REGARDING THE PROCESSING OF PERSONAL DATA
We consider ensuring the right to personal data protection IMPORTANT, therefore we will direct our efforts towards the processing of your data in accordance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other legislation applicable on the territory of Romania.
Who we are and how you can contact us
We are Creative Strategy Idea SRL, an advertising agency that runs under the name of The Basics, that works with its own team and collaborators in its own projects and in the ones delivered to clients. Because we are open to hearing your views, as well as providing you with any additional information you may need regarding the processing of your data, we encourage you to contact the The Basics Data Protection Officer at our email address or by mail or courier at Str. Vistiernicul Stavrinos 25, building 155, entrance 1, ap. 21, Bucharest, sector 6 - with the mention: in the attention of the The Basics data protection officer.
What categories of personal data we process
We generally collect your personal data directly from you, so you have control over the type of information you provide to us. By way of example, we receive information from you as follows: when you register to attend an event / training or write us an email asking for more information (at email@example.com), as a client or collaborator, In these situations you send us: name and surname, e-mail address, telephone number to be able to inform you about the opportunities in your area of interest or of the company you represent.
What the purposes and grounds of processing are
We will use your personal data for the following purposes:
To benefit from information about projects and project events.
This general purpose may include, as appropriate, the following:
a) Providing support services.
b) Providing answers to your questions regarding the projects of interest to you and our services or our partners.
The processing of your data for these purposes is, in most cases, necessary for the conclusion and execution of a contract between you or the organization you represent and The Basics. Certain processing subject to these purposes is also required by applicable law, including tax and accounting law.
To improve the services and the relevance of the resources received from us
We always want to offer you the best online experience, both for information and when booking a place at project events. For this, we may collect and use certain information related to your user behavior, we may invite you to complete satisfaction questionnaires or we may conduct, directly or with the help of partners, market research and research. We base these activities on our legitimate interest in carrying out activities relevant to your community-related interests, always ensuring that your fundamental rights and freedoms are not affected.
We want to keep you up to date on the best opportunities for the resources that interest you. In this regard, we can send you any type of message (such as: e-mail, SMS, telephone) containing general and thematic information, information on resources similar or complementary to those you have accessed, information on news about our projects, as well as other commercial communications such as projects or campaigns, opinion polls. In order to provide you with information of interest to you, we may use certain data regarding your behavior as a client / collaborator. We always make sure that these processing is carried out in compliance with your rights and freedoms and that the decisions taken based on them do not have legal effects on you and do not affect you in a similar way to a significant extent. In most cases, we base our marketing communications on your prior consent.
You can change your mind and withdraw your consent at any time by:
a) Accessing the unsubscribe link displayed in the messages you receive from us;
b) Contacting The Basics using the contact details described above. You can request us at any time, by the means described above, to stop the processing of your personal data for the purpose of promotion, and we will process your request within a maximum of 48 hours from the request.
To defend our legitimate interests
There may be situations in which we use or transmit information to protect our rights and activities. These may include:
a) Measures to protect the website and users of the platform against cyber attacks:
Measures to prevent and detect fraudulent attempts, including the transmission of information to the competent public authorities;
Measures to manage various other risks.
The general basis of these types of processing is our legitimate interest in defending our project activity, it being understood that we ensure that all the measures we take guarantee a balance between our interests and your fundamental rights and freedoms. In some cases, we also base our processing on legal provisions such as the obligation to ensure the protection of goods and values provided by the applicable legislation in this area.
How long we keep your personal data
To whom we transmit your personal data
Where applicable, we may transmit or provide access to certain personal data of yours to the following categories of recipients:
- courier service providers;
- payment / banking service providers;
- market research service providers;
- other companies with which we can develop joint projects.
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
We protect the security of your personal data
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to technical standards by using the platform to create the website. Despite the measures taken to protect your personal data, we warn you that the transmission of information via the Internet, in general, or through other public networks, is not completely secure, there is a risk that the data may be seen and used by unauthorized third parties. We cannot be held responsible for such vulnerabilities in systems that are beyond our control.
