Personal Data Processing
To ensure compliance with users’ rights to personal data protection, we have implemented specific protection measures, taking into account Romanian legislation, as well as the requirements set by Regulation (EU) 2017/679 – applicable throughout the European Union from May 25, 2018 (“Regulation“).
Personal data refers to any information through which you can be identified, especially by an identifier such as a name, an identification number, location data, an online identifier, or one or more elements related to your physical, physiological, genetic, mental, economic, cultural, or social identity.
Our company takes all necessary measures to ensure compliance with your right to personal data protection, and these terms represent a notification established by art. 13 or 14 of the Regulation by which we explain why we collect your personal data, how we protect this data, as well as what your rights are regarding this data collection.
We encourage you to carefully read the document and to request any additional information or clarification you deem necessary regarding the content of this information.
In accordance with Regulation (EU) 2017/679, Cercetium will securely manage and only for the specified purposes, the personal data provided by Users. By agreeing to the Terms and Conditions, Users are informed that the personal data they provide will be processed for the purpose of providing optimal services by Cercetium over the internet, supply of goods and services, advertising, marketing and publicity services, and statistical services.
Cercetium performs the following processing operations: collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, and, in some cases, transmission to third parties, based solely and regulated by a commercial contract that ensures the security and confidentiality of data, as well as the respect for the rights of the users, of the personal data of the Users of the site to manage, maintain, improve, and obtain information about the services it offers, as well as to prevent errors and information leaks through its own IT network, breaches of the law or contractual terms.
The personal data to be collected may be used, including by automatic profiling (for those Users who have explicitly consented) and to personalize to the greatest extent possible the services offered to Users through the site, as well as for marketing purposes. Automatic profiling will not target minors’ data, and their personal data will not be processed for this purpose.
Personal data will be provided by Users, at their own option, when creating a valid account on the site or subscribing to a service available on the site, to benefit from the services and products offered through it. Upon registration on the site, certain personal data such as name, gender, date of birth, email address, telephone, profession, habits/preferences/behavior, and other personal information will be requested from the User.
The User is solely responsible for all data provided at the time of creating the user account on the site. To confirm the data and the account, the User will be notified at the email address declared at the account creation. This confirmation email is intended to stop fraudulent actions of users who use email addresses of other persons to create fictitious accounts. If you receive such a message, under the conditions that you have not registered personally on the site, please send us an email to office@cercetium.com to delete the respective account within a maximum of 3 working days. The email will contain, in pdf format, the current version of this Contract.
The User’s profile form contains fields that can be edited in case modification or completion of the data provided at the account creation is desired.
The User is not obliged to provide this data; it is necessary for i) the records about the site usage and ii) to provide the services optimally through it, for informing about promotional campaigns, for advertising purposes, for personalized marketing and advertising actions, and for the User’s access to additional facilities. The User’s refusal to provide the requested data results in non-participation in promotional activities organized through the site and non-use of the facilities, additional services offered exclusively to Users with an account on this website.
The website can be used even if the User decides not to create a profile by providing personal data, with the exceptions established within the Cookies Policy (an integral part of this Contract).
According to Regulation (EU) 2017/679 and Law no. 677/2001, Users have the right to access, intervene on data, the right not to be subject to an individual decision, and the right to appeal to justice. Furthermore, Users have the right to object to the processing of personal data concerning them and to request the deletion of data.
To exercise these rights, Users can make a written request in this regard, which they will send by email to office@cercetium.com with the specification “Personal data request.”
The site undertakes not to send spam messages (commercial messages for which it does not have the explicit prior consent of the User) and to undertake all accessible technical means to ensure the security and confidentiality of user data.
The site reserves the right to terminate, without prior notice, the accounts and access of members who violate the Terms and Conditions, who engage in activities proven to be fraudulent, slanderous, or an attack on the security and confidentiality of information within the site or the operating company of the site.
Within the communication framework established online between the site and the user, we collect and process your personal data, the collection and processing of this data being necessary for the provision of informative and promotional content to the user, following the voluntary provision by the user of personal data within the site by accessing one or more of the following sections: account creation, account update, newsletter subscription, online questionnaire completion, online form completion, to obtain personalized information or commercial benefits, within the campaigns promoted on the site.
The grounds for collecting personal data on the site can be as follows:
In the enumerations below, we present in detail the personal data collected as well as the grounds, purposes, and duration of their collection. Providing the data indicated below is not mandatory to view the Website, except for those related to Cookies.
The indicated data are necessary only to provide specific services for the Users who transmit them.
Personal data collected:
Name, surname, email address, phone number, geographic location data, mailing address, social media profile links
Grounds for collecting this data: 1), 6)
Purposes of collecting data:
To provide access to content and responses to questions and requests submitted by the user online, to transmit communications, offers, and benefits consisting of access to services and products
Method and period of data collection:
In the secure database, until the user’s explicit desire for deletion or up to 10 years from the user’s last activity on the site. After those 10 years, the data will be electronically anonymized.
