Privacy Policy

The data controller responsible for your personal data is:

• Company name: ASCENSI MANAGEMENT SRL
• Registered address: Strada Azurului nr. 1, bloc 113B, scara 2, ap. 98, sector 6, București
• Trade Register: J40/15/05.01.2016
• CUI: 35372430
• Privacy contact email: office@ascensi.ro

We collect personal data in two ways: data you provide voluntarily and data collected automatically when you visit our website.

Data provided voluntarily (via contact or CV application forms)

• First name and last name
• Email address
• Phone number
• Message content
• CV / résumé (which may include address, professional history, education, and other personal details)

Data collected automatically (technical data)

• IP address
• Browser type and version
• Operating system
• Pages visited and navigation behaviour on our website

We process your personal data for the following purposes:

• Evaluating your application for open positions
• Contacting you regarding the recruitment process
• Responding to general enquiries submitted via our contact form
• Ensuring the technical operation and security of our website

We process your personal data on the following legal grounds:

• Your consent (Art. 6(1)(a) GDPR) — by ticking the consent checkbox on our forms
• Pre-contractual measures (Art. 6(1)(b) GDPR) — steps taken prior to entering an employment contract
• Legitimate interest (Art. 6(1)(f) GDPR) — for technical data and website security purposes

We retain your personal data only for as long as necessary:

• CV and applicant data: retained for a maximum of 12 months from the date of submission
• After this period, data is permanently deleted from all our systems
• Exception: if you are hired, your data will be transferred to your employee file and retained in accordance with applicable employment law

We may share your personal data with the following third-party processors strictly for operational purposes:

• FormSubmit LLC (USA) — form submission processing service used on our website
• Google LLC (Gmail / Google Workspace, USA) — used to receive and manage email communications
• Vercel Inc. (USA) — website hosting and infrastructure provider

Please note that the above processors are located outside the European Economic Area (EEA). Data transfers to these parties are governed by Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring an adequate level of data protection.

Under the GDPR and applicable Romanian law, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You may request that inaccurate or incomplete data be corrected.
• Right to erasure: You may request that your personal data be deleted, subject to legal retention obligations.
• Right to restriction: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You have the right to receive your data in a structured, commonly used format.
• Right to object: You may object to processing based on legitimate interest at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP.

To exercise any of the rights listed above, please contact us at:

• Email: office@ascensi.ro
• We will respond to your request within a maximum of 30 calendar days
• Exercising your rights is free of charge

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:

• All data in transit is encrypted via HTTPS / TLS
• Data at rest is encrypted by our hosting and processing providers
• Access to personal data is restricted to authorised personnel only
• We regularly review our security practices to ensure ongoing protection

Our website does not use tracking cookies, analytics cookies, or advertising cookies. We may use strictly necessary cookies required for the basic technical functioning of the website (e.g. session management). No third-party tracking or profiling takes place through our site.

Our website and services are not directed at persons under the age of 16. We do not knowingly collect personal data from minors. If you believe that a minor has submitted personal data to us, please contact us at office@ascensi.ro so that we may delete it promptly.

We reserve the right to update this Privacy Policy at any time to reflect changes in legislation or our practices. Any updates will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review this policy periodically.

This Privacy Policy is governed by Romanian law and the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR). Any disputes arising in connection with this policy shall be resolved in accordance with Romanian and European Union legislation.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian national supervisory authority:

• Name: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
• Website: www.dataprotection.ro
• Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București
• Email: anspdcp@dataprotection.ro