GDPR Policy

GDPR Policy

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA

ALPHA LANGUAGE CENTER

Updated on 17.11.2020

Data Controller

ALPHA LANGUAGE CENTER is a personal data controller as stipulated by (EU) Regulation 2016/679 of the on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

            Identification data for Data controller ALPHA LANGUAGE CENTER:

Alpha Language Center

Address: Pictor Ștefan Luchian Street, no. 15, Sector 2, Bucharest, Romania

Phone: (+4) 021 89 20 910

Email: office@alpha-educational.ro

Web: www.alpha-educational.ro

Data Controller compliance with GDPR

Your personal data is kept in accordance with legal provisions and in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on free movement of these data and repealing Directive 95/46 / EC - henceforth refered to as GDPR.

            ALPHA LANGUAGE CENTER has implemented and complies with GDPR, processing personal data in a confidential, organized, secure and responsible manner.

            ALPHA LANGUAGE CENTER understands the importance of data processing in an appropriate way, so that only authorized persons have access to the personal data of the data subjects, according to the policies and workflows regulated internally.

            In order to ensure an appropriate level of security, we have implemented appropriate technical and organizational measures, having the capacity to ensure the confidentiality, integrity of personal data and to restore the availability of personal data in a timely manner in the event of an incident, be it of a physical or technical nature.

            In order to protect personal data, all data storage devices are properly secured, some operations use data encryption, having implemented a process for testing, evaluation and periodic assessment of the effectiveness of technical and organizational measures to ensure the security of processing.

            Any request regarding the processing of personal data can be sent to the e-mail address dpo@alpha-educational.ro

Defining some terms

Personal data - will include any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, specific to his physical, physiological, genetic, mental, economic, cultural or social identity;

            Processing - refers to any operation or set of operations performed on personal data or on personal data sets, whether or not they are performed by automatic means, such as collecting, recording, organizing, structuring, storing, adapting or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, deletion or destruction.

            Data controller - means the natural or legal person, public authority, agency or other body which, alone or together with others, establishes the purposes and means of processing personal data; where the purposes and means of processing are established by Union or national law, the controller or the specific criteria for its designation may be laid down in Union or national law;

            Data subject - is the person whose personal data are processed;

            Recipient  - refers to the natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether or not it is a third party. However, public authorities to which personal data may be disclosed in the course of a particular investigation in accordance with Union or national law shall not be considered as recipients; the processing of such data by the respective public authorities shall comply with the applicable rules on data protection, in accordance with the purposes of the processing;

The rights of the data subject

THE RIGHT TO INFORMATION - you have the right to be informed about the processing and protection of personal data;

RIGHT OF ACCESS TO DATA - you have the right to obtain from the data controller confirmation that personal data are or are not processed by him;

THE RIGHT TO CORRECTION - you have the right to obtain the rectification of inaccurate data, as well as the completion of incomplete data;

RIGHT TO DELETE DATA ("RIGHT TO BE FORGOTTEN") - you have the right to obtain, to the extent that the legal conditions are met, the deletion of personal data;

THE RIGHT TO RESTRICT THE PROCESSING - you have the right to obtain, insofar as the legal conditions are met, the marking of stored personal data, in order to limit their further processing;

THE RIGHT TO PORTABILITY OF DATA - you have the right to receive personal data in a structured manner, commonly used and in an easy to read format, as well as the right to have this data transmitted by. another data controller, insofar as the legal conditions are met;

THE RIGHT TO ADDRESS THE JUSTICE OR THE NATIONAL AUTHORITY FOR THE SUPERVISION OF PERSONAL DATA PROCESSING - you have the right to file a complaint to the National Supervisory Authority for the Processing of Personal Data, applicable in the field of protection of personal data, which have been violated.

RIGHT TO OPPOSITION - you have the right to oppose at any time, for good and legitimate reasons related to the particular situation, that personal data be processed, to the extent that the legal conditions are met;

THE RIGHT NOT TO BE SUBJECT TO AN INDIVIDUAL DECISION - You have the right to request and obtain the withdrawal, cancellation or re-evaluation of any decision based solely on processing by automatic means (including profiling) that produces legal effects or similarly affects, to a significant extent, the persons concerned.

Personal data processed

The use of the contact form represents the request for the services provided by ALPHA LANGUAGE CENTER and has contractual value, the parties being the provider and the beneficiary of the service, personally or through a legal representative.

            By contacting the site through the contact form, we process the following personal data: name, surname, telephone, e-mail address, cookies, IP, as well as any other personal data that you provide to us, through via the contact form.

            By contacting your contacts by phone, we process your voice throughout the conversation. ALPHA LANGUAGE CENTER does not record, store or otherwise process voice.

            When accessing the site www.alpha-educational.ro cookies are processed. For further details, you can consult the Cookies PolicyALPHA LANGUAGE CENTER respects the rights of the data subjects regarding the acceptance of Cookies, by requesting their consent and respecting the right of opposition, where we use specific Cookies. In some cases, your IP is also processed. As stated in Google's policy, the IP address is processed for a short period of time and is geocoded (transformed) into areas to which the user has access.

            If we use third party technologies, we do not have access to your IP address. The association of aggregated data cannot be done from within third party platforms, with the data collected directly through its own server.

Purpose of processing and legal basis of processing

All data is processed for the purposes initially stated and for which you have been informed. We do not subsequently process personal data for purposes incompatible with the original purpose.

            The name, surname, e-mail address and telephone number, data collected through the contact form, as well as the voice in the situation of initiating a telephone call are processed for contractual and contact purposes.

            Cookies are processed in order to ensure our services and to maintain the functionality of the site, as they are described in detail within the Cookies Policy.

            We process the name, surname, telephone number and e-mail address for direct marketing purposes, in accordance with the existence of your consent expressed in accordance with the law.  

