Privacy policy.

01 / Who we are

This policy covers the processing of personal data collected through the website winterai.arsc.ro, operated by the Romanian Smart City Association (Asociația Română pentru Smart City, ARSC), in its capacity as organiser of the Winter AI Festival Iași event.

Contact details for any request concerning personal data: [email protected].

02 / What data we collect

We collect only the data you provide to us voluntarily through the contact form:

• Name: so that we can address you correctly
• Email: so that we can reply to you
• Organisation (optional): so that we understand the context
• Category of interest and message: so that we can give you a relevant reply

We do not use tracking cookies. We do not collect geolocation data. We do not integrate analytics tools that create user profiles.

03 / How we use the data

We use the data you send us exclusively to respond to your request and to provide you with information about Winter AI Festival Iași. We do not send automated newsletters, we do not pass your data on to commercial partners and we do not use it for advertising.

The legal basis is your consent, given by ticking the box in the form, in accordance with Regulation (EU) 2016/679 (GDPR).

04 / Who we share the data with

The forms on the site are processed on the Romanian Smart City Association's own infrastructure, at api.arsc.ro, from where the messages reach us by email.

Two providers are technically involved in this process:

• Cloudflare Turnstile, which checks, when you submit the form, that you are not a robot. See Cloudflare's policy.
• Plausible Analytics, hosted by us at plausible.arsc.ro, which counts visits without cookies and without personal data.

The site's fonts are hosted locally and are not loaded from Google Fonts or any other external provider. Your data is not passed on to any other third parties. We do not sell or hand over databases.

05 / How long we keep the data

We keep our correspondence with you for as long as is necessary to reply to you and to continue our communication. If you no longer wish to be contacted, we delete your data on request, without delay.

For event participants, registration data is kept until the end of the edition they registered for, plus 12 months for administrative archiving.

06 / Your rights (GDPR)

Under Regulation (EU) 2016/679, you have the following rights regarding your personal data:

• Right of access: to find out what data we hold about you
• Right to rectification: to have inaccurate data corrected
• Right to erasure: to ask us to delete your data
• Right to data portability: to receive a copy of your data in a structured format
• Right to object: to object to the processing
• Right to withdraw your consent: at any time

To exercise any of these rights, send an email to [email protected]. We reply within 30 days at most.

You have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, the Romanian data protection authority): dataprotection.ro.

07 / Cookies

The site does not use tracking, analytics or marketing cookies. The only external resources loaded are:

• Fonts: the Sora font is served from our own server, not by an external provider. No data is passed to third parties when it loads.

08 / Changes to this policy

We may update this policy from time to time, especially before and after each edition of the festival. The date of the last update appears at the top of the page. Material changes are communicated by email to those who have written to us before.

SUMMARY IN ONE PARAGRAPH

We collect only what you send us through the form. We use the data only to reply to you. We do not sell data, we do not send spam, we do not use tracking cookies. You can ask at any time for your data to be deleted at [email protected].