu. Regulamentul \u00eencadreaz\u0103 rolurile, transferurile \u0219i drepturile persoanelor. Nu interzice un produc\u0103tor de software din cauza na\u021bionalit\u0103\u021bii sale; cere s\u0103 documenta\u021bi ce face\u021bi \u0219i pe ce temei.<\/p><h3>Rezolv\u0103 EU Data Boundary problema CLOUD Act?<\/h3><p>Nu. Ea descrie unde sunt stocate \u0219i prelucrate anumite date. Microsoft r\u0103m\u00e2ne o societate american\u0103, iar 18 U.S.C. \u00a7 2713 vizeaz\u0103 datele pe care un furnizor le de\u021bine sau le controleaz\u0103, oriunde s-ar afla acestea.<\/p><h3>Ce face\u021bi dac\u0103 Data Privacy Framework este anulat?<\/h3><p>Registrul trebuie s\u0103 o spun\u0103 deja. Dup\u0103 Schrems II, clauzele contractuale standard au r\u0103mas valabile, cu o evaluare de la caz la caz. Preg\u0103tirea ei din timp evit\u0103 redactarea \u00een regim de urgen\u021b\u0103.<\/p><h3>Cine \u00eei r\u0103spunde unui angajat care \u00ee\u0219i solicit\u0103 datele?<\/h3><p>Dumneavoastr\u0103, \u00een calitate de operator (\u00een sensul GDPR). Microsoft furnizeaz\u0103 instrumentele de extragere; r\u0103spunsul \u0219i termenul de o lun\u0103 v\u0103 revin dumneavoastr\u0103.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02c2e54 elementor-widget elementor-widget-text-editor\" data-id=\"02c2e54\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>C\u00e2nd verificarea se \u00eencheie cu \u201er\u0103m\u00e2nem\u201d<\/h2><p>Se \u00eencheie astfel atunci c\u00e2nd utiliz\u0103rile Microsoft sunt \u00een centrul activit\u0103\u021bii, DPA este \u00een vigoare, perimetrul de reziden\u021b\u0103 este \u00een\u021beles, iar registrul documenteaz\u0103 transferurile reziduale. Schimbarea suitei nu devine o obliga\u021bie impus\u0103 de GDPR doar pentru c\u0103 produc\u0103torul software-ului este american.<\/p><p>Argumentele pentru a r\u0103m\u00e2ne sunt serioase. Un birou de proiectare care tr\u0103ie\u0219te \u00een Excel avansat, Power BI \u0219i Teams ar pierde func\u021bii schimb\u00e2nd suita, iar o migrare comport\u0103 propriile riscuri. Un tenant Microsoft bine documentat este mai conform dec\u00e2t o alternativ\u0103 prost documentat\u0103. Decizia se reexamineaz\u0103 dac\u0103 temeiul transferurilor se schimb\u0103. Arbitrajele sunt detaliate \u00een <a href='\/ro\/microsoft-365-vs-solutie-suverana\/'>a r\u0103m\u00e2ne sau a p\u0103r\u0103si Microsoft 365<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ce28f15 elementor-widget elementor-widget-text-editor\" data-id=\"ce28f15\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>C\u00e2nd verificarea se \u00eencheie cu \u201eschimb\u0103m operatorul serviciului\u201d<\/h2><p>Se \u00eencheie astfel atunci c\u00e2nd conducerea vrea ca o societate european\u0103 s\u0103 de\u021bin\u0103 con\u021binutul sau atunci c\u00e2nd excep\u021biile privind transferurile \u0219i accesul suportului dep\u0103\u0219esc ceea ce registrul \u00ee\u0219i poate asuma. Poate veni \u0219i din partea clien\u021bilor: o licita\u021bie care cere un operator european al serviciului tran\u0219eaz\u0103 problema pentru perimetrul vizat.<\/p><p>Aceast\u0103 concluzie are argumentele ei. Atunci c\u00e2nd operatorul serviciului este european \u0219i nu depinde de un grup american pentru de\u021binerea datelor, conflictul descris la punctul 4 nu se mai pune pentru aceste date, cu condi\u021bia ca subcontractan\u021bii s\u0103i s\u0103 nu reintroduc\u0103 un furnizor american. Ea nu scute\u0219te de nimic altceva: contractul cu persoana \u00eemputernicit\u0103 de operator, registrul, procedura pentru drepturi \u0219i ie\u0219irea testat\u0103 r\u0103m\u00e2n necesare. Pagina <a href='\/ro\/migrare-de-la-microsoft-365\/'>migrarea de la Microsoft 365<\/a> descrie ce implic\u0103 aceast\u0103 schimbare, f\u0103r\u0103 a o prezenta ca pe un gest automat, iar <a href='\/ro\/lista-de-verificare-migrare-microsoft-365\/'>lista de verificare pentru migrare<\/a> o \u00eemparte \u00een etape.<\/p><p>Klytic, operat de societatea francez\u0103 Dedicace Software, este una dintre op\u021biuni dac\u0103 utiliz\u0103rile se limiteaz\u0103 la e-mail, documente (partajare, editare online individual sau \u00een echip\u0103, istoricul versiunilor), videoconferin\u021b\u0103, CRM \u0219i telefonie. Serviciile se achizi\u021bioneaz\u0103 separat; pute\u021bi \u0219i s\u0103 p\u0103stra\u021bi Microsoft 365 \u0219i s\u0103 ad\u0103uga\u021bi doar filtrarea Klytic MTA, plasat\u0103 \u00een fa\u021ba acestuia. G\u0103zduirea se face \u00een orice zon\u0103 geografic\u0103 ce corespunde jurisdic\u021biei aplicabile, sub rezerva disponibilit\u0103\u021bii serviciilor necesare, de exemplu \u00een Europa sau \u00een Mauritius, ori pe serverele clientului. Datele sunt de\u021binute de client sau de Klytic \u00een numele acestuia \u0219i sunt criptate nativ sau potrivit alegerii sale; cheia este de\u021binut\u0103 de client sau p\u0103strat\u0103 \u00een contul s\u0103u, iar Klytic nu are acces la ea. Etapele \u00een care criptarea este gestionat\u0103 de Klytic sunt detaliate \u00een pagina <a href='\/ro\/protejarea-companiei-de-cloud-act\/'>protejarea unei companii de CLOUD Act<\/a>. Contractul trebuie s\u0103 descrie aceast\u0103 de\u021binere \u0219i aceast\u0103 criptare. Klytic nu reproduce Excel avansat, Power BI sau Teams. Nu este calificat SecNumCloud, iar un operator francez r\u0103m\u00e2ne supus dreptului francez.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a3a182 kly-g-disclaimer elementor-widget elementor-widget-text-editor\" data-id=\"8a3a182\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Aceast\u0103 pagin\u0103 descrie un cadru general. Ea nu constituie consultan\u021b\u0103 juridic\u0103.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fa15c5f kly-g-legal elementor-widget elementor-widget-text-editor\" data-id=\"fa15c5f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><b>Situa\u021bia juridic\u0103 la 5 octombrie 2026.<\/b> Acest text nu \u00eenlocuie\u0219te analiza unui contract. Decizia privind caracterul adecvat UE\u2013SUA (UE) 2023\/1795 este \u00een vigoare. Este contestat\u0103. Pentru SecNumCloud, catalogul ANSSI este cel care face referin\u021b\u0103.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2842834 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"2842834\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Surse<\/h2><p>Consultate \u00een octombrie 2026.<\/p><ul><li>Regulamentul (UE) 2016\/679, articolele 28 (persoana \u00eemputernicit\u0103 de operator), 44\u201349 (transferuri), inclusiv articolul 48 (deciziile autorit\u0103\u021bilor din \u021b\u0103ri ter\u021be). <a href='https:\/\/eur-lex.europa.eu\/legal-content\/FR\/TXT\/?uri=CELEX:32016R0679' rel='noopener' target='_blank'>EUR-Lex<\/a><\/li><li>Microsoft, actul adi\u021bional privind protec\u021bia datelor (DPA). <a href='https:\/\/www.microsoft.com\/licensing\/docs\/view\/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA' rel='noopener' target='_blank'>Microsoft Licensing<\/a><\/li><li>Microsoft, EU Data Boundary: perimetru, eligibilitate, excluderea Multi-Geo. <a href='https:\/\/learn.microsoft.com\/en-us\/privacy\/eudb\/eu-data-boundary-learn' rel='noopener' target='_blank'>Microsoft Learn<\/a><\/li><li>Microsoft, excep\u021bii privind transferurile, inclusiv suportul. <a href='https:\/\/learn.microsoft.com\/en-us\/privacy\/eudb\/eu-data-boundary-transfers-for-all-services' rel='noopener' target='_blank'>Microsoft Learn<\/a><\/li><li>Decizia (UE) 2023\/1795. <a href='https:\/\/eur-lex.europa.eu\/legal-content\/FR\/TXT\/?uri=CELEX:32023D1795' rel='noopener' target='_blank'>EUR-Lex<\/a><\/li><li>Curtea de Justi\u021bie a Uniunii Europene, 16 iulie 2020, C-311\/18 (Schrems II). <a href='https:\/\/eur-lex.europa.eu\/legal-content\/FR\/TXT\/?uri=CELEX:62018CJ0311' rel='noopener' target='_blank'>EUR-Lex<\/a><\/li><li>Despre