politica de confidentialitate |Fundatia Montessori Cluj

We collect different types of personal data, depending on how you interact with our website and services:

Identification and contact details: first and last name, email address, phone number, postal address, personal identification number (for enrollment or billing).
Demographic data: Age, gender, information about children (in the context of kindergarten/school enrolment).
Financial data: Payment information (for purchases in the shop and registrations for seminars/events). Please note that we process payments through secure third-party payment processors and do not store your full card details directly.
Information about your interactions with our services:Enrollment forms: Information provided in enrollment forms for educational programs (preschool, school), including information about children (name, age, relevant medical history) and parent/guardian information.
Shop: Viewed and purchased products, order history.
Seminars/Events: Seminar or event registrations, attendance, feedback.
E-books/Blog: Interactions with content (downloads, views).
Technical data: IP address, browser type, operating system, pages visited, time spent on the website and referring source. This data is collected through cookies and similar technologies.
Communication data: Correspondence with us by email, phone, or other communication channels.

We collect your data in the following ways:

Directly from you: When you fill out forms (registration, contact, or order forms), subscribe to our newsletter, register for seminars/events, purchase products, or interact with us directly.
Automatically: Through the use of cookies and other tracking technologies on our website, which collect technical and usage data. For more information, please see our Cookie Policy.
From third parties: In certain circumstances, we may receive data from partners (for example, payment processors), but only to the extent permitted by law and relevant to the services we provide to you.

We use your personal data for the following purposes, based on valid legal grounds:

Contract fulfillment: Processing and managing enrollment in educational programs.
Processing shop orders and delivering products.
Managing participation in seminars and events.
Providing access to e-books and other digital content.
Fulfilling legal obligations: Compliance with tax and accounting requirements.
Responding to legal requests from public authorities.
Legitimate interest: Improving and personalizing your experience on our website.
Analyzing website and service usage to optimize them.
Communicating with you to respond to your requests, questions or feedback.
Preventing fraud and protecting the security of our systems.
Sending communications relevant to the Foundation’s activities (newsletter, updates), unless you have opted out.
Consent: Sending direct marketing communications (e.g., special offers, promotions), if you have given your explicit consent.
Placement of certain types of cookies.

We do not sell, rent, or otherwise disclose your personal data to third parties. We may share your data in the following situations and only to the extent necessary:

Service providers: We work with third parties who help us operate the website and provide our services (e.g., payment processors, hosting services, email marketing services, and web analytics services). These providers access data only to the extent necessary to perform their tasks and are contractually required to maintain data confidentiality and security.
Legal authorities: When required by law or a court order, we may disclose your data to the competent authorities.
Partners: For joint events or projects, we may share data with our partners, but only with your prior consent, where applicable.

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of access: Request a copy of the data we hold about you.
Right to rectification: Request correction of incomplete or inaccurate data.
Right to erasure (“right to be forgotten”): Request the deletion of your data under certain conditions.
Right to restriction of processing: To request that the processing of your data be restricted, under certain conditions.
Right to data portability: To receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller, under certain conditions.
Right to object: Object to the processing of your data based on legitimate interest or for direct marketing.
Right to withdraw consent: You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint: You may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you believe your rights have been violated.

To exercise any of these rights, please contact us at [email address] or [phone number]. We will respond to your request within one month of receipt, with the possibility of extending this by a further two months if necessary, taking into account the complexity and number of requests.