Personal data protection and information security are central to how GTMC-Skills services are designed and delivered. This notice describes the principles, legal bases and regulatory references we apply under the European and Romanian framework.
GTMC processes personal data according to lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity and confidentiality principles. Processing activities are configured with privacy by design and privacy by default.
Depending on the context, data may be processed for:
We apply risk-based security controls including encryption of communication channels, access control and role segregation, logging and audit trails, patch and vulnerability management, backup and business continuity, and incident and personal-data-breach procedures.
Data subjects may exercise rights granted by applicable law, including access, rectification, erasure, restriction, objection, data portability, and the right to lodge a complaint with the competent supervisory authority.
For privacy-related requests, you can contact us through the channels listed in the website Contact section.
Below are the main legal texts relevant to data protection, communications privacy, and network and information systems security.
This page is for information purposes and outlines GTMC-Skills's general privacy and security compliance approach. If legal, organizational or technological conditions change, this content may be updated to remain aligned with applicable requirements.
Last update: 05/08/2026