Privacy Policy

1. What data we collect

We process only the data that are necessary, depending on your interaction with us, such as:

• Identification and contact data: first name, last name, email address, phone number, postal address.
• Content voluntarily provided via forms (messages, requests).
• Data necessary for the contractual relationship and invoicing (where applicable).
• Data from communications with us (not including associated technical metadata).

We do not request and do not intentionally process special categories of data through this web page. If, exceptionally, such data reach us, we will handle them in accordance with the law and delete them when they are no longer necessary.

2. Purposes and legal bases

We process your data for the following purposes, on the legal bases set out in Art. 6(1) GDPR:

• Communication and responding to requests (lit. f – legitimate interest, or lit. b – performance of a contract/pre-contractual steps).
• Provision of services and management of the contractual relationship (lit. b).
• Compliance with legal obligations (lit. c) – e.g., accounting/tax obligations.
• Direct marketing (lit. a – consent; you can withdraw your consent at any time).
• Ensuring website security and preventing abuse/fraud (lit. f – legitimate interest).

3. Sources of data

We collect data directly from you (forms, email, phone). We do not collect data automatically through your interaction with the site (logs, cookies). We do not collect logs and we do not use cookies.

4. Recipients / processors

We do not disclose your data to vendors. We do not use vendors for web hosting, email, ticketing, etc.

5. Transfers outside the EEA

Although permitted by law, your data will not be transferred anywhere outside Edocti.

6. Storage period

We retain data only for as long as necessary for the purposes above, taking into account:

• The duration of our relationship with you and applicable statutory terms (e.g., accounting archiving).
• The legitimate interest in defending rights in court during limitation periods.
• The period until consent is withdrawn (for marketing, where applicable).

7. Your rights

Under the GDPR, you have the rights of access, rectification, erasure (where applicable), restriction, objection, portability, and the right not to be subject to a decision based solely on automated processing. You can also withdraw consent where the legal basis is consent.

To exercise your rights, write to training@edocti.com. You also have the right to lodge a complaint with the competent supervisory authority (see section 12).

8. Cookies and similar technologies

This site does NOT use cookies.

9. Security measures

We apply reasonable technical and organisational measures to protect data (access restriction, authentication, encryption in transit, logging, and internal procedures). No measure can guarantee absolute security; we will handle incidents in accordance with the law and, where applicable, notify the authority and the data subjects.

10. Minors

We do not intentionally target minors through this page and do not knowingly collect minors’ data. If you are a parent/guardian and believe your child has provided us with data, you can contact us to request deletion.

11. Changes to the policy

We may update this policy periodically. The current version and the date of the latest update are shown at the top of the page.

12. Contact details of the controller & supervisory authority

Controller

Edocti Research SRL
Registered office: Dumbrăvița, Puccini Street, no. 23, 307160
Tel: +40-737-528608
Email: training@edocti.com

Supervisory Authority (ANSPDCP)

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest, Romania
Tel: +40 318 059 211  |  Fax: +40 318 059 602
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro