Last update: 08.10.2024
PRIVACY POLICY
The data controller is BALCAN HR CONSULTING S.R.L. (hereinafter referred to as the "Company"), a legal entity of Romanian nationality, with its registered office in Bucharest, Sos. Oltenitei nr. 239, 241-251, Sector 4, registered at the Trade Register Office attached to the Bucharest Tribunal under no. J40/4235/2020, EUID ROONRC. J40/4235/2020, Unique Registration Code 42433662, tax attribute RO, www.balcanconsulting.com (hereinafter referred to as the "Site"). For more information regarding the Company, you can contact us at contact@balcanconsulting.com.
The Company is committed to respecting your privacy by complying with all applicable data protection laws and regulations, including the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the "GDPR").
For the purposes of the GDPR Regulation, the terms below have the following meanings:
a) "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific elements, physical, physiological, genetic, mental, economic, cultural or social identity.
b) "Processing" means any operation or set of operations performed on personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
c) "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
d) "Processor" means the natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
e) "Consent" of the data subject means any manifestation of free, specific, informed and unambiguous will of the data subject by which he or she accepts, by an unequivocal statement or action, that personal data concerning him or her be processed.
This policy (together with the Terms and Conditions of this Site and any other documents referred to in the content of this policy) is intended to provide you with information regarding the personal data that we collect from you or that you make available to us through this Site and how it will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
2. WHAT TYPE OF PERSONAL DATA DO WE PROCESS, FOR WHAT PURPOSES AND ON WHAT GROUNDS?
In the process of administering this Site, the Company will collect certain data ("personal data"), which are processed through Google Analytics. When using the Site, through Google Analytics and based on the user's consent, data are collected regarding the number of active users, data about the device (operating system, manufacturer, model), number of sessions, duration of sessions and geographical area. This data is collected in a manner that does not allow the direct identification of the user.
In addition to the above, when you send us your CV or express your interest in collaborating with us, you provide us with certain personal data related to you, your skills, educational and professional background. We need this information in order to be able to contact you, to be able to evaluate you for employment or to be able to provide you with consulting services.
At the same time, we process the data provided by you through the contact form on the Site, consisting of (but not limited to) name, surname, email, telephone number, which you have the possibility to fill in in order to ask us a question / request / complaint.
The categories of data processed are:
(i) Contact details (name, surname, geographical area, email address, telephone number, photo);
(ii) History of studies and work experience;
(iii) Skills, hobbies, skills.
We will process personal data for the following purposes:
(i) To monitor website traffic, understand how users use the Site and to improve its Content;
(ii) To view the segments to which the users of the Site belong;
(iii) To be able to respond to all questions, requests or complaints received from users;
(iv) To be able to provide the requested human resources consulting services;
(v) To conduct surveys, customer satisfaction surveys and customer feedback.
2.1. Responding to your questions, requests or complaints
We will process your personal data, such as your name, surname, email address and any other information or details that you may provide to us in your correspondence, in order to solve and respond to your questions, complaints or requests, depending on the communication channel through which you contact us, as described below.
Purpose
Providing answers to your questions, complaints or requests by electronic correspondence (e-mail)
Legal basis
The processing is based on a legitimate interest, allowing us to provide answers to your questions, complaints or requests, respectively to be able to offer you the requested services.
2.2. Surveys, studies on customer / user satisfaction and feedback from them
We will process your personal data when you decide to participate in our surveys or market research, customer satisfaction surveys, or when you provide us with feedback on Site Content. Such personal data will be processed for the above purpose only on the basis of your consent, also taking into account our legitimate interest in helping us understand users' needs and expectations regarding the Content offered. Your participation in such surveys or market studies is voluntary. Accordingly, it is your choice whether or not to provide us with personal data (such as first and last name, or other personal data that you offer to provide to us) via the email address on the Site.
Purpose
Surveys or market research, customer satisfaction surveys, or when you provide us with feedback on Site Content
Legal basis
Consent, legitimate interest
3. TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?
In order to achieve the purposes described above, we transmit your personal data to our clients – employers, in order to identify and obtain a job corresponding to the candidate's profile.
The Company uses the services of several contractual partners, authorized persons or employees of the Company, and they may also be provided with your personal data to be used exclusively within the limits of the obligations they have assumed towards the Company. The personal data we disclose to our processors is limited to the minimum personal information that is necessary for the provision of those services and we require these third parties not to use the personal data for any other purpose. We make every effort to ensure that all entities we work with store your personal data safely and securely.
Some of them are third parties who do not intend to process the data, but may have access to it in the performance of their tasks or in their interactions with the Company, such as companies that provide technical maintenance, financial or legal auditors.
The personal data indicated above may be made available or transmitted to third parties in the following situations: (i) public authorities, auditors or institutions with competences in carrying out inspections and controls on the Company's activity and assets, which request the Company to provide information, by virtue of the latter's legal obligations. These public authorities or institutions may be the National Authority for Fiscal Administration, the Romanian Police, the National Institute of Statistics, the Territorial Labour Inspectorate, etc.; (ii) to comply with a legal requirement or to protect the rights and assets of our Company or other entities or persons, such as courts; (iii) third-party acquirers, to the extent that the Company's business would be transferred (in whole or in part) and the data subjects would be part of the assets that are the subject of such a transaction.
