Privacy Policy

Effective date: August 03, 2026

GLOBAL VISA JOBS – Professional Driver Assessment Platform

The platform is a professional assessment and training tool intended for professional drivers. The tests are exclusively educational and simulation in nature. The results obtained do not represent a professional qualification and do not replace the certificate of professional competence (Code 95) issued by the competent authorities.

Article 1 – Purpose of the Privacy Policy

1.1. This Privacy Policy explains how the Operator collects, uses, stores, discloses and protects the personal data of users of the GLOBAL VISA JOBS – Professional Driver Assessment Platform.

1.2. The Policy is developed in accordance with:

• Regulation (EU) 2016/679 (GDPR);
• applicable national data protection legislation;
• other relevant regulatory acts regarding digital services and e-commerce.

1.3. This Policy supplements the Terms and Conditions and other contractual documents available on the Platform.

Article 2 – Data Controller

The personal data controller is:
GLOBAL VISA JOBS S.R.L
Registered office: Jud. Brasov, Mun. Brasov, Str. Nicolae Labis, Nr.33, Bl.v8, Sc.a, Et.7, Ap.48.
Registration number: J2026043513000
Tax code (OIB): 55163641
Email: contat@euvisajobs.com
Website: https://examination.euvisajobs.com
If you designate a Data Protection Officer (DPO), his/her data will be published in this Policy.

Article 3 – Scope

This Policy applies to all persons using the Platform, including:

• individuals;
• representatives of legal entities;
• candidates taking simulations;
• persons contacting the Operator;
• visitors to the website.

Article 4 – Processing principles

The operator processes data in compliance with the following principles:

• lawfulness;
• fairness;
• transparency;
• purpose limitation;
• data minimization;
• accuracy;
• storage limitation;
• integrity and confidentiality;
• accountability.

Article 5 – What is meant by “personal data”

For the purposes of this Policy, personal data means any information relating to an identified or identifiable natural person, such as:

• first and last name;
• email address;
• country;
• IP address;
• online identifiers;
• account data;
• simulation history;
• other information that allows the direct or indirect identification of a person.

Article 6 – Categories of data subjects

The Platform may process data regarding:

• registered users;
• users who make payments;
• evaluated candidates;
• persons requesting information;
• persons submitting complaints;
• persons exercising the rights provided for by the GDPR.

Article 7 – Operator’s Commitment

The operator undertakes:

• to collect only the necessary data;
• to use the data exclusively for the stated purposes;
• not to commercialize personal data;
• to implement appropriate technical and organizational measures to protect them;
• to respect the rights of the data subjects.

Article 8 – Updating the Policy

8.1. The Operator may periodically update this Policy to reflect:

• legislative changes;
• technical changes;
• introduction of new functionalities;
• changes regarding the way data is processed.
  8.2. The updated version will be published on the Platform and will indicate the date of entry into force.
  8.3. In the event of significant changes, users will be informed by appropriate means.

Article 9 – Data Protection Contact Details

Users may submit questions or requests regarding the processing of personal data to:
📧 contact@euvisajobs.com
The Operator will respond to requests within the deadlines set by the GDPR.

Chapter II – CATEGORIES OF PERSONAL DATA PROCESSED

Article 10 – Data minimization principle

10.1. The Operator collects and processes only the personal data necessary for the provision of the services offered through the Platform.
10.2. Data that is not relevant to the stated purposes is not requested and is not processed, except in cases where a legal obligation requires this.
10.3. The User is obliged to provide correct, complete and updated data.

Article 11 – Data collected when creating an account

When registering a user account, the Platform may request the following information:

• name;
• first name;
• email address;
• password (stored in secure form, through encryption/hashing mechanisms);
• country of residence or domicile;
• preferred language for using the Platform.
  This data is necessary for the creation and administration of the account.

Article 12 – Data collected in the procurement process

For the provision of services and the issuance of tax documents, the Operator may process:
For individuals:

• name and surname;
• e-mail address;
• country;
• billing address (if necessary);
• postal code (if necessary for billing).
  For legal entities:
• company name;
• tax identification number;
• registered office;
• contact person;
• e-mail address;
• information necessary for issuing the invoice.
  The Operator processes only the information necessary for the conclusion and execution of the contract and for compliance with tax obligations.

Article 13 – Payment Data

13.1. Payments are processed through an authorized payment processor.
13.2. The Operator does not store full bank card data (such as the full card number, CVV/CVC code or PIN).
13.3. The Operator may receive from the processor only the information necessary to confirm the transaction, such as:

• transaction identifier;
• payment amount;
• currency;
• date and time of the transaction;
• payment status.

512

Article 14 – Data generated by using the Platform

During the use of the Platform, the following information may be generated and processed:

• login history;
• date and time of access;
• simulation history;
• number of attempts made;
• scores obtained;
• duration of simulations;
• log of activities relevant to the operation and security of the Platform.
  This data is used to provide the service, administer the account and protect the integrity of the Platform.

Article 15 – Technical Data

For the operation and security of the Platform, technical information may be collected such as:

• IP address;
• browser type;
• browser version;
• operating system;
• device type;
• screen resolution (if necessary for correct display);
• technical session identifiers;
• application error logs.
  This information is used to ensure the operation of the Platform and prevent security incidents.

Article 16 – Data regarding communication with the Operator

When the user contacts the Operator, the latter may process:

• name;
• e-mail address;
• content of the message;
• documents sent;
• correspondence history.
  This information is used exclusively for the purpose of resolving the request and for the defense of the Operator’s rights, if necessary.

