Last reviewed: September 15, 2026
1. Introduction
Your privacy matters to us.
This Privacy Policy explains how Iordache Quality Services SRL (“we,” “our,” or “us”) collects, uses, stores, shares, and protects personal data when you visit or interact with ioniordache.com (the “Website”), contact us, request information, inquire about our services, courses or training programs, or otherwise communicate with us.
The Website provides information about consulting services, professional training, examinations, publications, educational resources, and other professional activities.
We are committed to processing personal data lawfully, fairly, transparently, and securely in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and other applicable Romanian and European Union data protection legislation.
This Privacy Policy should be read together with our Cookie Policy, which provides more detailed information about cookies and similar technologies used on the Website.
2. Data Controller
The data controller responsible for the processing of personal data described in this Privacy Policy is:
Iordache Quality Services SRL
Represented by Ion Iordache
Reșița, Romania
E-mail: ion@ioniordache.com
Website: ioniordache.com
As the data controller, Iordache Quality Services SRL determines the purposes and means of processing personal data in connection with the Website and the professional activities described in this Privacy Policy.
If you have questions about this Privacy Policy, the way your personal data is processed, or wish to exercise your rights under applicable data protection law, you may contact us using the details above.
3. Personal Data We Collect
The personal data we collect depends on how you interact with the Website and with us. You can browse much of the Website without actively providing personal data.
When you contact us, submit a form, request information or a quotation, inquire about consulting services, register your interest in a course, training program or examination, request a publication or resource, or otherwise communicate with us, we may collect information such as your name, e-mail address, telephone number, organization or company, job title or other relevant professional information, the service, course, examination, publication or resource in which you are interested, the content of your message or inquiry, and any other information you choose to provide.
If a professional or contractual relationship subsequently develops, we may also process information reasonably necessary for that relationship, including contact details, contractual information, billing or invoicing information, correspondence, service-related records, and other information necessary to provide the agreed products or services.
Please avoid submitting personal data that is not necessary for your inquiry or our professional relationship.
When you use the Website, certain technical information may also be generated or collected automatically by the Website, server, security tools, cookies, or similar technologies. Depending on your consent choices and the technologies in use, this may include your IP address, browser type and version, operating system, device type, language or browser preferences, pages viewed and interactions with Website content, referring website or source, approximate geographic information, date and time of access, technical logs, security-related information, and cookie or similar identifiers.
The precise cookies and similar technologies currently used on the Website are described in our Cookie Policy.
4. How We Collect Personal Data
We may collect personal data directly from you when you complete a contact or inquiry form, contact us by e-mail or another communication method, request information or a quotation, inquire about or register for consulting, training, courses or examinations, request or access certain publications or resources, enter into a professional or contractual relationship with us, or otherwise voluntarily provide information to us.
Certain technical and usage information may be collected automatically when you visit or interact with the Website through server logs, security technologies, cookies, analytics tools, and similar technologies. Non-essential cookies and technologies are used in accordance with your consent choices where consent is required by applicable law.
In limited circumstances, we may also receive personal data from service providers involved in supporting the Website or our professional relationship with you, for example where necessary for communications, technical support, invoicing, or the delivery of an agreed service.
Where we receive personal data from another source, we process it only where there is an appropriate lawful basis and in accordance with applicable data protection requirements.
5. Purposes and Legal Bases for Processing
We process personal data only where we have a lawful basis under the GDPR. The purpose and legal basis depend on the context in which the information is processed.
When you contact us with a question, request information, request a quotation, or inquire about our services, courses, examinations, training programs, publications or resources, we process the information you provide in order to respond to your request. Depending on the nature of the inquiry, this processing may be necessary to take steps at your request before entering into a contract under Article 6(1)(b) GDPR, or may be based on our legitimate interest in responding to legitimate professional and business inquiries and communicating with persons interested in our activities under Article 6(1)(f) GDPR.
