PRIVACY POLICY

Last update: 27.01.2022

Through this Policy we aim to inform you about how we collect, use, transfer and protect your personal data, in compliance with the provisions of Regulation (EU) 2016/679 (hereinafter referred to as GDPR).

1. About us
X-PAT ADVISORY SERVICES - Our company is a microenterprise that offers immigration consulting and assistance.

Our contact details are:
E-mail: contact@x-pat.ro
Phone: (+40) 728 205 705


2. Principles of personal data processing
X-PAT ADVISORY SERVICES, in its capacity as Processor, processes the personal data of the candidates applying for the available positions, employees, representatives of the contractual partners and other individuals who interact with the company and/or are involved in contractual relations.

Personal data are:
• Processed legally, fairly and transparently to the data subject;
• Collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
• Accurate and up to date;
• Kept in a form which permits identification of data subjects for a period not exceeding the period necessary for the purposes for which the data are processed;
• Processed in a way that ensures adequate security of personal data, including protection against unauthorized or illegal processing and against accidental loss, destruction or damage, by taking appropriate technical or organizational measures.


3. What are the types of data processed and the purpose of the processing
In the context of providing our services, for the purpose of concluding and performing agreements, we mainly process the following types of data: name, surname, company, email, telephone number and invoicing data or other data needed for the execution of the contract. In the context of hiring staff, for the conclusion and execution of individual employment contracts, we process the following types of data:
• Data from ID: Name, surname, date and year of birth, C.N.P., series and number of identity card, sex, citizenship, domicile address
• Contact details: E-mail, telephone number;
• Data from civil status documents (eg cases of benefits offered - number of days off - under the law);
• Data on vocational training (eg diplomas, studies, CV data);
• Data on the family or medical situation (eg cases of death in the family; benefits offered, processing of medical leave).
We process the following data for our visitors on the website https://x-pat.ro : name, surname, email and other contact details if they are left to the person's initiative through the contact form. We do not use your data to send you marketing communications unless you expressly opt for such communication. Even in such cases, we make sure that you have a simple option to unsubscribe (withdraw your consent) at any time. For visitors to the site, we may collect data through cookies or other similar technologies, such as: IP address, web browser, location, web pages accessed on our site, time spent on the site, internet network, device used. See the Cookie Policy (hyperlink) for more details.


4. What are the legal grounds on which the data processing is based
Your data is processed in order to conclude and perform various agreement s and in some cases in order to fulfill our legal obligations. Also, some processing activities are performed based on the prior consent or to achieve the legitimate interest of the company.


5. What is the processing time
Personal data are stored for processing for the time necessary to achieve the purposes of processing mentioned in this policy and thereafter, in compliance with legal requirements.


6. To whom we transmit personal data
Where applicable, on the basis of personal data protection agreements, we may transmit or provide access to certain personal data to the following categories of recipients: hosting service providers; If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.


7. Protective measures and guarantees
X-PAT ADVISORY SERVICES implements appropriate technical and organizational measures to ensure a high level of security and protection of personal data. We use security methods and technologies, together with employee policies and work procedures, including control and audit, to protect personal data collected in compliance with applicable law.


8. The rights of the data subject
Any data subject may exercise the following rights, as provided for by the GDPR:
• Right of access;
• Right of rectify;
• Right of erasure;
• Right to restrict processing;
• Right to portability;
• Right to object to the processing;
• Right not to be subject to a decision based solely on automatic processing, including profiling.
• Right to address the ANSPDCP and the courts;
To exercise these rights you can contact us by e-mail at contact@x-pat.ro by mail.