Privacy policy

The data controller is Asociația Cluster “Produs în Neamț”, the organiser of NEAMȚ - THE NEXT MOVE, with its registered office in Piatra-Neamț, str. Alexandru cel Bun nr. 27, tax identification number (CUI) 44627800, registered in the Register of Associations and Foundations under no. 5050/279/2021.

The data protection officer (DPO) is Bogdan Pușcașu.

For any question about your data, including for the data protection officer, you can write to us at [email protected].

Through the registration form: your full name, company, field of activity, email address and your consent to the processing of your data. We do not collect any other data through the form.

When you visit the website, the hosting provider automatically processes technical data - IP address, browser type, date and time of access - needed for the website to work and to stay secure.

We use the form data solely to organise the event: keeping track of attendance requests, confirming attendance, event-related communication and admission to the hall.

The legal basis is your consent (Article 6(1)(a) of Regulation (EU) 2016/679, the GDPR). You can withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

Technical data is processed on the basis of our legitimate interest in keeping the website working and secure (Article 6(1)(f) GDPR). We do not take decisions based solely on automated processing.

We do not sell or rent the data. The form does not store it in a database: it is emailed to the organising team.

Only a few members of the organising team have access to the form data, and they use it solely for the purposes described above.

To receive the form we use the following providers, which process the data only on our behalf and according to our instructions: Cloudflare (website hosting), Resend (emailing the form) and Google (the organisers’ mailbox).

We aim to keep the data within the European Union: the form emails are sent through Resend’s data centre in Ireland. However, these providers are based in the United States, and some technical processing may take place outside the European Economic Area. In such cases, transfers take place only with the safeguards provided by the GDPR: the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, for certified providers, or the standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).

We keep the form data for no more than 12 months after the event, after which we delete it.

The website does not use analytics or advertising cookies. The hosting provider may set strictly necessary cookies for security, for example to protect against automated traffic.

The website’s fonts are loaded from Google Fonts servers, which involves sending your IP address to Google.

You have the right of access to your data, to rectification, to erasure, to restriction of processing, to data portability and to object, as well as the right to withdraw your consent. To exercise them, you can write to us at [email protected].

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.