PRIVACY POLICY
1. Introduction
We take the confidentiality of personal data seriously and responsibly, and its security is a priority for us. That is why we are committed to complying with the rules imposed by European Regulation No. 2016/679 (hereinafter referred to as “the Regulation” or “GDPR”) regarding the processing of personal data and the free movement of such data. Through this policy, we explain to you what personal data we process, how we collect it, how we use it, and, most importantly, how we protect this data. We also inform you about the rights you have and guide you on how to exercise them.2. About us
Our registered office is located at Str. Sfinții Voievozi no. 65, Ground Floor, Space P1, Sector 1, Bucharest, postal code 10965, Romania, Tax ID (CUI) 34218949, Trade Register No. J40/2978/2015. We can be contacted at the address Str. Sfinții Voievozi no. 65, Ground Floor, Space P1, Sector 1, Bucharest, postal code 10965, Romania and at the e-mail address: contact@eecentre.eu. From the perspective of EU Regulation 679/2016, EUROPEAN EXAMINATIONS CENTRE SRL is a personal data controller and can be contacted for any matter related to personal data protection at:- E-mail address: contact@eecentre.eu;
- Postal address: Str. Sfinții Voievozi no. 65, Ground Floor, Space P1, Sector 1, Bucharest, postal code 10965, Romania.
3. What data we collect and how we collect it
Cambridge exam registration
Available at: https://eecentre.eu/en/register-for-cambridge/.
In order to register you for Cambridge English examinations, we need to collect the following data:- First name and last name;
- Date of birth;
- Nationality;
- Identification document type and number (passport or national ID);
- E-mail address;
- Phone number;
- Residential address;
- Details of the exam session (level, date, location);
- Payment details (for the exam fee);
- Special access requirements (if applicable).
IELTS exam registration
Available at: https://eecentre.eu/en/register-for-ielts/.
In order to register you for IELTS examinations, we need to collect the following data:- First name and last name;
- Date of birth;
- Nationality;
- Identification document type and number (passport is generally required for IELTS);
- Identification photograph (required for candidate verification on the exam day);
- E-mail address;
- Phone number;
- Residential address;
- Details of the exam session (module — Academic or General Training, date, location);
- Payment details (for the exam fee);
- Special access requirements (if applicable).
Contact form
Available on the page: https://eecentre.eu/en/contact/.
We use your personal data for the purpose of processing your request, in order to have all the necessary information to contact you. Data collected:- Full name;
- E-mail address;
- Phone number;
- City;
- Message.
Automatic data capture
Automatic data capture is performed through:- cookie technology: a cookie is a piece of information transmitted from the web page, saved by the browser on your computer’s hard drive, which we can later access. It stores statistical information necessary for a web page to personalise the browsing session (e.g. by displaying dynamic images with items of interest) such as previously visited web pages, downloads made, internet service provider used, country of origin of the site visitor.
- Technical: absolutely necessary to ensure the technical efficiency of the site;
- Functional: memorise your choices and help us improve your experience on our site;
- Performance: help us measure site performance using information about how visitors navigate the site;
- Retargeting: help us place advertisements on other web pages you use;
- Social media plug-ins: to connect our users to various social media channels.
Google Analytics
Our website uses the web analytics service “Google Analytics” of Google Inc., for statistical purposes. This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”), which in turn uses cookies. The information generated by the cookie about your use of the site will be transmitted and stored on Google’s servers in the USA. If IP anonymisation is activated, your IP will be shortened within the territory of the member states of the European Union or other third members of the European Economic Area. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and shortened there. IP anonymisation is activated for this site. Google will use this information on behalf of the operator of this site for the purpose of evaluating your use of the site, will generate reports about site activity for web page operators, and will also provide them with other services related to site activity and internet use. The IP address transmitted by your browser will not be associated with other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however in this situation you may not be able to use all the functionalities of the site. You may also opt not to use Google Analytics in the future by downloading and installing the Google Analytics Opt-out Browser Addon for your browser: https://tools.google.com/dlpage/gaoptout?hl=en. To consent to or withdraw your consent regarding the automatic processing through the above-mentioned programs or technologies, set this option in the welcome message you receive when accessing the site or make the appropriate settings in your browser. For more details, access our cookie policy. If you choose to browse without these technologies or programs, some functions or features of the site may not be able to work. If you accept the full use of automatic capture programs and technologies, we will collect the following data:- identity data: first name and last name, the name of the company you represent;
- contact data: e-mail address, phone, residential and billing address;
- transactional data: exams registered with us, payment method;
- technical data: connection data, including IP, operating system and platform, browser identification, location, technologies used on the devices used to access the site;
- usage data: of the website, our products and services;
- marketing data: your preferences to receive communications from us or from third parties.
4. Purpose of collection and legal basis
We collect information that contains personal or technical data, mainly for:1. Processing exam registrations and communicating with candidates.
In order to carry out the exam registration process and provide our examination services, we process your identity, contact, and payment data. The legal basis is the performance of a contract. Without this data, we cannot register you for the exam and cannot provide our services.2. Improving our services and your browsing experience on our site.
To carry out this activity, we rely on our legitimate interest in conducting commercial activities, but we also pay attention to respecting your rights and freedoms, so we offer you the easy possibility to opt out of the use of the programs and technologies we use in the process of collecting and processing data.3. Fulfilment of legal obligations.
As a commercial entity, we have the obligation to issue tax invoices, to keep accounting documents, and to communicate certain information to the competent authorities, in accordance with the legislation in force (the Fiscal Code, the Accounting Law, etc.).4. Security reasons for our hardware and software infrastructure.
