Why does IBB-HIB Romania use cookies and similar technologies?

We use cookies and similar technologies such as web pole, pixel tags or distributed local objects (“flash cookies”), to deliver, measure and improve our services in various ways, to personalize content and ads, to provide social networking features and to analyze traffic. We use these cookies when you visit our website and services through a browser and through our mobile app. As we adopt additional technologies, we may also collect additional data through other methods. We also provide social networking, advertising and analytics partners with information about how you use our site. They may combine it with other information you provide or gather from your use of their services. If you choose to continue using our website, you consent to our use of cookies.

We use cookies for the following purposes:

Authentication and security:

To login to www.ibb-hib.ro

To protect your security

To help detect and fight spam and other infringing activities www.ibb-hib.ro

For example, cookies help authenticate your access to www.ibb-hib.ro and prevent unauthorized parties from accessing your accounts.

Preferences:

To store data about your browser and your preferences.

To remember settings and other choices you make.

For example, cookies help us remember your preferred language or country so that we can provide content in your preferred language without asking you each time you visit.

Analytical functions and research

To help us improve and understand how people use www.ibb-hib.ro

For example, cookies help us test different versions of www.ibb-hib.ro to see what features or content users prefer, web beacons help us determine which emails are open, and cookies help us see how you interact with www.ibb-hib.ro, such as the links you click.

We also work with many partners that provide analytics, including Google Analytics, which uses cookies and similar technologies to help us analyze how users use the Services, including by rating the sites you come from.

These service providers may either collect this data on their own or it may be disclosed to them by us.

You can opt-out of some of these services through Tools such as the Google Analytics Opt-Out Browser Opt-Out Form.

Personalized content

To personalize IBB-HIB.RO with more relevant content

For example, cookies help us display a personalised list of recommended courses on the homepage.

Advertising

To provide you with more relevant advertising

To learn more about specific cookies and advertising and how you can opt-out, visit the Your Choices Online website if you are in the European Union or www.allaboutcookies.org/manage-cookies/index.html.

Please note that when advertising technology is integrated into the Services, you may still receive advertising materials on other websites and apps, but they will not be tailored to your interests.

When you use mobile apps, you may also receive personalized in-app advertising materials. Apple iOS, Android OS and Microsoft Windows each provide their own instructions on how to control personalised in-app advertising materials. For other devices and operating systems, you should review your privacy settings or contact your platform operator.

What are my privacy options?

You have numerous options to control or limit how our partners use cookies:

Most browsers accept cookies automatically, but you can change your browser settings to reject cookies by consulting your browser’s help articles. If you decide to reject cookies, please note that you may not be able to sign in, personalize or use some interactive features of the Services.

Flash cookies work differently than browser cookies, so your browser’s tools for managing cookies may not remove them. To learn more about how to manage Flash cookies, please see Adobe’s Flash cookie management article and the website storage settings panel.

To opt out of ads displayed by Google or to customize your Google display network ads, visit the Google Ads settings page.

For general information regarding specific cookies and how to disable them, visit www.allaboutcookies.org.

Updates and contact information

Please note that when advertising technology is integrated into the Services, you may still receive advertising materials on other websites and apps, but they will not be tailored to your interests.

We may occasionally update this Cookie Policy. If this is the case, we will notify you by posting the policy on our website with a new effective date. If we make significant changes, we will take reasonable steps to notify you in advance of the planned change.

If you have any questions about how we use cookies, please email us at office@ibb-hib.ro.

About cookies

Why does IBB-HIB Romania use cookies and similar technologies?

We use cookies and similar technologies such as web poles, pixel tags or distributed local objects (“flash cookies”), to deliver, measure and improve our services in various ways, to personalize content and ads, to provide social networking features and to analyze traffic. infrigeWe use these cookies when you visit our website and services through a browser and through our mobile app. As we adopt additional technologies, we may also collect additional data through other methods. We also provide social networking, advertising and analytics partners with information about how you use our site. They may combine it with other information you provide or gather from your use of their services. If you choose to continue using our website, you consent to our use of cookies.

We use cookies for the following purposes:

Authentication and security:

To log in to IBB HIB Romania

To protect your security

To help detect and fight spam and other activities that infrige IBB HIB agreements

For example, cookies help authenticate your access to IBB HIB Romania and prevent unauthorized parties from accessing your accounts.

