{"id":3666,"date":"2025-05-20T14:29:15","date_gmt":"2025-05-20T12:29:15","guid":{"rendered":"https:\/\/oldteam.ro\/privacy-policy\/"},"modified":"2026-01-30T15:19:16","modified_gmt":"2026-01-30T13:19:16","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/oldteam.ro\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1. Introduction<\/h3>

OLD TEAM DISTRIBUTION S.R.L. (hereinafter \u201cwe,\u201d \u201cthe company,\u201d or \u201cthe operator\u201d), owner of the website www. <Site>.ro, complies with Regulation (EU) 2016\/679 \u2013 the General Data Protection Regulation (GDPR) and places the utmost importance on protecting the confidentiality and private nature of the information entrusted to it through the use of this website.<\/p>

One of the fundamental principles of this Regulation is transparency, and through this General Privacy Policy, we aim to inform you about how we collect, use, and protect your personal data.<\/p>

We reserve the right to update, revise, and modify this General Privacy Policy periodically. In the event of any changes, we will post the updated and revised version on our website. <\/p>

2. Terms of the Regulation<\/h3>
  • Operator \u2013 the entity \u2013 in this case, the operator, or any other legal person, public authority, agency, or non-governmental organization, that processes or determines the purposes and means of processing personal data;<\/li>
  • Data subject \u2013 any natural person whose personal data may be or are being processed by the operator;<\/li>
  • Personal data \u2013 means any information relating to an identified or identifiable natural person (\u201cdata subject\u201d); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.<\/li><\/ul>

    3. Purpose of the General Privacy Policy<\/h3>

    When a data subject enters into any kind of relationship with us, they entrust us with information related to their person.

    <\/p>

    The purpose of this General Privacy Policy is to explain to data subjects what data we process, why we process it, and how we use it \u2013 in our capacity as the operator. We take privacy seriously and never share or sell our clients\u2019 personal data, of any kind, including lists or email addresses. Fully aware that personal information belongs to each individual, we take all possible measures to store it securely and process it carefully. We do not provide information to third parties without first informing the data subjects, except in situations where, according to the law, notifying the data subject is prohibited. This information is important. <\/p>

    This General Privacy Policy does not cover the applications and websites of third parties that individuals may access by following links on our website. This is beyond our control. We therefore encourage you to review the privacy policy of any website and\/or application before providing personal data. <\/p>

    According to the law, the natural person who benefits from our services or who is in any kind of relationship with us is a \u201cdata subject\u201d, meaning an identified or identifiable natural person.<\/p>

    To be fully transparent regarding data processing and to allow data subjects to easily exercise their rights at any time, we have implemented measures to facilitate communication between us, as the data operator, and the data subject.

    <\/p>

    If you are under 16 years of age, you will need parental or guardian consent before providing us with any personal information for registration or other online activities. If you are unsure about any information you see on this site, ask your parents or guardian for help. <\/p>

    Any processing of minors\u2019 personal data will be carried out only in accordance with the law.<\/p>

    4. Commitment of OLD TEAM DISTRIBUTION S.R.L.<\/h3>

    The protection of personal information of data subjects is very important to us.<\/p>

    Therefore, we are committed to complying with the new Regulation (EU) 2016\/679, the applicable national legislation, as well as the following principles:<\/p>

    • Lawfulness, fairness, and transparency:<\/li><\/ul>

      We process personal data legally and fairly. We are always transparent about the information we use, and the data subject is appropriately informed. <\/p>

      • Data integrity and purpose limitation:<\/li><\/ul>

        We use data only for the purposes described at the time of collection or for purposes compatible with the original ones. In all cases, our purposes are in compliance with the law. We take reasonable measures to ensure that personal data is accurate, complete, and up to date. <\/p>

        • Security:<\/li><\/ul>

          We have implemented reasonable security and encryption measures to protect information as effectively as possible. However, it should be noted that no website, application, or internet connection is completely secure. <\/p>

          5. About OLD TEAM DISTRIBUTION S.R.L.<\/h3>

          OLD TEAM DISTRIBUTION S.R.L., a Romanian legal entity with its registered office at Str. Foisorului, No. 13, Bl. F8c, Sc. 2, Et. 3, Ap. 135, Sector 3, Bucharest, registered with the Trade Register under no. J40\/11888\/2010, with Unique Registration Code RO27781868. <\/p>

          Under data protection legislation, we act as the DATA CONTROLLER when processing your personal data. To ensure that the personal data of data subjects is processed safely, we have made every effort to implement reasonable measures to protect their personal information. <\/p>

