GDPR policy

Lawfulness of processing

On May 25, 2018, Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), known as GDPR (General Data Protection Regulation), became applicable. Therefore, any operator/entity that processes personal data must apply these new requirements and provide transparent information on how the data is processed.

Edge Institute complies with national and international regulations on the protection of personal data. The manner in which we collect and process personal data is described below.

According to Article 6 of Regulation (EU) 2016/679, processing is lawful only if and to the extent that at least one of the following conditions applies:

  1. the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  2. the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject’s request prior to entering into a contract;
  3. the processing is necessary for compliance with a legal obligation to which the controller is subject;
  4. the processing is necessary to protect the vital interests of the data subject or of another natural person;
  5. the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  6. the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where the interests or fundamental rights and freedoms of the data subject are overridden by the interests or fundamental freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Categories of personal data that may be processed

  1. Personal identification data (name, surname, address, age, date of birth, gender, telephone, email, CNP, nationality, handwritten signature and digital signature).
  2. Personal data regarding family, lifestyle and social circumstances (marital status, details about family / spouse / partner / dependents, hobbies, sports practiced).
  3. Personal data regarding education and professional experience (education and training history, qualifications, certifications).
  4. Personal data regarding professional or business activities carried out by a natural person (occupation, position, professional history).
  5. Personal data regarding health (data regarding physical and mental health or medical conditions declared in certain medical documents provided by the employee voluntarily or as a result of a legal obligation or resulting from occupational medicine examinations / SSMS procedures).
  6. Personal financial details (bank account information, income, tax facilities or social benefits, tax obligations).
  7. Information regarding the location, image and audio-video recordings of individuals.

Purposes and legal basis for processing personal data

Edge Institute collects and processes personal data for the following purposes:

Accessing web pages and social media pages

If the user wishes to provide us with their personal data – for example, to fill out a contact form with their email address, we will use the information to respond to their message or request. We will only disseminate the user’s personal data to other institutions or public authorities if their request is related to that institution or if the law requires it.

The Edge Institute website does not collect information for commercial purposes. If you need to provide an email address to receive a response other than the one automatically provided to your questions or comments, we recommend that you do not provide additional personal data.

Except for authorized investigations conducted to ensure compliance with the law, there will be no other attempts to identify users or how the site is used.

Unauthorized attempts to upload or modify data on this site are prohibited and will be punished in accordance with the laws currently in force.

It is not the Edge Institute’s policy to accept or consider unsolicited materials. If users of the Edge Institute website submit materials of the type mentioned above, we reserve the right to treat them as non-confidential or non-proprietary.

The categories of recipients to whom the collected personal data may be disclosed

Edge Institute may disclose personal data to the following categories of recipients:

  1. state authorities (including tax authorities), as a result of a legal obligation of the operator;
  2. service providers directly/indirectly involved in the administration of the company’s activity (e.g. IT service developers, accounting service providers, banking institutions, partner medical clinics, etc.);
  3. partners or collaborators of the company, for legitimate purposes, which are strictly related to the company’s commercial activity;
  4. courts or arbitration courts, notaries public, lawyers, bailiffs, translation offices, other authorized services, expert evaluators.

To exercise your rights in relation to Edge Institute or for additional information, you have the following contact methods available:

  1. e-mail to contact@edgeinstitute.ro,
  2. by post or courier, or
  3. by personally submitting a handwritten notification to the Edge Institute headquarters.