MASTERANGE ROMANIA S.R.L. (hereinafter referred to as the “Company,” the “Controller,” or “BEST Preschool”), with its registered office in Bucharest, Sector 1, 24–26 Nordului Road, 5th Floor, Room 7, registered with the Trade Register Office under no. J40/3330/2002, tax code RO15262492, in its capacity as Controller, manages the website https://bestpreschool.ro/ and its connected subdomains (“the Website”), as well as its social media pages (hereinafter referred to as the “social media pages”).
This Privacy Notice details how the Company collects and processes your personal data, as well as the rights you have as a data subject and how you can exercise them, in accordance with Regulation (EU) No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as national legislation (hereinafter referred to as the “GDPR”), and legislation concerning the protection of privacy in the electronic communications sector.
For any information or requests regarding the processing of personal data, or for exercising your rights as a Data Subject in relation to BEST Preschool, please contact us using the following contact details:
Data Protection Officer: ITH Management Office S.R.L.
Postal address: Bucharest, Sector 1, 24–26 Nordului Road
This Privacy Notice is addressed to visitors of the Website and social media pages, as well as to individuals who contact us using other available means of communication, such as by phone or email.
3. SOURCE OF PERSONAL DATA
We collect your personal data when you interact with our Website and social media pages (for example, when you fill out a form available on our Websites/social media pages), or when you contact us by phone or email.
To ensure that the data collected is accurate and up to date, please notify us of any changes you are aware of regarding the personal information you have provided to us or that has been provided by third parties. We also recommend that you limit the data you submit strictly to what is necessary for the stated purposes.
4. PERSONAL DATA PROCESSED, THE PURPOSE AND THE LEGAL BASIS OF THE PROCESSING
We collect the personal data described below exclusively for the purposes and on the legal grounds specified in this Privacy Notice. If we intend to process this data for other purposes, we will inform you in advance accordingly and take all necessary actions to comply with the personal data protection regulations.
The aforementioned data will be processed for:
4.1. MANAGEMENT OF REQUESTS SUBMITTED BY YOU
When you choose to fill out a form available on our Website, through social media pages, or contact us by email or phone, we will process your identification data (first and last name), your contact details (email address, phone number), your child’s age, as well as details regarding your specific request, for:
a) Carrying out steps prior to the conclusion of a contract, including scheduling a visit to BEST Preschool
The legal basis is the performance of steps taken at your request in order to provide an offer/conclude a contract, pursuant to Article 6(1)(b) of the GDPR.
For details regarding how your data/your child’s data will be processed in the event of concluding the schooling contract, as well as information about other processing activities related to the performance of the contract, please refer to the dedicated Privacy Notice available here.
b) Handling any other requests you send us
The legal basis is our legitimate interest in responding to the request addressed to us, in accordance with Article 6(1)(f) of the GDPR.
4.2. RECRUITMENT
When you apply for one of the available positions at BEST Preschool, we will process your identification data (first name, last name), contact details (phone number, email address), as well as the information included in your CV, for the purpose of evaluating your application and inviting you to participate in an interview with our recruitment team. These data will be processed during the recruitment process.
The legal basis is represented by the performance of steps necessary prior to the conclusion of the employment contract, pursuant to Article 6(1)(b) of the GDPR.
If you give your consent, pursuant to Article 6(1)(a) of the GDPR, we will retain your data for a period of 2 years in order to consider them in the event that new positions open within our company or the Țiriac Group entities.
Subsequently, the data will be archived for a period of 3 years and accessed exclusively for the purpose of pursuing our legitimate interest in defending our rights, pursuant to Article 6(1)(f) of the GDPR, if applicable.
4.3. COMMERCIAL COMMUNICATIONS
We will use your data to send you commercial communications related to BEST Preschool services and products through various communication channels, such as SMS, phone calls, email, or mail.
Personal data processed: contact details (phone number, email address, home/residence address). Legal basis: your consent (Article 6(1)(a) of the GDPR).
4.4. INTERACTIONS THROUGH SOCIAL MEDIA PAGES
In the context of using social media platforms, we process your data for the purposes described below.
a) When managing the BEST Preschool pages created on these platforms, we process the interactions of individuals interested in our activities, products, and services (such as comments, likes, tags, reposts, etc.), as well as the identification data of followers (e.g., name, surname, username). The legal basis for this processing is our legitimate interest in using such pages to ensure our visibility and presence in the online environment, in accordance with Article 6(1)(f) of the GDPR.
b) In order to conduct analyses and statistics regarding general public opinion, we process the feedback expressed on these platforms or in other publicly available online environments by individuals interested in BEST Preschool’s services.