The basis for collection and processing for this purpose is both a legal one, namely the obligation to protect property, and one based on our legitimate interest in protecting our business.5. Impossibility or refusal to provide certain personal data
If you do not provide the requested information, it is very likely that you will not be able to use our site under normal parameters and, also, we will not be able to accept and process your registration or request, which would prevent us from providing you with the products or services of interest to you.6. Recipients of data
Your data is used by EUROPEAN EXAMINATIONS CENTRE SRL (eecentre.eu) and we will never share your personal information with a third party for purposes other than those described in this Policy. We may transmit your personal information to our trusted partners, who are able to offer guarantees regarding the security and confidentiality of your data and who process the data only in accordance with our instructions. Our partners are, generally, third-party service providers with whom we collaborate and who operate in fields such as:- Cambridge Assessment English (part of the University of Cambridge, United Kingdom) — for the processing and evaluation of Cambridge examinations;
- The organisation administering the IELTS examinations — for the processing and evaluation of IELTS examinations;
- IT services and maintenance;
- Database hosting internally and within the EU;
- Behavioural analysis services (Google Analytics, Facebook);
- Accounting and taxation services;
- Legal consultancy and assistance;
- Marketing and advertising;
- Payment processing;
- Public authorities.
7. Storage location and international transfers
Both the website and the physical and electronic database containing personal information are hosted and stored on secure servers within Romania and the European Union. International transfers. For the delivery of examination services, part of your personal data (in particular, data necessary for the registration and evaluation of exam candidates) is transferred to Cambridge Assessment English (United Kingdom) and to the organisation administering the IELTS examinations. These transfers take place based on:- the adequacy decision of the European Commission for the United Kingdom (in force since 2021), in the case of transfers to Cambridge Assessment English;
- Standard Contractual Clauses approved by the European Commission or other appropriate safeguards provided by the GDPR Regulation, for any other international transfers.
8. Security measures
Although your data is collected in the online environment, part of it is also stored on paper (e.g. invoices, exam registration forms). EUROPEAN EXAMINATIONS CENTRE SRL (eecentre.eu) is specifically and constantly concerned with implementing effective security measures to protect your personal data and to avoid security breaches, both in terms of information stored online and on physical media. Regardless of the method of storage, your data is kept in secure environments that benefit from protection measures against unauthorised access, use, disclosure, modification, or destruction. We have also implemented special measures for network security and data transfer, auditing and testing of infrastructure, trained personnel, and data transfer outside Romania carried out only to entities that can ensure similar protection.9. Retention period
In the event that we process your data for the performance of pre-contractual or contractual obligations, we will store the data for as long as necessary for the performance of the contract and for a supplementary period thereafter. In the event that we process your data by virtue of a legal obligation or in the public interest, we will store the data for as long as necessary to comply with legal obligations or for as long as the interest is classified as being of public utility. In the event that we process your data for the protection of our legitimate business interests, we will store the data until you ask us to stop, unless we can demonstrate that the reason for which we collect and store is a priority over your interests, rights, and freedoms. In the event that we process your data based on your express consent, we will store the data until you ask us to stop.- Data associated with exam registrations and invoices: 10 years, in accordance with Accounting Law no. 82/1991.
- Exam candidate data transmitted to Cambridge Assessment English and to the organisation administering the IELTS examinations: according to the retention policies of these organisations, in accordance with GDPR requirements.
- Data collected through the contact form: 12 months.
10. Automation of the decision-making process
EUROPEAN EXAMINATIONS CENTRE SRL (eecentre.eu) does not use automated processes that may generate legal effects concerning you or that may significantly affect you. You can request at any time not to be subject to a decision based solely on automated processing, if that decision produces legal effects concerning you or affects you in another similar way and to a significant extent. You cannot benefit from this right of option if the decision taken as a result of the automated processing of the data is necessary for us to enter into or perform a contract, or if it is permitted by law and there are adequate guarantees for your rights and freedoms. If you have given us your consent regarding automated processing and then you change your mind, you can withdraw this consent at any time by submitting a written request to us.11. Rights
- The right to information — you have the right to know whether your personal data is being processed, what data is collected, where it is obtained from and why, by whom it is processed, for what period, and whether this data is subject to automated processing that is likely to produce legal effects or affect you significantly.
- The right of access — you have the right to access, free of charge and at reasonable time intervals, the data collected from you or about you. This includes your right to request and obtain a copy of the personal data collected.
- The right to update/rectification — you have the right to request the rectification or updating of your personal data, which is inaccurate or incomplete.
- The right to erasure — in the event that you have withdrawn the consent given, you object to the processing of the data, the processing is not in accordance with the provisions of the Regulation, or it is no longer necessary for the achievement of the purposes for which the data was collected and processed, you can request that your personal data be deleted from our records.
- The right to restrict processing — in the event that certain conditions apply, you have the right to restrict the processing of your personal data.
- The right to object — in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
- The right to object in relation to automated processing — in the event that your personal data is subject to automated processing, including the creation of profiles, which may produce legal effects or affect you in a significant manner, you are entitled to request us to exclude your data from any automated individual decision-making process.
- The right to data portability — you have the right to obtain your personal data in an appropriate format or, if possible, by direct transfer from one processor to another.
- The right to help from the supervisory authority — you have the right to request help from a supervisory authority and the right to other remedies, such as claims for damages.
- The right to withdraw consent — you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.
- The right to lodge a complaint — if you want to make a report regarding the way we process your personal data, we invite you to contact us:
- E-mail address: contact@eecentre.eu;
- Postal address: Str. Sfinții Voievozi no. 65, Ground Floor, Space P1, Sector 1, Bucharest, postal code 10965, Romania.
Address: B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212
E-mail: anspdcp@dataprotection.ro