          Since we are always interested in your feedback and in providing any additional information you may need regarding the processing of your data, we inform you that you can contact us at the email address: office@oldteam.ro, or directly through a request submitted at our reception or sent by mail or courier to our registered office.<\/p>

          6. Rights of the Data Subject under the New Regulation<\/h3>

          \u2013 The right to withdraw consent where processing is based on consent;<\/p>

          \u2013 The right to be informed about the processing of personal data;<\/p>

          \u2013 The right of access to personal data;<\/p>

          \u2013 The right to rectify inaccurate or incomplete data;<\/p>

          \u2013 The right to erasure (\u201cthe right to be forgotten\u201d);<\/p>

          \u2013 The right to restrict processing;<\/p>

          \u2013 The right to data portability \u2013 to transfer the personal data we hold about the data subject to another operator;<\/p>

          \u2013 The right to object to the processing of personal data;<\/p>

          \u2013 The right not to be subject to a decision based solely on automated processing, including profiling;<\/p>

          \u2013 The right to seek judicial remedy;<\/p>

          \u2013 The right to lodge a complaint with the Supervisory Authority.<\/p>

          The right to be informed<\/h4>
          • This allows data subjects to know, at the time of collection (or within a maximum of one month from obtaining the data, in the case of data collected indirectly from the data subject) how their data will be used, to whom it will be disclosed or transferred, and what rights they have regarding the processed data, etc.<\/li><\/ul>

            The right of access to data<\/h4>
            • Article 15 of the GDPR allows data subjects to obtain from the controller confirmation as to whether or not personal data concerning them is being processed and, if so, access to that data and other useful information. (Article 15 of the GDPR provides a list of such useful information, including the purposes of processing, the categories of data processed, the recipients, etc.)<\/li>
            • As a result of the right of access, the data subject will receive personalized information (see the content of the notice, as presented in a later chapter), designed to explain what data is being processed, for what purpose, on what legal basis, the retention period of that data, to whom it may be transferred and for what purpose, as well as a mention of the rights the data subject has regarding those rights, including the right to lodge a complaint with the Supervisory Authority if the person is not satisfied with how the response is drafted, etc.<\/li>
            • In addition to this information regarding the processed data, the data subject has the right to obtain a copy of the data in question. While the above-mentioned information refers to categories of data (e.g., email address, name, etc.), in the case of the copy, the actual data will be provided. <\/li><\/ul>

              The right to erasure (the right to be forgotten)<\/h4>
              • Art. 17 din GDPR permite persoanelor vizate de a ob\u021bine din partea operatorului \u0219tergerea datelor cu caracter personal care o privesc, f\u0103r\u0103 \u00eent\u00e2rzieri nejustificate.<\/li><\/ul>

                The first thing a controller should do upon receiving such a request for erasure is to check whether it falls under one of the exceptions provided in Article 17(3) of the GDPR, which allows or obliges the controller to retain the data, even in the case of an erasure request, namely:<\/p>

                The right to erasure does not apply if the processing is necessary for:<\/u><\/em><\/p>

                (a) the exercise of the right to freedom of expression and information;<\/p>

                (b) compliance with a legal obligation requiring processing under Union or Member State law applicable to the controller, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;<\/p>

                (c) for reasons of public interest in the area of public health, in accordance with Article 9(2)(h) and (i) \u2013 preventive or occupational medicine, public health interest \u2013 and Article 9(3) \u2013 processed under a duty of professional secrecy; <\/p>

                (d) for archiving purposes in the public interest, scientific or historical research, or statistical purposes, in accordance with Article 89(1), to the extent that the right referred to in paragraph (1) is likely to render impossible or seriously impair the achievement of the objectives of the processing;<\/p>

                (e) for the establishment, exercise, or defense of a legal claim in court.<\/p>

                The right to rectification of data<\/h4>
                • According to Article 16 of the GDPR, the data subject has the right to obtain from the controller, without undue delay, the rectification or completion of inaccurate personal data concerning them.<\/li><\/ul>

                  The right to restriction of processing<\/h4>
                  • Article 18 of the GDPR: The right to restriction of processing is a temporary right. In certain situations, for example, between the moment when the controller decides to delete certain data (no longer needing the personal data for processing) and the actual deletion of the data, the data subject may submit a request opposing the deletion, arguing that the data is needed for the establishment, exercise, or defense of a legal claim in court. As a result of such a request, the controller stops processing the data for a certain period of time. <\/li>
                  • At the moment the restriction on processing is lifted, the controller must inform the data subject that the restriction has been removed.<\/li><\/ul>