Where you enter into an agreement with us, we process personal data as necessary to provide consulting services, training, examinations, publications, resources, or other agreed products or services. This processing is generally based on Article 6(1)(b) GDPR because it is necessary for the performance of a contract or to take requested steps before entering into a contract.
We may process information relating to transactions, invoices, accounting records, and our professional relationship where necessary to comply with applicable legal, tax, accounting, regulatory, or other statutory obligations. Such processing is based on Article 6(1)(c) GDPR.
Technical information may be processed to maintain the security, integrity, availability, and proper operation of the Website, detect or prevent malicious activity, troubleshoot technical problems, maintain appropriate logs, and protect our systems and legal interests. This processing is generally based on our legitimate interest in operating and protecting a secure, reliable, and functional Website under Article 6(1)(f) GDPR.
Where analytics technologies require consent, analytics data is processed only after the required consent has been obtained. In those circumstances, processing is based on your consent under Article 6(1)(a) GDPR. Analytics information may be used to understand how visitors interact with the Website, evaluate Website performance, and improve its content, navigation, and user experience.
Where applicable law requires your consent before a cookie or similar technology may be used, the relevant processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time through the consent management options available on the Website. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where necessary, personal data may also be processed to establish, exercise, or defend legal claims, prevent fraud or misuse, enforce agreements, or protect our legitimate legal and business interests. Depending on the circumstances, such processing may be based on our legitimate interests under Article 6(1)(f) GDPR.
Where we rely on legitimate interests, we consider whether those interests are appropriate in the circumstances and whether your fundamental rights and freedoms override those interests.
6. Contact Forms, Inquiries and Pre-Contractual Communications
The Website provides forms, buttons, e-mail links, or other means through which you may contact us, request information, ask for a quotation, or express interest in consulting services, training, courses, examinations, publications, or other professional activities.
When you submit an inquiry, we use the information you provide to understand and respond to your request and, where relevant, to take steps toward establishing a professional or contractual relationship.
Submitting a form or inquiry through the Website does not, by itself, constitute a purchase or create an obligation to enter into a contract.
If discussions continue outside the Website, such as by e-mail, telephone, proposal, quotation, or other communication, information generated through those communications may be retained as part of our correspondence and business records where appropriate.
Information submitted through contact or inquiry forms is not used by us to send unsolicited direct marketing communications.
7. Consulting, Training and Professional Services
If you engage Iordache Quality Services SRL for consulting, training, examinations, or other professional services, we may process personal data necessary to establish, administer, and perform the professional relationship.
Depending on the nature of the service, this may include identification and contact information, organization and professional information, correspondence, information necessary to understand the requested service, registration or participation information, course, training or examination records where applicable, contractual records, information concerning the delivery or completion of services, and other information reasonably necessary for the professional engagement.
Such information is generally processed because it is necessary to take steps at your request before entering into a contract or to perform an agreement with you.
Where information must be processed or retained to comply with a legal, accounting, tax, or regulatory obligation, processing may instead be based on the applicable legal obligation.
8. Payments, Invoicing and Business Records
Payments for products or services presented on the Website are not processed directly through the Website. Where a purchase or professional engagement is agreed, payment arrangements and instructions are communicated separately.
We may process information necessary to prepare quotations, issue invoices, record payments, maintain accounting and business records, and comply with applicable tax, accounting, contractual, and legal obligations.
This information may include your name, organization, billing information, details of the product or service provided, transaction or payment references, amounts, dates, and related correspondence.
We do not collect payment card information through the Website unless expressly stated otherwise in connection with a future service or payment method.
Information required for invoicing, accounting, taxation, or other legal obligations may be retained for the period required by applicable law even after our direct professional relationship with you has ended.
9. Cookies and Similar Technologies
The Website uses cookies and similar technologies for purposes including essential Website functionality, security, storing preferences, statistics, analytics, and, where applicable, marketing-related functionality.
Some technologies are strictly necessary for the Website to operate or provide a service you request. Other technologies are non-essential and are activated only in accordance with your consent choices where consent is required by applicable law.
When you first visit the Website, the consent management system allows you to accept, refuse, or configure categories of non-essential cookies.
