GENERAL POLICY ON THE PROCESSING OF PERSONAL DATA
Version 2.0
Last modified on 19.06.2023
- This document is relevant to you regardless of your position: customer, partner – natural person, representative of a partner – legal person, applicant for an offer or person contacting us for other purposes (e.g. in connection with requests or complaints), visitor, visitor to our website, etc.
- Identification data of the Operator;
- Websites and services covered by the policy;
- Other policies and information we encourage you to consult;
- The categories of data processed, the purposes for which we process that data, the grounds justifying our processing and the periods for which we store the data;
- To whom we disclose data;
- Consequences of refusing to provide us with your personal data;
- Your rights and information on exercising them; and
- Changes to this policy.
- Who we are and how we can be contacted
- StockForceOne Limited, Gibraltar, company number: 124016 and we are the data controller. If you need to contact us, you have several options:
– You can email us at: support @ stockforceone.com
- Websites to which this policy applies including those posted on our websites or about which we otherwise inform you. This policy also does not cover the activity of other companies or individuals who advertise our services or products or otherwise process your data through our websites or on social media in connection with our pages.
- Other policies and information we encourage you to consult
Our website may, from time to time, contain links to and from our websites and the digital platforms of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own personal data processing policies as well as different terms and conditions of use and that we accept no responsibility or liability for these policies or for the way in which any independent third party processes your data. personal data or for the purposes and means by which it uses or makes available those websites or platforms. Please check these policies before submitting any personal data to or engaging in any interaction with these websites or platforms.
- Data categories. Purpose. Basis
| unique course access identifier/subscription number | rmation of the steps for the conclusion/ conclusion of a contract with the Operator for the supply of the requested products and services | contractual/commercial relationship;any legal retention period (e.g. for tax purposes, archiving) | |||
| employer) | the contractual/commercial relationship;any legal proceedings before any authority/body to defend the rights of the Operator;any legal retention period (e.g. for tax purposes, archiving) | ||||
| if a user claims fraudulent access to the account)i protecting our data and systems against attacks and other similar acts in the virtual environment | Potentially fraudulent login or usage data | 3/6] months | |||
| phone | |||||
| 1or 2 above) | |||||
| 3 years from the end of the competition/contest in respect of the entrants to defend against a claim; retention periods required by tax laws (winners’ dates), archiving and other applicable laws. | |||||
| the duration of the contractual relationship with the Operator;during any legal proceedings before any authority/body in which the Operator is involved;for retention periods required by tax, archiving and other applicable laws. | |||||
| The data will be kept for no longer than the duration of the relationship with the Operator or until consent is withdrawn (which can be done including by desynchronization with the website). | |||||
| The period of availability of recorded mentoring/training sessions;the period of existence of the account;until consent is withdrawn (where the legitimate interest of the Operator does not prevail, e.g. in the case of video recordings of training/mentoring sessions);no more than 30 days after confirmation of the identity of the account holder;during any legal proceedings before any authority/body in which the Operator is involved (including to prove breaches of the rules of conduct in mentoring/training sessions). | |||||
| Period of participation in the group/page concerned;Period of existence of the group/page (for messages posted by participants);During any legal proceedings before any authority/body in which the Operator is involved (including to prove breaches of the rules of conduct in mentoring/training sessions). |
- About third party data
If you submit personal data about other persons (e.g. your representatives, family members, dependants, etc.), you must ensure that you have informed them of this and directed them to this policy informing them of how the Controller processes personal data.
We take no responsibility for the ways in which you. you collect and process third party data or the lawfulness of such processing carried out by you. nor for the accuracy of the personal data that you have provided. you transmit them on your own initiative or as a result of processing carried out by you. independently. The responsibility for the legality and correctness of data processing and transmission of data to third parties rests entirely with you.
- About the data of minors
- To whom we will disclose PERSONAL DATA ABOUT YOU
As a rule, we will not disclose your data to other natural or legal persons.
We try to limit access to data to people outside Stockforceone LIMITED. However, in some cases we may need to disclose your data as described below.
We may disclose your data to other companies or individuals, such as: individuals or companies acting as processors for the Operator in various areas (such as document archiving, document destruction, or data storage, payment services, website maintenance services, billing services, various services we may outsource, such as in the area of human resources), other persons, courts, authorities. In these cases, we will disclose data for legitimate reasons related to our business, such as ensuring our ability to secure documents, relieving us of our work, establishing, defending and exercising our or another person’s rights or interests. We use hosting services provided by [●]. which hosts our database.
Also, as mentioned above, in some cases we may have a legal obligation to disclose data to public authorities or other natural or legal persons.
In all these cases, we will ensure that the recipients of your personal data process it securely and confidentially, in accordance with the purpose for which we have transmitted it and with respect for your rights.
