Privacy Policy

1. Introduction

We treat the confidentiality of personal data with seriousness and responsibility, and its security is a priority for us. That is why we are committed to complying with the new rules imposed by European Regulation no. 2016/679, referred to as the “Regulation” (supplemented by Law 190/2018), regarding the processing of personal data and the free movement of such data. Through this policy, we explain what personal data we process, how we collect it, how we use it and, above all, how we protect this data. We also inform you about the rights you are entitled to and guide you on how to exercise them.

2. About us

Getik Consulting SRL is a Romanian legal entity, with its registered office at Strada Ştirbei Vodă 114-116, Sector 1, Bucharest, Tax ID (CUI) RO 32732411, Trade Registry No. J40/1144/2014. Under EU Regulation 679/2016, Getik Consulting SRL is a personal data controller and has appointed a
GDPR officer who can be contacted:

• by email at gdpr@getik.net;
• by post at: Strada Ştirbei Vodă 114-116, Sector 1, Bucharest.

3. What data we collect and how we collect it

We use only the information that is strictly necessary and relevant to our business and to your needs as a consumer, and we collect it through our website, which is hosted and administered within the EU. We come into possession of your data mainly as a result of you choosing to disclose it to us voluntarily. Although you can visit our website without having to disclose your identity, you can provide us with your personal data directly when you use:

1. Job application form**Available in the “Careers” section. We use your personal data for the purpose of processing your request, in order to have all the information necessary to arrange a meeting for your recruitment. Data collected:

• Name;
• Email address;
• Phone number;
• LinkedIn profile;
• CV/portfolio;
• Other personal data you include in the “Additional information” field.

If you do not agree to disclose the requested information to us, we may not be able to respond to your request.

2. Collaboration form**Available in the “Company” section. We use your personal data for the purpose of processing your request, in order to have all the information necessary to provide you with a response.Data collected:

• Name;
• Email address;
• Company name;
• Your position within the company;
• Other personal data you include in the “Project Details” field.

If you do not agree to disclose the requested information to us, we may not be able to respond to your request.

4. Purpose of collection and legal basis

We collect information containing personal or technical data mainly for:

1. Improving our services and your browsing experience on our website.
   To carry out this activity, we rely on our legitimate interest in conducting business, while also being mindful of respecting your rights and freedoms, so we provide you with an easy way to opt out of the programs and technologies we use in the data collection and processing process.
2. Direct marketing.
   We base our marketing communications on your prior consent. You can change your mind at any time by using the unsubscribe button included in the messages you receive from us.
3. Security of our hardware and software infrastructure.The legal basis for collection and processing for this purpose is both a legal one, namely the obligation to safeguard assets, and one based on our legitimate interest in protecting our business.
   To the extent that we use the information held for purposes other than those stated above, we will expressly request your consent and explain what rights you have in this situation.‍

5. Inability/refusal to provide certain personal data

If you do not provide the requested information, it is very likely that you will not be able to use our website under normal conditions, and we may also be unable to accept and process your request or provide you with the services you are interested in.

6. Users

Your data is used by Getik Consulting SRL (getik.ro) and we will never share your personal information with a third party for purposes other than those described in this Privacy Policy. We may transmit your personal data to our trusted partners who are able to provide guarantees regarding the security and confidentiality of your data and who process the data only in accordance with our instructions. Our partners are generally third-party service providers with whom we collaborate and who operate in fields such as: IT services and maintenance, database hosting within the country and within the EU, behavioral analytics services (Google Analytics), accounting and tax services, legal consultancy and assistance, marketing, financing, advertising, and public authorities.

7. Place of storage

Both the website and the physical and electronic database containing personal data are hosted/stored on secure servers located in the EU. To the extent that we transfer certain personal data to entities located outside the Union, including to countries for which the European Commission has not recognized an adequate level of personal data protection, we will take measures to protect your rights and interests. Transfers will be protected through contractual clauses or other guarantees, such as the certification schemes that include the Privacy Shield framework for the protection of personal data transferred from within the EU to the United States of America.