You can subsequently review or change your preferences and withdraw consent through the consent management options available on the Website. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
For information about the categories of cookies used, their purposes, providers, and applicable retention periods, please refer to our Cookie Policy and the cookie settings available through the consent management system.
10. Analytics and Third-Party Technologies
The Website may use third-party technologies to support analytics, Website functionality, security, embedded content, or other features.
The Website uses Google Analytics to help us understand how visitors interact with Website content and to improve Website performance and user experience. Depending on the configuration and your consent choices, analytics technologies may process information such as pages viewed, interactions with Website content, browser and device information, approximate geographic information, referral information, timestamps, and online identifiers.
Where consent is required, Google Analytics and associated non-essential cookies are activated only after you have provided the relevant consent through the Website’s consent management system.
We do not use Google Analytics for the purpose of directly identifying individual visitors.
The Website may also incorporate services or technologies provided by other third parties, including security, hosting, social media, embedded content, or technical service providers. Some third-party technologies may place or access cookies or process technical information when they are activated.
Where such technologies are non-essential and require consent, they will be handled in accordance with your choices through the Website’s consent management system.
Current information about cookies and similar technologies identified on the Website is available in our Cookie Policy.
11. Who We Share Personal Data With
We treat personal data confidentially and do not sell or rent personal data.
Where reasonably necessary for the purposes described in this Privacy Policy, personal data may be made available to service providers that assist us with the operation of the Website or our professional activities.
Depending on the services actually used, these may include Website hosting and infrastructure providers, e-mail and communications providers, Website security providers, backup and storage providers, analytics providers, IT and technical support providers, accounting or professional service providers, and other service providers necessary to support an agreed service or business operation.
Service providers are given access only to personal data reasonably necessary for the relevant purpose and are expected to handle personal data securely and in accordance with applicable data protection requirements.
We may also disclose personal data where required by applicable law, a court, regulatory authority, tax authority, or other competent public authority, or where reasonably necessary to establish, exercise, or defend legal claims.
We do not disclose contact-form information to third parties for their own unsolicited direct marketing purposes.
12. International Data Transfers
Some service providers or technologies used in connection with the Website or our professional activities may process personal data in countries outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take steps to ensure that the transfer is made in accordance with the GDPR and that an appropriate transfer mechanism or safeguard applies where required.
Depending on the recipient, destination, and circumstances, this may include a European Commission adequacy decision, appropriate contractual safeguards such as Standard Contractual Clauses approved by the European Commission, or another transfer mechanism permitted under applicable data protection law.
Where required by applicable law, additional safeguards may also be considered or implemented.
You may contact us if you would like further information about the safeguards applicable to a particular international transfer of your personal data.
13. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, contractual, accounting, tax, regulatory, security, or record-keeping requirements.
If you contact us and no professional or contractual relationship develops, correspondence and associated information will generally be retained only for as long as reasonably necessary to respond to the inquiry, handle any follow-up communications, and maintain appropriate business records.
Where consulting, training, examinations, or other professional services are provided, relevant information may be retained for the duration of the relationship and thereafter for as long as reasonably necessary to fulfil contractual obligations, maintain appropriate professional records, resolve disputes, or establish, exercise, or defend legal claims.
Information that forms part of accounting, tax, invoicing, or other legally required business records will be retained for the period required by applicable Romanian or European Union law.
Technical logs and security information are retained for periods appropriate to the security, troubleshooting, operational, or legal purpose for which they are generated.
Retention periods applicable to cookies and similar technologies may vary by technology and provider. Current information about those periods is available in our Cookie Policy.
When personal data is no longer required, it will be deleted, anonymized, or otherwise securely disposed of where reasonably practicable and subject to applicable legal requirements.
14. Security
We take the security of personal data seriously.
Reasonable and appropriate technical and organizational measures are used to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, misuse, or other unlawful processing.
Depending on the context, these measures may include Website security monitoring, firewall and malware protection, software and security updates, access controls, encrypted communications, backup procedures, and other measures intended to protect the confidentiality, integrity, and availability of information and systems.