The legal basis for this processing is our legitimate interest in improving the experience of customers and potential customers, in order to better meet their needs, in accordance with Article 6(1)(f) of the GDPR.
The website contains links to our social media pages, such as Facebook, Instagram, Google Business, and LinkedIn. In this case, Facebook and/or Instagram and/or Google Business and/or LinkedIn may process your personal data as independent data controllers, in accordance with their own privacy policies, which you can access on their respective pages.
4.5. STATISTICAL ANALYSES AND IMPROVEMENT OF THE WEBSITE NAVIGATION EXPERIENCE
When you visit our website, we will process personal data through cookies and other similar technologies. For more details, please refer to the Cookie Policy available on the website.
4.6. OTHER PURPOSES
In addition, we will process your personal data for the purpose of satisfying our legitimate interests, namely:
a) The preparation of statistics and aggregated reports aimed at developing and improving our activities and services, increasing the efficiency of how activities are managed, optimizing processes, centralizing operations, and maintaining an internal database, as well as analyzing and minimizing financial and reputational risks to which we are exposed in connection with our operations. Legal basis: legitimate interest of ensuring proper business management, in accordance with Article 6(1)(f) of the GDPR. In this case, the data is processed in anonymized form, and only exceptionally and when necessary, in identifiable (clear) form.
b) Ensuring the security of the systems, networks, and equipment used, as well as their maintenance. Legal basis: legitimate interest in ensuring the security and proper functioning of systems, equipment, and networks, in accordance with Article 6(1)(f) of the GDPR.
c) Compliance with the legal obligations imposed on us by law (for example, obligations under tax legislation, archiving requirements, data protection obligations, etc.), including reporting to certain institutions and/or public authorities. Legal basis: fulfillment of our legal obligations, under Article 6(1)(c) of the GDPR.
d) The defense, exercise, or establishment of rights, as well as the resolution of disputes. Legal basis: legitimate interest in requesting the establishment of rights, exercising or defending our rights, in accordance with Article 6(1)(f) of the GDPR.
5. USE OF THE WEBSITE AND THIRD-PARTY PLUG-IN/WEBSITE TECHNOLOGIES
The website contains links to social media networks or third-party websites that you can access directly.
In this case, the respective social media networks or third-party websites may carry out personal data processing activities that are not under our control. Thus, the operators of the social media networks and third-party websites act as independent controllers and have their own policies regarding how they process personal data, including through cookies.
Please consult the privacy policies of the social media networks, as well as those of the third-party websites, for complete information regarding their processing of your personal data.
6. DATA RECIPIENTS
Personal data may be disclosed, strictly to the extent necessary for the purposes detailed above or in cases where this is required by law or when we have a legitimate interest that is well justified, to the following categories of recipients who may act as independent controllers/joint controllers or processors, as follows:
a) Service providers
business management and consultancy services;
personal data protection services;
IT system development, technical support, and maintenance services;
cybersecurity services;
electronic communications services;
archiving services;
audit services;
software solutions, platforms, or other IT systems, such as those used to manage information collected through Websites, marketing platforms, etc.;
cloud/hosting services;
social media platforms;
external consultants we engage in specific situations (e.g., lawyers, advisors, experts);
b) Public authorities and bodies, including investigative authorities, courts of law, or institutions with powers to carry out inspections and audits of the operator’s activities and assets, to the extent that the transfer of data to them is required by law and/or necessary in the event of litigation or dispute resolution, as well as in cases of audits where we are obliged to provide such data (for example, the National Supervisory Authority for Personal Data Processing);
c) Persons expressly designated by you;
d) Third-party acquirers, to the extent that our business is transferred (in whole or in part), and the data of the Data Subjects is inherently linked to the assets that are the subject of such a transaction.
7. TRANSFERS OF PERSONAL DATA
As a rule, we will not transfer your personal data outside the European Economic Area. In exceptional situations, and only if necessary, the transfer of your personal data outside the European Economic Area will be carried out only with the implementation of appropriate safeguards in accordance with the specific legal provisions on personal data protection and with proper prior notice to you.
8. DURATION OF THE PROCESSING OF YOUR PERSONAL DATA
The personal data mentioned in the sections above will be processed only for the period necessary to fulfill the purposes mentioned in this Privacy Notice.