Personal data collected:
Cookies, timestamps (date and time of access), browsing history on the site
Grounds for collecting this data: 1), 6)
Purposes of collecting data:
For monitoring site traffic and its browsing history, for creating a content hierarchy, and identifying the most relevant content for the user.
Method and period of data collection:
In the secure database, until the user’s explicit desire for deletion or up to 10 years from the user’s last activity on the site. After those 10 years, the data will be electronically anonymized.
We will store your personal data for a period not exceeding the time necessary to fulfill the purposes for which the data are processed, and, in cases where we have a legal obligation to retain your personal data for a certain period of time, the retention period will be as provided by law. Depending on the specific situation, this period will vary, ranging from 1 day to 10 years.
For a better understanding of the storage method, the location where your personal data will be stored, and the exact period for which this data will be kept in our records or systems, please refer to the table above.
In order to guarantee the user’s right to be protected regarding the processing of personal data, we implement, for certain categories of data that are sensitive or capable of significantly affecting rights, special technical and organizational measures to protect these categories of personal data.
To ensure the highest standard of data protection, users have a series of rights regulated by law, which we briefly present below. For any additional details, please do not hesitate to contact our Data Protection Officer using the following contact details: office@cercetium.com, 6 United Nations Boulevard, Bucharest, phone 746 040 324.
Users have the right to access their personal data processed by us, as well as the right to obtain copies thereof. Upon the user’s request, the first such copy will be provided to you by us free of charge, with any additional copies you request subject to a corresponding fee for the effort required for extraction and formatting for transmission. The copy of personal data can be provided to you either in electronic format or in physical format, depending on your request and the nature of the data requested. To request information about personal data existing on the site and to request partial or total deletion of this data, a request must be addressed using the email address office@cercetium.com or by sending a letter by post or courier to the registered office of Cercetium.
Additionally, the user has the right to obtain any relevant additional information (such as the purpose of processing personal data, the categories of personal data we collect, information about the processing and disclosure of this data, and any other such information).
Users have the right to obtain the rectification of any inaccuracies concerning their personal data processed by us. They also have the right to obtain the completion of any incomplete personal data. Any user is encouraged to contact the site at office@cercetium.com whenever they notice an inaccuracy regarding their personal data or if their personal data processed by Cercetium is incomplete.
Users have the right to the erasure of personal data. This right is not an absolute right, meaning that the law imposes certain limitations on the exercise of this right (“the right to be forgotten”).
Users have the right to obtain the restriction of the processing of their personal data collected and processed by us, especially in cases where the accuracy of the data is contested, where the data processing is unlawful, or where the processing of this data is no longer necessary, according to the law.
Users have the right to object to the processing of their personal data by us, especially in cases where the processing is carried out for marketing purposes or for reasons related to their particular situation, in which case their data must be anonymized as soon as possible upon objection, and the anonymization must be confirmed to the user.
For personal data processed based on consent, users have the right to withdraw their consent at any time, just as easily as it was initially given. However, the withdrawal of consent will not affect the lawfulness of the processing carried out before the withdrawal of consent. The right to withdraw consent is not an absolute one, meaning that there are cases where the data will not be deleted following the withdrawal of consent (for example, if personal data is used for the site to comply with a legal obligation). The application of the withdrawal of consent applies from the moment of registration, and the withdrawal of consent will be processed within a maximum of 3 working days from the registration.
Users have the right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing regarding aspects related to the processing of personal data by our Company.
Personal data is collected and processed through an automated decision-making process for the purpose of customizing information and commercial communications addressed to you. The automated decision-making process involving health data is based on your express consent.
Within these processes, your data is protected by special security measures such as data encryption and advanced server-level security.
You have the right to request a change in the way your personal data is automatically processed by requesting verification of the automated process through human intervention. For this purpose, please contact us at the email address office@cercetium.com.
In order for the user to exercise the rights specified above, to address any questions regarding these rights, or to request clarification on any of the provisions of this information, please feel free to contact us anytime using the contact information provided.
How Requests or Complaints Can be Submitted – Point of Contact
To find out more information about personal data, how data is collected, processed, and protected, or to request any clarifications regarding the provisions mentioned in these Terms and Conditions, any user can contact the company’s Data Protection Officer at any time by emailing office@cercetium.com or by postal correspondence to 6 United Nations Boulevard, Bucharest.
16 Force Majeure
Neither party shall be liable for the non-performance of its contractual obligations if such non-performance is due to a force majeure event. Force majeure is an unforeseeable event beyond the control of the parties and which cannot be avoided.