1) Who We Are (Controller)
ESTETIC EDUCATION GROUP S.R.L.
Registered office: București, Sector 1, Șoseaua Pipera, Nr. 4, Camera nr. 4, Etaj 5
Tax ID (C.U.I.): 52024177
Trade Registry No.: J2025045285007
EUID: ROONRC.J2025045285007
Email: contact@rasacademy.ro
This Privacy Policy applies to processing carried out through the Website.
2) What Data We Process
Depending on your relationship with us, we may process data you provide directly, such as: name, surname, address, personal identification number, ID series and number, phone number, email, occupation, workplace, CV, education background, and IP address.
3) Purposes and Lawful Bases
3.1 Core purposes
- communicating with you;
- maintaining the contractual relationship;
- complying with legal obligations;
- assessing qualifications for available positions;
- ensuring the security of our premises, property, and individuals present there;
- ensuring the optimal functioning of the Website.
Lawful bases: performance of a contract or steps at your request prior to entering a contract; compliance with legal obligations; and/or our legitimate interests (such as site security and functionality).
3.2 Event registrations and tickets
We process data to register you for Events you choose to attend, manage your purchased tickets (for example, sending confirmations and access information), and communicate essential information about the Event. Lawful basis: performance of a contract or steps at your request prior to entering a contract; our legitimate interests to ensure Event delivery and security.
3.3 Analytics
With your consent, we use Google Analytics to understand how our Website is used (e.g., page views, sessions, approximate location based on IP, device and browser information, and events such as clicks or scrolls). Google may process these data as an independent controller according to its policies. You can withdraw consent at any time via the cookie banner.
3.4 Advertising and Remarketing
With your consent, we use advertising technologies to show relevant ads and measure performance, including Google Ads, Facebook Ads (Meta Pixel), and TikTok Ads (TikTok Pixel). These set identifiers that help build or access information on your device (e.g., cookies or similar IDs) to measure conversions, prevent fraud, and create/observe audiences for remarketing. You can withdraw consent at any time via the cookie banner.
4) Source of Data
We obtain data directly from you. If you act on behalf of other individuals (e.g., as an authorized representative), please inform them about how we process personal data and direct them to this Privacy Policy.
5) Retention
We retain personal data only for the time necessary to carry out the entrusted mandate and thereafter for the period required to fulfill our legal obligations. For analytics/advertising identifiers, retention follows the lifetimes stated in the Cookie Policy.
6) Disclosures and Recipients
Where necessary and proportionate, personal data may be disclosed to competent authorities when required by law and, where applicable, to service providers acting on our documented instructions (processors), subject to confidentiality and security obligations. For analytics/advertising, certain providers act as independent controllers (e.g., Google, Meta, TikTok) when they use data for their own purposes according to their policies.
7) International Transfers
If personal data is transferred outside the EEA, we will ensure appropriate safeguards under Chapter V GDPR (e.g., adequacy decisions or standard contractual clauses). Details can be provided on request.
8) Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, taking into account the state of the art and the risks involved.
9) Your Rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with the supervisory authority.
10) How to Exercise Your Rights
You can contact us at contact@rasacademy.ro or by post at the registered office indicated in Section 1. We will respond in accordance with applicable law.
11) Supervisory Authority
National Supervisory Authority for Personal Data Processing (ANSPDCP), Bucharest, Sector 1, Bdul. Gral. Gh. Magheru, No. 28-30. See also www.dataprotection.ro.
12) Cookies and Consent Management
For details on the technologies and cookie lifetimes we use, and to change your choices at any time, please visit our Cookie Policy and open the consent banner.
13) Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a new effective date.
Effective date: 3 September 2025