1.The identity and contact details of the operator.

Personal data are processed by SC INSPIRE PILATES CLUB SRL, with headquarters in St. Paris, no. 3F, apartment 2, Tunari locality, Ilfov County No. ONRC J23 /5201 /2018 CUI 40056345 email: [email protected], telephone: +40.745.041.700, in accordance with the provisions of EU Regulation no. 679 of 2016 regarding Personal Data Protection (GDPR) as well as Law no. 190 of 18.07.2018 regarding the measures to implement the GDPR in Romania.

2. Contact details of the data protection officer.

Since we do not process data of a special nature, nor do we process national identification numbers through operations that require large-scale, periodic or systematic monitoring of people, for SC INSPIRE PILATES CLUB SRL there is no obligation to appoint a data protection officer. On the other hand, in order to be able to comply with the principles of personal data processing imposed by the GDPR for all personal data operators, we monitor compliance with the legal provisions imposed for the processing of this type of data, through designated personnel who can be contacted for addressing any requests related to these processings, through the contact data provided in point 1 or the Contact form on the website.

3.The categories of persons concerned and the types of data processed.

The processing of personal data by SC INSPIRE PILATES CLUB SRL targets the following categories of persons:

• physical persons who have the capacity to represent companies with which a partnership exists, may exist or is being prepared regarding the products and services offered by our company.
• physical persons who can become, are or were contractual or commercial partners (clients) of SC INSPIRE PILATES CLUB SRL.

The personal data of the categories of people listed above can be taken directly from them, from the messages (sent by phone, by FAX or email) through which requests are addressed to us regarding our products and services. Also, these data can be retrieved during direct meetings between the representatives of SC INSPIRE PILATES CLUB SRL and the possible beneficiaries of the activities we carry out. Subsequently, the contact data can be supplemented with other information related to the person’s identity, such as home or residence addresses, workplace address, national identification numbers, health data, as well as other data with special character, depending on the requirements imposed by labor, commercial and financial law rules or that regulate the activities carried out for the benefit of the people whose data we process. Also, personal data, but which are anonymous (they cannot directly identify the natural persons targeted by such processing), can be retrieved automatically, from those who access the websites or online services of SC INSPIRE PILATES CLUB SRL. Such data are used to optimize and adapt the content of online services, depending on the requirements and interests of those who access them. Depending on the needs derived from the legitimate interests or the legal obligations arising from the partnership relations concluded with the natural persons concerned, the types of personal data we process are:

1. Anonymous data, associated with web traffic: IP address, geographic location data, computer system type (desktop, tablet PC, smartphone), browser type, cookie modules;
2. Identification data: Name, surname, telephone or FAX numbers, email address, home address, residential address or the address used for the delivery of products or services.
3. National identification numbers: CNP, identity document series and number, car license number, passport number, etc. – only in situations where we have a legal obligation to collect and process this type of data.
4. Data of a special nature, which allow the individualization of a natural person, through: age, racial or ethnic origin, political opinions, religious confession, philosophical beliefs, union membership, genetic data, biometric data that allow the unique identification of a natural person (photo, audio), data regarding health or data regarding sex life or sexual orientation, criminal record, etc. – only in situations where we have a legal obligation to collect and process this type of data.
5. Data collected through audio, photo and/or video recording, in order to promote our services through mass media or social media pages, and only after obtaining your prior consent for the processing of these types of data.

4. The purpose, duration and legal basis of the processing of personal data.

With regard to persons who do not have the status of commercial partner or legal (contractual) beneficiary of the activities carried out by SC INSPIRE PILATES CLUB SRL, we only process contact data for the purpose of pursuing legitimate interests related to these activities. These interests may also include processing for statistical or direct marketing purposes, but which will not be carried out by means of automatic data processing without your prior consent.

The period during which these data are processed will be identical to the period during which SC INSPIRE PILATES CLUB SRL has an unchanged legal status from the moment of taking over the data or until the exercise of a right of the persons concerned, which requires the suspension of processing or the deletion of these data.

When there is a legally valid partnership relationship between SC INSPIRE PILATES CLUB SRL and the persons concerned by the processing, the contact data and identification data imposed by the legal norms that regulate the contractual relationship are added. These data are processed for a period identical to the limitation period of the assumed legal obligations (usually this period of 3 years) or to the period imposed by law, for certain categories of documents (for example, the retention period of the personnel file is) . of 75 years).

5. The obligation to provide data.

When you contact us directly (by email or) to obtain information, provide your information, or present a legal obligation or an obligation necessary to conclude a contract. On the other hand, however, please bear in mind that without this data, we will not be able to send you any requested information regarding the activities of SC INSPIRE PILATES CLUB SRL, for which you have shown interest at some point.

When a legally regulated partnership relationship is established between you and SC INSPIRE PILATES CLUB SRL, it will be necessary to provide us with additional contact information, data imposed by the legal rules that regulate the activities that we will carry out for the benefit of you, in the absence of these data. it being impossible for us to provide you with legal services or requested products.