Subsequently, we will remove or delete personal data from our systems and records and/or take steps to anonymize it so that you can no longer be identified. We will also take all reasonable steps to ensure that personal data transmitted to third parties or made public for the purposes mentioned above is deleted.
Thus, the periods for processing personal data are as follows:
If you submit a request to us, we will process your data throughout the period of resolving your request, as well as for a period of 3 years from the date of the last interaction, both for statistical analysis and reporting purposes and to defend ourselves in the event of disputes.
When you interact with our social media pages, interactions, posts, and comments on our page will be retained until you exercise your option to delete them.
Regarding the data collected through cookies, they are retained for the duration defined, in each case, in the Cookies Policy section.
Personal data processed in the context of disputes, litigations, or conciliations will be retained beyond the durations mentioned in the previous point, until their resolution, and also afterwards, in accordance with the applicable limitation periods.
The processing of your data for the purpose of promoting BEST Preschool’s services and products will be carried out based on the consent you have provided, for a period of 2 years. Proof of the consent given will require the storage of both the consent and the related data for a period of 3 years from the date of its withdrawal or expiry. Please note that you have the right to withdraw your consent at any time during the above-mentioned 2-year period.
The storage periods mentioned above may be modified if necessary to protect our legitimate interests or in the event of changes to our legal retention obligations. In such cases, we will act in accordance with the law, including by informing you accordingly.
9. YOUR RIGHTS REGARDING PERSONAL DATA
Right to be informed, according to Art. 13 and Art. 14 of the GDPR, as per this document.
Right of access, according to Art. 15 of the GDPR.
Right to rectification, according to Art. 16 of the GDPR.
Right to erasure / right to be forgotten, according to Art. 17 of the GDPR.
Right to restriction of processing, according to Art. 18 of the GDPR.
Right to data portability, according to Art. 20 of the GDPR.
Right to object, according to Art. 21 of the GDPR.
When you send us a request to exercise this right, please also mention the grounds related to your particular situation. We will no longer process your personal data, unless we demonstrate that (i) we have legitimate grounds for processing your data that override your interests, rights, and freedoms or that (ii) the purpose of the processing is the establishment, exercise, or defence of legal claims.
Right not to be subject to a decision based solely on automated processing, including profiling, according to Art. 22 of the GDPR. The personal data referred to in this Privacy Notice is not subject to automated decision-making processes.
The right to withdraw your consent, pursuant to Article 13(2)(c) and Article 14(2)(d) of the GDPR.
This right applies when personal data is processed based on the consent you have provided, in which case you may, at any time, submit a request to withdraw your consent using the contact details provided above. The withdrawal of consent does not affect the lawfulness of the processing carried out based on consent before its withdrawal. Withdrawing your consent for the processing of personal data will result in the cessation of such processing.
The right to lodge a complaint with the supervisory authority, in accordance with Article 13(2)(d) and Article 14(2)(e) of the GDPR.
Without prejudice to your right to contact the supervisory authority at any time, we kindly ask that you contact us first regarding the exercise of the above-mentioned rights.
If you believe that we have not fully addressed your requests or you are not satisfied with our responses, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) to file a complaint using the following contact details:
Address: 28–30 General Gheorghe Magheru Blvd., Sector 1, Postal Code 010336, Bucharest, Romania
PRIVACY NOTICE
REGARDING THE PROCESSING OF PERSONAL DATA
1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
MASTERANGE ROMANIA S.R.L. (hereinafter referred to as the “Company,” the “Controller,” or “BEST Preschool”), with its registered office in Bucharest, Sector 1, 24–26 Nordului Road, 5th Floor, Room 7, registered with the Trade Register Office under no. J40/3330/2002, tax code RO15262492, in its capacity as Controller, manages the website https://bestpreschool.ro/ and its connected subdomains (“the Website”), as well as its social media pages (hereinafter referred to as the “social media pages”).
This Privacy Notice details how the Company collects and processes your personal data, as well as the rights you have as a data subject and how you can exercise them, in accordance with Regulation (EU) No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as national legislation (hereinafter referred to as the “GDPR”), and legislation concerning the protection of privacy in the electronic communications sector.
For any information or requests regarding the processing of personal data, or for exercising your rights as a Data Subject in relation to BEST Preschool, please contact us using the following contact details:
2. THIS PRIVACY NOTICE IS ADDRESSED TO
This Privacy Notice is addressed to visitors of the Website and social media pages, as well as to individuals who contact us using other available means of communication, such as by phone or email.
