The data are not disclosed to third parties in this context.

Legal basis for data processing

The legal basis for the processing of data transmitted through the user consent form is Article 6 (1) (a) of the GDPR .

The legal basis for the processing of data transmitted by e-mail is Article 6 (1) (f) of the GDPR . If the purpose of the e-mail contact is to conclude a contract, for example to place an order with the service, the data processing is also based on Article 6 (1) (b) and (c) of the GDPR .

The legal basis for storing information for course participants is Article 6 (1) (f) of the GDPR .

Purpose of data processing

We only process personal data transmitted through an online form in order to process requests from the user. In the case of e-mail contact, this also includes the legitimate interest required in the processing of the data. If you enroll in a training course, the personal data you submit will be used to conduct and organize the training courses. Any other personal data processed during the dispatch process is intended to prevent improper use of the account form and to protect the security of computer systems.

Storage duration

The data are deleted as soon as the purpose of their collection has been achieved. The personal data entered in the online form is not stored on our servers. Data sent by e- mail is deleted once the correspondence with the user has been completed. Correspondence shall be deemed to be concluded if circumstances indicate that the request has been settled.

If you send us a reservation, we will contact you using the double email acceptance process. If you reply to the contact email, the data will be deleted within 24 hours. If we do not receive a response from you regarding your contact email, we will keep your order request for a period of two weeks to allow you to place the order you have already sent us.

The right to object and to challenge a decision

The user may at any time revoke his declaration of approval of the processing of personal data . Users who contact us by e-mail may withdraw their consent to the storage of their personal data at any time. In case of withdrawal of an agreement, the correspondence with the user will be concluded.

In this case, all personal data stored during the contact will be deleted .

Website analysis services

Description and scope of data processing

This site uses Google Analytics , a web analytics service provided by Google Inc. ( “Google”). Google Analytics uses cookies, text files that are stored on your computer and that allow an analysis of your use of this website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

We would like to point out that this site uses Google Analytics with the extension “_ anonymizeIp ()”, which means that only truncated IP addresses are processed in order to exclude any direct referrals to a person. Your IP address will be truncated by Google in the Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. The full east IP address is only sent to a Google server in the US and is truncated there in exceptional cases.

Legal basis for data processing

The legal basis for the processing of personal data using the Google Analytics service is Article 6, point 1, letter f) of the GDPR .

Purpose of data processing

The purpose of data processing is the effort to sustainably improve the website and user experience. Google uses this information on behalf of the operator of this website to evaluate your use of this website, to collect reports on website activity, and to provide other services to the website operator that are associated with your use of this website. this and you web and the internet. To this end, our company has entered into a data processing contract with Google, in accordance with Article 28 of the GDPR .

Storage duration

The data are deleted as soon as the purpose of their collection has been achieved

The right to object and to challenge a decision

The IP address sent from your browser, your your as part of Google Analytics is not combined with other Google data. You can adjust your browser settings to prevent the storage of cookies on your computer. Please note that in this case you will not be able to use all the functions offered on this website. You can prevent the collection of your data regarding the specific use of the website (including your IP address) generated by cookies to Google, as well as the processing of this data by Google, and by downloading and installing the plugin [ nt . : extension module] browser available on the following link: https : // tools.google.com / dlpage /

The rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR . You have the following rights with the data administrator:

Access to information

You have the right to ask the administrator to confirm our processing of your personal data.

If so, you have the right to ask the data administrator to provide you with the following information:

(1) The purposes of personal data processing;

(2) The categories of personal data that are processed;

(3) The recipients or categories of recipients to whom your personal data have been or will be disclosed;

(4) The period provided for the storage of your personal data or, if no exact information is available, the criteria for determining the storage period;

(5) The existence of a right to delete or correct your personal data, a right to restrict the processing of data by the data controller and a right to revoke your declaration of approval of such data processing;

(6) The existence of a right to lodge a complaint with a supervisory authority;

(7) All available information regarding the source of any personal data that has not been collected from the data subject;

(8) The existence of automated individual decisions, including profiling processes in accordance with Article 22, points 1 and 4 of the GDPR and, where appropriate, relevant information on the logical reasoning involved and the extent and expected effects of such processing data for the data subject.

You also have the right to request information on whether or not the transmission of your personal data from a third country or an international organization. In this regard, you may request to be informed of the appropriate guarantees in accordance with Article 46 of the GDPR on transmission.

The right to rectification

You have the right to ask the data administrator to correct or complete your data if your personal data is incorrect or incomplete. The data administrator must correct the data without undue delay.

The right to restrict the processing of data

You have the right to impose a restriction on the processing of your personal data under the following conditions:

(1) challenge the correctness of your personal data and give the data administrator sufficient time to verify the correctness of your personal data;

(2) the processing of data is illegal and you refuse to delete your personal data in question and you prefer to request the restriction of the processing of your personal data;

(3) The data controller no longer requests personal data for the purpose for which they were collected, but requests the data for the purpose of supporting, exercising or defending legal interests, or

(4) you have objected to the processing of data in accordance with Article 21 (1) of the GDPR and no decision has been taken as to whether or not the legitimate interests of the administrator prevail over yours.

If the processing of your personal data has been restricted , this data – except for its storage – may only be processed with your consent, for the purpose of supporting, exercising or protecting legal interests, in order to protect the rights of another individual. or legal or for reasons of important public interest of the European Union or a Member State. If the restriction on data processing changes under the specified conditions, you will be notified by the data administrator before the restriction is lifted.