6. Legitimate interests

The data provided by you are processed in order to fulfill the objectives pursued by SC INSPIRE PILATES CLUB SRL regarding the activities of the company that is authorized to carry them out. These interests may include, but are not limited to, contacting partners to promote our services or products, the transfer of personal data to the companies with which we have concluded partnership relations when their activity that will be provided for the benefit of the company or . clients require access to such data, the prevention of fraud, the abusive use of our services and products, the monitoring of premises in order to ensure their physical security, the protection of their own computer systems, processing for historical, scientific and statistical purposes, processing for research (including marketing studies).

7. Security and confidentiality of personal data processed by SC INSPIRE PILATES CLUB SRL

SC INSPIRE PILATES CLUB SRL to apply all technical and organizational measures to ensure the protection of personal data that are processed through IT and communication systems and other electronic systems, as well as those processed in any other forms, against. threats and any actions that may affect the confidentiality, integrity, availability, authenticity of data or processing operations, as well as affecting the functioning of IT systems, regardless of whether they occur accidentally or intentionally.

8. Data made available to third parties.

The personal data processed through activities aimed at natural persons will not be disclosed to a third party, in order to use them for purposes other than those for which they are taken.

With strict reference to the purposes for which personal data were taken, personal data processed by SC INSPIRE PILATES CLUB SRL can be made available to intermediaries specialized in providing services strictly related to, or complementary to, the activities we carry out (such as ). be training services, electronic payment, courier services, accounting services, etc.). Whatever provided personal data to a third party, will be done only on the basis of a legal commitment whereby the legal entity or authorized natural person who will be authorized by SC INSPIRE PILATES CLUB SRL to process personal data, undertakes to respect . the provisions of the GDPR as well as the rules of internal law in the matter and to ensure a level of confidentiality for the processed data, at least equivalent to that provided by SC INSPIRE PILATES CLUB SRL.

9. Data transfer to a third country or an international organization outside the European Union

We do not process or transfer your data outside of Romania.

10.The rights of data subjects through processing.

For the natural persons targeted by the processing of personal data, SC INSPIRE PILATES CLUB SRL ensures the exercise of all the rights provided by art. 13 – art. 22 of the GDPR, as follows:

10.1. The right to information and access to processed personal data. At the moment when the personal data are taken, or within a maximum of 30 days if they are obtained indirectly, the natural person concerned by the processing is informed about the identity and contact details of SC INSPIRE PILATES CLUB SRL, the contact details of the person responsible for data protection (if applicable), the purposes and legal basis on which personal data are processed, recipients or categories of recipients of personal data, the intention of SC INSPIRE PILATES CLUB SRL to transfer personal data to a third country or an international organization (if applicable), the period for which the personal data will be stored or the criteria used to establish this period, the existence of an automated decision-making process including the creation of profiles, as well as, at least in the respective cases, pertinent information regarding the logic used and regarding the importance and expected consequences of such processing for the data subject.

10.2. The right of access to personal data. Individuals affected by the processing of personal data have the right to obtain from SC INSPIRE PILATES CLUB SRL a confirmation that personal data concerning them is being processed or not and, if so, access to the respective data and to the listed information at point a. This information can be provided free of charge only once a year, and in the event that it is requested several times in a year, starting with the second request, a cost will be charged that will be communicated when the request is made.

10.3. The right to rectification or erasure. Individuals targeted by data processing have the right to obtain from SC INSPIRE PILATES CLUB SRL, without undue delay, the rectification of inaccurate personal data concerning them. Taking into account the purposes for which the data were processed, the data subject has the right to obtain the completion of incomplete personal data, including by providing an additional statement. Also, the natural persons concerned by data processing have the right to obtain from SC INSPIRE PILATES CLUB SRL the deletion of their personal data, without undue delay, if the reasons provided for in art. 17 para. (1) of the GDPR.

10.4. The right to restrict processing. Individuals targeted by data processing have the right to obtain from SC INSPIRE PILATES CLUB SRL the restriction of personal data processing in the cases described in art. 18 of the GDPR.

10.5. The right to object to processing. Individuals targeted by data processing by SC INSPIRE PILATES CLUB SRL have the right to oppose, for reasons related to their particular situation, the processing for marketing purposes, the creation of profiles or to be the subject of a decision based exclusively on on automatic processing and through which legal effects are produced that concern the data subject or affect him in a similar way, to a significant extent.

Regarding the processing of anonymous data automatically taken when accessing our online services, you can object to this type of processing at any time, by activating the privacy settings of the browser you use, or by choosing some applications that offer anonymous browsing facilities on the web.

