NOTICE REGARDING PROCESSING OF PERSONAL DATA

1. Data controller

Having regard to the provisions of Regulation (UE) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the „GDPR”), we, Masterange Romania S.R.L., with headquarters in 24-26 Soseaua Nordului, district 1, Bucharest (hereafter referred to as „we”, „us”  and/or „Masterange”), in our capacity as data controller, want to commit to complying with the applicable data protection laws and regulations. 

If you have any questions about the way we process your personal data, you can contact us at the following postal address or send us an e-mail to our e-mail address:

  • postal address: 24-26 Soseaua Nordului, district 1, Bucharest

2. How we process your personal data 

As a rule, we collect your personal data (that is, any information relating to an identified or identifiable individual) directly from you, when you visit our website www.bestpreschool.ro (the „Website”) and when you fill in the contact form available on our Website, as well as when you contact us on our social media pages Facebook, Instagram, Google Business, LinkedIn or by using Whatsapp.

Our Website contains links to our social media pages, Facebook,Instagram, Google Business și LinkedIn. In this case, Facebook and Instagram and/or Google Business  and/or LinkedIn might process your personal data as independent data controllers, in accordance with its own policies, which you can access on each website, such as: www.facebook.com, www.instagram.com, www.google.com/business, www.linkedin.com.

3. We process your personal data for specified purposes, based on the legal grounds provided in the data protection legislation

PurposePersonal DataLegal ground
1.Providing answers to your request for information or book a meeting with us through our Websit– First Name
– Last Name
– Phone number
– E-mail address
– Child age
– Any other data belonging to your child, incidentally provided by you
Processing is necessary in order to take steps at your request prior to entering into a potential contract;
Art. 6 para. (1) point (b) GDPR
2.Commercial communications related to our services– First Name
– Last Name
– E-mail address 
– Phone number
Consent
Art. 6, para (1) point (a) GDPR
3.Website traffic monitoring through the cookies– IP address, 
– Date and time of access
– Browser used for accessing the Website
Consent
Art. 6, para (1) point (a) GDPR
For more information regarding our cookies, please access our Cookie Policy
4.Ensuring the security and confidentiality of the data collected on the Website through the cookies– IP address, 
– Date and time of access
– Browser used for accessing the Website
Legitimate interest
Art. 6, para (1) point (f) GDPR
For more information regarding our cookies, please access our Cookie Policy

If we process your personal data based on your consent for commercial communications, you will be able to withdraw your consent by submitting a written request using the contact details mentioned above. Withdrawal of your consent will prevent us from further processing your personal data for those purposes in which processing is based on consent and shall not affect any processing activities carried out until the date of withdrawal. 

You can also amend your cookies preferences for the Website, including for disabling cookies used based on consent, through your browser settings. Your browser’s ‘help’ function will tell you how to do this. For more information about how to disable cookies, visit www.allaboutcookies.org. For more information regarding our cookies, please access our Cookie Policy.

Please note that if you choose to contact us through Facebook, Instagram, Google Business, LinkedIn or Whatsapp, we will not request any other personal data apart from the data requested also through the contact form available on the Website, such as: your first and last name, your phone number, your e-mail address and your child age.

4. We may disclose your personal data to third parties

In order to facilitate the performance of our activities for the purposes of processing detailed above, we may communicate your data to third parties, such as:

  • our affiliates and partners; 
  • providers of operational services such as web development, IT maintenance and support, web infrastructure;
  • professional counselors, such as auditors or lawyers;
  • regulatory authorities, professional bodies and/or public authorities to comply with applicable regulations.

For avoidance of any doubt, transfer means disclosing or otherwise making personal data available to third party, either by physical movement of the personal data to such third party or by enabling access to the personal data by other means (storage and back-up shall qualify as transfer for the purposes mentioned above).

As a rule, we will not transfer your personal data outside the European Economic Area. In exceptional cases and only if necessary, the transfer of your personal data outside the European Economic Area will be performed only with the application of appropriate safeguards and protection measures, in accordance with the specific legal provisions applicable to personal data protection and with your appropriate notification. 

5. We guarantee observance of your rights in what concerns your personal data

Unless subject to an exemption provided by law, you have the following rights with respect to your personal data:

(i) right to access – the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information on the processing;

(ii) right to rectification – the right to demand without undue delay the rectification of inaccurate data or the correction of incomplete data;

(iii) right to erasure/right to be forgotten – the erasure of personal data concerning you whenever the personal data is no longer necessary in relation to the purposes for which they were collected or processed and there is no other legal ground for the processing, the personal data has been unlawfully processed or the personal data have to be erased for compliance with a legal obligation;

(iv) right to restriction of processing where (i) you challenge the accuracy of the personal data; (ii) you consider that we no longer need the personal data for our purposes of processing or that the processing is unlawful (iii) you have objected to the processing carried out on the basis of our legitimate interest;

(v) right to object – unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

(vi) right to data portability;

(vii) right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless is necessary for concluding or for the performance of an agreement or is authorized by law. 

(viii) right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

(ix) right to lodge a complaint with the supervisory authority (www.dataprotection.ro);

Excluding the right to lodge a complaint with the supervisory authority, all the rights can be exercised by submitting a written request by post to our address 24-26 Soseaua Nordului, district 1, Bucharest, or by e-mail to dataprotection@tiriacimobiliare.ro.

If you are unsatisfied with how we process your personal data, you have the right to lodge a complaint to the National Supervisory Authority for the Processing of Personal Data at 28-30 G-ral Gheorghe Magheru Bld., District 1, postcode 010336, Bucharest, or by e-mail to anspdcp@dataprotection.ro.

6. We keep the personal data for a limited period

Your personal data shall be kept no longer than is necessary for the purposes for which the personal data are processed, that is for a period not exceeding 2 (two) years as of the date of contacting us by filling in the form available on the Website / sending a direct message on our social media platforms or as of the moment you provided us with your consent for commercial communications. For the retention period of the data collected through cookies, please check our Cookie Policy

If you become our client or partner as a result of signing an agreement (contract), your information will be supplemented by other means of communication. The retention period will change.

7. We have implemented appropriate technical measures to ensure the security of personal data

We will do everything that is necessary to protect your personal data by establishing reasonable security measures to prevent unauthorized access, collection, use, disclosure, copying, alteration, or disposal, as well as other similar risks. Your personal data is accessed only by the relevant personnel, on a need-to-know basis.

Effective date: 

01.04.2021

This document is subject to regular update.