We, the company Online Content Creation SRL, with the registered office in Lt Ionescu Baican no. 51 room 2 floor 1, registered at RC under no. J / 40/1712/2020, having CUI 42226144, (“Company”), we represent the operator in accordance with GDPR. The contact details of the Data Protection Officer are e-mail: gdpr@mark-ettinger.com, phone: 0768 100 616.

The company processes your personal data for the following purposes:
in order to provide products / services in the field of marketing
in order to fulfill the legal obligations of the Company;
in order to pursue the legitimate interests of the Company;
for the following purposes all in the field of marketing, if you have agreed with each of them:

Providing information on commercial offers
Providing information on the Company’s events
Providing online promotion services, both in Romania and abroad;
Providing consulting, training, branding, web design services;
Providing event organization services at the request of the beneficiary;
Providing copywriting services;
Providing social media services;
Providing web design services;
Providing email marketing services;
Providing photography and videography services;
Providing promotional services on Google;
Participation in opinion polls regarding the Company’s products and services regarding the degree of customer satisfaction

The following categories of data can be processed for these purposes:
• Name and surname, personal numerical code, date of birth, sex, identity document, position, address, e-mail, landline and / or mobile phone numbers, fax number;
• Your contact with us, such as an email, notification, message request, or other evidence of a contact with us;
• Information about your account, such as due or received payment dates, account numbers or other information related to your account or that is included in our business relationship management portal with each customer;
• Your preferences for certain products, services and lifestyle when you tell us what they are or when we assume what they are, based on the way you request the provision of services by ONLINE CONTENT CREATION SRL;
• See the Cookies section for details on what we collect using cookies, web beacons and other technologies, including advertising data;
• Information we obtain from other sources, such as public or private authorities, fraud prevention agencies, and other data providers. These include demographics, interest data, and online browsing behavior.
• History of offering advantages, discounts or discounts to reward customer loyalty.
• The level of services provided to you – for example, operational issues and other events that may affect our services;
• Responses to invitations and confirmations of participation in events
• Sensitive personal data reveals your racial and ethnic origin, political opinions, religious and philosophical beliefs, trade union affiliation, genetic data, biometric data, health data, or life or sexual orientation data.
ONLINE CONTENT CREATION SRL does not intentionally collect sensitive personal data from you with the intention of storing them.

The personal data we process is mainly your identification, transactional, financial, demographic, location or other personal data that we collect directly from you or from other sources when you become our customer or when you use our services. .
Legal basis of processing
The legal basis for the collection and processing of your data for each of the purposes mentioned above is:

The contract for the provision or provision of services to which you are a party or your request before concluding a contract for which we have received your consent;
The legitimate business interests of the Company, for example, the prevention of fraud, the maintenance of the security of our services, direct marketing and the improvement of our services. Whenever we rely on this legal basis to process your data, we evaluate our business interests to ensure that they do not prevail over your rights. In addition, in some cases you have the right to object to such processing. The legitimate interest of the Company to allow us to exercise the rights provided by law in our favor, to take legal action against any illegal activity or that harms the Company
Compliance with an imperative legal requirement, for example, accounting and tax requirements, which are subject to strict internal policies (such as retention periods), procedures, and your right to restrict the use of your own data, which controls the subject matter of our services will be provided;
In addition, to the extent that you have agreed, your consent. The processing of personal data based on consent is an additional purpose to the processing of personal data in order to perform the contract to which you are a party and does not condition the provision / provision of contractual services.

We will collect your personal data when, for example:
• You buy or use any of our products and services;
• You register for a specific product or service;
• You contact us through various channels, or ask us for information about a product or service;
• You have given permission to other companies, such as our business partners or associates, as well as to third party suppliers or contractors of ours, to exchange information with us about you;
• When your personal data is public; or
You are the customer / beneficiary of a commercial activity that we purchase / provide.
We also collect information from certain organizations, if applicable and to the extent that we have legal grounds for doing so. These include fraud prevention agencies, business directories, verification / control agencies, invoice calculation agencies and contracted service providers.

Categories of recipients to whom the personal data collected may be disclosed:
To achieve the above goals, we use the following categories of product and service authorized
providers:
suppliers directly / indirectly involved in providing products and providing services in the field of marketing;
state authorities (including tax authorities);
accountants, auditors, judicial experts, lawyers or other such external advisors of the Company or to third parties who provide products and services to the company (security service providers, IT systems, financial consultants)
the Company’s suppliers directly / indirectly involved in the marketing and promotion process.

The regulation offers a number of rights to the persons from whom personal data are processed. Thus, in addition to the existing rights, you will also find the right to data portability and the right to delete data. In short, your rights are:
The right to withdraw at any time a consent given in order to stop the processing of data based on your consent. Withdrawal will not affect the lawfulness of processing based on consent given before withdrawal, for the execution of a contract, in order to fulfill a legal obligation or pursuing our legitimate interests.
Right of access – means that you have the right to obtain confirmation from us that we are processing or not the personal data concerning you and, if so, you have access to that data and information on how this data is processed.
The right to data portability – refers to the right to receive personal data in a structured format, commonly used by us and which can be read automatically, but also to the right to have this data transmitted directly to another operator, if this this is technically feasible.
The right to object – refers to your right to object to the processing of personal data when the processing is necessary for the performance of a task that serves a public interest or when it considers a legitimate interest of the controller. When the processing of personal data is for the purpose of direct marketing or processing carried out on the basis of express consent, you have the right to object to the processing at any time.
The right to rectify – refers to the correction, without undue delay, of inaccurate personal data. The rectification will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate effort.
The right to delete data (“right to be forgotten”) – means that you have the right to request the deletion of personal data, without undue delay, if one of the following reasons applies: they are no longer necessary for the purpose for which they were collected or processed; you withdraw your consent and there is no other legal basis for processing; you object to the processing and there are no other legitimate reasons to prevail; personal data have been processed illegally; personal data must be deleted in order to comply with a legal obligation; personal data were collected in connection with the provision of information society services.
The right to restrict the processing – can be exercised if the person disputes the accuracy of the data, for a period necessary to verify the correctness of the data; the processing is illegal and you object to the deletion of personal data, requesting a restriction instead; if ONLINE CONTENT CREATION SRL no longer needs the personal data for the purpose of processing, but the person requests them for the finding, exercise or defense of a right in court; if the person has objected to the processing for the period of time in which it is verified whether the legitimate rights of the controller prevail over those of that person.
The right to file a complaint – complaints regarding the processing of personal data may be addressed to the National Authority for the Supervision of Personal Data Processing.