Certification Policy

1. Issuing operator

Course-completion attestations are issued by:

• GALIAN SOFTWARE DEVELOPMENT SRL
• VAT (CUI): RO45988048
• Trade Registry No.: J12/2051/2022
• EUID: ROONRC.J12/2051/2022
• Registered office: Cluj-Napoca, Cluj county, Romania
• Contact: contact@cursuri-ai.ro

The operator runs the cursuri-ai.ro platform as a private e-learning service provider, without authorisation as an adult vocational training provider within the meaning of Romanian Government Ordinance no. 129/2000.

2. Legal nature of the certificate

The document issued through the platform, titled "Certificate of Completion", has the character of a private attestation of an objective fact: the holder has fully completed the course content within the platform's digital environment and has reached the minimum thresholds configured for the automated assessments.

This document does NOT constitute and must NOT be represented as:

• A diploma, certificate or study document issued within the national education system within the meaning of Romanian Law no. 198/2023 on pre-university education or Law no. 199/2023 on higher education;
• A professional qualification certificate or graduation certificate issued through programmes authorised under Romanian Government Ordinance no. 129/2000 on adult vocational training, republished (Official Gazette no. 711/30.09.2002), as subsequently amended and supplemented;
• A professional attestation recognised by the Romanian National Authority for Qualifications (ANC), organised under Government Decision no. 556/2011, or by any other public authority, professional order or professional association;
• A document subject to recognition or equivalence through the Romanian National Centre for the Recognition and Equivalence of Diplomas (CNRED);
• A document conferring the right to practise regulated professions (lawyer, physician, psychologist, chartered accountant, financial auditor, engineer with signing rights, architect, etc.), for which the specific legislation continues to apply.

Recognition of the document as evidence of knowledge or skills remains at the discretion of each employer, institution or third party evaluating it.

3. Eligibility conditions

A certificate is issued at the holder's request, after the following conditions are cumulatively met:

• An active account on the platform and valid access to the course (a subscription or purchased individual access) during the period in which you worked through it. The certificate remains yours after the subscription ends: it attests to something already completed, not to an ongoing right of access;
• Completion of the minimum threshold of lessons marked as "completed" in the platform's progress system;
• For courses that include automated assessments (quizzes): reaching a minimum average score configured by the operator;
• Express acceptance of this policy and of the consent text displayed at the time of issuance.

The thresholds applicable at the time of the request are indicated in the platform interface. The operator may adjust these thresholds for future courses; certificates already issued are not affected.

4. Contents of the certificate

Each certificate contains:

• The unique certificate number (format: CAI-YYYY-NNNNNN);
• The holder's full name, as registered in the account at the time of issuance;
• The exact name of the course and the version of the curriculum completed;
• The percentage of lessons completed, the average quiz score (where applicable) and the total time spent in the course;
• The completion date and the issue date;
• A QR code and a public verification URL;
• The issuer's identification details (name, VAT number, registered office).

The certificate is an electronic document issued by the issuing legal entity and is valid without a handwritten signature and without the name of a signing natural person. Authenticity is established through the cryptographic fingerprint generated at issuance and through the public verification page, not through a handwritten signature.

The displayed data is frozen at the time of issuance to ensure traceability in line with the integrity principle set out in art. 5(1)(f) of Regulation (EU) 2016/679.

5. Public verification and GDPR

Each certificate can be verified by accessing the URL printed on the document. By default, the verification page displays only non-identifying elements: the certificate number, the course title, the dates and the status (valid or revoked).

The holder's full name is displayed publicly ONLY with express consent given at the time of issuance, on the basis of art. 6(1)(a) and art. 7 of Regulation (EU) 2016/679 on the protection of personal data. The exact text of the consent is recorded and kept together with the certificate, so that it can be demonstrated upon request.

Verification pages and public profiles are not indexed by search engines. They carry the technical noindex directive and are excluded from the site map, precisely so that the holder's name does not appear in search results. These pages are designed to be opened from the link or QR code on the certificate, not found by searching for a person.

At any time, from their platform account, the holder may:

• Enable or disable the public display of their name on the verification page (withdrawal of consent);
• Request an export of their data (art. 20 GDPR);
• Request deletion of their account. Pursuant to art. 17(3)(e) GDPR, the data strictly necessary to preserve the traceability of issued certificates may be anonymised, instead of deleted, in order to allow public verification of the document's authenticity for third parties to whom it is presented.