Preferences:

To store data about your browser and preferences.

To remember settings and other choices you make

For example, cookies help us to remember your preferred language or country so that we can provide content in your preferred language without asking you each time you visit.

Analytical functions and research

To help us improve and understand how people use IBB HIB Romania

For example, cookies help us test different versions of IBB HIB România to see what features or content users prefer, web poles help us determine which email messages are open, and cookies help us see how you interact with IBB HIB România, such as the links you click.

We also work with many partners that provide analytics, including Google Analytics, which uses cookies and similar technologies to help us analyze how users use the Services, including by rating the sites you come from.

These service providers may either collect this data on their own or it may be disclosed to them by us.

You can opt-out of some of these services through Tools such as the Google Analytics Opt-Out Browser Opt-Out Form

Personalized content

To personalize IBB HIB România with more relevant content

For example, cookies help us display a personalised list of recommended courses on the homepage.

Advertising

To provide you with more relevant advertising

To learn more about specific cookies and advertising and how you can opt-out, visit the Your Choices Online website if you are in the European Union or www.allaboutcookies.org/manage-cookies/index.html.

Please note that when advertising technology is integrated into the Services, you may still receive advertising materials on other websites and apps, but these will not be tailored to your interests.

When you use mobile apps, you may also receive personalised in-app advertising materials. Apple iOS, Android OS and Microsoft Windows each provide their own instructions on how to control personalised in-app advertising materials. For other devices and operating systems, you should review your privacy settings or contact your platform operator.

Which are my privacy options?

You have numerous options to control or limit how our partners use cookies:

Most browsers accept cookies automatically, but you can change your browser settings to reject cookies by consulting your browser’s help articles. If you decide to reject cookies, please note that you may not be able to sign in, personalize or use some interactive features of the Services.

Flash cookies work differently than browser cookies, so your browser’s tools for managing cookies may not remove them. To learn more about how to manage Flash cookies, please see Adobe’s Flash cookie management article and the website storage settings panel.

To opt out of ads displayed by Google or to customize your Google display network ads, visit the Google Ads settings page.

For general information about specific cookies and how to disable them, visit www.allaboutcookies.org.

Updates and contact information

We may occasionally update this Cookie Policy. If this is the case, we will notify you by posting the policy on our website with a new effective date. If we make significant changes, we will take reasonable steps to notify you in advance of the planned change.

If you have any questions about how we use cookies, please email us at office@ibb-hib.ro.

Processing of personal data

IBB HIB Romania processes your data in accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. The privacy of your personal data is one of the main concerns of our website. Under the provisions of the GDPR, our company is obliged to manage, in a secure manner and only for the specified purposes, the personal data you provide about yourself. We reserve the right to periodically update and amend this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will post the amended version of the Privacy Policy on our website, so please check the contents of the Privacy Policy periodically.

The personal data controller is IBB HIB Romania, a Romanian legal entity with registered office in Pantelimon, Ilfov, Șoseaua de Centură nr. 48A, 077145, telephone 0312.255.010, email address: office@ibb-hib.ro, registered at the Trade Register under no. J23/3436/2021 with CUI RO38092770, bank account RO87MIRO0000906634450101, opened at ProCredit Bank – Victoriei branch, legally represented by Iulian Crăciunescu.

Please be informed that IBB-HIB Romania has a personal data protection officer with the following contact details:

E-mail: office@ibb-hib.ro

Meaning of some terms

In order to ensure a better understanding of the information contained in this document, we have included below a breakdown of the main terms used in this document.

These definitions are taken from the EU Regulation No 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR Regulation), in force since 25.05.2018. In addition, we have added some definitions and explanatory notes for ease of understanding.

