Olivia Podobea Privacy Policy

2. Principles regarding the processing of personal data

Privacy policy of S.C. SOLVE&PEFORM SRL is based on the following data protection principles:

• prelucrarea datelor cu caracter personal are loc într-un mod legal, corect și transparent;
• personal data are collected only for specified, explicit and legitimate purposes and are not further processed in a way incompatible with those purposes;
• the collection of personal data is adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed;
• the personal data processed must be accurate and, where necessary, kept up to date;
• all reasonable steps are taken to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are erased or rectified in a timely manner;
• personal data are kept in a form which permits identification for no longer than is necessary for the purpose for which they are processed;
• all personal data will be kept confidential and stored in a way that ensures adequate security;
• personal data will not be disclosed to third parties except in accordance with this Privacy Policy;
• ensuring that the rights of data subjects are respected in accordance with European and national law.

3. Purpose and legal basis for processing personal data

The main purpose of the collection of personal data is the provision of services in the field of human resources, i.e. recruitment and placement of staff for all professional and managerial levels, as well as the organisation of training/education. (management and leadership training, relational communication, team development, time management, change management, stress management, etc.).

The secondary purpose of the collection of personal data is the fulfilment of legal obligations incumbent on any personal data controller, such as archiving or communication with public authorities.

As far as marketing communications are concerned, personal data are processed on the basis of consent for this specific purpose.

Policy on the protection and security of personal data processed by S.C. SOLVE&PEFORM SRL is to collect only the personal data necessary to fulfil the purpose of providing the contracted services and to ask data subjects to communicate only those relevant personal data strictly necessary to fulfil this purpose.

The legal basis for the processing is to be found in GDPR at art.6 alin. 1 lit. a) – "the data subject has consented to the processing of his or her personal data for one or more specific purposes”, alin. 1 lit. b)  – "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”, as well as alin. 1 lit. c) – "processing is necessary for compliance with a legal obligation incumbent on the controller".

Refusal to provide S.C. SOLVE&PEFORM SRL personal data makes it impossible to fulfil the obligations given in the responsibility, or, as the case may be, to provide the requested and contracted services.

To the extent that the provision of the requested and contracted services requires the processing of special categories of personal data, S.C. SOLVE&PEFORM SRL will request your consent in accordance with the provisions of art. 9 para. (2) lit. (a) of the GDPR.

We hereby inform you that you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent given before the withdrawal of consent. Thus, you may modify or withdraw consent at any time and we will act immediately accordingly, unless there is a legal reason or legitimate interest not to do so.

By reference to the stated purposes, S.C. SOLVE&PEFORM SRL processes personal data collected in the following specific activities:

• filling in course registration forms;
• completion of graduation documents;
• completing professional registers;
• completion of service contracts;
• completion of financial and accounting documents.

4. Types of personal data we process

In order to achieve the purposes of the processing of personal data specified in point 3, S.C. SOLVE&PEFORM SRL Pentru a atinge scopurile de prelucrare a datelor cu caracter personal specificate la punctul 3,

In order to achieve the purposes of processing personal data specified in point 3,:

• • first and last names;
  • specifications contained in the medical documents made available in the medical record or other sensitive personal data;
  • personal telephone number;
  • personal email address;
  • bank account (only for payments made by bank transfer).
  • home address;
  • photos and images;
  • ID number and series;
  • general data on family members;
  • Personal Numeric Code (CNP), exceptionally.

For activities carried out at a distance, in digital format (telephone and/or online):

• • • first and last names;
    • specifications contained in the medical documents made available in the medical record or other sensitive personal data;
    • personal telephone number;
    • personal email address;
    • bank account (only for payments made by bank transfer).
    • home address;
    • photos and images;
    • ID number and series;
    • general data on family members;
    • Personal Numeric Code (CNP), exceptionally;
    • the voice of the person concerned;
    • unique identifiers of the electronic device used in the relationship with the data controller.

For web-based activitiesour website

• IP address - when you visit our website, your IP address is recorded by the hosting server, but we do NOT have access to it and we do not use your IP address to identify you or for any other purpose.
• operating system, browser, browsing activity and other information about how you interacted with the website may be collected by the website but it is deleted 12 hours later by the cache clearing system.
• name, surname, email address for processing the contact form. We will use the information you provide in the appropriate contact section on the website solely for the purpose of processing your request.

By providing any personal data by telephone or via the website https://oliviapodobea.com/ you understand and agree that the data you submit will be processed in accordance with the provisions of this Privacy Policy and the Cookie Policy on the website.

By ticking the box at the bottom of the contact form, the website visitor agrees that he/she has been informed about the processing of personal data by S.C. SOLVE&PEFORM SRL, that he/she understands the content of this Privacy Policy and freely consents to the processing of personal data in the MiniCRM system[1].

că înțelege conținutul acestei Politici de Confidențialitate și consimte în mod liber la prelucrarea datelor personale în sistemul MiniCRM

Your personal data is intended for use by S.C. SOLVE&PEFORM SRLfor the purposes specified in paragraph 3, and in the cases provided for by law are communicated to the following recipients, if applicable:

• public authorities/auditors with powers to carry out inspections and controls on the work and assets of the Cabinet or who request the provision of information/documents by virtue of their legal obligations;
• operators associated or authorised by C. SOLVE&PEFORM SRL to fulfil legal obligations incumbent on the operator or to ensure the continuity of the operator's activity (e.g. IT maintenance services, archiving services, occupational health and safety services, etc.)
• the courts in order to bring actions and represent them in court;
• judicial bodies, at their request, in the framework of investigation/control actions.