If you have registered on the website through a legal entity/natural person (e.g. employer), the contact persons of that legal entity/employer or partner may have access to your activity. on the website (e.g. mentoring/training sessions you have attended, what materials you have accessed/downloaded, duration of website access) by virtue of your reporting or other relationship with such entity/person. In this case, we may have a specific contractual obligation to the individual in this regard but we are not responsible for how that individual uses and processes information about you. and how such use or processing independent of us may affect you.
Please note that participation in Facebook, Telegram, WhatsApp or other external, third-party platforms (e.g. Teams, Zoom) involves the processing of personal data by entities that own and operate these platforms independently of [Societate]. We assume no responsibility for such processing, its legality or security.
Also, by joining the Facebook page or groups on Telegam, WhatsApp or other external platform (e.g. Teams, Zoom), you will share personal data visible on these platforms and required by the platform providers with other participants registered on the same page or group with you.
- under which conditions we may transfer your data to third countries or international organisations
At this time we do not transfer and do not intend to transfer your personal data or any part of it to other companies, organisations or individuals in third countries or to international organisations.
If we need to transfer your data to any of the above destinations, we will inform you in advance of our decision, giving you the necessary time to exercise your rights in relation to the transfer of your data.
Although we are committed to keeping your personal data secure, sending information online over the Internet is not completely secure. We, together with our service providers, will use all reasonable efforts to protect your personal data, but the information provided is at your own risk.
- what can happen if you do not provide us with the data
- Lack of automated decision-making process
We do not make decisions based solely on automated processing of your data (including profiling) that produce legal effects concerning you or similarly affect you to a significant extent.
- your rights and how to exercise them
- Right of access to data. You have the right to obtain access to the data about you that we process or control or copies thereof; you also have the right to obtain information from us about the nature, processing and disclosure of such data.
- The right to rectify data. You have the right to obtain the rectification of inaccuracies in the data we process or control about you.
- The right to erasure (“right to be forgotten”). You have the right to obtain from us the deletion of data about you that we process or control.
- The right to restrict data processing. You have the right to restrict the processing of data about you that we process or control.
- The right to object. You have the right to object to the processing of your data by us or on our behalf.
- Right to data portability. You have the right to obtain the transfer to another controller of the data we process or control about you.
- Right to withdraw consent. Where we process data about you on the basis of your consent, you have the right to withdraw your consent; you may do so at any time, at least as easily as you originally gave us your consent; withdrawing your consent will not affect the lawfulness of the processing of data about you that we carried out prior to the withdrawal.
- The right to lodge a complaint with the supervisory authority. You have the right to lodge a complaint with the supervisory authority for the processing of personal data about the processing of your data by us or on our behalf. In Romania, this authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
- Changes to this policy
It is possible to change this policy. In such cases, we will inform you in advance by posting this policy on the website[TBD – 20 days] before it becomes effective.
We will also post this policy on our website at the following link: https://stockforceone.com/politica-gdpr/ . We will also keep all previous versions of this policy available for consultation by interested parties.
This version of this policy will come into force on 19.07.2023.
- WHAT THE TERMS MEAN IN THIS POLICY
- Supervisory authority for the processing of personal data: an independent public authority which, according to the law, has powers relating to the supervision of compliance with personal data protection legislation. In Romania, this supervisory authority for the processing of personal data is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
- Special categories of personal data (sensitive personal data/sensitive data): personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; genetic data; biometric data for the unique identification of a natural person; data concerning a natural person’s health, sex life or sexual orientation.
- Personal data: any information relating to an identified or identifiable natural person (“data subject”). A natural person is identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier, e.g. name, identification number, location data, online identifier, one or more specific elements specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity. Thus, for example, the following are included in the notion of personal data: name and surname; home or residence address; e-mail address; telephone number; personal identification number (CNP); medical services accessed (are sensitive data); diagnosis made (are sensitive data); genetic data (are sensitive data); biometric data (are sensitive data); geolocation data. The categories of personal data about you that we process are listed above.
- Controller: the natural or legal person who decides why (for what purpose) and how (by what means) personal data are processed. According to the law, the primary responsibility for compliance with personal data legislation lies with the controller. In our relationship with you, we are the operator and you are the data subject.
- Processor: any natural or legal person who processes personal data on behalf of the controller, other than employees of the controller.
- Data subject: the natural person to whom certain personal data relate (to whom they “belong”). In your relationship with us (the operator), you are the data subject.
- Processing of personal data: any operation/set of operations performed upon personal data or sets of personal data, whether or not by automatic means; for example: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of such personal data/sets of personal data. These are just examples. Basically, processing means any operation on personal data, whether by automatic or manual means.
- Third country: a country outside the European Union and the European Economic Area.