PRIVACY POLICY

The company VITRUVIA MEDICA SRL as a personal data Operator (hereinafter referred to as the "Company" or the "Operator"), fully complies with the legal provisions in force regarding the protection of individuals regarding the processing of personal data and the free circulation of this data.

We undertake to process your personal data in accordance with Regulation (EU) 679/2016 (GDPR), as well as with any other legislation applicable on the territory of Romania.

The company is the owner of the "vitruvian.academy" platform, so all the information contained in this material is related and valid in relation to the activity on the "vitruvian.academy" platform, hereinafter called vitruvian.academy or the website.

To better understand our data protection policy, we invite you to read this material.

We reserve the right to periodically update and modify this Personal Data Protection Policy ("Policy") without asking for your prior consent and without being subject to an individual or special notification procedure of the changes made. In the event of any such change, we will display the updated version of the Personal Data Protection Policy on the Site, and it remains your responsibility to check the contents of this Policy whenever you access the Site to ensure that you are aware of the latest version.

We are also at your disposal for information by email, at the address: office@vitruvian.academy.

1. Who are we?

The quality of Personal Data Operator is held by the VITRUVIA MEDICA SRL company.

It is possible to transmit the personal data you provide us to affiliated companies and/or to other partners and collaborators with whom we have established contractual relationships in order to carry out our activities and fulfill our legal obligations.

The transmission of personal data to third parties takes place on the basis of a commitment of confidentiality on their part and an undertaking to ensure data protection.

2. What kind of personal data we process


The personal data we process are: name, surname, address, e-mail address, telephone number, IP.

We also provide you with a special section on the site dedicated to offering testimonials, i.e. written materials accompanied or not by the photo you personally upload to the site or through affiliated social media sites or audio or video materials in which to exhibit your experience related to the services on the website and which can be used by the Operator for the purpose of advertising, marketing and advertising services of the website, including by publication on this website, but also on other promotion channels.

When you visit the site, we automatically collect certain information about your device, such as information about your browser, IP address, time zone and some cookies installed on your device.

We use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your personal information here: https://policies.google.com/privacy?hl=ro. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. Please also consult the Cookie Policy section displayed on the main page of our website.

We do not collect or process sensitive data, defined as such by the GDPR.

We do not want to collect or process data of minors.


3. The purpose for which we process personal data


We request and process personal data for:

*     To enable the creation of your account on the website and the operation of the website;
*     Ensuring the payment of amounts related to the services offered on our website;
*     Sending newsletters, invitations, materials related to our services and information related to events or programs we organize or promote - if you give your consent to this;
*     Providing answers to complaints placed; evaluating the services offered on the site;
*     Monitoring sales and Customer behavior, administrative, media and similar purposes - if you provide your consent;
*     Communication of offers of goods and/or services - if you give your consent to this.

4. Basis of processing

The operator has the right to process personal data for the purposes presented above:

*     Because the data processing is necessary to make it possible to create the account, operate the website and access the services offered on the website (conclusion of the contract for the provision of services at 2 distance), making the payment of the costs related to the services rendered and providing answers to the complaints placed, if is the case;
*     Because you have given your express consent to this by checking the relevant boxes.

If data processing is not necessary for the conclusion and performance of our legal relationships, we will not process personal data for any of the above purposes unless we have your consent to do so.

5. Duration of storage and processing of personal data

We process and store personal data for the period necessary to fulfill the purposes for which the data were collected and in any case for the period imposed by the applicable legal regulations.

We regularly update our database so that we do not store data that is no longer necessary for the purposes for which it was collected.


6. Data Security Measures

The company ensures the appropriate technical and legal measures to ensure an effective protection of personal data belonging to the persons who provide us with such data.

We are committed to keeping your personal data secure and take reasonable steps to do so, including against unauthorized access, unauthorized use of data, destruction, loss or alteration.

We systematically train our employees on the importance of protecting personal data, we have established internal procedures in this regard and, in addition, we make every effort to ensure that our partners also manage appropriate measures for the processing of personal data that may reach them within our contractual relationships.

Also, the payments made through our website, strictly for the payment of the services we make available to you, are made under security conditions, according to the security policies implemented by the providers of this service: stripe.

7. Transmission of data to other persons

It is possible to transmit the personal data you provide to us to affiliated companies and/or to other partners and collaborators with whom we have established contractual relationships in order to carry out our activities and fulfill our legal obligations, such as: specialists who post materials on the site, providers of IT services, accounting services, legal services, marketing services, courier services, internet and mobile phone services, payment processors who are authorized by us to mediate payments, specialists in the field of activity in which we operate, which we contract to provide you with the best possible quality of our services and other such providers.