litigiul privind Data Privacy Framework, comentariu al unor avoca\u021bi, nu o hot\u0103r\u00e2re: WilmerHale, \u201eEuropean Court of Justice to Review Challenge to EU-U.S. Data Privacy Framework\u201d, 1 decembrie 2025. <a href='https:\/\/www.wilmerhale.com\/en\/insights\/blogs\/wilmerhale-privacy-and-cybersecurity-law\/20251201-european-court-of-justice-to-review-challenge-to-eu-us-data-privacy-framework' rel='noopener' target='_blank'>wilmerhale.com<\/a><\/li><li>Despre litigiu \u0219i reexaminarea \u00een curs, comentariu al unor avoca\u021bi, nu o hot\u0103r\u00e2re: DAC Beachcroft, \u201eThe EU\u2013US Data Privacy Framework: stability for now, uncertainty ahead\u201d. <a href='https:\/\/www.dacbeachcroft.com\/en\/What-we-think\/The-EU-US-Data-Privacy-Framework-Stability-for-now-uncertainty-ahead' rel='noopener' target='_blank'>dacbeachcroft.com<\/a><\/li><li>18 U.S.C. \u00a7 2713. <a href='https:\/\/www.govinfo.gov\/content\/pkg\/USCODE-2023-title18\/html\/USCODE-2023-title18-partI-chap121-sec2713.htm' rel='noopener' target='_blank'>govinfo<\/a><\/li><li>Senatul francez, comisia de anchet\u0103 privind achizi\u021biile publice, procesul-verbal al s\u0103pt\u0103m\u00e2nii din 9 iunie 2025 (audierea din 10 iunie 2025). <a href='https:\/\/www.senat.fr\/compte-rendu-commissions\/20250609\/ce_commande_publique.html' rel='noopener' target='_blank'>senat.fr<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d51a149 e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"d51a149\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-56df7d4 elementor-widget elementor-widget-html\" data-id=\"56df7d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"Cuprins\"><p>Pe aceast\u0103 pagin\u0103<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5318150 elementor-widget elementor-widget-text-editor\" data-id=\"5318150\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Un operator francez pentru datele dumneavoastr\u0103<\/h3><p>E-mail, documente, videoconferin\u021b\u0103, CRM \u0219i telefonie, g\u0103zduite \u00een zona care corespunde jurisdic\u021biei dumneavoastr\u0103, de exemplu \u00een Europa sau \u00een Mauritius, ori la sediul dumneavoastr\u0103.<\/p><p><a class=\"kly-g-btn\" href=\"\/ro\/contact\/\">Vorbi\u021bi cu un consultant \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/ro\/gazduire-si-suveranitate\/\">G\u0103zduirea Klytic<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8e95481 e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"8e95481\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bfbe963 elementor-widget elementor-widget-text-editor\" data-id=\"bfbe963\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Citi\u021bi \u0219i<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/ro\/gdpr-google-workspace\/\" style=\"--cat:#0077cc\"><span class=\"c\">Suveranitate<\/span><span class=\"t\">GDPR \u0219i Google Workspace: ce trebuie s\u0103 verifice o companie<\/span><span class=\"q\">Roluri, regiuni de date, accesul suportului, jurnale neacoperite, transferuri \u0219i ie\u0219irea: ce trebuie verificat \u00eenainte de a \u00eencheia subiectul Google Workspace.<\/span><span class=\"m\"><span>9 min de lectur\u0103<\/span><b>Citi\u021bi \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/ro\/ce-este-cloudul-suveran\/\" style=\"--cat:#0077cc\"><span class=\"c\">Suveranitate<\/span><span class=\"t\">Ce este un cloud suveran?<\/span><span class=\"q\">Un cloud suveran se evalueaz\u0103 dup\u0103 operatorul serviciului, dreptul aplicabil, controlul accesului \u0219i recuperarea datelor. Loca\u021bia centrului de date nu ajunge.<\/span><span class=\"m\"><span>8 min de lectur\u0103<\/span><b>Citi\u021bi \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/ro\/alternative-europene-microsoft-365\/\" style=\"--cat:#6d28d9\"><span class=\"c\">Compara\u021bii<\/span><span class=\"t\">Alternativele europene la Microsoft 365: ghidul 2026<\/span><span class=\"q\">Criterii de alegere, apoi Microsoft 365, Google Workspace, OVHcloud, Nextcloud, Infomaniak, al\u021bi actori \u0219i Klytic. \u00cen ce caz este potrivit fiecare.