8. Security measures

Although your data is collected in the online environment, Getik Consulting SRL (getik.ro) pays special and constant attention to implementing effective security measures designed to protect your personal data and prevent security breaches. Regardless of the storage method, your data is kept in secure environments that benefit from protective measures against unauthorized access, use, disclosure, alteration, or destruction. We have also implemented special measures regarding network and data-transfer security, infrastructure auditing and testing, trained personnel, and data transfers outside the EU carried out only to entities that can ensure a similar level of protection, etc.

9. Storage period

Where we process your data for the performance of pre-contractual/contractual obligations, we will store the data for as long as necessary to perform the contract and for an additional subsequent period. Where we process your data by virtue of a legal obligation or in the public interest, we will store the data for as long as necessary to comply with the legal obligations or for as long as the interest is classified as being of public utility. Where we process your data to protect our legitimate business interests, we will store the data until you ask us to stop, unless we can demonstrate that the reason for which we collect and store it takes precedence over your interests, rights, and freedoms.
Where we process your data based on your express consent, we will store the data until you ask us to stop.
We store the personal data collected through the job application form for 12 months. We store the personal data collected through the contact form for 12 months.

10. Automated decision-making

Getik Consulting SRL (getik.ro) does not use automated processes that can produce legal effects concerning you or that could significantly affect you. You can request at any time not to be subject to a decision based solely on automated processing if that decision produces legal effects concerning you or otherwise significantly affects you in a similar way. You cannot benefit from this right if the decision resulting from automated data processing is necessary for us to enter into or perform a contract, or is permitted by law and adequate safeguards exist for your rights and freedoms. If you have given your consent to automated processing and later change your mind, you can withdraw this consent at any time by submitting a written request to us using the contact details listed in the Contact section of the website or by emailing gdpr@getik.net.

11. Rights

• Right to be informed – you have the right to know whether your personal data is being processed; what data is collected, where it is obtained from and why, who processes it, for how long, and whether this data is subject to automated processing that could produce legal effects or significantly affect you.
• Right of access – you have the right to access, free of charge and at reasonable intervals, the data collected from/about you. This includes your right to request and obtain a copy of the personal data collected.
• Right to rectification/update – you have the right to request the rectification or updating of your personal data that is inaccurate or incomplete.
• Right to erasure – if you have withdrawn your consent, object to the processing, the processing does not comply with the provisions of the Regulation, or is no longer necessary to achieve the purposes for which the data was collected and processed, you can request that your personal data be deleted from our records.
• Right to restrict processing – where certain conditions apply, you have the right to restrict the processing of your personal data.
• Right to object – in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
• Right to object to automated processing – where your personal data is subject to automated processing, including profiling, which may produce legal effects or significantly affect you, you are entitled to ask us to exclude your data from any automated individual decision-making process.
• Right to data portability – you have the right to obtain your personal data in a suitable format or, where possible, through direct transfer from one processor to another.
• Right to assistance from the supervisory authority – you have the right to request the assistance of a supervisory authority and the right to other remedies, such as seeking compensation.
• Right to withdraw consent – you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint – if you wish to file a complaint regarding the way we process your personal data, we invite you to contact us:
         ◦  by email at gdpr@getik.net;
         ◦  by post at: Strada Ştirbei Vodă 114-116, Bucharest 010119, for the attention of the PERSONAL DATA OFFICER.

We assure you that all your reports and complaints will be treated seriously, professionally, and with full confidentiality. However, if you are dissatisfied with how we have responded to your complaints, you may contact the authorities responsible for overseeing our activity regarding personal data.In Romania, this authority is the National Supervisory Authority for Personal Data Processing, whose contact details are:

• Address: B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
• Phone: +40.318.059.211 or +40.318.059.212;
• Email: anspdcp@dataprotection.ro