Privacy Policy

1. Data Controller

NEXTRAIL360 S.R.L. Strada Nucului, nr. 9 555300 Cisnădie, Romania Email: info@echivaleaza.ro

2. Data Collected

We collect and process the following personal data: - Account data: email address, name (when signing in with Google) - Usage data: pages visited, time of access, language used - Content data: profession names, Bundesland selection, uploaded documents (stored encrypted) - Communication data: email correspondence, WhatsApp messages

3. Purpose of Processing

Your data is processed for: - Providing the credential recognition service (Art. 6(1)(b) GDPR) - Improving our service (Art. 6(1)(f) GDPR) - Fulfilling legal obligations (Art. 6(1)(c) GDPR) - Anonymized profile sharing with employers only with explicit consent (Art. 6(1)(a) GDPR)

4. Cookies and Tracking

We only use technically necessary cookies for authentication and language selection. We do not use tracking cookies or third-party analytics tools.

5. Third-Party Services

- Google OAuth: for authentication (see Google's privacy policy) - Resend: for sending emails (US servers, EU Standard Contractual Clauses) - Claude API (Anthropic): for document OCR processing (data is not used for training)

6. Storage and Deletion

Your data is stored on servers in Germany. Uploaded documents are encrypted with AES-256. You can request deletion of your account and all associated data at any time.

7. Your Rights

Under the GDPR, you have the right to: - Access your stored data (Art. 15) - Rectification of inaccurate data (Art. 16) - Erasure of your data (Art. 17) - Restriction of processing (Art. 18) - Data portability (Art. 20) - Object to processing (Art. 21) - Lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, https://www.dataprotection.ro (Art. 77)

8. Contact

For data protection inquiries, contact: info@echivaleaza.ro