<\/span><span class=\"m\"><span>18 min de lectur\u0103<\/span><b>Citi\u021bi \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-539316dd e-con e-atomic-element e-div-block-base e-default-div e-c9fd865-4a50 \" data-id=\"539316dd\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"539316dd\" data-e-type=\"e-div-block\" data-id=\"539316dd\">\n    <div class=\"elementor-element elementor-element-4f79afcb e-con e-atomic-element e-div-block-base e-default-div e-4fa9fe-ce86 \" data-id=\"4f79afcb\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"4f79afcb\" data-e-type=\"e-div-block\" data-id=\"4f79afcb\">\n    \t\t\t<p class=\"e-4dcf5c70-2ec7 e-paragraph-base e-default-p\" data-interaction-id=\"330a7a35\" data-e-type=\"widget\" data-id=\"330a7a35\">Ofert\u0103 de bun venit<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"56f1f7d5\" class=\"e-347faa43-4e20 e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"56f1f7d5\">30 de zile de prob\u0103 gratuit\u0103, migrare asistat\u0103<\/h2>\n\t\t\t\t\t<p class=\"e-7f6310da-1caa e-paragraph-base e-default-p\" data-interaction-id=\"2ce27288\" data-e-type=\"widget\" data-id=\"2ce27288\">Ofert\u0103 de prob\u0103 f\u0103r\u0103 angajament. Un consilier v\u0103 sun\u0103 \u00eenapoi pentru a v\u0103 \u00een\u021belege nevoile \u0219i a v\u0103 preg\u0103ti spa\u021biul Klytic.<\/p>\n\t\t<div class=\"elementor-element elementor-element-35ea29a1 e-con e-atomic-element e-div-block-base e-default-div e-1cd48b22-e6da \" data-id=\"35ea29a1\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"35ea29a1\" data-e-type=\"e-div-block\" data-id=\"35ea29a1\">\n    \t\t\t<a href=\"\/essai-gratuit\/\" target=\"_self\" class=\"e-4a7886e3-652d e-button-base e-default-a\" data-interaction-id=\"19bfa8f1\" data-e-type=\"widget\" data-id=\"19bfa8f1\">\n\t\ud83d\ude80 \u00cencepe\u021bi proba gratuit\u0103\n<\/a>\n\t\t\t\t\t<a href=\"\/tarifs\/\" target=\"_self\" class=\"e-137e863d-dd0d e-button-base e-default-a\" data-interaction-id=\"326d82ab\" data-e-type=\"widget\" data-id=\"326d82ab\">\n\tVede\u021bi pre\u021burile\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"GDPR \u0219i Microsoft 365: ce trebuie s\u0103 verifice o companie | Klytic","_seopress_titles_desc":"Roluri, DPA, frontiera european\u0103 a datelor, transferuri, drepturile persoanelor \u0219i ie\u0219irea: verific\u0103rile GDPR de f\u0103cut \u00eenainte de a \u00eencheia subiectul Microsoft 365.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"GDPR \u0219i Microsoft 365: ce trebuie s\u0103 verifice o companie | Klytic","_seopress_social_fb_desc":"Roluri, DPA, frontiera european\u0103 a datelor, transferuri, drepturile persoanelor \u0219i ie\u0219irea: verific\u0103rile GDPR de f\u0103cut \u00eenainte de a \u00eencheia subiectul Microsoft 365.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"GDPR \u0219i Microsoft 365: ce trebuie s\u0103 verifice o companie | Klytic","_seopress_social_twitter_desc":"Roluri, DPA, frontiera european\u0103 a datelor, transferuri, drepturile persoanelor \u0219i ie\u0219irea: verific\u0103rile GDPR de f\u0103cut \u00eenainte de a \u00eencheia subiectul Microsoft 365.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-4542","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages\/4542","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/comments?post=4542"}],"version-history":[{"count":1,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages\/4542\/revisions"}],"predecessor-version":[{"id":4753,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages\/4542\/revisions\/4753"}],"wp:attachment":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/media?parent=4542"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}