Privacy policy

This policy explains what personal data we collect through wishedu.ro, why we use it, how long we keep it and what rights you have in relation to it.

1. Who the data controller is

The data controller is SS INTERNATIONAL LEARNING SRL (“WISH Education”), a company registered in Romania, VAT number 52197810, with its registered office in Sibiu, [address to be completed]. You can reach us at contact@wishedu.ro or on the telephone number published on the Contact page.

2. What we collect and why

• ★Data submitted through the contact form: name, email address, telephone number (optional), enquiry subject and message. We use it solely to respond to your enquiry. Legal basis: your consent and pre-contractual steps taken at your request (Art. 6(1)(a) and (b) GDPR).
• ★Technical data required for the site to work: IP address, browser and device type, pages viewed. This is processed by our hosting provider for security and service delivery. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• ★Traffic analytics collected through Google Analytics 4, only if you consent via the cookie banner. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time from the Cookie policy page.

3. How long we keep data

Messages received through the contact form are kept for a maximum of 24 months from the last correspondence, so that we can pick the conversation back up if you return. Analytics data is retained according to the Google Analytics 4 settings, for a maximum of 14 months. Server log data is kept short-term, in line with our hosting provider’s policy.

4. Who we share data with

We never sell or rent personal data. We share it only with the service providers required to operate the site, acting as processors:

• ★Vercel Inc. — website hosting and content delivery.
• ★Resend (Plus Five Five, Inc.) — delivery of emails generated by the contact form.
• ★Google Ireland Limited — traffic statistics through Google Analytics 4, with your consent only.

Some of these providers may process data outside the European Economic Area. Where they do, the transfer relies on the European Commission’s standard contractual clauses or on an adequacy decision.

5. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, objection, data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to contact@wishedu.ro. We respond within one month of receiving the request. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), www.dataprotection.ro.

6. Data security

The site is served exclusively over HTTPS. We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or disclosure. Access to received messages is limited to the people who need it in order to reply to you.

7. Children

The site is not directed at children under 16. Where a programme concerns a child, the form is completed by a parent or legal guardian, who provides consent on the child’s behalf.

8. Changes to this policy

We may update this policy when our services or legal requirements change. The version in force is always the one published on this page, together with the date it was last updated.