                    The right to data portability<\/h4>
                    • Article 20 of the GDPR: The data subject has the right to receive the personal data concerning them that they have provided to the controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to whom the personal data were provided. In other words, personal data must be made available to the data subject in a structured format so that they can decide whether to download it or, alternatively, transfer it to another controller. <\/li>
                    • This right applies only to the extent that the data is processed on the basis of a contract or the consent of the data subject, and (cumulatively) when the processing is carried out by automated means.<\/li>
                    • The right to data portability applies only to data provided directly by the data subject. Data that is derived or inferred\u2014typically conclusions drawn by controllers (usually through profiling operations) about the data subjects\u2014is excluded from portability. <\/li><\/ul>

                      The right to object<\/h4>
                      • Article 21 of the GDPR: The data subject has the right to object, for example, to the processing of their personal data when it is processed for direct marketing purposes. It is very important that, whenever processing could give rise to this right, the existence of this right is clearly mentioned in the information provided to the data subject. <\/li><\/ul>

                        The right not to be subject to a decision based solely on automated processing<\/h4>
                        • Profiling occurs when your personal aspects are evaluated to make predictions about you, even if no decision is made.<\/li>
                        • Automated decision-making occurs when decisions about you are made using technological means without any human involvement; such decisions can be made even without profiling. <\/li>
                        • Data protection law establishes that you have the right not to be subject to a decision based solely on automated means if the decision produces legal effects concerning you or similarly significantly affects you. A decision produces legal effects when it impacts your legal rights (for example, the right to vote). Additionally, processing can significantly affect you if it influences your circumstances, behavior, or choices. <\/li><\/ul>

                          Decisions based on algorithms cannot use special categories of data unless you have given your consent or the processing is permitted by EU law or national law.<\/p>

                          The right of access means that you have the right to obtain confirmation from us as to whether or not your data is being processed, and if so, to access that data as well as information about how it is being processed.<\/p>

                          The right to data portability means that you can receive your personal data in a structured, machine-readable format and that you have the right to have this data transmitted directly to another controller.<\/p>

                          The right to object refers to the right to oppose the processing of personal data when such processing serves a public interest or our legitimate interest.<\/p>

                          The right to rectification refers to the correction, without undue delay, of inaccurate personal data.<\/p>

                          The right to erasure, also known as the right to be forgotten, means that you have the right to request that we delete the data we have collected about you without undue delay in any of the following situations: the data are no longer necessary for the purposes for which they were collected, you have withdrawn your consent and there is no other legal basis for the processing, you object to the processing, the data were collected unlawfully, the data must be erased in order to comply with a legal obligation, or the data were collected in connection with the provision of information society services.<\/p>

                          The right to restriction of processing may be exercised if the accuracy of the data is contested for a period sufficient to allow their verification, if the processing is unlawful but you do not wish the data to be erased and instead request restriction, if the lawyer no longer needs the personal data for processing purposes but you request them for the establishment, exercise, or defence of a legal claim, or if you have objected to the processing for the period during which it is verified whether the legitimate grounds override your rights.<\/p>

                          7. Contact details:<\/h3>

                          office@oldteam.ro<\/p>

                          www.oldteam.ro<\/p>

                          8. Categories of personal data. Purposes and legal grounds for processing <\/h3>

                          OLD TEAM DISTRIBUTION S.R.L. will process your personal data depending on the context of the interactions and the relationship you have with us, whether by telephone or through the website www.oldteam.ro.<\/p>

                          Special categories of personal data are those that reveal (according to Article 9 of the GDPR):<\/p>

                          • racial or ethnic origin;<\/li>
                          • political opinions;<\/li>
                          • religious beliefs or philosophical convictions;<\/li>
                          • trade union membership;<\/li>
                          • genetic data;<\/li>
                          • biometric data used for the unique identification of a natural person;<\/li>
                          • data concerning health;<\/li>
                          • data concerning a natural person\u2019s sex life or sexual orientation.<\/li><\/ul>

                            These special categories are excluded from processing.<\/p>

                            Potrivit GDPR (art. 6 alin (1)), prelucrarea este legal\u0103 numai dac\u0103 \u0219i \u00een m\u0103sura \u00een care se aplic\u0103 cel pu\u021bin una dintre urm\u0103toarele condi\u021bii: <\/p>

                            (a) the data subject has given consent to the processing of their personal data for one or more specific purposes;<\/p>

                            (b) processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;<\/p>

                            (c) processing is necessary for compliance with a legal obligation to which the controller is subject;<\/p>

                            (d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;<\/p>

                            (e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;<\/p>

                            (f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.<\/p>

                            A controller must base its processing activities on one of the grounds listed above.<\/p>

                            For most controllers (excluding public authorities and other highly specific types of entities), the four key conditions to be considered, also referred to as legal bases for processing, are:<\/p>