Definitions

  • personal data – any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity;
  • sensitive/special data” means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership and the processing of genetic data, biometric data for the unique identification of a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person, as well as data relating to criminal convictions and offences or related security measures;
  • processing of personal data – any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise, alignment or combination, blocking, erasure or destruction;
  • Note: for the sake of illustration, we mention that the mere storage of data (even if not used) or the mere consultation of personal data may fall within the notion of processing.

storage – the keeping on any kind of medium of personal data collected;

  • personal data filing system – any organised structure of personal data which is accessible according to specified criteria, regardless of whether this structure is organised on a centralised or decentralised basis or is distributed on a functional or geographical basis;
  • controller – any natural or legal person, whether governed by private or public law, including public authorities, institutions and their territorial structures, which determines the purposes and means of the processing of personal data;

processors – i.e. the natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;

  • third party – any natural or legal person, whether governed by private or public law, including public authorities, institutions and their territorial structures, other than the data subject, the controller or the processor or persons who, under the direct authority of the controller or processor, are authorised to process data;
  • recipient – any natural or legal person, whether governed by private or public law, including public authorities, their institutions and territorial structures, to whom data are disclosed, whether a third party or not; public authorities to whom data are disclosed under a special investigative power shall not be regarded as recipients;
  • anonymous data – data which, because of their origin or the specific way in which they are processed, cannot be associated with an identified or identifiable person;
  • business address data – data which includes the name, function, business address, telephone number or e-mail address of an employee of an organisation in that capacity. Business address data does not fall within the category of personal data;
  • statistical data – data which have been obtained as a result of processing of personal data by the controller but which cannot be used to identify a person and are used exclusively for statistical and/or informational, promotional purposes.
  • DPO – data protection officer whose main role is to ensure that the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data are applied.
  • GDPR (General Data Protection Regulation) – is short for Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

What types of personal data IBB-HIB Romania processes in relation to you

We collect certain data directly from you, such as information you provide directly to our representatives, name, email address, phone number. We also collect some data automatically, such as information about your device and the parts of our services you interact with or spend time using.

We do not collect or otherwise process sensitive data, included by the General Data Protection Regulation in special categories of personal data. We also do not seek to collect or process data from individuals who are under the age of 18.

We may also collect and further process certain information about your behaviour while visiting our website in order to personalise your online experience and provide you with offers tailored to your profile. On our website we may store and collect information in cookies and similar technologies, in accordance with the Cookie Policy.

Data you provide to us

We may collect different data from or about you depending on how you use our services. When you create an account and use our services, we collect any data you provide directly, including:

Profile data

Your profile data will not be publicly viewable by others, except for our representatives involved in the sales process.

Other personal data and information

When you place an order, you provide us with information such as: the product you want, your first and last name, delivery address, billing details, payment method, phone number, bank card details, etc. We will use your personal data for the following purposes: To improve our services.

We always strive to give you the best online shopping experience. To do this, we may collect and use certain information about your shopping behaviour, invite you to complete satisfaction questionnaires following the completion of an order, or conduct market research and surveys directly or with partners.

We base these activities on our legitimate interest in conducting business, always taking care that your fundamental rights and freedoms are not affected.

Data collected for marketing purposes

We want you to be constantly informed about the best offers for the products/services you are interested in. Thus, we may send you various messages (such as: e-mail/SMS) containing information on similar or complementary products to those you have purchased, offers or promotions, as well as other marketing communications such as market research and opinion polls.

In order to provide you with information of interest to you, we may use certain data about your shopping behaviour (e.g. products viewed/added to wishlist/purchased) to create a profile of you. We always ensure that these processing operations are carried out in compliance with your rights and freedoms and that decisions taken on the basis of these operations do not have legal effects on you and do not affect you in a similar way to a significant extent.

As a rule, we base our marketing communications on your prior consent. You may change your mind and withdraw your consent at any time by:

Accessing the unsubscribe link displayed within messages you receive from us;

Contacting the Operator using the contact details described above.

Contests, prizes, promotions, surveys. We may invite you to complete a questionnaire or participate in a promotion (such as a contest, prizes comptition or challenge) either through the Services or through a third party platform. If you participate, we will collect and store the data you provide as part of your participation, such as your name, email address, date of birth or phone number. That data is subject to this Privacy Policy unless otherwise specified in the official promotion rules or other privacy policy. The data collected will be used to administer the promotion or survey, including the announcement of winners and distribution of rewards. In order to receive a reward, you may be asked to allow us to publicly post some of your information (e.g. on a winner’s page). When we use a third-party platform to administer a survey or promotion, the third party’s security policy will apply.