Access to personal data is limited, where reasonably practicable, to persons and service providers that require access for legitimate purposes.
However, no website, electronic transmission, storage system, or security measure can guarantee absolute security. While we use reasonable safeguards appropriate to the nature of the processing, no system can eliminate all risk.
15. Automated Decision-Making and Profiling
We do not use personal data collected through the Website to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
We do not carry out such automated decision-making or profiling in connection with contact inquiries, consulting requests, training inquiries, or other professional services described in this Privacy Policy.
Certain third-party technologies may perform their own technical, analytics, advertising, or similar processing as described in our Cookie Policy and, where applicable, subject to your consent choices.
16. Your GDPR Rights
Where the GDPR applies to the processing of your personal data, you have certain rights, subject to the conditions and limitations established by applicable law.
Right of Access
You have the right to request confirmation as to whether we process personal data concerning you and, where applicable, to obtain access to that personal data and related information.
Right to Rectification
You may request the correction of inaccurate personal data and the completion of incomplete personal data concerning you.
Right to Erasure
You may request the deletion of your personal data in circumstances where the GDPR provides a right to erasure. This right is not absolute and may not apply where continued processing or retention is required or permitted by law.
Right to Restriction of Processing
You may request restriction of the processing of your personal data in circumstances provided by the GDPR.
Right to Object
Where processing is based on legitimate interests, you may have the right to object to that processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Right to Data Portability
Where the applicable legal conditions are satisfied, you may request to receive certain personal data you provided to us in a structured, commonly used, machine-readable format and may have the right to transmit that information to another controller.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights Relating to Automated Decision-Making
Where applicable, you have rights concerning decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. As explained above, we do not currently carry out this type of decision-making through the Website.
Exercising Your Rights
To exercise a data protection right, please contact us at ion@ioniordache.com.
We may need to request information reasonably necessary to verify your identity before acting on certain requests. We will respond in accordance with the timeframes and requirements established by applicable data protection law.
17. Right to Lodge a Complaint
If you believe that your personal data has been processed in a manner that infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Romania, the competent supervisory authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul General Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania.
You may also have the right to lodge a complaint with another competent supervisory authority in the European Union, particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement, where applicable.
We encourage you to contact us if you have concerns about how we process your personal data so that we have an opportunity to address them.
18. Children’s Privacy
The Website is intended primarily for professionals, organizations, and individuals seeking consulting, training, educational resources, or professional information.
It is not specifically directed at children under the age of 16, and we do not knowingly seek to collect personal data from children through the Website.
If you believe that a child has submitted personal data to us through the Website without appropriate authorization, please contact us. We will review the circumstances and take appropriate action in accordance with applicable law.
19. Third-Party Websites
The Website may contain links to websites, platforms, resources, or services operated by third parties.
When you follow a link to a third-party website, that website is responsible for its own processing of personal data in accordance with its privacy practices.
Iordache Quality Services SRL does not control and is not responsible for the content, security, availability, or privacy practices of independent third-party websites. We encourage you to review the privacy information provided by any third-party website or service before providing personal data to it.
Where a third-party technology is integrated directly into our Website rather than merely linked from it, information about the relevant processing is provided, where applicable, in this Privacy Policy and/or our Cookie Policy.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance, professional practices, technology, Website functionality, service providers, or the way we process personal data.
The most recent version will be published on this page together with the date of the latest review or update.
Where required by applicable law, we will provide additional notice of material changes affecting the processing of personal data.
We encourage you to review this Privacy Policy periodically to remain informed about how personal data is handled.
21. Contact Information
If you have questions about this Privacy Policy, the processing of your personal data, or wish to exercise a right under applicable data protection law, please contact:
Iordache Quality Services SRL
Represented by Ion Iordache
Reșița, Romania
E-mail: ion@ioniordache.com
Website: ioniordache.com
This Privacy Policy was last reviewed on September 15, 2026.