The persons and entities to whom we may share personal data are the following:
a) In order to respond to your questions, requests or complaints, we may share your personal data with our service providers;
b) In order to provide the services that the Company offers, we may transmit your personal data to our clients – employers, online platforms, social media platforms (i.e. LinkedIn, BestJobs, Ejobs, Hipo, Facebook, etc.)
c) To conduct surveys or market research, customer satisfaction surveys, or to obtain feedback from our customers about our products and services, we may share personal data with survey or market research/customer survey service providers.
4. TRANSFER OF PERSONAL DATA ABROAD
In the context of the operations described above, your personal data may be transferred abroad to states in the European Union ("EU") or the European Economic Area ("EEA").
We hereby inform you that any transfer made by the Company to an EU or EEA member state will comply with the legal requirements set out in the GDPR.
5. HOW LONG WE STORE YOUR PERSONAL DATA
We will store your personal data only for the period of time necessary to achieve the processing purposes set out above, proportional to the purpose of the processing, in compliance with the legal requirements in force. If the Company determines that it has a legitimate interest or a legal obligation to continue processing your personal data for other purposes, you will be duly informed in this regard.
Once the Company no longer has legal or legitimate grounds to process your personal data, the data will be deleted in accordance with its procedures, which may involve its archiving, anonymization or permanent destruction.
6. PROCESSING OF DATA OF CHILDREN UNDER THE AGE OF 16
This website is not intended for use by minors under the age of 16. All personal data processing activities presented in this Policy refer exclusively to individuals who are at least 16 years old. The use of the systems, as well as the results of the processing, is prohibited with regard to children who have not reached this age without the consent of their parents/legal representatives. If, despite our reasonable efforts to prevent, such processing nevertheless takes place, we will cease it once we find that users have not reached the age mentioned above.
7. SECURITY OF DATA PROCESSING
The Company hereby informs you that it constantly evaluates and updates the security measures implemented to ensure safe and secure processing of personal data.
8. RIGHTS OF DATA SUBJECTS
In the context of the processing of your personal data, you have the following rights:
a. Right of access to the processed personal data: you have the right to obtain confirmation as to whether or not your personal data is being processed and, if so, to have access to the type of personal data and the conditions under which they are processed, by submitting a request to the Company in this regard;
b. Right to request rectification or deletion of personal data: you have the possibility to request, by submitting a request to this effect to the Company, the rectification of inaccurate personal data, the completion of incomplete data or the deletion of your personal data if (i) the data not necessary above for the original purpose (and there is no new legal purpose), (ii) the legal basis for the processing is the consent of the data subject and the data subject withdraws his/her consent and there is no other legal basis, (iii) the data subject exercises his/her right to object, and the Company does not have overriding legitimate grounds to continue the processing, (iv) the data has been unlawfully processed, (v) the deletion is necessary for compliance with EU or Romanian law, or (vi) the data has been collected in connection with the Company's services information provided to children (if applicable), when specific consent requirements apply;
c. Right to request restriction of processing: you have the right to obtain restriction of processing in cases where: (i) you consider that the personal data processed are inaccurate, for a period that allows the controller to verify the accuracy of the personal data; (ii) the processing is unlawful, but you do not want us to delete your personal data, but to restrict the use of such data; (iii) if the Company no longer needs your personal data for the purposes mentioned above, but you need the data to establish, exercise or defend a right in court or (iv) you have objected to the processing, for the period of time during which it is verified whether the legitimate grounds of the Company prevail over the rights of the data subject;
d. The right to withdraw your consent to the processing, when the processing is based on consent, without affecting the lawfulness of the processing activities carried out up to that moment;
e. The right to object to the processing of data for reasons related to the particular situation in which you find yourself, when the processing is based on legitimate interest, as well as to object, at any time, to the processing of data for direct marketing purposes, including profiling;
f. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly affects him or her in a significant manner;
g. The right to data portability, meaning the right to receive your personal data that you have provided to the Company in a structured, commonly used and machine-readable form, as well as the right to transfer such data to another controller, if the processing is based on your consent or the performance of a contract and is carried out by automated means;
h. The right to lodge a complaint with the Data Protection Authority (ANSPDCP) and the right to address the competent courts.
The above rights can be exercised at any time. In order to exercise these rights, we encourage you to send a written request, dated and signed to the following address: Tablitei Street no. 1A, 1st floor, Sector 1, Bucharest, or electronically, by e-mail, at the e-mail address: contact@balcanconsulting.com.
9. CHANGES TO THIS POLICY
This Personal Data Processing Policy may be amended from time to time and may be updated by the Company as necessary. The Company will notify you of any material or material changes to this Personal Data Processing Policy and will ensure that such notification is made in a manner that ensures that you are aware of them, for example by using the email address you have provided to us (if applicable), or any appropriate means to ensure effective communication.
10. CONTACT
You can ask any questions about this document at the following e-mail address: contact@balcanconsulting.com.
We will provide you with answers to your questions as soon as possible.
11. ANSPDCP
Last but not least, if you consider that the processing of personal data concerning you violates your rights, or violates the legal provisions regarding the protection of personal data, we inform you that you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing, based in Bucharest, G-ral Blvd. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Romania, website: http://www.dataprotection.ro/.