In addition to the above, we may send you marketing communications using your email address if you do not object to receiving such communications. If you have changed your mind and no longer wish to receive messages from us, you may at any time, by the means described above, ask us to stop processing your personal data for marketing purposes and we will comply with your request.

Communication and support

If you contact us for support or to report a problem or concern (whether or not you have created an account), we collect and store your contact information, messages and other data about you such as your name, email address, location, operating system, IP address and any other data you provide or that we collect through automated means. We use this data to respond to you and to research your question or concern in accordance with this Privacy Policy.

Data collected to protect our legitimate interests

We have the right to protect our business interests and activities and may process certain data for this purpose. By way of example, we mention:

  • for the prevention and detection of fraud, theft, loss, misuse and the like on computer devices, systems and networks, software programs, databases, servers, emails, and generally on assets and means used by our company;
  • to protect our assets, employees, collaborators, partners and customers;
  • to ensure the proper and correct conduct of our business (e.g. for the correct and complete identification of the work performed, for the invoicing of services to the client, to prevent the definitive loss of data);
  • to ensure the security and proper use of databases and, in general, personal data processed by the Company for itself or for third parties;

The general basis for such processing is our legitimate interest to conduct our business in the best possible way and to protect our commercial interests, ensuring that all measures we take guarantee a balance between our interests and your fundamental rights and freedoms.

We also base our processing in certain cases on legal provisions such as the obligation to ensure the security of goods and valuables provided for by the applicable legislation in this matter.

The data listed above is stored by us and associated with your account.

What you should note about data processed on the basis of consent

In general, your data is not processed on the basis of consent, but on other grounds described above.

In the limited cases where data processing is done on the basis of your consent, we inform you that:

You are not obliged to provide us with that data or to give your consent to its processing;

Lack of consent will not affect contractual relationships with us carried out on different grounds;

However, the lack of consent will not allow us to provide you with real-time information about certain products or services of interest to you, special offers or discounts;

If you have given your consent, you may withdraw it at any time thereafter, either by accessing the unsubscribe link displayed in the messages you receive from us, or by simply notifying us in writing at office@ibb-hib.ro, or sent to the Company’s contact details.

You do not need to justify your decision;

Withdrawal of consent means that we will no longer be able to further process that data on the basis of consent. However, depending on the circumstances, we may continue to process the data for limited purposes on other grounds, for example to preserve, exercise or defend our rights in court, to fulfil certain legal obligations or in other similar cases that are closely related to the original processing;

Please also note that withdrawal of consent will not affect processing previously carried out by us on the basis of consent, nor processing of data not carried out on the basis of consent.

How long we keep your personal data

As a general rule, we will store your personal data for as long as you have an account on the ibb-hib.ro platform. You can ask us at any time to delete certain information or to close your account and we will comply with such requests, subject to the retention of certain information even after the account has been closed, in situations where applicable law or our legitimate interests so require.

We may also delete your data if this account remains inactive for more than 5 years from the date of your last order.

Updating data

We aim to process personal data that is accurate, complete and up-to-date. Therefore, to the extent that personal data changes or if you notice errors in relation to such data, please notify us as soon as possible so that we can update that data. You can also update your employee data directly via the Human Resources Department.

To whom we pass on personal data

The personal data mentioned in this Policy may be provided to affiliated entities, partners, collaborators of the Company or other independent legal entities, such as to:

Since IBB-HIB Romania is part of a group of companies, we may transmit Data to companies belonging to the IBB Group;

Affiliated or partner entities, collaborators with whom the Company has concluded service or other contracts (e.g. distributors, suppliers, manufacturers, couriers, banks/payment service providers, marketing service providers, market research service providers, insurers, IT service providers, etc.);

Natural or legal persons acting as authorised persons for the Company in various fields related to the conclusion, registration or performance of the contract;

Accountants, auditors, lawyers, bailiffs and/or other external professional consultants.

Public authorities, persons vested with public power, public institutions, relevant courts, etc. in Romania or abroad – in case of control, or at their request or on our initiative, in accordance with the applicable legislation.

We will conclude with each of them contractual clauses required by law aimed at ensuring the protection of your personal data, including data security and confidentiality.

As of the date of this Policy, our Company does not transfer and does not intend to transfer your personal data to entities or persons outside the European Union.

