Privacy Policy

Data Processing Policy

Last updated: 14/07/2025

I. General Information

The confidentiality of your personal data is a primary concern of the data controller, Școala Gimnazială Zeppelin Schule. This document is intended to inform you about the processing of your personal data in connection with your use of the website zeppelinschule.ro and the associated services, including through the contact forms and newsletter subscriptions.

II. Categories of Personal Data Processed

Zeppelin Schule processes personal data, which includes any information relating to an identified or identifiable person. This may include, but is not limited to:

• First and last name, telephone number, email address

• Data relating to how you use the website, such as your behaviour/preferences/habits

• Information provided directly when using the contact section for questions/complaints

• IP addresses, geographical location, browser type and version, operating system

• Information generated while using the Site, including the frequency and circumstances of use

• Information entered when subscribing to emails and/or newsletters

III. Purposes and Legal Bases of Processing

Zeppelin Schule processes your personal data for the following purposes and on the following legal bases:

• For marketing activities, namely sending commercial communications about the products and services offered by Zeppelin Schule by means of distance communication (email, SMS)

◦ Legal basis: Processing of data for this purpose is based on your consent, should you choose to give it. Providing data for this purpose is voluntary, and refusing to give consent will have no negative consequences. Consent must be freely given, specific, informed and unambiguous, by means of a clear affirmative action, such as ticking a box online. You can unsubscribe from these commercial communications using the option available at the end of each email/SMS.

• To resolve complaints and grievances, and to monitor traffic and improve your experience on the website.

◦ Legal basis: The legitimate interest of Zeppelin Schule in ensuring the proper functioning of the website and continuously improving the visitor experience, including by responding to comments, questions or complaints. Providing data for this purpose is voluntary, and refusal will have no negative consequences.

• To carry out various analytical studies and reports on how the website functions and to create consumer preference profiles, mainly in order to improve the experience offered on the website.

◦ Legal basis: The legitimate interest of Zeppelin Schule in continuously improving the customer experience on the Site. Providing data for this purpose is voluntary, and refusal will have no negative consequences.

• To comply with the legal obligations incumbent on Zeppelin Schule, including tax and archiving obligations.

IV. How Long We Process Your Data

As a principle, Zeppelin Schule will process your personal data for as long as necessary to achieve the processing purposes mentioned above.

• If you are a client, your data will be processed for the entire duration of the contractual relationship and thereafter in accordance with legal obligations (for example, 10 years for financial and accounting documents).

• If you withdraw your consent to the processing of your data for marketing purposes, Zeppelin Schule will stop processing your personal data for that purpose, without affecting any processing carried out previously.

• In the case of requests to delete a user account, deletion does not automatically result in the erasure of personal data; the data may be anonymised and processed for statistical purposes.

V. Disclosure of Personal Data

In order to fulfil the processing purposes, Zeppelin Schule may disclose your data to partners, third parties or entities that support Zeppelin Schule in carrying out its activities, or to central/local public authorities. Such disclosure may be necessary for:

• Administering, personalizing and improving the website and services.

• Carrying out data analysis, testing and research, and monitoring usage and activity trends.

• Developing security features and authenticating users.

• Sending commercial marketing communications, under the conditions and within the limits provided by law.

• Situations in which the disclosure of personal data is required by law or necessary for the exercise/defence of legal rights. Zeppelin Schule will not provide your personal information to third parties for their own direct marketing or that of any other third party without your express consent.

VI. Transfer of Personal Data

The transfer of personal data across borders, in particular to countries outside the European Union (EU) or the European Economic Area (EEA), is governed by strict data protection principles imposed by the General Data Protection Regulation (GDPR). These principles are intended to ensure that the level of data protection “travels” with the data, regardless of its destination.

Please note that personal information you voluntarily publish on our website or submit for online publication (for example, via comment forms or public sections) inherently becomes available worldwide via the internet. The data controller cannot control or prevent the use or misuse of this information by third parties once it has been published. Therefore, by publishing such information, the user gives their express consent to these implicit transfers.

VII. Your Rights

Under the conditions laid down by personal data protection legislation (GDPR), as data subjects you have the following rights:

Right to be informed: To receive details of the processing activities carried out by Zeppelin Schule.

Right of access: To obtain confirmation that personal data is being processed and details of the processing (purpose, categories, recipients, etc.).

Right to rectification: To have inaccurate/incomplete data corrected or completed without undue delay. The rectification/completion will be communicated to each recipient to whom the data has been disclosed, unless this proves impossible.

Right to erasure (“right to be forgotten”): Where the data is no longer necessary for the purposes for which it was collected, consent is withdrawn and there is no other legal basis, the data subject objects to the processing and there are no overriding legitimate grounds, the data has been unlawfully processed, or erasure is necessary to comply with a legal obligation. The company is not obliged to erase the data if processing is necessary for exercising the right of freedom of expression, for compliance with legal obligations, for reasons of public interest (public health, research), or for legal claims.

Right to restriction of processing: Where the data subject contests the accuracy of the data (for a period enabling verification), the processing is unlawful but the data subject opposes erasure, the controller no longer needs the data but the data subject requires it for the establishment/exercise/defence of legal claims, or the data subject has objected to the processing pending verification of whether the controller's legitimate interests override.

Right to data portability: To receive your personal data in a structured, commonly used and easily readable format, and to request that this data be transmitted to another data controller, insofar as the conditions laid down by law are met.

Right to object: To object at any time to the processing of your personal data, on grounds relating to your particular situation, where the processing is based on the legitimate interest of … (odd) or on the public interest, unless Zeppelin Schule can demonstrate compelling legitimate grounds that override. You also have the right to object at any time, free of charge and without giving reasons, to the processing of data concerning you for direct marketing purposes.

Right not to be subject to automated individual decision-making: Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. … (odd) must inform the data subject and give them the right to request human review of the decision and to contest the decision.

The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or with the competent courts, as you deem necessary. For any further questions or to exercise the rights mentioned above, please contact us at: office.zeppelinschule@gmail.com. We will respond to requests as quickly as possible, within one month of receipt at the latest, with the possibility of extending this to two months for complex requests, after informing the person concerned in advance. Requests are free of charge.

VIII. Security of Your Personal Information

Zeppelin Schule will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. All personal information provided will be stored on secure servers. The principles of data protection by design and data protection by default are built into Zeppelin Schule's processes, ensuring that data protection is taken into account from the earliest planning stages of any new processing and that default settings provide the highest level of protection.

IX. Changes to the Policy

Zeppelin Schule reserves the right to update this policy periodically by publishing a new version on the Site. We recommend that you check this page from time to time to make sure you understand any changes made to this policy.