Association for the Prevention and Combating of Fraud (APCF)

Sos. Bucuresti -Ploiesti, no. 19-21, sector 1, Bucharest

www.apcf.ro

contact@apcf.ro

In accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR), we inform you about how APCF collects, uses and protects your personal data when you access our online or in-person course platform.

1. Categories of processed data

In order to provide our services, we may collect and process the following categories of data:

• Identification data: name, surname, home address (if necessary for billing).

• Contact data: e-mail, telephone number.

• Payment data: details of transactions made (we do not store bank card data, these are processed through a secure payment processor: Netopia).

2. Purposes and grounds for processing

Personal data is processed for the following purposes:

• Provision and administration of online courses (ground: execution of the contract between the parties).

• Invoicing and payment management (ground: legal obligation).

• Sending commercial communications and personalized offers (ground: user consent).

• Compliance with legal obligations (e.g. keeping accounting documents

3. Data storage period

Personal data will be stored:

• For the contractual duration of the provision of services.

• Thereafter, in accordance with legal obligations (e.g. invoices must be kept for 10 years).

• For marketing, until the withdrawal of consent.

4. User rights

According to the GDPR, you have the following rights:

• Right of access to your data.

• Right to rectify inaccurate data.

• Right to erasure ("right to be forgotten").

• Right to restriction of processing.

• Right to data portability.

• Right to object to data processing for marketing.

• Right to file a complaint with the ANSPDCP (National Supervisory Authority for the Processing of Personal Data).

To exercise these rights, you can send a written, dated and signed request to the Association for the Prevention and Combating of Fraud, CUI: 33555547, with registered office in Bucharest, Sos. Bucuresti-Ploiesti, no. 19-21, Et. 6, sector 1 or email: contact[at]apcf.ro.

You have the possibility to notify at any time to the ANSPDCP

https://www.dataprotection.ro/?page=contact for the violation of rights related to the processing of personal data and you can complain about the non-compliance with the rights guaranteed by the applicable legislation.

Data Transfer

Your data will not be transferred to third parties without your consent, except in cases required by law (e.g. tax authorities) or in collaboration with IT service providers, payment processors or other entities necessary for the conduct of the activity.

6. Data Security

We adopt technical and organizational measures to protect personal data against unauthorized access, loss or alteration.

7. Online payment processing

To offer you the option of online payment, we use the NETOPIA PAYMENTS payment processing platform. When you opt for online payment, you will be redirected to the NETOPIAPAYMENTS platform, where you will be asked for certain personal data depending on the payment method chosen - for example, card details (card number, cardholder's name & surname, expiration date and security code on the back of the card). This data is used strictly for processing the payment through the NETOPIA PAYMENTS platform and is not communicated to us.

In certain situations, we may transmit a series of information regarding the transaction directly to the NETOPIAPAYMENTS platform, namely: transaction value, telephone number and e-mail address (if these have been completed in the customer's account). In order to ensure the tracking of transactions and the settlement of payments, NETOPIAPAYMENTS provides us with reports regarding the payments we collect. These reports may include personal data of payers (name, surname, email, phone number, billing address). NETOPIAPAYMENTS transmits this data to us as part of payment processing services.

In case of problems related strictly to the processing of your payment, you will be able to be contacted directly by NETOPIA PAYMENTS representatives to resolve them. The NETOPIA PAYMENTS platform processes your personal data as an independent operator for the processing of online payments. You can consult more details about their policy for the processing of your personal data collected for the purpose of processing payments here: https://netopia-payments.com/nota-de-informare-gdpr-platitori