Privacy Policy – Mentors
Last updated: June 20, 2025
Through this Privacy Policy, we inform you about how we collect, use, transfer, and protect your personal data. Data processing is carried out in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “General Data Protection Regulation” – GDPR), as well as with applicable national data protection legislation.
WHO ARE WE?
UPGRADE EDUCATION SRL provides educational counseling and mentoring services for students who aspire to study abroad. We support and guide young people through academic exploration, the selection of the most suitable program, and the preparation of their applications to top universities around the world. In this document, we refer to the company as “we”, “the Company”, or “Upgrade Education”.
Our contact details:
📍 Address: Bulevardul Dimitrie Pompeiu no. 10A, Conect 1 Building, 1st Floor, Office 10
📧 Email: gdpr@upgrade.education
📞 Phone: +40 31 630 5013
HOW DO WE PROCESS YOUR PERSONAL DATA?
We ensure that personal data are:
- processed lawfully, fairly, and transparently;
- collected for specified, explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes;
- adequate, relevant, and limited to what is necessary for the intended purposes;
- accurate and kept up to date;
- stored in a form which permits identification of data subjects only for as long as necessary;
- processed securely to protect against unauthorized or unlawful access, accidental loss, destruction, or damage, using appropriate technical and organizational measures.
WHAT TYPES OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?
For mentors collaborating with the Company, we process the following personal data:
full name, email address, phone number, home address, personal identification number (CNP), ID/passport series and number, age, gender, image, voice, bank account details, job title, signature, and any other information included in the CV.
These are processed for the purpose of establishing and managing the collaboration relationship, ensuring communication, and fulfilling contractual and legal obligations.
For contests or giveaways organized via our website or social media platforms (Facebook, YouTube, Instagram, TikTok), we process: full name, home address, email address, phone number, age, date of birth, and signature.
For the display of mentors’ photos on our website and social media pages, we may process: full name, image, description, academic background, hobbies, cultural/culinary preferences, mentoring journey, and extracurricular activities — only with prior written consent.
When completing the “Join the Upgrade Education Movement” form, we may collect: first name, last name, email address, reasons for joining the team, LinkedIn profile, and any personal data included in the uploaded CV.
When completing the “Access the ICERI 2024 Paper” form, we process: first name, last name, email address, and your role.
For website visitors, we may collect data through cookies or similar technologies such as: IP address, browser type, location, web pages visited on our site, time spent on site, internet provider, and device used. For more details, please refer to our Cookie Policy.
For the purpose of purchasing our book “Life After High School” via the website, we process the following personal data: first name, last name, email address, phone number, and delivery address.
We do not use your personal data for marketing communications, such as newsletters, unless you have explicitly given your consent by ticking a specific checkbox. In such cases, we process your first name and email address and ensure that you have a simple option to unsubscribe at any time or withdraw your consent.
WHAT ARE THE LEGAL BASES FOR PROCESSING PERSONAL DATA?
Your personal data is processed:
- for the conclusion and performance of contracts;
- to comply with legal obligations that apply to us;
- based on your prior and explicit consent (e.g., for recruitment or marketing communications);
- for the legitimate interests pursued by the Company (e.g., security measures, defending our rights in legal proceedings, etc.).
HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
Your personal data is stored for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by law (e.g., accounting, archiving obligations).
WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We will not disclose or transfer your personal data to any third parties except in the following cases:
- To public authorities or institutions, when we are under a legal obligation or when a legitimate interest applies (e.g., defending the Company’s rights in legal proceedings);
- To contractual partners or collaborators who provide services such as web hosting, website development and maintenance, digital marketing, and communication;
- To any third party, if you have given your explicit and specific consent for a particular situation and data set.
If personal data processed by the Company are transferred — directly or via partners — outside the European Economic Area (EEA), we ensure that such transfers comply with the GDPR (particularly Art. 46), based on appropriate safeguards (such as standard contractual clauses adopted by the European Commission), and ensure enforceable data subject rights and effective legal remedies.
WHAT SECURITY MEASURES DO WE IMPLEMENT?
We apply appropriate technical and organizational measures to ensure a high level of security and protection for personal data. This includes secure technologies, internal policies and procedures, and audit and control mechanisms to prevent unauthorized access, loss, or data breach.
WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
Under the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right not to be subject to automated decision-making, including profiling
- Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) or with the competent courts
To exercise these rights or for any questions regarding your personal data, please contact us at:
📧 gdpr@upgrade.education
📞 +40 745 508 673
📇 Contact person: Ionel Orza
Data Protection Officer (DPO) services are outsourced and provided by GDPRComplet.