enroÎnscrierile pentru anul academic 2026-2027 sunt deschise! Aplică acum!
Contact

Privacy Policy

Last updated: 20 August 2026

1. Who we are (the data controller)

The website www.tiffin.ro is operated by SC MM Consultants & International SRL, referred to below as “Tiffin University Romania” or “we”, with its registered office at Str. Transilvaniei, Nr. 6, Etaj 1, Sector 1, Bucharest, 70778, Romania, VAT number 16907201, registered with the Trade Register under no. J2004017763408.

We are the data controller within the meaning of Regulation (EU) 2016/679 (GDPR) for the data described in this document.

Phone: 021 402 54 54

E-mail: info@tiffin.ro

Responsibility for data protection rests with SC MM Consultants & International SRL, which can be contacted at info@tiffin.ro on any matter relating to the processing of your data.

2. What data we collect and where it comes from

We collect personal data directly from you, through the following channels:

  • Forms on our website (www.tiffin.ro): full name, e-mail address, phone number, the study programme you are interested in, and any other information you choose to include in your message.
  • Lead Gen Forms on LinkedIn, Meta (Facebook and Instagram) and Google: full name, e-mail address, phone number, company name, job title and any other fields shown in the form. This data is passed to us by the relevant platform once you choose to submit the form. The platform’s own processing of your data, before it reaches us, is governed by that platform’s privacy policy.
  • Online appointment booking (Calendly): name, e-mail address, the time slot you select and any information you provide when booking.
  • Direct communication: the data you send us by e-mail, phone, WhatsApp or social media messages.
  • The admissions process: documents and information required for your application file (diplomas, transcripts, identity documents, language certificates and similar).
  • Technical data collected automatically: IP address, device and browser type, pages visited and how you interact with the website, collected through cookies and similar technologies. See our Cookie Policy for details.

3. Why we process your data and on what legal basis

  • To respond to your requests for information about our study programmes, to contact you by phone or e-mail, and to arrange advisory meetings. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and/or your consent (Art. 6(1)(a) GDPR).
  • To manage the admissions and enrolment process. Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
  • To send you marketing communications (newsletters, event invitations, information about programmes and admission deadlines). Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
  • To measure and optimise our advertising campaigns and the performance of our website. Legal basis: your consent, given through our cookie banner (Art. 6(1)(a) GDPR).
  • To defend our legitimate interests and comply with legal obligations (accounting, archiving, responding to requests from authorities). Legal basis: legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).

4. Who we share your data with

We do not sell your data. We may disclose it to the following categories of recipients, solely for the purposes set out above:

  • Tiffin University (Tiffin, Ohio, United States of America), the degree-awarding institution, for the purpose of processing applications and enrolling students.
  • Service providers acting as processors on our behalf: web hosting, e-mail and CRM services, online scheduling platforms, analytics and advertising providers (Google, Meta Platforms, LinkedIn).
  • Professional advisers (accountants, lawyers, auditors), where necessary.
  • Public authorities, where we are under a legal obligation to do so.

All providers processing data on our behalf are contractually required to maintain an adequate level of protection and to process the data solely in accordance with our instructions.

5. Transfers outside the European Economic Area

Because we work with Tiffin University in the United States and use services from providers established outside the EEA, your data may be transferred outside the European Economic Area. Such transfers are carried out on the basis of the safeguards provided for under the GDPR, namely the Standard Contractual Clauses approved by the European Commission or, where applicable, an adequacy decision (including the EU–U.S. Data Privacy Framework). You may request a copy of the applicable safeguards by writing to info@tiffin.ro.

6. How long we keep your data

  • Contact form and lead data where an application does not proceed: 24 months from the last interaction.
  • Applicant and enrolled student data: for the duration of the contractual relationship and thereafter in accordance with the statutory archiving periods applicable to academic records.
  • Data used for marketing: until you withdraw your consent, or a maximum of 24 months from the last interaction.
  • Financial and accounting records: in accordance with the statutory retention periods in force.
  • Data collected through cookies: for the durations set out in our Cookie Policy.

7. Your rights

Under the GDPR, you have the following rights:

  • the right to access your data;
  • the right to have inaccurate or incomplete data corrected;
  • the right to erasure (the “right to be forgotten”);
  • the right to restrict processing;
  • the right to data portability;
  • the right to object to processing, including processing for direct marketing purposes;
  • the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
  • the right not to be subject to a decision based solely on automated processing, including profiling.

To exercise any of these rights, write to us at info@tiffin.ro. We will respond within one month of receiving your request. This period may be extended by two months for complex requests, in which case we will inform you.

8. Your right to lodge a complaint

If you believe we have infringed your rights, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

Bd. G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania

Phone: +40.31.805.9211

E-mail: anspdcp@dataprotection.ro

Website: www.dataprotection.ro

9. Data security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure, including traffic encryption (HTTPS), role-based access controls, and confidentiality agreements with our staff and providers.

10. Minors

Our programmes are intended for people who have completed secondary education. We do not knowingly collect data from anyone under the age of 16 without the consent of a parent or legal guardian. If a parent becomes aware that we have collected such data, they can contact us at info@tiffin.ro to have it deleted.

11. Cookies

How we use cookies is described separately in our Cookie Policy, available at www.tiffin.ro/cookie-policy/.

12. Changes to this policy

We may update this policy from time to time. The version in force is always the one published on this page, with the date of the last update shown at the top. We recommend that you review it periodically.

13. Contact

SC MM Consultants & International SRL

Str. Transilvaniei, Nr. 6, Etaj 1, Sector 1, Bucharest, 70778, Romania

Phone: 021 402 54 54

E-mail: info@tiffin.ro