NEXUM BUSINESS CONSULTING SRL (or “the Company”) attaches great importance to the protection and respect of the privacy and personal data (“Personal Data”) of the users of its www.nexum-bc.ro website (or “the Website”).

NEXUM BUSINESS CONSULTING SRL undertakes to implement the appropriate measures concerning the protection, confidentiality, and security of Personal Data in accordance with the regulations in force in Romania and the European Union, particularly the General Regulation on the Protection of Personal Data EU 2016/679 of April 27, 2016.

Users are invited to read this document carefully in order to know and understand the process relating to the collection and use of Personal Data by NEXUM BUSINESS CONSULTING SRL.

It is here clearly stated that, by browsing the Website, users accept these terms as well as the ‘Terms of Use’.

PERSONAL DATA COLLECTED

Users are required to provide their Personal Data in digital format when using the Website.

In general, users can browse the Website without necessarily having to communicate Personal Data to NEXUM BUSINESS CONSULTING SRL.

The Company only collects the Personal Data necessary to carry out the processing it sets up (“privacy by design”), and ensures a high level of protection (“privacy by default”). As such, the processing operations requiring the collection of data are as follows:

– Respond to requests for information (contact forms);

– Send newsletters, informative or commercial alert e-mails. The personal information collected from users is, at least, the following: (i) Surname(s), (ii) First name(s), (iii) E-mail address, (iv) Phone number. Mandatory information is marked with an asterisk in the Contact Form. Other information is provided optionally and spontaneously by the User.

This Personal Data is then retained for the time period required to fulfil the user’s request. In the absence of concrete realization, they are deleted within the time frames recommended by ANSPDCP i.e. Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (National Supervisory Authority for Personal Data Processing in Romania) on their dedicated page subject to the possibilities and legal obligations in terms of archiving, obligations to retain certain data and/or anonymization.

The User guarantees that the data he/she communicates is accurate and in conformity with reality. He/she undertakes to inform NEXUM BUSINESS CONSULTING SRL, without delay, in the event of any modification of the data he/she has communicated.

Under no circumstances can NEXUM BUSINESS CONSULTING SRL be held liable in the event of the usurpation of a User’s identity, given that it does not have the technical means to systematically verify the identity of persons.

In the event of suspicion of fraudulent use of his/her identifiers, the User must immediately inform NEXUM BUSINESS CONSULTING SRL.

When using the Website or certain services linked to the Website, certain data is collected automatically, such as: (i) IP address, (ii) reference of the navigation software used, (iii) navigation data (date, time, content consulted, search terms used, etc.), (iv) operating system references.

The conditions associated with this type of data are described in detail on the page dedicated to Cookie Notice.

LEGAL BASIS FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA

Personal Data is processed by NEXUM BUSINESS CONSULTING SRL in the cases authorized by the regulations in force and under the following conditions:

– Obtaining free, specific, informed and unequivocal consent from users regarding the processing of their Personal Data (it is specified that, for minors under 18, consent must be given by the legal representative);

– Collection of Personal Data necessary for the execution of the user request;

– Compliance with legal and/or regulatory obligations imposed on the Company (such as the fight against fraud and corruption;

– Protection of the Company’s legitimate interests (such as protecting the security of its computer network).

RECIPIENTS OF PERSONAL DATA COLLECTED

NEXUM BUSINESS CONSULTING SRL undertakes not to market the Personal Data collected to third parties.

Only authorized personnel of the Company may have access to the Personal Data collected and be required to process it, without prejudice to their possible transmission to the bodies responsible for a control or inspection mission in accordance with the legislation and/or regulations in force or for the purposes of responding to a judicial or administrative decision.

Authorized personnel are subject to an obligation of discretion.

TRANSFER OF PERSONAL DATA

The Personal Data collected from Users of the Site is exclusively stored in Romania and is not transferred outside the European Union.

DATA SECURITY

NEXUM BUSINESS CONSULTING SRL collects and processes the Personal Data of users with the utmost confidentiality, and in compliance with applicable laws. Users are protected against unauthorized access, modification, disclosure or destruction of their Personal Data.

Users’ attention is drawn to the fact that no transmission or storage technology is completely infallible.

Also, in the event of proven breach of Personal Data likely to create a high risk for the rights and freedoms of users, NEXUM BUSINESS CONSULTING SRL will inform the competent supervisory authority (ANSPDCP i.e. Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (National Supervisory Authority for Personal Data Processing in Romania)) of this breach in accordance with the procedures provided by the applicable regulations.

It is up to users to exercise caution to prevent any unauthorized access to their Personal Data and, in particular, to their computer and digital terminals (i.e. computer, smartphone, tablet in particular).

HYPERTEXT LINKS

The Site may occasionally contain links to sites of partners or third-party companies that have their own Personal Data Protection Policy.

NEXUM BUSINESS CONSULTING SRL has no control over the content of these sites and declines all responsibility for the use made of the information collected when users click on these links.

In particular, the Company declines all responsibility in the event that this content fails to comply with legal, regulatory or contractual obligations, or if these sites are affected by viruses or any other element of a destructive nature. In these situations, the Company can in no way be held responsible for operating, financial or commercial losses or for any loss of computer programs or User data.

Any hypertext link to the www.nexum-bc.ro website must be authorized, in advance, by NEXUM BUSINESS CONSULTING SRL.

USER’S RIGHTS

Subject to the limitations provided for by the legislation in force, and in accordance with the provisions of the General Regulation on the Protection of Personal Data EU 2016/679 of April 27, 2016, the user is informed that he/she has a right of access, rectification, erasure and opposition relating to the data concerning him/her, either by using the dedicated Form allowing the exercise of the rights in terms of personal data or by contacting NEXUM BUSINESS CONSULTING SRL according to the methods described in the CONTACT section below.

In accordance with the provisions of the General Regulations on the Protection of Personal Data, requests will be processed within one month of receipt of the request. If necessary, this period may be extended by two months, taking into account the complexity and the number of requests. In the event of an extension of the response time, NEXUM BUSINESS CONSULTING SRL will notify you in advance.

MODIFICATION OF THE PERSONAL DATA PROTECTION POLICY

NEXUM BUSINESS CONSULTING SRL reserves the right to make, at any time, modifications to this document concerning the protection of Personal Data in order to comply with legislative and regulatory changes and/or to improve its policy for the processing and protection of Personal Data.

In case of modification, a new version will be updated and put online with the date of “Last update” indicated.

APPLICABLE LAW AND JURISDICTION

The terms of this document are subject to Romanian law.

In the absence of an amicable agreement, jurisdiction is written to the Romanian courts with sole jurisdiction.

CONTACT

For any questions relating to the terms of this document for the purposes of rectification, addition or update, users are invited to contact NEXUM BUSINESS CONSULTING SRL:

• by sending an email to contact@nexum-bc.ro ;

• or by completing the following online contact form https://nexum-bc.ro/contact-us/ ;

• or by sending a letter to the following address: NEXUM BUSINESS CONSULTING SRL – For the attention of the Data Protection Officer – 1-3, Remus Street, PSBH Building, 5th floor, Bucharest, ROMANIA.