{"id":1954,"date":"2025-09-26T16:01:32","date_gmt":"2025-09-26T16:01:32","guid":{"rendered":"https:\/\/thinktank.com.ro\/index.php\/privacy-policy\/"},"modified":"2026-04-21T14:55:45","modified_gmt":"2026-04-21T14:55:45","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/thinktank.com.ro\/index.php\/privacy-policy\/?lang=en","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"1954\" class=\"elementor elementor-1954 elementor-955\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1c8ac36 e-flex e-con-boxed e-con e-parent\" data-id=\"1c8ac36\" data-element_type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-58ddf2d e-con-full e-flex e-con e-child\" data-id=\"58ddf2d\" data-element_type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-9dfbc7b e-con-full e-flex e-con e-child\" data-id=\"9dfbc7b\" data-element_type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4facd31 elementor-widget elementor-widget-text-editor\" data-id=\"4facd31\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 24px;\"><strong>Privacy Policy<\/strong><\/span><\/p><p><strong><em>Last updated: September 26, 2025<\/em><\/strong><\/p><ol><li><strong><u>INFORMATION ABOUT THE DATA CONTROLLER<\/u><\/strong><\/li><\/ol><ul><li><strong>Name:<\/strong> THINK TANK EXPERT CONSULTING SRL<\/li><li><strong>Registered office:<\/strong> Address: Aleea Scolii 1 Sc. B Et. 3 Ap. 12 Cod 710174 . Loc. Botosani, jud.Botosani<\/li><li><strong>Unique Identification Code (CUI):<\/strong> 37851308<\/li><li><strong>Email address:<a href=\"mailto:contact@thinktank.com.ro\">contact@thinktank.com.ro<\/a><\/strong><\/li><\/ul><ol start=\"2\"><li><strong><u>CATEGORIES OF DATA COLLECTED, METHODS OF COLLECTION, AND PURPOSE OF PROCESSING<\/u><\/strong><\/li><\/ol><p><strong><u>2.1. Categories of personal data processed<\/u><\/strong><\/p><p>Through the contact form available on the website <a href=\"https:\/\/www.thinktank.com.ro\/\">https:\/\/www.thinktank.com.ro\/ <\/a>, the Controller collects the following categories of personal data:<\/p><ul><li><strong>First and last name<\/strong> \u2013 necessary for identifying the applicant;<\/li><li><strong>Phone number<\/strong> \u2013 to contact the applicant for clarification of the request;<\/li><li><strong>Email address<\/strong> \u2013 for communicating the response to the request, if provided;<\/li><li><strong>Company<\/strong> \u2013 optional information, voluntarily submitted;<\/li><li><strong>Postal address<\/strong> \u2013 optional information, voluntarily submitted;<\/li><li><strong>Project description<\/strong> \u2013 the content of the message sent, which may include additional details relevant to the request.<\/li><\/ul><p><strong><u>2.2. Automatically collected data<\/u><\/strong><\/p><p>In addition to the data completed by the user, the following technical information may be automatically collected when submitting the form:<\/p><ul><li><strong>Public IP address<\/strong>;<\/li><li><strong>Browser and operating system data<\/strong>;<\/li><li><strong>Information collected via Google reCAPTCHA<\/strong>, used exclusively to prevent automated submission of abusive requests (spam).<\/li><\/ul><p>This information is collected to ensure the cybersecurity of the platform and the proper functioning of the service.<\/p><p><strong><u>2.3. Method of collection<\/u><\/strong><\/p><p>Data is collected directly from the data subject by completing and submitting the electronic contact form available on the website. The provision of data marked as mandatory is necessary to allow processing of the submitted request. <\/p><p><strong><u>2.4. Purpose of processing<\/u><\/strong><\/p><p>The collected personal data are processed exclusively for the following purposes:<\/p><ul><li>Analysis of the consultancy request submitted via the form;<\/li><li>Formulation and transmission of a response to the applicant;<\/li><li>Any pre-contractual steps necessary at the request of the data subject;<\/li><li>Securing the IT system and preventing abusive use of the form;<\/li><li>Temporary archiving of requests for internal purposes, based on legitimate interest.<\/li><\/ul><p> <strong> THINK TANK EXPERT CONSULTING SRL<\/strong> does not use the collected data for marketing, automated profiling, or commercial campaigns without the explicit consent of the data subject.