5.bis Retention period and data protection officer

Retention period: The certificate authenticity register (number, verification hash, course name, issue dates and status) is kept indefinitely, as it expresses an objective fact that third parties receiving the document may invoke at any time. The holder-identifying component (the full name) is anonymised at the holder's express request or upon deletion of the platform account, by replacing the name with a generic identifier and forcing the public-display option to "off".

Data Protection Officer (DPO): The operator does not carry out activities falling within the categories set out in art. 37(1) of Regulation (EU) 2016/679 as triggering the obligation to designate a DPO (systematic and large-scale monitoring, large-scale processing of special categories of data, etc.). For any data protection request you can contact us directly at contact@cursuri-ai.ro.

5.ter Certificates earned under B2B subscriptions

If you access the courses through a company subscription, the certificate keeps a link to the subscription you had access through, for the operator's internal records. Specifically:

• Company administrators see, in the B2B panel, the course progress of their team members (lessons completed), on the basis of art. 6(1)(f) GDPR — the paying company's legitimate interest in tracking the training it funds;
• Your certificates are not automatically transmitted to the company. If a company enables a certificate reporting integration in the future, it will receive only the certificate data that is already public (number, course, date, status, metrics), and your name will be included only if you have enabled public visibility;
• For any such communication, the operator and the company act as joint controllers within the meaning of art. 26 GDPR, with responsibilities detailed in the B2B framework agreement;
• This section does NOT affect the public visibility of the certificate on the verification page — that remains controlled exclusively by your consent (art. 6(1)(a) GDPR).

6. Artificial Intelligence component

The platform's courses include AI-assisted functionality (the "AI Virtual Professor", summaries, adaptive quizzes). These functionalities constitute AI systems within the meaning of Regulation (EU) 2024/1689 on artificial intelligence (the "AI Act") and are explicitly labelled in the interface, in accordance with art. 50 of the regulation.

The fact that the holder interacted with an AI system during the course does not change the legal nature of the certificate. The document attests the completion of the content, not the performance of the dialogue with the AI system.

7. Revocation of the certificate

The operator may revoke an issued certificate in the following situations:

• Subsequent discovery of an irregularity in how the course was completed (for example: fraudulent use of the account by a third party, manipulation of the quiz system);
• The holder's express request;
• A final court decision;
• Processing errors confirmed by the technical team.

The revocation is recorded in the certificate register with the date, the reason and the responsible administrator. The public verification page will display the "revoked" status from the moment of revocation, allowing third parties who receive the document to confirm its current standing.

8. Costs

Issuing a certificate is included in the active subscription or the purchased individual access, at no additional cost. The operator reserves the right to introduce, in the future, fees for additional issuances or printed physical certificates, with prior notice in the "Terms and Conditions" section.

9. Rights and remedies

As a consumer (natural person), you benefit from the rights provided by:

• Romanian Emergency Ordinance no. 34/2014 on consumer rights in contracts concluded with professionals;
• Romanian Law no. 363/2007 on combating unfair commercial practices;
• Regulation (EU) 2016/679 on the protection of personal data.

For complaints, please contact contact@cursuri-ai.ro first. If your complaint is not resolved, you may turn to:

• The Romanian National Authority for Consumer Protection (ANPC) — anpc.ro — for consumer protection matters;
• The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro — for data protection matters;
• Alternative dispute resolution (ADR) entities notified by the Member States and listed by the European Commission at consumer-redress.ec.europa.eu, as well as the European Consumer Centres Network (ECC-Net) for cross-border disputes.

The European Online Dispute Resolution (ODR) platform, previously accessible at ec.europa.eu/consumers/odr, was discontinued on 20 July 2025 by Regulation (EU) 2024/3228. Alternative dispute resolution continues through the ADR entities listed above.

10. Changes to this policy

The operator may amend this policy by updating the document and marking the date of the last change in the header. Certificates issued earlier remain governed by the policy version in force at the time of issuance, identifiable through the "Consent version" field in the certificate's internal record. Changes that restrict holders' rights are communicated by email at least 30 days before they take effect.