Privacy Policy (GDPR)

1. General Information

The confidentiality of your personal data is a priority for XBT Trading SRL, headquartered at Piața Libertății nr. 2, Timișoara, Romania, acting as data controller. This document informs you about the processing of your personal data in the context of using the website xbt.ro.

2. Categories of personal data processed

If you are a visitor of the website, the controller processes the personal data you provide directly in the context of using the site, such as the data you supply in the contact / quote section:

• First and last name.
• Phone number.
• Email address.
• Data on how you use the website (for example, your behaviour/preferences/habits on the site).
• The IP address and traffic data automatically provided by your browser.

3. Purposes and legal grounds of processing

Legal basis: The processing of your data is based on the consent you give by ticking the corresponding box in the forms on the site (Art. 6(1)(a) GDPR), or on taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Purpose of processing: Handling commercial consulting requests, preparing personalised price quotes for obtaining the A1 Certificate and scheduling HR advisory sessions.

4. How long we keep your data

As a rule, the controller processes your personal data for as long as necessary to fulfil the processing purposes mentioned above, but no longer than 3 years from the last interaction, unless the commercial relationship ends with the signing of a contract (in which case the data falls under accounting and legal archiving obligations).

5. Disclosure of personal data

To fulfil the processing purposes, the controller may disclose your data to authorised third-party commercial partners (such as partner law firms in the EU, certified translators or technical data processors), under conditions of strict confidentiality and only on the basis of appropriate legal agreements. Your data is not sold or rented for marketing purposes.

6. Cookie Policy

This website uses cookies to improve the browsing experience and analyse traffic (through Google Analytics). Analytics cookies are only set after you give your consent in the cookie banner. You can also configure your browser to block or delete these files, although certain sections of the website may not function correctly as a result.

7. Your rights

Under the legislation on the processing of personal data (GDPR), as a data subject you have the following rights:

• The right to be informed and to access your data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure ("the right to be forgotten").
• The right to restriction of processing.
• The right to data portability in a structured format.
• The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• The right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

To exercise these rights, you may send a written, dated and signed request to the email address: office@xbt.ro.