1. Who controls your personal data?
- Centrul de Excelenta in Business CEB S.R.L.
- Trading as: Center of Excellence in Business (CEB)
- Registered office: Teiului 42 Street, Darasti-Vlasca, Giurgiu, Romania
- Company identification number: RO36075519
- Trade Register number: J2023000448524
- Email: elena.bartmus@isoceb.com
2. What personal data do we collect?
- Your name
- Company name
- Email address
- The information included in your message
If you contact us directly by email or telephone, we may also process the information you provide during that communication.
Please do not submit sensitive personal information through the contact form unless it is genuinely necessary for your enquiry.
When you visit the website, Webflow and its technical infrastructure may process limited technical information necessary to deliver, secure and maintain the website. This may include browser and device information, access times, requested pages and security-related data.
Where analytics have been enabled with your consent, anonymous or aggregated information about website usage may also be collected, such as pages viewed, session duration, traffic source, device type and interactions with website elements.
When you interact with the consent banner or privacy settings, information about your consent choices and limited technical information may be processed and recorded. This may include a consent identifier, the categories accepted or rejected, the date and time of the interaction, the page visited, and browser or device information.
3. Why do we use your personal data?
We process personal data for the following purposes:
Responding to enquiries
We use the information submitted through the contact form or provided directly by email or telephone to review your request, communicate with you and provide information about our consultancy services.
The legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b) of the GDPR. Where your enquiry does not concern a potential contract, processing may instead be based on our legitimate interest in managing business communications under Article 6(1)(f).
Providing and managing services
If you become a client, we may process your information to provide the agreed services, manage the professional relationship and fulfil contractual responsibilities.
The legal basis is the performance of a contract under Article 6(1)(b).
Complying with legal obligations
We may retain or disclose information where necessary to comply with accounting, tax, regulatory or other legal obligations.
The legal basis is Article 6(1)(c) of the GDPR.
Protecting the website and our organization
Limited technical information may be processed to maintain website security, prevent abuse, investigate technical problems and protect our legal rights.
The legal basis is our legitimate interest under Article 6(1)(f).
Website analytics
Where required by applicable law, non-essential analytics will only be activated after you provide consent. We record and apply your privacy choices, including rejections, to control non-essential tracking and maintain evidence of those choices. You can withdraw your consent at any time through the website’s privacy or tracking settings.
Analytics processing is based on your consent under Article 6(1)(a) of the GDPR. Recording and applying your privacy choices is necessary to comply with applicable data-protection obligations under Article 6(1)(c).
4. How long do we retain your information?
If an enquiry does not result in a contractual relationship, the information submitted through the contact form and related email correspondence will normally be retained for no longer than six months after the last communication.
Website analytics identifiers and related browser-storage entries may be retained for up to 18 months. Records of privacy choices are retained for five years to maintain evidence of those choices and are then automatically deleted.
- A contractual relationship is established
- Retention is required by law
- The information is necessary to establish, exercise or defend legal claims
- An unresolved dispute or investigation exists
When information is no longer required, it will be deleted or anonymized where reasonably possible.
5. Who receives your personal data?
- Authorized CEB personnel who need it to respond to enquiries or provide services
- Webflow, which hosts the website and processes contact-form submissions
- Our business email provider, Google Workspace, which delivers and stores email correspondence
- Professional advisers, such as accountants, lawyers or auditors, where necessary
- Public authorities where disclosure is legally required
- A consent-management service provider, which records and applies visitors’ privacy choices
Service providers may process personal data only for the relevant service and subject to applicable data-protection obligations.
6. Webflow forms and hosting
The website is created and hosted using Webflow. Information submitted through the contact form is stored in Webflow and sent to CEB by email.
Webflow acts as a service provider and data processor for relevant website and form information. Its infrastructure and subprocessors may process information outside Romania or the European Economic Area.
7. International data transfers
Some service providers may process information in countries outside the European Economic Area.
Where such transfers occur, we rely on safeguards recognized under applicable data-protection law, such as an adequacy decision, Standard Contractual Clauses approved by the European Commission or another legally recognized transfer mechanism.
You may contact us if you would like additional information about the safeguards relevant to your personal data.
8. Cookies and similar technologies
The website may use essential technologies required for security, form functionality and basic website operation.
These technologies do not require consent where they are strictly necessary to provide a service requested by the visitor.
Webflow Analyze may use browser local storage and anonymous identifiers to measure aggregated website activity.
Where prior consent is required, this tracking will remain disabled until consent is provided. You can accept or reject non-essential tracking through the consent banner and change your choice later by selecting the Privacy settings button displayed in the bottom-left corner of the website.
To remember and apply your choices, the website stores a strictly necessary consent preference in your browser for up to 12 months. This preference is used whether you accept, reject, or customize non-essential tracking.
Rejecting non-essential tracking will not prevent you from accessing the website or submitting an enquiry.
9. Your data-protection rights
- Request access to your personal data
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interests
- Receive certain information in a portable format
- Withdraw consent at any time where processing is based on consent
- Submit a complaint to a data-protection authority
To exercise your rights, contact us at elena.bartmus@isoceb.com. We may need to request reasonable information to verify your identity before responding.
You may also submit a complaint to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
10. Is providing the information mandatory?
Providing information through the contact form is voluntary. However, the required fields are necessary for us to understand and respond to your enquiry.
If you do not provide this information, we may be unable to contact you or evaluate your request.
11. Automated decision-making
CEB does not use information submitted through the website to make decisions based solely on automated processing that produce legal or similarly significant effects.
12. Data security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss or destruction.
However, no online transmission or storage system can be guaranteed to be completely secure. Please avoid sending confidential or sensitive information unless it is necessary and an appropriate communication method has been agreed.
13. Third-party links
The website may contain links to external websites. CEB is not responsible for the privacy practices or content of those websites. Visitors should review the privacy policy of each external service they access.
14. Children's privacy
The website and CEB’s consultancy services are intended for businesses and professionals. We do not knowingly collect personal data from children through the website.
15. Changes to this Privacy Policy
We may update this Privacy Policy when our services, website technologies or legal obligations change.
The latest version will always be published on this page, together with the date of the most recent update.
16. Contact us
For questions about this Privacy Policy or the processing of your personal data, contact:
- Centrul de Excelenta in Business CEB S.R.L.
- Email: elena.bartmus@isoceb.com
- Address: Teiului 42 Street, Darasti-Vlasca, Giurgiu, Romania