The General Data Protection Regulation recognizes a number of rights in relation to your personal data. You can request access to your data, correct any errors in our files and / or you can object to the processing of your personal data. You may also exercise your right to lodge a complaint with the competent supervisory authority or to go to court. Where applicable, you may also have the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.
More information about each of these rights can be obtained by consulting the information below.
In order to exercise your rights, you can contact us using the contact details set out above. Please note the following if you wish to exercise these rights:
We take seriously the confidentiality of all records that contain personal data. For this reason, please send us your requests regarding such records using the e-mail address you provided to us. Otherwise, we reserve the right to verify your identity by requesting additional information aimed at confirming your identity.
We will not charge you a fee for exercising any rights with respect to your personal data, unless your request for access to information is unfounded, repetitive or excessive. We will inform you of any fees applied before resolving your request.
We intend to respond to any valid requests within a maximum of 48 hours calculated within working days, unless this is particularly complicated or if you have made several requests, in which case we will respond within a maximum of a month. We will let you know if we need more than 48 hours. We may ask you if you can tell us exactly what you want to receive or what worries you. This will help us to act faster and shorten the response time to your request.
Third party rights
We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.
You can ask us:
to confirm if we process your personal data;
to provide you with a copy of this data;
to provide you with other information about your personal data, such as the data we have, what we use it for, to whom we disclose it, if we transfer it and how we protect it, how long we keep it, what rights you have, how you can make a complaint, from which we obtained your data, to the extent that the information has not already been provided to you by this information.
You can ask us to rectify or complete your inaccurate or incomplete personal data.
We may try to verify the accuracy of the data before rectifying it.
You can ask us to delete your personal data, but only if:
they are no longer necessary for the purposes for which they were collected; or
you withdrew your consent (if the data processing was based on consent); or
you exercise a legal right to oppose; or
they were processed illegally; or
we have a legal obligation in this regard.
We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary:
for compliance with a legal obligation; or
for the establishment, exercise or defense of a right in court.
There are certain other circumstances in which we are not required to comply with your request to delete data, although these are the two most likely circumstances in which we may deny you this request.
Restricting data processing
You can ask us to restrict the processing of personal data, but only if:
their accuracy is challenged, to allow us to verify their accuracy; or
the processing is illegal, but you do not want the data to be deleted; or
they are no longer needed for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court; or
you have exercised your right to object, and the verification of whether our rights prevail is ongoing.
We may continue to use your personal data following a request for a restriction if:
we have your consent; or
to establish, exercise or ensure the defense of a right in court; or
to protect the rights of The Basics or another natural or legal person.
You can ask us to provide you with your personal data in a structured, commonly used and automatically readable format, or you can request that it be "ported" directly to another data controller, but in each case only if:
the processing is based on your consent or on the conclusion or execution of a contract with you and
processing is done by automatic means.
You may object at any time, for reasons related to your particular situation, to the processing of your personal data under our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest.
You can also object at any time to the processing of your data for the purpose of direct promotion, without invoking any reason, in which case we will stop this processing as soon as possible.
You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are the following:
National Authority for the Supervision of Personal Data Processing
G-ral. Gheorghe Magheru Bv. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212;
WE INVITE YOU TO COMMUNICATE YOUR REQUESTS TO US
Without affecting your right to contact the supervisory authority at any time, please contact us in advance and we promise that we will make every effort to resolve any issues amicably. So we want to remind you that you can contact the The Basics Data Protection Officer at any time by sending your request to the contacts below.
CONTACT FOR MATTERS CONCERNING THE CONFIDENTIALITY OF YOUR DATA:
By e-mail to: or
By post or courier to the address: Str. Vistiernicul Stavrinos 25, building 155, entrance 1, ap. 21, Bucharest, sector 6 - with the mention: for the attention of The Basics Data Protection Officer.