With regard to cookie modules, you can also, through the settings provided by your application that you use to browse the Internet, view these modules, delete them, as well as block the saving of these modules on the computer system used. Keep in mind, however, that, most often, many websites use these cookie modules to optimize the content of the website accessed by you, depending on the preferences and settings you make when you first access the website. Thus, on subsequent visits, restoring these settings will no longer be necessary. By deleting or blocking cookies, whenever you visit an Internet site, you may be asked to perform some operations to set the way the content is displayed. More details about cookie modules are presented in point 11.

10.6. The right to data portability. When personal data have been provided by a natural person in a structured format, currently used and that can be read automatically, to be processed by SC INSPIRE PILATES CLUB SRL, the natural person targeted by this type of processing has the right , in the cases provided by art. 20 of GDPR, to transmit this data to another operator, without obstacles from SC INSPIRE PILATES CLUB SRL.

10.7. The right to withdraw consent at any time, without affecting the legality of data processing carried out on the basis of consent before its withdrawal.

10.8. The right to submit a complaint to the National Supervisory Authority for the Processing of Personal Data, when a natural person targeted by the processing of personal data by SC INSPIRE PILATES CLUB SRL considers that his rights have been violated. The National Authority for the Supervision of the Processing of Personal Data can be contacted at tel. +40.318.059.211, email [email protected] or through the website www.dataprotection.ro.

10.9. If the provision of personal data represents a legal or contractual obligation or an obligation necessary for the conclusion of a contract, then the persons concerned have the right to know what are the possible consequences of non-compliance with this obligation.

The exercise of any of the rights listed in point a.i., can be done by sending a request through the contact data presented in point 1, or using the contact information presented on the website http://inspirewellness.ro.

COOKIE MODULES
11.1. What are cookies? What is a cookie?

Cookies are small files that are saved on a user’s computer. They are designed to store a small amount of data specific to a certain visitor and the website accessed by him, being accessible both to the person who owns the computer where these modules were automatically saved, and to the website that transmitted this file. This type of processing allows the server to provide a web page adapted to a specific user or, perhaps even to transmit information from a visit to a site to another similar site, with the same owner.

11.2. Are cookies enabled in my browser?

To check if your browser is configured to allow cookie files, you will have to look in the browser settings options, the section dedicated to these modules, usually under the title “privacy and security options”. Also in this section you will find information about activating or deactivating cookies, deleting cookies. You can also view the contents of these files.

11.3. What data can be found in a Cookie module?

Each cookie file is actually a small table containing pairs of values (key, data) – for example (name, John) (name, Smith). Once the cookie file has been read by the code on the server or client computer, the data can be retrieved and used to customize the web page accordingly.

11.4. When are cookies created?

Writing data to a cookie module is usually done when information is sent to the accessed website – for example, after pressing a ‘submit’ button, the data processing page could be used to storing values in a cookie. If the user has chosen to disable the cookies, the write operation will fail and subsequent visits that could extract the information already transmitted from the cookies will either work according to the default algorithm for new visitors, or will ask the user to re-enter the information that would have been stored in cookies.

11.5. Why are cookies used?

Cookies are a convenient way to associate information on how to use a site, without having to store massive amounts of data on each visitor. In addition, storing data on the server without the use of cookies would require that the recognition of each user be done only by their authentication, based on username and password. Last but not least, by using cookie modules, the amount of personal data processed in the operators’ own systems is reduced, given the fact that a cookie module is saved in the IT system owned by the natural person targeted by this type of processing.

11.6. What is the processing time of a cookie?

The expiration date of a cookie can be set when the cookie is created. By default, the cookie is “destroyed” when the browser window is closed, but it can be designed to persist for a period of time after accessing a site.

11.7. Who can access cookies?

When a cookie is created, it is possible to control its visibility by setting the main domain of the site that uses it. Then, this file will be accessible to any site that belongs to this domain. For example, the domain could be set to “principaldomain.ro”, and the cookie will be available for sites from “principaldomain.ro” or “xyz. domainnameprincipal.ro” or “domainnameprincipal.ro”. This could be used to allow related pages to “communicate” with each other.

11.8. How secure are the cookies?

There are many concerns about privacy and security on the Internet. Cookies do not constitute, in themselves, a threat to confidentiality, because they can only be used to store information that the user has voluntarily provided or that the web server already has. Although it is possible that this information can be made available to certain third-party sites, this does not represent additional risks to those specific to storing data in a central database. If you are concerned that the information you provide to a web server will not be treated as confidential, then you should ask whether you really need to provide this information or not at all.

11.9. What are tracking cookies?

Some commercial websites include embedded advertising materials that are served by a third-party site, and such ads may store a cookie for that site. This cookie will store information that could include the name of the site, certain products visited, pages visited, etc. When the user later visits another site that contains a similar ad embedded from the same third-party site, the advertiser will be able to read the cookie and use it to determine some information about the user’s browsing history. This allows publishers to serve ads targeted to a user’s interests, so that, in theory, they have a higher chance of being relevant to the user. However, many people see such “tracking cookies” as an invasion of privacy because they allow an advertiser to build profiles of users without their consent or knowledge.