Privacy Policy

1. Who We Are

This Privacy Policy applies to the website operated under the domain giyexu-napabi.info, published by Giyexu Napabi, with a correspondence address at Strada Mitropolitul Nifon 29, Bucharest, Romania. For the purposes of Regulation (EU) 2016/679 (the General Data Protection Regulation, referred to below as the GDPR) and Romanian Law no. 190/2018 on measures implementing the GDPR, Giyexu Napabi acts as the data controller for personal data collected through this website.

2. Data We Collect

We collect personal data that you provide directly, such as your name, email address, and the content of any message sent through the contact form. We also collect limited technical data automatically, including IP address, browser type, device type, pages visited, and approximate session duration, where this is enabled through the cookie categories described in Section 5. We do not knowingly collect special categories of personal data, such as health information, through this website.

3. Why We Process Your Data

Personal data submitted through the contact form is processed to respond to inquiries about the course described on this website. Technical data collected through analytics cookies, where consent is given, is used to understand general usage patterns of the website, such as which pages are visited, in order to improve content clarity and site structure. We do not use personal data submitted through the contact form for automated decision-making or profiling.

4. Legal Basis For Processing

Where you contact us through the form, processing is based on your consent, given by submitting the form, and on our legitimate interest in responding to inquiries related to our educational course. Where cookies are used for functional, analytics, or marketing purposes, processing is based on your consent as expressed through the cookie preference tool described in Section 5, in line with Article 6(1)(a) of the GDPR. Necessary cookies are processed on the basis of legitimate interest required to operate the website, under Article 6(1)(f) of the GDPR.

5. Cookies And Similar Technologies

This website uses cookies to operate correctly and, where consented to, to understand usage patterns. Categories used include necessary cookies, required for basic site function; functional cookies, which remember preferences such as your cookie choice; analytics cookies, which help us understand aggregate visitor behaviour; and marketing cookies, which may be used to measure the relevance of any informational content shown elsewhere. Full details are provided in our separate Cookie Policy. You can adjust your preferences at any time through the cookie consent tool available on every page.

6. How Long We Keep Data

Contact form submissions and any related email correspondence are retained for as long as necessary to address the inquiry and for a reasonable period afterward for record-keeping purposes, typically not exceeding twenty-four months unless a longer period is required by applicable law. Technical data collected through analytics cookies is retained according to the retention settings of the underlying tool, generally not exceeding fourteen months.

7. Who We Share Data With

We do not sell personal data. Personal data may be shared with service providers who support the technical operation of this website, such as hosting providers and email service providers, acting as data processors under contractual obligations consistent with Article 28 of the GDPR. We may also disclose data where required by Romanian law or in response to a valid request from a public authority.

8. International Data Transfers

Where any service provider we use is located outside the European Economic Area, we take steps to ensure an adequate level of protection for personal data, such as relying on providers subject to an adequacy decision by the European Commission or on standard contractual clauses approved under the GDPR. Details of any such transfer arrangements can be requested using the contact information in Section 12.

9. Your Rights Under GDPR

Under the GDPR, you have the right to request access to your personal data, request correction of inaccurate data, request erasure of your data, request restriction of processing, object to processing based on legitimate interest, and request data portability where applicable. Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us using the details in Section 12.

10. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, taking into account the nature of the data processed and the risks involved. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of data transmitted through the internet.

11. Changes To This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

12. Contact And Supervisory Authority

For questions about this Privacy Policy or to exercise your data protection rights, contact us at [email protected] or by post at Strada Mitropolitul Nifon 29, Bucharest, Romania. If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal, ANSPDCP).