Article 17 – Automatically collected data

The Platform may automatically collect information regarding:

• session duration;
• pages accessed;
• date and time of access;
• language used;
• usage preferences;
• information regarding the technical performance of the service.
  This data contributes to improving the functioning of the Platform and identifying any technical problems.

Article 18 – Data on complaints

In the event of a complaint, the Operator may process:

• the complainant’s identification data;
• supporting documents;
• communication history;
• information necessary to analyze and resolve the complaint.

Article 19 – Voluntarily provided data

The User may voluntarily provide additional information through the forms available on the Platform or in communications addressed to the Operator.
This information will be processed only to the extent necessary to resolve the request or for the purpose for which it was transmitted.

Article 20 – Mandatory nature of data provision

20.1. The provision of certain data is necessary for:

• account creation;
• provision of digital services;
• payment processing;
• issuing tax documents;
• communication with the user.
  20.2. Refusal to provide this data may make it impossible to provide the requested services.
  20.3. In situations where certain information is optional, this will be expressly indicated on the Platform.

Article 21 – Commitment to data minimization

The Operator applies the “privacy by design” and “privacy by default” principles, ensuring that the Platform requests and processes only the data strictly necessary for the provision of services and the fulfillment of legal obligations.
In the event of the introduction of new functionalities, the Operator will analyze their impact on data protection and adapt internal processes, when necessary.

Chapter III – PURPOSES AND LEGAL GROUNDS OF DATA PROCESSING

Article 22 – General principles

22.1. The Controller shall process personal data only if there is a legal basis provided for by Regulation (EU) 2016/679 (GDPR).
22.2. Each category of data shall be processed exclusively for the purposes for which it was collected and only for the period necessary to achieve those purposes.
22.3. If a new purpose of processing is not compatible with the initial purpose, the Controller shall inform the users and, if necessary, request new consent or identify another applicable legal basis.

Article 23 – User account management

Purpose
Creation, management and security of the user account.
Processed data

• name;
• first name;
• email address;
• password (in secure form);
• country;
• preferred language.
  Legal basis
  Execution of the contract between the user and the Operator (art. 6 par. (1) lit. b GDPR).

Article 24 – Provision of the digital service

Purpose
Providing online simulations and managing access to the Platform.
Processed data

• account identifier;
• access history;
• simulation history;
• scores;
• session duration;
• attempts used.
  Legal basis
  Execution of the contract.

Article 25 – Payment processing

Purpose
Order processing and payment confirmation.
Data processed

• transaction identifier;
• amount paid;
• currency;
• payment date;
• payment status.

Legal basis
Performance of the contract.

Article 26 – Issuance of tax documents

Purpose
Issuance of invoices and fulfillment of tax and accounting obligations.
Data processed

• name;
• billing address (if necessary);
• legal entity data (if applicable);
• necessary tax information.

Legal basis
Fulfillment of a legal obligation (art. 6 par. (1) lit. c GDPR).

Article 27 – Technical support and user relations

Purpose
Response to requests, complaints and requests for assistance.
Processed data

• name;
• e-mail;
• messages sent;
• attached documents.

Legal basis
Execution of the contract and, where applicable, the legitimate interest of the Operator to provide support and manage the relationship with users.

Article 28 – Platform Security

Purpose

Protecting the Platform against misuse, fraud and security incidents.
Processed data

• IP address;
• access logs;
• technical information about the device and browser;
• data about security incidents.

Legal basis
The legitimate interest of the Operator to ensure the security of its services (art. 6 para. (1) lit. f GDPR).

Article 29 – Improving services

Purpose
Analyzing the use of the Platform to improve its functionalities and performance.
Processed data

• usage statistics;
• aggregated technical information;
• data about the performance of the application.

Legal basis
The legitimate interest of the Operator.
If cookies or similar technologies that require consent according to applicable law are used, they will be activated only after consent has been given.

Article 30 – Administrative communications

Purpose
Sending messages regarding:

• account activation;
• payment confirmation;
• password reset;
• security notifications;
• changes to contractual documentation.

Legal basis
Execution of the contract and, where applicable, fulfillment of legal obligations.

Article 31 – Marketing communications

Purpose
Sending:

• newsletters;
• commercial offers;
• promotions;
• information on new services.

Legal basis
User consent, when required by applicable law.
The user may withdraw their consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal.

Article 32 – Defense of the Operator’s rights

Purpose
Management of disputes, recovery of claims and defense of the Operator’s legitimate rights and interests.
Processed data
Any data relevant for the resolution of the dispute or for the exercise or defense of a right.
Legal basis
The Operator’s legitimate interest and, where applicable, the fulfillment of legal obligations.

Article 33 – Compliance with legal obligations

The Operator may process personal data when this is necessary for compliance with obligations under tax, accounting, commercial, fraud prevention or other applicable regulatory acts.
Legal basis
Compliance with a legal obligation.

Article 34 – Compatible further processing

If the Operator intends to use the data for a new purpose, compatible with the initial purpose, it will assess the compatibility of the processing and comply with the information obligations provided for by the GDPR.

Article 35 – Legitimate interest

When processing is based on the legitimate interest of the Operator, the Operator will carry out an internal analysis to verify whether:

• the interest pursued is legitimate;
• the processing is necessary to achieve this interest;
• the fundamental rights and freedoms of the users do not prevail over the interest pursued.

The Operator will document this analysis whenever necessary.