The right to delete

a) Obligation to delete data

You can ask the administrator to promptly delete your personal data and the data administrator has the obligation to delete that data without undue delay, provided that one of the following reasons applies :

(1) Your personal data is no longer necessary for the purposes for which it was collected or processed by other means.

(2) You revoke the agreement underlying the data processing pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR and there is no other legal basis for the processing of the data.

(3) You object to the processing of data in accordance with Article 21 (1) of the GDPR and there are no legitimate interests in the processing of data or oppose the processing of data in accordance with Article 21 (2) of the GDPR . (4) Your personal data has been processed illegally.

(5) The deletion of your personal data is necessary to fulfill a legal obligation under EU law or the law of the Member States governing the data controller.

(6) Your personal data has been collected in connection with the services provided by the information society in accordance with Article 8 (1) of the GDPR .

b) Subsequent notification of third parties

If the administrator has made your personal data public and is required to delete that data in accordance with Article 17 (1) of the GDPR , then the data administrator, within the limits of available technology and implementation costs, must take appropriate measures, including those of a technical nature, to inform data administrators who process personal data of the fact that you, as the data subject, have requested the deletion of all links to such data. personal data, as well as copies or reproductions of such personal data.

c) Exceptions

You do not have the right to delete your data to the extent that data processing is required

(1) exercising the right to freedom of expression and freedom of information;

(2) the fulfillment of a legal obligation requiring the processing of data in accordance with EU law or with the law of the Member States under whose governance the data controller operates or the exercise of a public interest function or the exercise of public authority conferred on the data controller;

(3) for reasons of public interest in the field of public health, in accordance with Article 9 (2) (h) and (i) and Article 9 (3) of the GDPR ;

(4) for archiving purposes which are in the public interest, for scientific or historical research purposes , or for statistical purposes, in accordance with Article 89 (1) of the GDPR , in so far as the right provided for in point a ) make it impossible to achieve or significantly impede the objectives of that data processing , or

(5) for the purpose of supporting, exercising or defending legal interests.

Right to further notification

If you have exercised your right to correct or delete your data or to impose a restriction on the processing of data against the data administrator, then the data administrator must notify all recipients to whom your data has been communicated. with respect to such correction or deletion of your data or the imposition of any restrictions on the processing of your data, unless such action is impossible or would involve excessive effort or expense. . You have the right to be informed by the data administrator about these recipients of your data.

The right to data portability

You have the right to receive your personal data provided to the data administrator in a structured, commonly used format that can be read with the help of a device. At the same time, you have the right to transfer this data to another data administrator without the intervention of the data administrator to whom your personal data was initially made available, provided that

1. the processing of data shall be based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR or on the basis of a contract pursuant to Article 6 (1) (b) ) of the GDPR and

(2) the processing to be performed using automated processes. When you exercise this right, you are entitled to have your personal data transmitted directly from one data administrator to another, subject to technical feasibility . This shall be without prejudice to the rights and freedoms of third parties. The right to data portability does not apply to the processing of data necessary for the performance of a function of public interest or in the exercise of a public authority conferred on the data controller.

The right to object

You have the right to object at any time to the processing of your personal data pursuant to Article 6, point 1, letter e) or f) of the GDPR for reasons arising from your personal circumstances ; this also applies to the creation of profiles under the same provisions. The data controller will then discontinue the processing of your personal data, unless the administrator demonstrates legitimate and compelling interests regarding the processing of data, interests that prevail over your interests, rights and freedoms, or if the processing does not serve supporting, exercising or defending legal interests. If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for direct advertising purposes; this also applies to the creation of profiles associated with the respective direct advertising activity.

Your personal data will no longer be processed for direct advertising purposes if you object to the processing of data for those purposes. In the context of the use and services of the information society and without taking into account Directive 2002/58 / EC, you may exercise your right to object through automated processes using technical specifications.

The right to revoke your declaration of approval under data protection law

You have the right to revoke a previously granted declaration of approval under the Data Protection Act. Revocation of consent will not affect the lawfulness of the processing of data carried out before revocation.

Automated individual decisions, including profiling

You have the right not to be subject to a decision based solely on automatic processing, including profiling, which has legal effects on you or which significantly affects you in a similar way. This does not apply if decision (1) is required for the conclusion or performance of a contract between you and a data administrator; (2) is authorized by the law of the Union or of a Member State to which the data controller is subject and which also lays down appropriate measures to protect the rights and freedoms and the legitimate interests of the data subject; or (3) is based on your explicit consent. However , decisions shall not be based on special categories of personal data in accordance with Article 9 (1) of the GDPR , unless Article 9 (2) (a) or (g) and the measures apply. appropriate to the protection of the rights and freedoms and legitimate interests of the data subject. In the cases referred to in points 1 and 3, the data administrator must implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain human intervention from the data administrator, to express your point of view. view and challenge the decision.

The right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you have your place of residence, place of work or the place where the alleged infringement took place. that the processing of personal data concerning you violates GDPR . The supervisory authority to which the complaint was lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR . If you wish to object to the collection, processing or use of data by Heliokrat Developers SRL in accordance with this Data Protection Statement, either categorically or for individual measures, you may send us your objection by e-mail or through services. normal mail to the following contact details:

Responsible for data protection within Heliokrat Developers SRL is:

Albu Bogdan

Administrator Heliokrat

+ 40 735 779 850

office@heliokrat.ro