                            • The consent of the data subject;<\/li>
                            • Performance of a contract \/ steps taken prior to entering into a contract;<\/li>
                            • The existence of a legal obligation of the controller;<\/li>
                            • The existence of a legitimate interest of the controller or of a third party.<\/li><\/ul>

                              We process your first name, last name, email address, and phone number, as included in the contract concluded with us, for the following purposes:<\/p>

                              \u2013 the performance of the training contract concluded with you, including carrying out the activities performed by us in your interest pursuant to the contract between us;<\/p>

                              \u2013 compliance with fiscal obligations related to the payment of the service;<\/p>

                              \u2013 drafting documents in your name or on your behalf, in accordance with the mandate entrusted;<\/p>

                              \u2013 compliance with the obligations imposed by law on providers of adult training services;<\/p>

                              \u2013 for situations in which you have contacted us through the website.<\/p>

                              Unless otherwise stipulated, the data are stored for up to 10 years, except in the case of registers of adult training service providers, which may be kept for a longer period in accordance with the law. These data are processed because the data subject (you) has given consent to the processing of their personal data for one or more specific purposes. Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract, and processing is necessary for compliance with a legal obligation to which the controller is subject. <\/p>

                              We process your phone number and email address (by way of exception and only if you have provided them to us) for the following purposes:<\/p>

                              \u2013 to improve our services or to communicate new offers or information about us, our website, our policies, our details, or our decisions.<\/p>

                              We do not use personal data for automated processing or profiling. We never make automated decisions concerning you. We use technical measures to store data under secure conditions. We do not process data for secondary purposes that are incompatible with the purposes for which they were collected. <\/p>

                              This General Privacy Policy refers to the personal data of clients, suppliers, other individuals who contact us or visit us, and their representatives, as well as potential collaborators, and applies to data collected through our website www.oldteam.ro, as well as to all other personal data that we collect via email and contact forms.<\/p>

                              Thus, the following categories of data may be processed for visitors and users of the website:<\/p>

                              1. In the case of requests for additional information, contact, and\/or complaints: first name, last name, email address, phone number<\/li><\/ol>

                                Please note that any sensitive and\/or demographic information that you voluntarily communicate to us during the scheduling process (such as sex, citizenship, information about nationality, communication of medical or health information of the patient \u2013 conditions, previous treatments) and\/or data revealing racial, ethnic, or religious origin are considered sensitive personal data and will not be processed. However, if such information is included in documents you provide or in emails sent by you, it cannot be deleted except by deleting the email itself, which is not possible, as it is retained in order to prove that a communication took place.<\/p>

                                For the purpose of providing services, delivering goods, and carrying out payments under the relevant contracts, we may process your personal data, such as identification data and contact details.<\/p>

                                In addition, visiting the website www.oldteam.ro involves the automatic collection of the following data:<\/p>

                                • technical data, for example this may include the Internet Protocol (IP) address used to connect your computer to the internet, login information, browser type and version, time zone setting, types and versions of browser plug-ins, operating system and platform, device type, and mobile device brand. These data are collected and processed on our behalf through third-party cookie files, and you can find more information about this in the Cookie Policy. <\/li>
                                • data about your visit, for example this may include URL data, clickstream to, through, and from the website www.oldteam.ro (including date and time), and information or pages\/products that you viewed or searched for on the website.<\/li><\/ul>

                                  We process your personal data for various technical, administrative, and operational reasons, such as:<\/p>

                                  \u2013 to ensure that content is presented to you in the most effective manner;<\/p>

                                  \u2013 to improve the website www.oldteam.ro, including its functionality;<\/p>

                                  \u2013 for the administration of the website www.oldteam.ro;<\/p>

                                  \u2013 for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes;<\/p>

                                  \u2013 to keep the website www.oldteam.ro secure;<\/p>

                                  \u2013 for advertising and marketing purposes, including targeted marketing, in order to provide content that may be of greater interest to you, including personalised content.<\/p>

                                  9. Stocarea datelor cu caracter personal<\/h3>

                                  Unless otherwise stipulated, the data are stored for up to 10 years, except in the case of registers of adult training service providers, which may be retained for a longer period in accordance with the law. These data are processed because the data subject (you) has given consent to the processing of their personal data for one or more specific purposes, because processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract, and because processing is necessary for compliance with a legal obligation to which the controller is subject. <\/p>

                                  At the same time, where the data are not collected in the context of an agreement, such data will be retained for as long as necessary to achieve the intended purpose of the data collection or for any longer period required by law or by a records retention regulation.<\/p>

                                  Immediately after the end of the applicable archiving period, the data must be:<\/p>