upgrade education

en_US
en_US ro_RO
Talk to a mentor

Privacy Policy – Prospective Clients / Website Visitors


 Last updated: June 19, 2025

Through this Policy, we inform you about how we collect, use, transfer, and protect your personal data. We process such data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the “General Data Protection Regulation”, hereinafter referred to as “GDPR”), and with the relevant national legislation on personal data protection.

WHO ARE WE?

UPGRADE EDUCATION SRL provides educational counseling and mentoring services for students who wish to study abroad. We support and guide young people in their academic exploration process, in choosing the right program, and in preparing their applications to top universities around the world. Throughout this document, we will refer to the company as “we,” “the Company,” or “Upgrade Education.”

Our contact details are:
 Head office address: Bulevardul Dimitrie Pompeiu no. 10A, Conect 1 Building, 1st Floor, Office 10
 Email address: gdpr@upgrade.education
 Phone number: +40 31 630 5013

HOW DO WE PROCESS YOUR PERSONAL DATA?

Personal data are:

  • processed lawfully, fairly, and transparently in relation to the data subject;
  • collected for specific, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
  • adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
  • accurate and kept up to date;
  • stored in a form that permits the identification of data subjects for no longer than necessary for the purposes for which the data are processed;
  • processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

WHAT TYPES OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?

In the context of staff recruitment, we process the following personal data: name, surname, address, date of birth, nationality, gender, phone number, email address, details of professional and/or social experience, education and training, competencies, and other personal data that may be included in the CV and, if applicable, discussed during the job interview.

When filling in and submitting the “Talk to a Mentor” form on our website [https://upgrade.education/ro/], we process: first name, last name, email, phone number, student/parent status, country, city, high school name, expected graduation year, type of school (public/private), GPA from the previous year, intended study destinations (UK, US, Europe, Canada), confidence in studying in English, family budget for studies, preferred major, and reasons for submitting the form.

For the “Join the Upgrade Education Movement” form, we process: first name, last name, email address, reasons for joining the team, LinkedIn profile, and any additional data included in the uploaded CV.

For the “Guide the Next Generation of Young Professionals” form, we process: first name, last name, email address, university attended, current position, experience, and areas of expertise.

For the “Register for the Webinar” form, we process: first name, last name, student/parent status, phone number, email address, high school graduation year, confidence in studying abroad, and annual budget for studies.

For the “Access the ICERI 2024 Paper” form, we process: first name, last name, email address, and role (e.g., journalist, educator, parent, student, or other).

When organizing contests or giveaways through our website or social media platforms (Facebook, YouTube, Instagram, TikTok), we process: full name, home address, email address, phone number, age, date of birth, and signature.

For website visitors, we may collect data through cookies or similar technologies, such as: IP address, browser type, location, web pages visited on our website, time spent on the website, internet network, and device used. For more details, please see our Cookie Policy.

For the purpose of purchasing our book “Life After High School” via the website, we process the following personal data: first name, last name, email address, phone number, and delivery address.

We do not use your personal data to send you marketing communications (e.g., newsletters) unless you have explicitly consented to receiving such communications by checking a consent box. In such cases, we process your first name and email address and ensure that you have a simple option to unsubscribe at any time and withdraw your consent.

WHAT ARE THE LEGAL BASES FOR PROCESSING PERSONAL DATA?

Your personal data are processed:

  • for the conclusion and execution of various contracts;
  • to comply with legal obligations;
  • based on your explicit and prior consent (e.g., in recruitment or to receive marketing communications);
  • for the legitimate interests pursued by the Company (e.g., implementing protection and security measures for our employees, exercising legal rights and interests in judicial or extrajudicial proceedings).

HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We store personal data for the time necessary to fulfill the purposes described in this Policy or for the duration required by applicable law (e.g., in matters of archiving, accounting, etc.).

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We do not disclose or transfer any of your personal data to third parties unless:

  • required by public authorities or institutions, when there is a legal obligation or legitimate interest (e.g., defending the Company’s rights in judicial or extrajudicial proceedings);
  • shared with contractual partners or collaborators providing services such as web hosting, website development and maintenance, digital marketing, and communication;
  • you have given your specific and explicit consent for a particular case and for specific data.

If personal data processed by the Company are transferred — directly or through our contractual partners/collaborators — outside the European Economic Area, we ensure that such transfers are made in compliance with the GDPR (particularly Article 46), applicable legal provisions, and based on adequate safeguards (e.g., standard contractual clauses approved by the European Commission), ensuring enforceable rights and effective remedies for the data subjects.

WHAT SECURITY MEASURES DO WE TAKE?

We implement appropriate technical and organizational measures to ensure a high level of security and protection for your personal data. We use secure technologies and methods, together with internal policies and procedures — including control and audit measures — to protect personal data collected in accordance with the relevant data protection legislation.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

According to the GDPR, you have the following rights:

  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object to processing;
  • Right not to be subject to a decision based solely on automated processing, including profiling;
  • Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) and with the competent courts.

To exercise these rights or for any questions regarding the processing of your personal data, please contact us at gdpr@upgrade.education or by phone at +40 745 508 673, contact person: Ionel Orza.
 Data Protection Officer (DPO) services are outsourced and provided by GDPRComplet.