We inform you that, S.C. SOLVE&PEFORM SRL does not sell or transfer personal data to a third country outside the EU or international organisation.

6. Storage/return periods

Your personal data are stored exclusively for the period necessary to carry out all the steps taken to fulfil the legal duties within the competence of S.C. SOLVE&PEFORM SRL  or, as the case may be, for the duration of the contractual relationship, after which they will be archived in accordance with applicable law.

Personal data shall be kept in a form which permits identification of data subjects for the period necessary for the performance of the contracted services and thereafter for the period necessary to fulfil the purposes for which the data are processed, but no more than 2 years.

7. Your rights regarding your personal data

In relation to the processing of personal data carried out by S.C. SOLVE&PEFORM SRL and under the provisions of the GDPR, you can exercise any of the following rights:

1. Data subject's right of access to data (Article 15) - You have the right to obtain access to the data that we process or control or copies thereof; you also have the right to obtain information from us about the nature, processing and disclosure of such data;
2. Right to request rectification when data are inaccurate (Art.16) - You have the right to obtain the rectification of inaccuracies in your data that we process or control;
3. Right to erasure of data ("right to be forgotten") (Article 17) - You have the right to obtain from us the deletion of your data that we process or control, in cases provided for by law;
4. Right to restrict data processing (Article 18) - Under the conditions set out GDPR, you have the right to restrict the processing of your data, which we process or control;
5. Right to data portability (Article 20) - You have the right to have your personal data, which we process or control, transferred to another controller;
6. Right to object (Article 21) - You have the right to object to the processing of your data by us or on our behalf under the conditions laid down by law;
7. Right to withdraw consent - Where we process your data on the basis of freely given consent, you have the right to withdraw your consent as provided for by law. Withdrawal of consent will not affect the lawfulness of the processing of your data that we carried out prior to the withdrawal;
8. The right to lodge a complaint with the supervisory authority - Under the law, you have the right to lodge a complaint with the supervisory authority for the processing of personal data about the processing of your data by us or on our behalf.

Based on the Law 468/2018, the specific tasks of the national supervisory authority are the responsibility of the National Authority for the Supervision of Personal Data Processing (A.N.S.P.D.C.P.) Contact address A.N.S.P.D.C.P. - B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, fax:

+40.318.059.602, e-mail: anspdcp@dataprotection.ro.

Exercitarea drepturilor anterior enunţate se poate face prin cerere semnată şi datată, utilizând formularele de pe website-ul https://oliviapodobea.com/, directly to the mailing address: Bdul. Iuliu Maniu nr 71, block 4, ap, 244, sector 6, Bucharest, or electronically at office @oliviapodobea.com.

Formular consimțământ GDPR – HERE

Pentru a vă exercita drepturile menționate sau pentru a ne comunica o încălcare a acestora, vă rugăm să ne contactați la adresa de email: office@oliviapodobea.com.

Further details as well as possible updates of this notice on the processing of personal data can be found on the website https://oliviapodobea.com, section - GDPR.

8. Meaning of certain terms used in the Privacy Policy

Supervisory authority for the processing of personal data: is the independent public authority which, according to the law, has powers relating to the supervision of compliance with personal data protection legislation. In Romania, this supervisory authority for the processing of personal data is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Special categories of personal data (sensitive personal data/sensitive data): personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; genetic data; biometric data for the unique identification of a natural person; data concerning the health, sex life or sexual orientation of a natural person.

Personal data: any information relating to an identified or identifiable natural person ("data subject"). A natural person is identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier, for example: name, identification number, location data, identifier onlineone or more specific elements of a person's physical, physiological, genetic, psychological, economic, cultural or social identity. Thus, for example, the notion of personal data includes the following: name and surname; home or residence address; e-mail address; telephone number; personal identification number (CNP); medical services accessed (sensitive data); diagnosis made (sensitive data); genetic data (sensitive data); biometric data (sensitive data); geolocation data. The categories of personal data about you that we process are listed above.

Unique identifiers of the electronic deviceUnique Universal ID: (sometimes called Universal Unique ID or UUID) is a string of characters embedded by the manufacturer in an electronic device. It can be used to identify the device exactly (e.g. the IMEI number of a mobile phone or the IP address of a personal computer). Different device identifiers differ in several respects: validity, whether or not they can be reset by users, and how they can be accessed. A given device may have several different unique identifiers. Unique device identifiers can be used for various purposes, including security and fraud detection, synchronisation of services, e.g. incoming messages to a user's email address, remembering user preferences and serving relevant advertisements.

Operator: the natural or legal person who decides why (for what purpose) and how (by what means) personal data are processed. According to the law, the primary responsibility for compliance with personal data legislation lies with the controller. In our relationship with you, we are the controller and you are the data subject.

The person concerned: the natural person to whom certain personal data refer (to whom they "belong"). In relation to us (the controller), you are the data subject.

Processing of personal data: any operation/set of operations performed upon personal data or sets of personal data, whether or not by automatic means; for example: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of such personal data/sets of personal data. These are only examples. Basically, processing means any operation on personal data, whether by automatic or manual means.

S.C. SOLVE&PEFORM SRL informs you that it constantly evaluates and improves the safeguards in place to ensure safe and secure processing of personal data. We also reserve the right to periodically update and amend this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will post the amended version of the Privacy Policy on our website.

[1] MiniCRM is a business services company founded in 2009, operating in Romania and Hungary. The company provides a cloud-based customer management system for small and medium-sized companies.

External Data Protection Officer (DPO) - Dan Mircea SUCIU