3. SOURCE OF PERSONAL DATA
We collect your personal data when you interact with our Website and social media pages (for example, when you fill out a form available on our Websites/social media pages), or when you contact us by phone or email.
To ensure that the data collected is accurate and up to date, please notify us of any changes you are aware of regarding the personal information you have provided to us or that has been provided by third parties. We also recommend that you limit the data you submit strictly to what is necessary for the stated purposes.
4. PERSONAL DATA PROCESSED, THE PURPOSE AND THE LEGAL BASIS OF THE PROCESSING
We collect the personal data described below exclusively for the purposes and on the legal grounds specified in this Privacy Notice. If we intend to process this data for other purposes, we will inform you in advance accordingly and take all necessary actions to comply with the personal data protection regulations.
The aforementioned data will be processed for:
4.1. MANAGEMENT OF REQUESTS SUBMITTED BY YOU
When you choose to fill out a form available on our Website, through social media pages, or contact us by email or phone, we will process your identification data (first and last name), your contact details (email address, phone number), your child’s age, as well as details regarding your specific request, for:
a) Carrying out steps prior to the conclusion of a contract, including scheduling a visit to BEST Preschool
The legal basis is the performance of steps taken at your request in order to provide an offer/conclude a contract, pursuant to Article 6(1)(b) of the GDPR.
For details regarding how your data/your child’s data will be processed in the event of concluding the schooling contract, as well as information about other processing activities related to the performance of the contract, please refer to the dedicated Privacy Notice available here.
b) Handling any other requests you send us
The legal basis is our legitimate interest in responding to the request addressed to us, in accordance with Article 6(1)(f) of the GDPR.
4.2. RECRUITMENT
When you apply for one of the available positions at BEST Preschool, we will process your identification data (first name, last name), contact details (phone number, email address), as well as the information included in your CV, for the purpose of evaluating your application and inviting you to participate in an interview with our recruitment team. These data will be processed during the recruitment process.
The legal basis is represented by the performance of steps necessary prior to the conclusion of the employment contract, pursuant to Article 6(1)(b) of the GDPR.
If you give your consent, pursuant to Article 6(1)(a) of the GDPR, we will retain your data for a period of 2 years in order to consider them in the event that new positions open within our company or the Țiriac Group entities.
Subsequently, the data will be archived for a period of 3 years and accessed exclusively for the purpose of pursuing our legitimate interest in defending our rights, pursuant to Article 6(1)(f) of the GDPR, if applicable.
4.3. COMMERCIAL COMMUNICATIONS
We will use your data to send you commercial communications related to BEST Preschool services and products through various communication channels, such as SMS, phone calls, email, or mail.
Personal data processed: contact details (phone number, email address, home/residence address).
Legal basis: your consent (Article 6(1)(a) of the GDPR).
4.4. INTERACTIONS THROUGH SOCIAL MEDIA PAGES
In the context of using social media platforms, we process your data for the purposes described below.
a) When managing the BEST Preschool pages created on these platforms, we process the interactions of individuals interested in our activities, products, and services (such as comments, likes, tags, reposts, etc.), as well as the identification data of followers (e.g., name, surname, username). The legal basis for this processing is our legitimate interest in using such pages to ensure our visibility and presence in the online environment, in accordance with Article 6(1)(f) of the GDPR.
b) In order to conduct analyses and statistics regarding general public opinion, we process the feedback expressed on these platforms or in other publicly available online environments by individuals interested in BEST Preschool’s services.
The legal basis for this processing is our legitimate interest in improving the experience of customers and potential customers, in order to better meet their needs, in accordance with Article 6(1)(f) of the GDPR.
The website contains links to our social media pages, such as Facebook, Instagram, Google Business, and LinkedIn. In this case, Facebook and/or Instagram and/or Google Business and/or LinkedIn may process your personal data as independent data controllers, in accordance with their own privacy policies, which you can access on their respective pages.
4.5. STATISTICAL ANALYSES AND IMPROVEMENT OF THE WEBSITE NAVIGATION EXPERIENCE
When you visit our website, we will process personal data through cookies and other similar technologies. For more details, please refer to the Cookie Policy available on the website.
