Privacy policy

This policy explains what personal data we process when you use our website and forms, in line with Regulation (EU) 2016/679 (GDPR) and Romanian law.

1. Who is the controller

IMCS Tactical Training Academy SRL, tax ID (CUI) 54578950, Trade Register No. J2026028162003, Strada 13 Decembrie nr. 109, Brașov, 500146, Romania.
Contact for personal data: contact@imcsacademy.ro, tel. +40 724 55 33 86.

2. What data we process, why and on what legal basis

• Booking form – name, email, phone, selected course, optional message. Purpose: handling your booking request, confirming your seat and communicating about the course and payment. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps / performance of a contract).
• Contact form – name, email, message. Purpose: answering your request. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering enquiries), or (b) if the request concerns entering into a contract.
• Direct communications (phone, WhatsApp, email, social media) started by you – same purposes and legal bases as above.
• Usage statistics (Google Analytics) – only if you accept analytics cookies. Legal basis: your consent, Art. 6(1)(a) GDPR and Art. 4 of Romanian Law 506/2004.
• Legal obligations (accounting, tax) – if a contract is concluded. Legal basis: Art. 6(1)(c) GDPR.

We do not ask for sensitive data (for example health data). Please do not write it in the "Message" field. If such information becomes necessary for the safety of a training session, we will request it separately, with the appropriate notice.

3. How the data reaches us

The forms on this site open your email app with the message filled in, and the message is sent from your own email account to our address. The website does not store the content of the forms on a server of its own. The message therefore also passes through your email provider.

4. Who we share data with

Data is accessible to IMCS team members who need it (administration, instructors). Service providers (email, hosting, IT, accounting) may also have access as processors, as may public authorities where the law requires it. If you accept analytics cookies, Google receives the technical data described in the Cookie Policy. We do not sell your data.

5. Transfers outside the European Economic Area

The only possible transfer is to Google LLC (USA), solely for Google Analytics and only if you accept analytics cookies. The transfer relies on the EU-US Data Privacy Framework or on standard contractual clauses.

6. How long we keep data

• Booking requests: for as long as needed to manage the booking and participation, then 3 more years (the general limitation period), except for accounting records, which are kept as required by law.
• Contact messages without a booking: up to 12 months after the last communication.
• Google Analytics data: according to the settings of our Google Analytics account.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection. You can withdraw your cookie consent at any time, without affecting processing carried out before withdrawal. To exercise your rights, write to contact@imcsacademy.ro; we reply within one month at most. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

8. Minors

Bookings for minor participants (for example IMCS Kids) are made by a parent or guardian. We do not knowingly collect data directly from children under 16.

9. Security and automated decisions

We apply reasonable technical and organisational measures to protect data. We do not make automated decisions or build profiles based on your data.

10. Changes

We may update this policy. The version published here is the one in force, with the date of the last update shown at the top.