POLICY OF PROTECTION AND CONFIDENTIALITY AT THE LEVEL OF EDUMAGIC SOLUTIONS SRL - WWW.EDUMAGIC.EU, WITH RESPECT FOR THE GENERAL DATA PROTECTION REGULATION NO. 679/2016 APPLICABLE IN THE EU

Because we are honored to be a customer of EduMagic Solutions SRL - www. edumagic.eu , we consider it a good time to inform you how we protect your personal data in the light of the new European Regulation 2016/679.

In completing this document, you must also consider the Terms and Conditions and the Cookies Policy used by us in our relations with you.

On 25 May 2018, the European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and their free movement (hereinafter the GDPR Regulation) entered into force. The main purpose of the GDPR Regulation is to increase the level of protection of personal data and create a climate of trust that allows each person to control their own data.

Our company - EduMagic Solutions SRL , based in Buzau, Bd. 1 Decembrie 1918 Nr. 65, tel. 0760.676.802, CUI 41223107, registered under no. J10 / 843/2019, hereinafter referred to as the Operator, processes the personal data of clients and / or business partners from the past, present and future (potential), taking into account the development of its commercial activity.

The Operator may hold information about its customers, which have been provided by them and process this personal data in accordance with the General Data Protection Regulation no. 679/2016 applicable in the EU from May 25, 2018.

In accordance with the provisions of the above-mentioned Regulation, the Operator processes your personal data, therefore the Operator has the duty to establish the purpose and necessity of collecting and processing personal data. The processing of this personal data means the manual or automatic operations of collection, registration, processing, storage in the database, adaptation, modification, consultation, use, distribution, rectification or deletion.

LEGAL BASIS FOR DATA PROCESSING AND PURPOSE OF THESE OPERATIONS

The legal basis considered for the processing of personal data is art. 6 of the GDPR Regulation. Specifically, it is about data processing:

based on your consent (art. 6 paragraph 1 letter a of the GDPR Regulation);
necessary for the execution of the contract concluded by you with the Operator;
necessary to fulfill some legal obligations of the Operator;
necessary for the purpose of the legitimate interests pursued by the Operator, respectively the achievement of the object of activity, the identification of new clients, the fulfillment of the marketing strategy, the performance of some analyzes on the traffic on the site and others like that.

The personal data we process are mainly: your identification data, contact data, banking transaction data, in case of card or PO payments, or other personal data that we collect directly from you when you become the customer. when you request our products and services. In addition, data about the IP address from which the site was accessed will be stored. It is also possible that in some cases we process the reviews / reviews / opinions you have made about our products and services, on different platforms (such as Facebook), in order to display them on our website.

The operator processes the data of its clients, mentioned below, in order to carry out the following activities: Realization of the object of activity; Concluding and executing the contract concluded with you, including the creation of an account on the site; Advertising: marketing for offers, products and services; Customer satisfaction surveys: contact after purchase, for example, on satisfaction with the services provided; Legal obligations: collection of contractual data on invoices; Solving the requests and complaints made.

The operator collects and processes strictly only those information or personal data that are necessary to be collected and / or processed in order to carry out the activity in optimal conditions, in order to meet the requirements of its customers and to provide them with the best quality services.

We expressly state that, in accordance with the Regulation on the processing of personal data, the Operator does not collect and process data relating to: religious denomination or philosophical beliefs, trade union membership, racial or ethnic origin, political opinions, genetic data, data biometrics for the unique identification of a natural person, data on the health, sexual life or sexual orientation of a natural person.

CATEGORIES OF PERSONAL DATA COLLECTED

- Customers' identification data - name, surname, domicile / residence, telephone number, email address, sex, date of birth, bank details. These data will be processed in order to: Realize the object of activity; Concluding and executing the contract concluded with you, including the creation of an account on the site; Advertising: marketing for offers, products and services; Customer satisfaction surveys: contact after purchase, for example, on satisfaction with the services provided; Legal obligations: collection of contractual data on invoices; Solving the requests and complaints made.

- Photo and video images - refers to the Operator's employees and to the Clients on the company's website, as their strict option; These data will be processed in order to: Achieve the object of activity; Concluding and executing the contract concluded with you, including the creation of an account on the site; Advertising: marketing for offers, products and services; Customer satisfaction surveys: contact after purchase, for example, on satisfaction with the services provided.