<\/p><ol start=\"3\"><li><strong><u>LEGAL BASIS FOR PROCESSING PERSONAL DATA<\/u><\/strong><\/li><\/ol><p>The processing of personal data carried out through the website <a href=\"https:\/\/www.thinktank.com.ro\/\">https:\/\/www.thinktank.com.ro\/<\/a> is based on clear legal grounds, established in accordance with the provisions of Article 6 of Regulation (EU) 2016\/679 (General Data Protection Regulation \u2013 GDPR).<\/p><p><strong><u>3.1. Execution of steps at the request of the data subject (Art. 6 para. (1) lit. b GDPR)   <\/u><\/strong><\/p><p>The processing of data submitted via the contact form is primarily based on the necessity of taking steps at the request of the data subject, for the purpose of analyzing the request and formulating an appropriate response. This category includes: <\/p><ul><li>analysis of information submitted via the form;<\/li><li>contacting the applicant for clarifications;<\/li><li>preparing a personalized response regarding the requested consultancy.<\/li><\/ul><p>These operations are necessary to initiate a potential contractual relationship and cannot be carried out without providing this minimum data.<\/p><p><strong><u>3.2. Legitimate interest of the Controller (Art. 6 para. (1) lit. f GDPR)   <\/u><\/strong><\/p><p>The Controller may process certain technical or administrative data (e.g., IP address, browser or operating system information, form submission date) based on its legitimate interest, for the purpose of:<\/p><ul><li>ensuring the technical functioning and security of the website;<\/li><li>preventing fraud, automated attacks, and abusive use of the contact form;<\/li><li>time-limited archiving of received requests for internal records and traceability.<\/li><\/ul><p>The Controller has evaluated the balance between legitimate interest and the rights of data subjects and has concluded that the processing of this data does not negatively affect the fundamental rights and freedoms of users.<\/p><p><strong><u>3.3. Explicit consent (Art. 6 para. (1) lit. a GDPR)   <\/u><\/strong><\/p><p>If, in the future, the website includes additional functionalities that involve:<\/p><ul><li>sending newsletters;<\/li><li>the use of non-essential cookies (e.g., advertising or statistics);<\/li><li>data collection through additional forms,<\/li><\/ul><p>The processing of this data will be carried out exclusively based on the explicit, freely given, and informed consent of the data subject, obtained through clear technical means (checkboxes, compliant cookie banners, etc.).<\/p><ol start=\"4\"><li><strong><u>RECIPIENTS OF DATA AND DISCLOSURE CONDITIONS<\/u><\/strong><\/li><\/ol><p><strong>THINK TANK EXPERT CONSULTING SRL<\/strong> respects the principle of personal data confidentiality and limits its disclosure only to those situations strictly necessary for fulfilling the purposes of processing or for complying with legal obligations.<\/p><p><strong><u>4.1. Internal access<\/u><\/strong><\/p><p>The data completed via the contact form are accessible only to authorized employees or collaborators of <strong>THINK TANK EXPERT CONSULTING SRL<\/strong>, involved in:<\/p><ul><li>analysis and management of consultancy requests;<\/li><li>administrative activities and direct communication with the applicant.<\/li><\/ul><p>All persons processing data are instructed on confidentiality and security obligations and are subject to appropriate contractual obligations.<\/p><p><strong><u>4.2. Processors (service providers)<\/u><\/strong><\/p><p> <strong> THINK TANK EXPERT CONSULTING SRL<\/strong> may collaborate with external providers who act as processors, insofar as they provide essential services for the functioning of the website and for the transmission of contact forms.<\/p><p>Possible examples:<\/p><ul><li>web hosting provider;<\/li><li>email platform provider used for receiving requests;<\/li><li>web security infrastructure provider (e.g., Google for reCAPTCHA).<\/li><\/ul><p>In all these cases:<\/p><ul><li>processing agreements are concluded in accordance with Art. 28 GDPR;<\/li><li>it is ensured that providers implement appropriate technical and organizational measures for data protection;<\/li><li>these providers cannot use the data for purposes other than those established by the controller.<\/li><\/ul><p><strong><u>4.3. Public authorities and state institutions<\/u><\/strong><\/p><p>Data may be transmitted to competent authorities (e.g., ANSPDCP, courts, tax authorities) <strong>only if there is an express legal obligation<\/strong> or based on a duly justified official request, in accordance with applicable national and European legislation.