GDPR

GDPR Privacy Notice explaining how LEXA collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation.

Request an evaluationContact
GDPR Privacy Notice and Personal Data Protection

Privacy Notice on the Processing of Personal Data

1. GDPR Data Controller Information

LEXA LEARNING & ADVISORY S.R.L. (“LEXA”), registered under no. J2026002624008 and having tax identification number (CUI) 53290550, with its registered office in Bucharest, Sector 1, 45 Natației Street, 2nd Floor, Apartment 5, Romania, provides training services and business consulting services.

In accordance with the General Data Protection Regulation (GDPR), we act as the Data Controller for the personal data we process.

Our services may involve the processing of personal data of users of the website https://lexa-advisory.eu/, participants in LEXA events, trainers, guest speakers, and contact persons within organizations.

2. Personal Data We Collect Under GDPR

Depending on how you interact with us, we may collect and process the following categories of personal data:

  • Full name
  • Email address
  • Professional affiliation/company
  • Job title or professional role
  • Website usage information and browsing history
  • Training attendance records
  • Audio or video recordings of online sessions
  • Feedback and evaluation forms
  • Opinions and comments
  • Payment and billing details (for individual participants)

3. GDPR Purposes for Processing Personal Data

We process your personal data for the following purposes:

  • To respond to your inquiries and maintain communication
  • To provide services under concluded contracts
  • To comply with our legal obligations
  • To register participants and manage course and event enrollments
  • To deliver training content and facilitate the learning process
  • To issue certificates of attendance or completion
  • To assess course effectiveness and collect feedback
  • To manage invoicing and contractual obligations related to training services
  • To inform you about relevant updates and news

4. How GDPR Personal Data Is Used and Shared

Your personal data is processed by LEXA, headquartered in Bucharest, Romania. Our web hosting and data storage services are also located in Romania.

We may share website browsing data with third-party partners in accordance with our Cookie Policy.

For online training services, we may use platforms such as Microsoft Teams. These platforms may process your personal data in accordance with their own privacy policies. We ensure that any such processing complies with GDPR and that appropriate safeguards are in place.

5. GDPR Data Retention Period

  • If no contractual relationship is established, we retain correspondence data for up to one year or as otherwise necessary.
  • If a contract is in place, we retain personal data in accordance with Romanian legal requirements and GDPR.
  • Training-related data (e.g., attendance records, feedback, certificates) is retained for up to five years, unless a longer period is required by law or justified by a legitimate interest.

6. Your GDPR Rights

As a data subject under GDPR, you have a number of important rights regarding your personal data. We are committed to respecting and protecting these rights.

Right of Access

You may request access to the personal data we hold about you, including information about how we use it and with whom we share it.

Right to Rectification

If the data we hold is inaccurate or incomplete, you may request that it be corrected or updated.

Right to Erasure (“Right to Be Forgotten”)

You may request the deletion of your personal data in certain circumstances, for example when it is no longer necessary for the purposes for which it was collected or when you withdraw your consent.

Right to Restrict Processing

You may request the restriction of processing in specific situations, such as when you contest the accuracy of the data or object to the processing.

Right to Data Portability

Under certain conditions, you may request that your data be provided in a structured, commonly used, and machine-readable format, and that it be transferred to another controller.

Right to Object

You may object to the processing of your personal data when the processing is based on our legitimate interests or when your data is used for direct marketing purposes.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Please note that we do not carry out such processing through this website.

If you wish to submit a request regarding how we process your personal data, please contact us at: contact@lexa-advisory.eu.

We will fully cooperate to resolve any concerns you may raise.

This GDPR Privacy Notice explains how LEXA processes personal data and protects your rights under the General Data Protection Regulation.

If you are not satisfied with our response, you may contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) and submit a formal complaint here.