Privacy Policy and GDPR Information Notice
Protection of Personal Data
The protection and confidentiality of your personal data is a priority for us. All data is processed in compliance with applicable data protection legislation. Our employees and collaborators are committed to respecting the confidentiality of your data and have implemented appropriate security measures.
What is “personal data”?
According to Regulation (EU) 2016/679 (GDPR), personal data refers to any information relating to an identified or identifiable natural person – for example: name, national identification number, address, health data, etc.
Data Collection
Visits to our websites (www.c-levels.com and www.c-levels.ro) are recorded anonymously for statistical purposes. General information is collected, such as:
-
browser type,
-
accessed pages,
-
visit duration,
-
Internet service provider.
This information is not directly associated with your identity.
Cookies
Our website uses cookies that do not contain personal data but only anonymous identifiers. These cookies facilitate navigation and enhance the user experience. You may disable cookies in your browser settings; however, this may impact optimal site functionality.
We also use web analytics tools (such as Google Analytics), which may collect traffic information through online identifiers. This data is used solely to improve our services and does not allow for direct user identification.
Data Processing and Use
Your data is processed only for specified purposes, based on a legal basis and in accordance with concluded contracts or your given consent.
Security Measures
We implement appropriate technical and organizational measures to prevent unauthorized access, loss, or disclosure of your personal data. All access is monitored and secured. We do not transfer your data to third parties, except in the following situations:
-
when required by law;
-
when necessary for the provision of contracted services.
Information on Personal Data Processing
Data Controller:
C-Levels Wellbeing SRL
Registered Office: Lakeview Building, Str. Barbu Văcărescu 301–311, 5th Floor, Bucharest, Romania
Email: dpo@c-levels.ro
1. Categories of Personal Data Processed
We may process, without limitation:
-
full name;
-
national ID number or equivalent identifier;
-
full address;
-
contact details: phone, email;
-
information on education, job position, income;
-
image, signature, IP address, geolocation (GPS);
-
information on family members or dependents;
2. Data about Third Parties
If you provide data about third parties (e.g., family members or beneficiaries), you must inform them in advance and obtain their prior consent.
3. Processing Principles
We respect the following GDPR principles:
-
lawfulness, fairness, and transparency;
-
purpose limitation;
-
data minimization;
-
accuracy and updating;
-
storage limitation;
-
integrity and confidentiality.
4. Legal Grounds for Processing
Processing is based on:
-
Article 6(1)(a), (b), (c), and (f) of the GDPR;
-
execution of contracts;
-
your explicit consent, where applicable;
-
legal obligations (fiscal, archiving);
-
the legitimate interest of the controller.
5. Use of National Identification Number
The National Identification Number (CNP) is used solely for accurate client identification, error prevention, and efficient communication. Refusal to provide this information may prevent the conclusion of a contract.
6. Duration of Processing
Data is retained only for the time necessary to fulfill the purposes for which it was collected, or as required by law. The necessity of data retention is reviewed periodically.
7. Data Recipients
Personal data may be disclosed to:
-
employees, collaborators, or subcontractors;
-
competent public authorities;
-
third parties only with your consent;
-
contractual partners (e.g., IT, security, archiving, consulting).
For any transfers outside the EU, we ensure that adequate safeguards are applied, in accordance with GDPR requirements.
8. Your Rights
You have the following rights:
-
Access – to your data and processing details;
-
Rectification – of inaccurate or incomplete data;
-
Erasure (“right to be forgotten”);
-
Restriction of processing, in certain cases;
-
Data portability – transfer to another controller;
-
Objection, including to direct marketing;
-
Rights related to automated decision-making;
-
Right to lodge a complaint – with the supervisory authority or a court.
To exercise your rights, please contact us at dpo@c-levels.ro.
9. Limitation of Liability for Security
The user understands that data transmission over the Internet cannot be fully secured. C-Levels Wellbeing SRL cannot guarantee absolute security of electronic transmissions and is not liable for security breaches beyond its reasonable control or that cannot be attributed to its fault or negligence.
By using this website, the user expressly waives any claims against C-Levels Wellbeing SRL regarding potential security incidents that are outside the company’s direct control.
10. Disclaimer Regarding Website Information
The website is intended for informational and presentation purposes only. The information regarding services, benefits, or offers does not constitute a contractual commitment and does not in itself confer any rights to such services. Specific conditions for service delivery are governed solely by the contract concluded between C-Levels Wellbeing SRL and the client/user.