The transmission of data to third parties takes place subject to their acceptance of the confidentiality clauses that we establish.

We may also transmit some of the personal data collected to the competent authorities or public institutions, when the law requires this, or to the courts when we defend ourselves in court or when we are required to do so by the court.

Please also consult the Cookie Policy section displayed on the main page of our website.

8. Transfer of personal data outside the country

In the context of the operations described above, your personal data may be transferred outside the country to countries in the European Union ("EU") or the European Economic Area ("EEA").

Thus, we inform you that any transfer made by the Operator to an EU or EEA member state will comply with the legal provisions of the General Data Protection Regulation no. 2016/679 adopted by the European Parliament (“GDPR”).

The personal data mentioned in this information note are not transferred to countries that do not provide adequate protection with regard to the processing of personal data.


9. What rights you have in relation to the personal data you provide to us

We are committed to ensuring the security of personal data by adopting appropriate technical and organizational measures in accordance with industry standards.

The platform is aligned with GDPR requirements and uses encryption and data security technology at the level of those used by banking institutions.

We ensure and respect your rights established by the legislation in force.

The right to information – you can request information and details regarding personal data processing activities. We are at your disposal at the email address: office@vitruvian.academy.

We are committed to ensuring your right to receive clear, transparent, easy-to-understand and accessible information about how we process your data, including details of the rights you have in this regard, which are also presented in this document.

The right to rectification – if you find that your personal data that we process are incorrect, incomplete, inaccurate, you can rectify or complete them by a simple rectification request sent to the email address office@vitruvian.academy.

The right to data deletion ("the right to be forgotten") - you can obtain the deletion of data, if their processing was not legal or in other cases provided by law.

Data deletion may occur in any of the following situations:

a) we no longer need the personal data to fulfill any of the purposes for which we previously processed them;

b) you withdraw your consent on the basis of which we previously processed you and there is no other legal basis on which we can base future processing;

c) you object to data processing when we process data for direct marketing purposes (including profiling for direct marketing purposes);

d) you object to data processing based on our legitimate interest and we cannot demonstrate that we have legitimate reasons that justify the processing and that prevail over your interests, rights and freedoms;

e) personal data are processed contrary to the law;

f) personal data must be deleted to comply with our legal obligations.

We may refuse your data deletion request if:

a) we must comply with legal obligations to retain data;

b) if the data is necessary for us to establish, exercise or defend our legal rights.

The right to restriction of processing – you can request the restriction of processing in cases where:

a) dispute the accuracy of the data for a period that allows us to verify the correctness of the data;

b) the processing is illegal, but you object to the deletion of personal data, requesting the restriction instead;

c) if the Operator no longer needs the personal data for the purpose of processing, but you request them from us for the establishment, exercise or defense of a right in court or before arbitration bodies;

d) if you have objected to the processing, for the period of time in which it is checked whether our legitimate rights prevail over your rights.

The right to object – you can in particular object to data processing based on our legitimate interest.

The right to data portability – you may, under certain conditions, receive the personal data you have provided to us in a machine-readable format or request that said data be transmitted to another operator.

The right to file a complaint - you can file a complaint against the way of processing personal data to the National Authority for the Supervision of Personal Data Processing (ANSPDCP). Contact details and information related to ANSPDCP can be found on the website
http://www.dataprotection.ro/.

The right to withdraw consent – where the processing is based on your consent, you can withdraw it at any time. The withdrawal of consent will only have effects for the future, the processing carried out prior to the withdrawal still remaining valid.

The right not to be subject to automated decisions or additional profiling related to automated decisions – you can ask for and obtain human intervention regarding that processing or you can express your own point of view regarding this type of processing.

You can exercise these rights, either individually or cumulatively, very easily, by simply sending a request by email to office@vitruvian.academy.

10. Contact details of the Data Protection Officer

Alexandru Cristian Stanciu, email: alex@vitruvian.academy.

11. Data of minors

We do not want to collect or process data of minors under the age of 18. Please do not create an account on our site and do not provide any information if you are under the age of 18. The company has the right to modify the Data Protection Policy at any time, without prior notice, by posting the updated version on the website.

You are required to read the Terms and Conditions, the Data Protection Policy and the Cookies Policy whenever you access the site.

You cannot copy content of this page