GDPR

Personal data protection policy

The company Eastar Srl, with RO 4892794, J-19-1086-93, as the personal data controller (hereinafter referred to as the "Company" or "Controller") of the www.gasparmaria.ro website complies strictly with the legal provisions in force on the protection of individuals with regard to the processing of personal data and the free movement of such data. We undertake to process your personal data in accordance with Regulation (EU) 679/2016 (GDPR), as well as any other applicable legislation on the territory of Romania. 
The person designated with the processing of personal data is Ms Gaspar Maria.
Periodic updates and amendments to the Personal Data Protection Policy ("Policy") are made without your prior consent and without being subject to an individual or special notification procedure of the changes made. 
For information and email office@gasparmaria.ro
The personal data you provide to us will NOT be transmitted for commercial purposes to affiliated companies and/or other partners and collaborators with whom we have established contractual relationships in order to carry out our activities and fulfil our legal obligations. The transmission of personal data to third parties takes place with your consent.
Personal data we process
The personal data we process are: name, surname, address, email address, telephone number, IP. 

If you contract a service through www.gasparmaria.ro (courses, workshops, programs, online consultation) we collect the necessary data to identify you: name, surname, contact details. 
For online payment: Not applicable
For payment by bank transfer the data controller is 
Banca Transilvania Head Office: str. Dorobantilor, nr. 30-36, Cluj-Napoca, Cluj, 400117 Tel: + 40 264 407 150; Fax: + 40 264 301 128;
Its privacy policy can be found here:
https://www.bancatransilvania.ro/Politica%20BT-de-prelucrare-date-personale-clienti-actionari-parteneri-contractuali-BT-1.10.2019.pdf

We use Google Analytics to help us understand how our customers use our site - you can read more about how Google uses your personal information here: https://www.google.com/intl/ro/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

If you contract a se
We do not collect and process sensitive data, defined as such by the GDPR. We do not want to collect or process data of minors.

3. Purpose for which we process personal data
We request and process personal data for: 
-make it possible to create your account on the site and to operate the site 
-ensure the billing of the amounts related to the services offered on our website
-transmit newsletters, invitations, materials related to our services and information related to events or programmes we organise or promote - if you give your consent to do so 
-providing responses to complaints
-evaluating the services offered on the site 
-monitoring and customer behaviour, administrative, media and similar purposes - if you give your consent to do so
-communication of offers of goods and/or services - if you give your consent to this.
4.Grounds for processing The Operator is entitled to process personal data for the purposes set out above: 

-for the processing of data necessary to make possible the creation of the account, the operation of the site and access to the services offered on the site (conclusion of the contract for the provision of services at 2 distance), and the provision of responses to complaints placed, if applicable, 
-because you have given your express consent by ticking the relevant boxes 
If the data processing is not necessary for the conclusion and performance of our legal relations, we will not process personal data for any of the above purposes unless we have your consent to do so.

5. Duration of storage and processing of personal data
We process and store personal data for as long as necessary to fulfil the purposes for which the data was collected and in any case for as long as required by applicable legal regulations. 

We regularly update our database so that we do not store data that is no longer necessary for the purposes for which it was collected.

6. Data security measures
The Company ensures appropriate technical and legal measures to ensure effective protection of personal data belonging to individuals who provide us with such data. 
We are committed to keeping your personal data secure and take reasonable steps to do so, including against unauthorised access, unauthorised use of data, destruction, loss