- Job and professional details - for employees. This data will be processed for the purpose of: Marketing: advertising for offers, products and services.

- Billing details for legal entities. These data will be processed in order to: Realize the object of activity; Concluding and executing the contract concluded with you.

The personal data we hold were obtained from customers when they visited our site and left their personal data for registration.

Commercial communications

We also collect your data, such as your name and contact details, to send you various commercial communications (offers, discounts, gifts, alerts, etc.) regarding our products and services. If you no longer wish to receive such communications, you may unsubscribe at any time by exercising your option to do so either through your user account or from any commercial communication received.

We will make every effort to comply with these requests within a reasonable time, and there is a possibility that you will receive certain communications until this request is resolved.

DISTRIBUTION OF PERSONAL DATA

In order to offer you our products and services as competitively as possible, we need to enter your data into the system. In case of problems with the provision of products and services, we can quickly identify you for remediation. In order to fulfill our legal obligations, we communicate personal data to public authorities, judicial bodies, those who are authorized and request this from Romania / European Union, ensuring us to protect personal data.

The Operator distributes your personal data only to those categories of employees (proxies) and collaborators whose activity requires access to these data, such as (by way of example): IT Service and its collaborators; Financial-accounting department; Human Resources Department; Marketing department; Legal department; Contractual partners; Third parties for joint promotions in compliance with applicable data protection laws; Third parties or bodies, where such disclosure is necessary to comply with any applicable law or other legal requirement; Law enforcement agencies, government bodies, regulatory organizations, courts or other public authorities if we have this legal obligation or are authorized by law.

DATA TRANSFER TO OTHER COUNTRIES

The operator does not exclusively process personal data, but has the support of professional partners for data processing in order to execute a contract and the obligations arising from it, such as various marketing agencies, strictly for the purposes mentioned in this policy.

We mention that our partners are carefully selected and undertake to ensure, through appropriate technical and organizational measures, the processing of data in accordance with the legal provisions in force with respect to your rights. Partners are contractually prohibited from using personal data received for their own or commercial purposes or from passing it on to third parties.

We would like to inform you that our servers are provided by a company established in the USA (respectively Linode, LLC - https://www.linode.com/company/about/ ). However, the data will be stored on servers located in EU member states and will not be transferred to the US. If we make a transfer to third countries (non-EU), our company will take all necessary measures to ensure that this transfer is carried out in accordance with the provisions of the GDPR Regulation, so that the operators or persons authorized by us to carry out the processing of the transferred data provide the appropriate guarantees necessary for such processing, and you can exercise your rights in relation to this data. .

DATA STORAGE

The operator keeps the personal data only for the period indicated by the client through the declaration of consent or as long as he remains in contact with us.

We mention that a criterion regarding the storage of certain data is the one consisting in fulfilling the legal obligations of the Operator, reason for which these data will be kept for a period in accordance with the applicable legislation.

YOUR RIGHTS

THE RIGHT TO KNOW WHAT PERSONAL DATA IS PROCESSED TO YOU / THE RIGHT TO ACCESS IT

You have the right to request a copy of the personal data held by the Operator in connection with you, by email [email protected] in order to receive in electronic format all the data held by the Operator.

THE RIGHT TO CORRECT THE DATA

You have the right to request the rectification of the data held by the Operator, if they are incorrect. If the data we hold needs to be updated or if you consider that it may be incorrect, you can contact the Operator by email [email protected]. You can also rectify certain data through the user account.

No corrections can be made to data that would be against the law (eg invoices).

THE RIGHT TO BE FORGOTTEN - TO BE DELETED FROM THE DATABASE

The operator intends to process and store the data strictly as long as this is absolutely necessary. You have the right to ask us to delete the personal data we hold strictly in accordance with the legal provisions at the email address indicated.

If you consider that we keep this data longer than necessary, you can contact the Operator at the addresses indicated. If the period of consent has elapsed, it is possible that there are still legal provisions for the processing of personal data.

Your request to delete from the databases (applications) will be made in a maximum of one month. The term can be extended to 2 months with the prior information of the client.

Those data that must be kept as a result of legal provisions (eg invoices, etc.) will not be deleted.

RIGHT OF WITHDRAWAL OF CONSENT

You have the right at any time to request the withdrawal of the communication consent.

Withdrawal of consent will be made only in writing to the email address indicated.