<\/p><p><strong><u>4.4. International transfers<\/u><\/strong><\/p><p>The collected data are not transferred outside the European Economic Area (EEA). If, exceptionally, such a transfer becomes necessary, it will only be carried out: <\/p><ul><li>to countries that offer an adequate level of protection, recognized by the European Commission;<\/li><li>based on appropriate safeguards provided for in Art. 46 GDPR (e.g., standard contractual clauses);<\/li><li>with prior notification to the data subject.<\/li><\/ul><ol start=\"5\"><li><strong><u>PERSONAL DATA STORAGE PERIOD<\/u><\/strong><\/li><\/ol><p><strong>THINK TANK EXPERT CONSULTING SRL<\/strong> retains personal data collected through the website <a href=\"mailto:contact@thinktank.com.ro\"><strong>contact@thinktank.com.ro<\/strong><\/a> only for the period necessary to fulfill the purposes for which they were collected or as long as required by applicable legal provisions.<\/p><p><strong><u>5.1. Data collected via the contact form<\/u><\/strong><\/p><p>Data completed by users in the contact form are retained for a maximum period of 12 months from the date of submission of the request, with the following justifications:<\/p><ul><li>to allow identification of the request and associated correspondence in case of subsequent discussions;<\/li><li>to internally document received requests based on legitimate interest;<\/li><li>to prevent duplication or abuse of communication.<\/li><\/ul><p>If, following the request, a contractual or pre-contractual relationship is initiated, the data will be retained according to the terms provided by applicable tax, accounting, or commercial legislation.<\/p><p><strong><u>5.2. Automatically collected data (technical logs, IP, reCAPTCHA)<\/u><\/strong><\/p><p>Automatically collected technical data (e.g., IP address, timestamp, browser) are retained for a maximum period of 6 months, exclusively for the purposes of:<\/p><ul><li>IT security;<\/li><li>detection of fraud attempts;<\/li><li>prevention of abusive use of the contact form.<\/li><\/ul><p>This data is not used for commercial, profiling, or marketing purposes.<\/p><p><strong><u>5.3. Data deletion<\/u><\/strong><\/p><p>After the expiry of the aforementioned periods:<\/p><ul><li>data are automatically deleted from the IT systems managed by the Controller or authorized providers;<\/li><li>if data are found in technical backups, they will be overwritten according to pre-established retention cycles.<\/li><\/ul><p>Data subjects may request the deletion of data before the expiry of storage periods, if there is no legal basis for their retention. The Controller will analyze the request and respond within the legal timeframe. <\/p><ol start=\"6\"><li><strong><u>RIGHTS OF DATA SUBJECTS<\/u><\/strong><\/li><\/ol><p>In accordance with Regulation (EU) 2016\/679 on data protection (GDPR), individuals whose data are processed by <strong>THINK TANK EXPERT CONSULTING SRL<\/strong> benefit from a series of legal rights. The Controller ensures the exercise of these rights in a transparent, non-discriminatory, and accessible manner. <\/p><p><strong><u>6.1. Right of access (Art. 15 GDPR)<\/u><\/strong><\/p><p>You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the relevant information, including:<\/p><ul><li>the purposes of the processing;<\/li><li>the categories of personal data concerned;<\/li><li>the recipients or categories of recipient to whom the personal data have been or will be disclosed;<\/li><li>the envisaged period for which the personal data will be stored;<\/li><li>the rights you are entitled to;<\/li><li>the source of the data, if not collected directly from you.<\/li><\/ul><p><strong><u>6.2. Right to rectification (Art. 16 GDPR)<\/u><\/strong><\/p><p>You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you or the completion of incomplete personal data.<\/p><p><strong><u>6.3. Right to erasure (&#8216;right to be forgotten&#8217;) (Art. 17 GDPR)<\/u><\/strong><\/p><p>You may request the erasure of personal data concerning you in the following situations:<\/p><ul><li>the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;<\/li><li>you withdraw consent on which the processing is based (where consent was the legal basis for processing);<\/li><li>you object to the processing and there are no overriding legitimate grounds for the processing;<\/li><li>the personal data have been unlawfully processed;<\/li><li>the erasure is necessary for compliance with a legal obligation.