4.6. OTHER PURPOSES
In addition, we will process your personal data for the purpose of satisfying our legitimate interests, namely:
a) The preparation of statistics and aggregated reports aimed at developing and improving our activities and services, increasing the efficiency of how activities are managed, optimizing processes, centralizing operations, and maintaining an internal database, as well as analyzing and minimizing financial and reputational risks to which we are exposed in connection with our operations.
Legal basis: legitimate interest of ensuring proper business management, in accordance with Article 6(1)(f) of the GDPR. In this case, the data is processed in anonymized form, and only exceptionally and when necessary, in identifiable (clear) form.
b) Ensuring the security of the systems, networks, and equipment used, as well as their maintenance.
Legal basis: legitimate interest in ensuring the security and proper functioning of systems, equipment, and networks, in accordance with Article 6(1)(f) of the GDPR.
c) Compliance with the legal obligations imposed on us by law (for example, obligations under tax legislation, archiving requirements, data protection obligations, etc.), including reporting to certain institutions and/or public authorities.
Legal basis: fulfillment of our legal obligations, under Article 6(1)(c) of the GDPR.
d) The defense, exercise, or establishment of rights, as well as the resolution of disputes.
Legal basis: legitimate interest in requesting the establishment of rights, exercising or defending our rights, in accordance with Article 6(1)(f) of the GDPR.
5. USE OF THE WEBSITE AND THIRD-PARTY PLUG-IN/WEBSITE TECHNOLOGIES
The website contains links to social media networks or third-party websites that you can access directly.
In this case, the respective social media networks or third-party websites may carry out personal data processing activities that are not under our control. Thus, the operators of the social media networks and third-party websites act as independent controllers and have their own policies regarding how they process personal data, including through cookies.
Please consult the privacy policies of the social media networks, as well as those of the third-party websites, for complete information regarding their processing of your personal data.
6. DATA RECIPIENTS
Personal data may be disclosed, strictly to the extent necessary for the purposes detailed above or in cases where this is required by law or when we have a legitimate interest that is well justified, to the following categories of recipients who may act as independent controllers/joint controllers or processors, as follows:
a) Service providers
b) Public authorities and bodies, including investigative authorities, courts of law, or institutions with powers to carry out inspections and audits of the operator’s activities and assets, to the extent that the transfer of data to them is required by law and/or necessary in the event of litigation or dispute resolution, as well as in cases of audits where we are obliged to provide such data (for example, the National Supervisory Authority for Personal Data Processing);
c) Persons expressly designated by you;
d) Third-party acquirers, to the extent that our business is transferred (in whole or in part), and the data of the Data Subjects is inherently linked to the assets that are the subject of such a transaction.
7. TRANSFERS OF PERSONAL DATA
As a rule, we will not transfer your personal data outside the European Economic Area. In exceptional situations, and only if necessary, the transfer of your personal data outside the European Economic Area will be carried out only with the implementation of appropriate safeguards in accordance with the specific legal provisions on personal data protection and with proper prior notice to you.
8. DURATION OF THE PROCESSING OF YOUR PERSONAL DATA
The personal data mentioned in the sections above will be processed only for the period necessary to fulfill the purposes mentioned in this Privacy Notice.
Subsequently, we will remove or delete personal data from our systems and records and/or take steps to anonymize it so that you can no longer be identified. We will also take all reasonable steps to ensure that personal data transmitted to third parties or made public for the purposes mentioned above is deleted.
Thus, the periods for processing personal data are as follows:
The storage periods mentioned above may be modified if necessary to protect our legitimate interests or in the event of changes to our legal retention obligations. In such cases, we will act in accordance with the law, including by informing you accordingly.
9. YOUR RIGHTS REGARDING PERSONAL DATA
When you send us a request to exercise this right, please also mention the grounds related to your particular situation. We will no longer process your personal data, unless we demonstrate that (i) we have legitimate grounds for processing your data that override your interests, rights, and freedoms or that (ii) the purpose of the processing is the establishment, exercise, or defence of legal claims.
This right applies when personal data is processed based on the consent you have provided, in which case you may, at any time, submit a request to withdraw your consent using the contact details provided above. The withdrawal of consent does not affect the lawfulness of the processing carried out based on consent before its withdrawal. Withdrawing your consent for the processing of personal data will result in the cessation of such processing.
Without prejudice to your right to contact the supervisory authority at any time, we kindly ask that you contact us first regarding the exercise of the above-mentioned rights.
If you believe that we have not fully addressed your requests or you are not satisfied with our responses, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) to file a complaint using the following contact details:
or you may file a complaint with the competent court of law.