THE RIGHT TO DATA PORTABILITY

You have the right to receive the personal data concerning you and which you have provided to the operator in a structured, commonly used and automatically readable format and you have the right to request the transmission of this data to another operator, if they they have been processed on the basis of consent and the processing is done by automatic means.

RIGHT OF RESTRICTION ON THE USE OF PERSONAL DATA

In certain circumstances, you have the right to request the restriction of the processing by the Operator of your personal data in accordance with the provisions of art. 18 of the Regulation.

THE RIGHT OF OPPOSITION TO THE PROCESSING OF PERSONAL DATA

In certain circumstances, you have the right to oppose the processing by the Operator of your personal data - art. 21 of the Regulation.

THE RIGHT TO MAKE A COMPLAINT

It is your right to make a complaint if you consider that you have doubts as to how your personal data is processed and secured. If you wish to contact us about any of your rights or make a complaint about how we use your personal data, please contact us in writing at [email protected].

We assure you that we will make every effort to help you, but if you are still dissatisfied, you can contact the National Authority for the Supervision of Personal Data Processing - address Bulevardul General Gheorghe Magheru 28-30, Bucharest 010336.

PROFILE CREATION

The operator uses the data collected and processed for the elaboration of profiles with the following purposes: Realization of the object of activity; Concluding and executing the contract concluded with you, including the creation of an account on the site; Advertising: marketing for offers, products and services; Customer satisfaction surveys: contact after purchase, for example, on satisfaction with the services provided.

THE RIGHT NOT TO BE EVALUATED ON THE BASIS OF AN AUTOMATIC EVALUATION

The operator respects the right of all persons who have entrusted us with their personal data not to be evaluated on the basis of an automatic processing.

CONSUMERS IN NEVADA, USA

If you are a resident consumer of the state of Nevada, USA, you have the right to ask us, at any time, not to sell the data of the people we have about you or whom we will collect in the future. The exercise of this right is done through a notification that you must send to the address indicated: [email protected] . Following these notifications, we will respond to you within 60 days of receipt of your request. However, if we deem it necessary, we will extend by 30 days the period in which we can provide an answer, informing you in this regard.

Regardless of the exercise of the right mentioned above, we mention that we have not sold and will not sell the personal data we collect . This data is collected only for the purposes mentioned above and will not be sold to other entities.

CONSUMERS IN CALIFORNIA, USA - YOUR PRIVACY RIGHTS

If you are a resident user of the State of California, USA, under the California Civil Code, Section 1798.83, you may request information about the categories of personal data that we have shared with other persons or entities for the purpose of their performance. of direct marketing activities. Thus, you can address the mentioned request to the e-mail address: [email protected] . A response to your request will be provided within 30 days. However, we mention with our company is not obliged to provide an answer, in consideration of Section 1798.83 par. 3 lit. c of the California Civil Code.

At the same time, if you are a user of the state of California, USA, by accepting this policy, you also declare the fact that you are 16 years old. If you are not of this age, please do not use the Website and do not use our products.

Also, if you are a resident user of the state of California, USA, under the title "California Consumer Privacy Act" of the California Civil Code, you have the following rights regarding the personal data we process:

The right to information about the personal data collected about you. You have the right to know what categories of personal data we have collected about you and for what purposes we have processed this. In this regard, you can find out about these issues in the sections provided above where you will find information on the categories of data processed and the purposes of processing. You also have the right to know the sources from which we have collected personal data and the categories of third parties to whom we distribute this data, this information being presented above.

The right to delete in connection with personal data collected about you. In this regard, at any time, you can ask us to delete the personal data we have about you.

The right to object to the sale of personal data (right to opt-out) collected about you. You may object to the sale of personal data collected or to be collected in the future by submitting a request to that effect. You can exercise this right at any time.

To exercise this right, you can also access the "Do Not Sell My Personal Information" section available here.

The right not to be discriminated against due to the fact that you have exercised your rights in relation to personal data. In this regard, as a result of the exercise of your rights, you will not be denied the provision of our services, their prices or quality will not be changed.

In order to exercise these rights, please send a request, exclusively by electronic means, to the e-mail address: [email protected] . We will respond to you within 45 days of receiving your request. If necessary, we will extend this period by 45 days, informing you in this regard.

This section will be updated at least every 12 months. In this regard, please check the changes made in this section no later than that date.

CONTACT POINTS

For any additional information regarding the way we process your data, you can send a request by email:

Email address: [email protected]

This policy was last updated on 11.08.2020.