<\/li><\/ul><p>This right applies within the limits of applicable regulations and in compliance with legal archiving or retention obligations, where applicable.<\/p><p><strong><u>6.4. Right to restriction of processing (Art. 18 GDPR)<\/u><\/strong><\/p><p>You have the right to obtain from the controller restriction of processing where one of the following applies:<\/p><ul><li>you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;<\/li><li>the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;<\/li><li>the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;<\/li><li>you have objected to processing pending the verification whether the legitimate grounds of the controller override yours.<\/li><\/ul><p><strong><u>6.5. Right to object (Art. 21 GDPR)<\/u><\/strong><\/p><p>You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interest. In this case, the data will no longer be processed, unless compelling legitimate grounds for the processing are demonstrated. <\/p><p><strong><u>6.6. Right to data portability (Art. 20 GDPR)<\/u><\/strong><\/p><p>You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where the processing is based on consent or on a contract and is carried out by automated means.<\/p><p><strong><u>6.7. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)<\/u><\/strong><\/p><p>You have the right to lodge a complaint with the <strong>National Supervisory Authority for Personal Data Processing (ANSPDCP)<\/strong>, if you consider that your rights have been violated:<\/p><ul><li>Website: <a href=\"https:\/\/www.dataprotection.ro\/\">www.dataprotection.ro<\/a><\/li><li>Address: Bd. G-ral Gheorghe Magheru 28\u201330, Sector 1, Bucharest, Romania <\/li><li>Email: anspdcp@dataprotection.ro<\/li><\/ul><p><strong><u>6.8. Exercise of rights<\/u><\/strong><\/p><p>For any request regarding the exercise of the rights mentioned above, please contact us by email: <a href=\"mailto:contact@thinktank.com.ro\"><strong>dpo<\/strong><\/a><strong><a href=\"mailto:office@avalana.ro\">@thinktank.com.ro<\/a><\/strong><\/p><p>The Controller will respond without undue delay and, in any case, within a maximum of 30 calendar days from the date of receipt of the request. This period may be extended once, by a maximum of 2 months, depending on the complexity and number of requests, with prior notification to the applicant. <\/p><ol start=\"7\"><li><strong><u>DATA SECURITY AND PROTECTION MEASURES<\/u><\/strong><\/li><\/ol><p><strong>THINK TANK EXPERT CONSULTING SRL<\/strong> implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of processed personal data.<\/p><p>These include, but are not limited to:<\/p><ul><li>use of a secure connection (HTTPS);<\/li><li>restricted access to data, only for authorized personnel;<\/li><li>protection measures against unauthorized access, loss, or alteration of data.<\/li><\/ul><p>Data processing operations are monitored and managed responsibly, in accordance with applicable legal obligations.<\/p><p><strong><u>CHANGES TO THE PRIVACY POLICY<\/u><\/strong><\/p><p> <strong> THINK TANK EXPERT CONSULTING SRL<\/strong> reserves the right to periodically update this Privacy Policy to reflect legislative, technical, or operational changes.<\/p><p>Any changes will be published on the website, with the date of the last update. We recommend that you periodically check the content of this section. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Last updated: September 26, 2025 INFORMATION ABOUT THE DATA CONTROLLER Name: THINK TANK EXPERT CONSULTING SRL Registered office: Address: Aleea Scolii 1 Sc. B Et. 3 Ap. 12 Cod 710174 . Loc. Botosani, jud.Botosani Unique Identification Code (CUI): 37851308 Email address:contact@thinktank.com.ro CATEGORIES OF DATA COLLECTED, METHODS OF COLLECTION, AND PURPOSE OF PROCESSING 2.1. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-1954","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/pages\/1954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/comments?post=1954"}],"version-history":[{"count":1,"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/pages\/1954\/revisions"}],"predecessor-version":[{"id":1955,"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/pages\/1954\/revisions\/1955"}],"wp:attachment":[{"href":"https:\/\/thinktank.com.ro\/index.php\/wp-json\/wp\/v2\/media?parent=1954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}