            ALPHA LANGUAGE CENTER does not process any category of personal data for other purposes incompatible with the purposes originally established and does not process personal data for a longer period of time than that established for the processing of that category of personal data.

Basis of processing

The grounds for processing are:  the contract for the category of data required to enter into contract with ALPHA LANGUAGE CENTER, the legitimate interest in processing cookies and other data in certain situations, the legal obligation in the situation of controls performed by authorities, declaration, documentation and resolution of security incidents, notices and / or accreditations / authorizations, making available to authorized third parties as a result of the situations in which the data controller could be directly or collaterally involved or initiated by him, as a result of notifications, litigations, complaints, requests addressed by the persons concerned or third parties. For commercial communications, the basis for processing is consent.

Type of processing

Your data is processed by collecting, recording, organizing, storing / archiving and structuring, consulting, using, extracting, modifying / rectifying, blocking / restricting deletion or destruction at the request of the data subject where this legal obligation exists or after the period for which have been processed, where appropriate.

            The processing by disclosure and dissemination is done only insofar as the company is in situations such as audits performed by authorities, declarations, documentation and settlement of security incidents, approvals and / or accreditations / authorizations, making available to authorized third parties as a result of the situations in which the data controller could be directly or collaterally involved or when the controller initiates such actions, as a result of notifications, litigations, complaints, requests addressed by the data subjects or third parties, in which case they will be made available only to the persons authorized for this purpose and in accordance with the provisions of the GDPR, in this case constituting the legal obligation and / or the protection of the legitimate interest of ALPHA LANGUAGE CENTER.

            The processing of the voice, for the purpose of communication having as basis of the processing the contractual relationship between the parties and the communication is processed only during the conversation, by listening. We do not collect or otherwise process the voice of the data subjects. 

            The e-mail address processed for the purpose of communicating with you and transmitting news and events, through campaigns and newsletters, having as legal basis your consent can be processed by collecting, registering, organizing, structuring, storing, archiving, adapting, modifying , extraction, consultation, use, disclosure by transmission (including to third parties), dissemination or making available in any other way, joining / aligning or combining, blocking / restricting, deleting or destroying.

Processing time

The personal data that you provide us by phone or through the contact form, are processed for a period of 3 years for any data collected on the site through this form, which does not materialize in a contract, unless the situation in which these data will be required in the legitimate interest or as a legal obligation.

            Cookies are processed according to the retention terms described in the Cookies Policy.

            The personal data having as legal basis of the processing the legal obligation, will be processed with a period equal to the period in which the legal obligation of processing subsists.

            The personal data having as legitimate basis the processing of the legitimate interest, are processed for a period equal to the duration of the existence of the legitimate interest.

            The personal data having as legal basis the processing of the consent, are processed until the date of withdrawal of the consent.

Third party recipients

Personal data are processed by the outsourced IT department, in conditions of security and confidentiality, with the provision of adequate guarantees.

            In the case of Newsletter communication, the third recipient is the newsletter provider.  

            Where appropriate, the data controller's authorized proxies are the IT and marketing-communication departments. Third-party recipients may be different site traffic analysis service providers, marketing and advertising service providers on different sites or through applications.

            Personal data is not shared with any third party other than the declared ones.

Minor data processing

ALPHA LANGUAGE CENTER does not process personal data of minors on the site; the site is not addressed to persons under 18 years of age. To the extent that you are aware that your child's data has been provided on the site, you may contact us and we will resolve your request in accordance with the law.

Access to data

ALPHA LANGUAGE CENTER does not disclose data to unauthorized third parties. Access to data is made only by authorized persons in this respect and with the limitation of any unauthorized access to data.

            The data controller has implemented policies through which information security is ensured and has established adequate guarantees as follows:

            - has implemented adequate technical and organizational measures for the observance of the principles listed in art. 5 of the General Regulation on data protection, in particular the minimization of data, respectively the principle of integrity and confidentiality;

            - appointed a data protection officer;

            - established by internal GDPR procedures: storage deadlines depending on the nature of the data and the purpose of the processing, as well as specific deadlines within which personal data must be deleted or revised for deletion.

Processing security

ALPHA LANGUAGE CENTER has implemented adequate technical and organizational measures and ensures on site and in the company an adequate level of security for the processing of personal data, in accordance with Law no. 190/2018 on measures for the implementation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing of Directive 95/46 / EC - General Regulation on data protection and in accordance with the provisions of European Regulation 679/2016 (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data personally and on the free movement of such data and repealing Directive 95/46 / EC).

            ALPHA LANGUAGE CENTER has developed procedures for all security departments and policies to prevent the loss, disclosure, alteration, copying, accidental or unlawful destruction of or loss of data, and to limit unauthorized access to personal data.

Data security breach

The Associate Data controllers and the Empowered Data controllers in relation to the data controller are responsible for announcing, evaluating and documenting any security incidents and for ensuring measures to prevent any breaches likely to lead to a security incident as provided in art. 4 paragraph 12 of Regulation no. 679/2016 (EU).

            In this regard, ALPHA LANGUAGE CENTER has concluded processing agreements with all associated data controllers and with all authorized data controllers, including regulating procedures for limiting the effects of security incidents.

Data protection officer - DPO

ALPHA LANGUAGE CENTER has designated a company-level DPO, which monitors processing in accordance with GDPR standards and periodically updates, modifies or deletes information where appropriate or harmonizes ALPHA LANGUAGE CENTER policies in accordance with applicable European and national laws.

            Any requests in connection with the processing of personal data addressed to ALPHA LANGUAGE CENTER, will be made to the attention of the DPO at the dedicated e-mail address dpo@alpha-educational.ro

Request for access to personal data

bottom:30px;right:30px; data-rot-id="991">
1