The suppliers, partners, collaborators mentioned in the above section to whom we transmit personal data are Romanian persons/entities. However, we cannot exclude that they may transmit your data to other countries, which may or may not be members of the European Union (for example if their servers are located in the United States). In the contractual clauses that we will conclude with them, we will consider that these entities/persons will assume the existence of adequate security measures and guarantees aimed at ensuring the confidentiality and adequate protection of your personal data.

In the event that the Company transfers personal data to entities/persons outside the European Union, we will ensure that appropriate personal data protection measures are in place, or we will seek your consent to such transfers, with your prior information on the potential risks involved. In exceptional situations where it will be necessary to transfer data outside the European Union and the above conditions are not met, we will ensure that the transfer will only take place in cases where the law allows express exemptions (e.g. Article 49 of the GDPR Regulation).

How we protect the security of your personal data

IBB-HIB Romania is committed to ensuring the security of personal data by implementing appropriate technical and organisational measures in accordance with industry standards.

Due to the way personal data is transmitted electronically, there may be a risk of interception, loss, copying of information by unauthorized persons through the use of interception equipment or software. Upon users’ notification, the Company will take all necessary measures and will make available all necessary files to the competent authorities authorized to solve this type of crime. We cannot be responsible for such vulnerabilities of systems that are not under our control.

The Company cannot be held responsible for errors arising from user negligence regarding the security and confidentiality of their account and password.

Any access to ibb-hib.ro users’ personal information database, including any unauthorized access attempts, will be logged in an access file. Access files will make it possible for ibb-hib.ro to identify individuals who have accessed personal data without a legitimate reason in order to refer them to the competent authorities. Any attempt to access the personal data of another user, to modify the content of the site or to affect the performance of the server on which ibb-hib.ro runs, will be considered an attempt to fraud the site and will trigger criminal proceedings against the person or persons who initiated this action.

What are your rights in relation to the processing of personal data

Right of access to data: you have the right to obtain information about whether or not your personal data is being processed, the right to obtain access to your data or a copy of the data we hold about you, and the right to obtain information about the type, processing and disclosure by us of such data, or about the source of your personal data, if such data has not been collected directly from you.

The right to request information on the existence of any automated processing of your personal data, including profiling, as well as information on the logic used and the significance and expected consequences of such processing for you; in this case, if the processing is carried out by automated means you have the right not to be subject to an individual decision.

Right to rectification of data: you have the right to obtain rectification of your data that we process or control which are inaccurate; depending on the purposes for which the data are processed, you have the right to obtain the completion of data that are incomplete, including by providing additional statements.

Right to erasure of data (“right to be forgotten”): you have the right to obtain from us the erasure of your data that we process or control, in cases provided for by law.

The right to restriction of data processing: you have the right to obtain from us the restriction of the processing of your data that we process or control, to certain dates and limited purposes, according to the law (for example when the processing is unlawful, and you object to the deletion of the data, but request that their use be restricted instead).

The right to object to processing: you have the right to object to the processing of your data by us or on our behalf, in the cases and within the limits provided by law; in certain situations permitted by law, we will be able to continue processing your data even after exercising this right.

The right to data portability: you have the right, in the situations provided for by law (for example, processing based on consent, on contract or by automated means), to obtain the transfer to another operator of your data that we process or control.

The right to withdraw your consent at any time: where we process your data based on your consent, you have the right to withdraw your consent; you can do this at any time, at least as easily as you originally gave us consent; the withdrawal of consent will not affect the legality of the processing of your data that we carried out before the withdrawal.

The right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with the supervisory authority for the processing of personal data regarding the processing of your data by us or on our behalf. The supervisory authority in Romania is the National Supervisory Authority for the Processing of Personal Data.

To exercise one or more of these rights or to address any question or concern regarding any of these rights, please contact us using the following contact details:

Address: Soseaua de Beltura, 48A, Pantelimon, Ilfov

Phone: +40 312 255 010

Fax: +40 312 255 299

Email: office@ibb-hib.ro

We trust that you will not exercise these rights in an unreasonable, excessive or otherwise abusive manner.

If you are not satisfied with the way we have resolved or responded to your request or complaint or you consider that the processing is done in violation of the applicable legislation, you can file a complaint with the data supervisory authority in Romania: National Authority of Supervision of the Processing of Personal Data (ANSPDCP).