top of page

Privacy Policy for Personal Data

In accordance with the requirements of Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) and applicable national legislation concerning the protection of individuals with regard to the processing of personal data, STEP UP PERFORMANCE SRL, as the data controller, places great importance on protecting the personal data of its users, clients, partners, and collaborators.

This Privacy Policy explains how STEP UP PERFORMANCE SRL, through the theCONSULTANTS website, collects, uses, stores, and protects personal data provided by users.

1. Purpose of Data Collection

Personal data may be collected through the forms available on the website, by contacting the company directly, or through other communication channels made available to users.

Personal data may be processed for the following purposes:

  • responding to requests and messages submitted through the contact form;

  • communicating with individuals interested in the services provided by theCONSULTANTS;

  • providing and managing consulting services;

  • preparing commercial offers and proposals;

  • entering into and performing contracts;

  • managing contractual and business relationships;

  • complying with the company's legal obligations;

  • sending information about the company's services where there is a valid legal basis for such communications;

  • improving the functionality and user experience of the website;

  • preventing and detecting fraudulent activities or security incidents.

2. Categories of Personal Data Processed

Depending on the user's interaction with the website and theCONSULTANTS services, we may process the following categories of personal data:

  • first and last name;

  • email address;

  • telephone number;

  • company name and job title, where provided;

  • information included in messages or requests submitted by the user;

  • information necessary to provide services and manage the contractual relationship;

  • technical information relating to the use of the website, such as IP address, device type, browser type, and information generated through cookies;

  • any other information that the user voluntarily chooses to provide.

STEP UP PERFORMANCE SRL does not seek to collect personal data that is not necessary for the purposes for which it is processed.

3. Legal Basis for Processing

Personal data is processed on the basis of one or more of the following legal grounds provided by the GDPR:

​

  • the consent of the data subject;

  • the necessity of processing for the performance of a contract or for taking steps at the request of the data subject prior to entering into a contract;

  • compliance with a legal obligation;

  • the legitimate interests pursued by STEP UP PERFORMANCE SRL, provided that such interests do not override the fundamental rights and freedoms of the data subject.

  • ​

Where processing is based on consent, the data subject has the right to withdraw their consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Contact Form

When a user completes the contact form available on the theCONSULTANTS website, the information provided is used to respond to the respective request and, where applicable, to initiate a business or contractual relationship.

​

The data will not be used for purposes incompatible with the purpose for which it was collected, except where such use is permitted or required by applicable law.

5. Marketing Communications

STEP UP PERFORMANCE SRL may send information regarding theCONSULTANTS services, projects, or updates where permitted by applicable law.

​

Where consent is required for marketing communications, such communications will only be sent after obtaining the appropriate consent.

​

Recipients of marketing communications have the right to object to receiving such communications at any time and to request that they be discontinued.

​

theCONSULTANTS does not engage in SPAM and will not use contact information for marketing purposes in violation of applicable legislation.

6. Disclosure of Personal Data to Third Parties

Personal data may be disclosed to third parties only where this is necessary to fulfil the purposes described in this Privacy Policy or where there is a legal obligation to do so.

​

Depending on the circumstances, recipients may include:

​

  • IT and hosting service providers;

  • website maintenance and administration providers;

  • email and communication service providers;

  • marketing and communication service providers, where applicable;

  • accounting and consulting service providers;

  • partners or collaborators involved in providing services, where necessary;

  • public authorities and institutions, within the limits and under the conditions provided by law.

​

When working with service providers and partners, STEP UP PERFORMANCE SRL takes appropriate measures to ensure that they provide an adequate level of protection and security for personal data and process such data only in accordance with applicable instructions and legal requirements.

7. Transfers of Data Outside the European Economic Area

Where, for certain services used by theCONSULTANTS, personal data is transferred to recipients located outside the European Economic Area, such transfers will only be carried out in compliance with the requirements of the GDPR and the applicable legal mechanisms for ensuring an adequate level of data protection.

8. Data Security

STEP UP PERFORMANCE SRL implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or unauthorised disclosure.

However, the transmission of information over the Internet cannot be considered completely secure in all circumstances. Users should exercise appropriate caution when transmitting information online.

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or for the periods required by applicable law.

Once the applicable retention period has expired, the data will be deleted, anonymised, or archived, as appropriate, in accordance with applicable legal requirements.

10. Rights of Data Subjects

Under the GDPR, individuals whose personal data is processed have the following rights:

  1. Right to be informed – the right to receive clear and transparent information about how their personal data is processed.

  2. Right of access – the right to obtain confirmation as to whether or not personal data concerning them is being processed and, where applicable, access to that data and information regarding its processing.

  3. Right to rectification – the right to request the correction or completion of inaccurate or incomplete personal data.

  4. Right to erasure (“right to be forgotten”) – the right to request the deletion of personal data under the conditions established by the GDPR.

  5. Right to restriction of processing – the right to request the restriction of processing in certain circumstances provided by law.

  6. Right to data portability – the right to receive certain personal data in a structured, commonly used, and machine-readable format and, where applicable, to transmit that data to another data controller.

  7. Right to object – the right to object to the processing of personal data in certain circumstances, including processing for direct marketing purposes.

  8. Right to withdraw consent – where processing is based on consent, the right to withdraw such consent at any time.

  9. Right to lodge a complaint with the competent supervisory authority, namely the National Supervisory Authority for Personal Data Processing (ANSPDCP).

  10. Right to seek judicial remedy, under the conditions provided by applicable law.

11. Exercising Your Rights

To exercise any of the rights described above or to ask questions regarding the processing of personal data, you may contact us using the contact details available on the theCONSULTANTS website.

Requests will be reviewed and handled in accordance with the GDPR and applicable legislation.

Depending on the nature of the request, STEP UP PERFORMANCE SRL may request additional information necessary to verify the identity of the requester, without requesting excessive or irrelevant information.

12. Cookies and Similar Technologies

The theCONSULTANTS website may use cookies and similar technologies to ensure the proper functioning of the website, improve the user experience, analyse website traffic, and, where applicable, support marketing activities.

For detailed information regarding the use of cookies and how they can be managed, please refer to the Cookie Policy available on the website.

13. Data Provided Through Direct Communication

Where users provide personal data via email, telephone, or other communication channels, such data will be processed for the purpose of handling their request and communicating with the relevant individual.

Users are asked not to provide excessive personal information or sensitive personal data that is not necessary for handling their request through the contact form, email, or other communication channels.

14. Requests from Public Authorities

STEP UP PERFORMANCE SRL may disclose personal data to public authorities, institutions, law enforcement bodies, courts, or other authorised entities where there is a legal obligation to do so or where a request has been made in accordance with applicable law.

15. Protection of Confidential Information

STEP UP PERFORMANCE SRL does not request passwords, security codes, or other confidential information that is not necessary for the provision of its services through the website, email, or telephone.

If users choose to provide such information through unofficial channels or to unauthorised persons, they should exercise particular caution regarding the security of their personal information.

16. Changes to This Privacy Policy

STEP UP PERFORMANCE SRL reserves the right to periodically update or amend this Privacy Policy to reflect changes in legislation, technology, or its operational activities.

The updated version will be published on the theCONSULTANTS website and will become effective from the date of publication, unless otherwise stated.

Data controller

STEP UP PERFORMANCE SRL
Website: theCONSULTANTS
Email: [email address]
Phone: [phone number]
Registered office: [full address]
Tax Identification Number (CUI): [CUI]
Trade Register No.: [Jxx/xxxx/xxxx]

Last updated: [date]

bottom of page