1. CONTACT DETAILS
1.1 The fiscal data of our organization are the following:
●Organization name: FOREIGN LANGUAGES CENTER G.C.B SRL
●Work address: Primăriei street, no. 54, flat no. 14, Oradea, Bihor
●Unique registration code: 35363580
●Registration number at the Trade Register: J5/2011/2015
●Gal Corina Phone: 0745900225
●You can contact our Data Protection Officer (DPO) in the following ways:
●By phone: 0724 790 790
1. OUR PRINCIPLES REGARDING THE PROTECTION OF PERSONAL DATA
We guarantee that we have done and we will continue to take all the necessary steps to respect your privacy.
We take seriously the protection activity of personal data, their security and compliance with the Regulation on the protection of natural persons regarding the processing of personal data and on the free movement of such data.
We respect the following principles:
●We do not process and sent your personal data to any other entity, without your consent or the DPO’s and without a legitimate reason provided by law, the General Data Protection Regulation or European Union law.
●We process personal data legally, fairly and transparently in relation to the data subject.
●We collect the data for a well-determined, explicit and legitimate purpose and do not subsequently process this data in a manner incompatible with this purpose.
●We will only ask you for the data we need in relation to the purposes for which we process them.
●We take all necessary measures to ensure that personal data that are inaccurate are erased from our records or rectified without delay.
●We take all the technical and organizational measures so that the data is kept in a form that allows the identification of the data subjects for a period that does not exceed the period necessary to fulfill the purposes for which these data are processed.
●We take all technical and organizational measures to ensure the security of personal data, including protection against unauthorized or illegal processing and against the loss, destruction or accidental deterioration of them.
●If you would like to contact us about any of your rights or make a complaint about how we use your personal data, please contact our Data Protection Officer.
2. WHAT INFORMATION WE COLLECT FROM YOU AND HOW
We collect personal data from you in the following ways:
●Directly from you (the data subject), at our point of work – by requesting the personal data necessary for enrolling in our courses and completing the legal-financial accounting formalities
●Directly from you (the data subject), by filling in the form on www.clso.ro site
●From another operator, in order to fulfill some contractual obligations
– The information we obtain directly from you (the data subject) can be:
Name and surname, serial number and ID, personal numeric code, telephone number, e-mail address, home address, age, field of activity, other similar language schools you attended, other general information for questionnaires and statistics.
– The information that we obtain from another operator, in order to fulfill some contractual obligations could be: Name and surname, e-mail address, telephone number.
4. FOR WHAT PURPOSE WE COLLECT AND PROCESS YOUR PERSONAL
Personal data are collected and processed for administrative and business purposes:
●The conclusion of the contracts in order to provide the services specific to the company (contract with the students who learn foreign languages with us, translators, teachers/trainers, auxiliary staff of these services)
●to contact you and to process your bookings or registrations you place on our site
●to inform you directly about our services, promotions, offers, news, opportunities related to the company profile and of interest for the customers
●for making questionnaires, statistics, graphs, advertising materials in order to optimize our activity provided for you.
●In case of international projects for the transfer of your personal data outside the European Economic Area: we will transfer your personal data outside the European Economic Area only if we are obliged to do so by law or in order to perform the contractual obligations towards you – when we do this, we ensure that there are adequate protection measures, for example: the protection of personal data to partners outside the European Union is regulated by standard contractual clauses for the transfer of personal data from the Community to third countries.
●For the use of automatic decision-making processes: we use automatic decision-making processes in relation to our website, for example: the use of Web Analytics tools, cookies, web beacons or the use of targeting cookies to display ads to people who visit our site on other websites.
5. WHAT IS THE LEGAL BASIS ON WHICH WE PROCESS YOUR PERSONAL DATA
●Data processing is carried out in accordance with the General Regulation on Data Protection, art.6- Legality of processing, points a) and b):
– the data subject has given his consent for the processing of his personal data for one or more specific purposes
– processing is necessary for the execution of a contract to which the data subject is a party or to take steps at the request of the data subject before the conclusion of a contract.
6. HOW LONG WE KEEP YOUR PERSONAL DATA
●We store your information as long as required by law. If there is no legal requirement, we only store them for as long as necessary.
●Unless otherwise provided by law, we usually keep your data for the duration of a contract under which we process this data, plus a period of five years from its termination.
●After processing the personal data, those that are no longer needed are immediately erased from all our records, according to internal procedures.
7. HOW WE PROTECT THE INFORMATION COLLECTED FROM YOU
●In order to protect personal data, the necessary technical and organizational security measures are implemented (licensed operating systems, antivirus programs, contracts with IT service providers that comply with GDPR provisions, internal procedures).
●The personal data we process are subject to strict internal procedures, so we make sure they are protected against any security breaches.
●We constantly review and improve the measures we have taken to protect your personal data against any unauthorized access, accidental loss, disclosure or destruction.
●We make sure that all the partners to whom we provide, in certain circumstances, personal data in order to fulfill our contractual obligations towards you, comply with the provisions of the General Data Protection Regulation.
●We use the security and encryption systems of the hosting company (https://visudamarketing.ro – MOȘILĂ ANCA IOANA AUTHORIZED PERSON) and the encryption of data transfers to and from our servers using Google cloud.
8. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT
Transparency of information, communications and ways of exercising the rights of the data subject is strictly respected by our company.
You can request information about your personal data that we process, by sending us a request, by email or by phone. We will inform you as soon as possible about the status of your application and the measures we have taken to solve it.
The right of access of the data subject
You have the right to request a copy of the personal data we hold about you. To make this request as an authorized person or third-party, please use our contact details.
The right to rectification and deletion
You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you, or the deletion of them in certain circumstances.
If the data we hold about you needs to be updated, if you feel that they may be incorrect or if you want to delete them, you can send us a request in this regard, and we will take all necessary measures to resolve your request as soon as possible.
The right to restrict processing
In certain circumstances, you have the right to oppose the processing of your personal data by our company.
The right to data portability
The data subject has the right to receive his/her personal data provided to the operator in a structured format, currently used and which can be read automatically and to convey this data to another operator, without any objections from the operator to whom the personal data were provided.
The right to opposition
At any time, you have the right to object to the processing of personal data concerning you, including the creation of profiles. Our company does not process your data for the purpose of creating profiles. When the processing of personal data is for the purpose of direct marketing, you have the right at any time to oppose the processing for this purpose of the personal data concerning you.