Menu Close
Close
Facebook Youtube Instagram Tiktok Linkedin

Information note to users

                                           

  1. Preliminary aspects
    • The purpose of this Information Notice is to explain what data we process, why we process it, and what we do with it—whether you are an individual client or a representative or contact person for a corporate client of our company, and in our capacity as a data controller. By reading this document, you will also learn about your rights and how you can legally exercise them. We take your privacy seriously and never sell lists or email addresses. Fully aware that your personal information belongs to you, we make every effort to store it securely and process it with care. This information is important. We hope you read it carefully.
  2. About us
    • The “CUTURAFT” Cultural Association—headquartered at 43B Viitorului Street, 1st Floor, Room 3, Corbeanca Village, Corbeanca Commune, Ilfov County (Tax ID: 28664343)—is responsible for processing the personal data we collect from you directly or from other sources via the platform www.rominas.ro.
    • Under applicable law, our company acts as a personal data controller. To ensure your data is processed securely, we have made every effort to implement reasonable measures to protect your personal information.
  3. Who are you?
    • Under the law, you—whether an individual client or a representative or contact person for a legal entity that is a client of our company—are a “data subject,” meaning an identified or identifiable natural person. To ensure full transparency regarding data processing and to enable you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us (the data controller) and you (the data subject).
  4. Our commitment to personal data protection

4.1 Protecting your personal information is very important to us. That is why we are committed to complying with European and national legislation regarding the protection of personal data—specifically Regulation (EU) 679/2016, also known as the GDPR—and the following principles::

  • Legality, fairness and transparency

We process your data legally and correctly. We are always transparent about the information we use and you are properly informed.

  • Control is yours

Within the limits of the law, we offer you the possibility to review, modify, delete the personal data you have shared with us and to exercise your other rights.

  • Data Integrity and Purpose Limitation

We use the data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that your personal data is accurate, complete and up to date.

  • Security

We have implemented reasonable security and encryption measures to protect your information as best we can. However, please note that no website, application or internet connection is completely secure.

  1. Changes

5.1 We may amend this Information Notice at any time. All updates and amendments to this Information Notice take effect immediately upon notification, which we will provide by posting on the website/at the company’s headquarters or place of business, and/or via email, and/or through other means permitted by law..

  1. Întrebări și solicitări

6.1 If you have questions or concerns regarding the processing of your data, wish to exercise your legal rights concerning the data we hold, or have concerns about how we handle any privacy-related matters, you can write to us at the following email address: [email protected]

  1. Personal data

What kind of personal data do we collect?

Name and First name

Address

Age

Citizenship

The CNP

Authentication data (PIN password)

Authentication data (user name)

Date of birth

E-mail address

Signature

Gender   

Civil status

Telephone number (s) (contact)  

Place of birth  

Social media accounts (Facebook, Linkedin, Instagram, Youtube, etc.)  

Web cookies modules.

  1. Why we collect this information?

 

We collect your information for specific and legitimate purposes, which include, but are not limited to, the following:

  • To respond to your questions and requests;
  • To provide and improve the services and products we offer;
  • To comply with the law;
  • To establish or assert a legal right in court.;
  1. Legal grounds for processing

 

  • Processing is necessary for the conclusion and/or performance of a commercial contract;

 

  • Processing is necessary to pursue our legitimate interests, but only where our interest outweighs your rights and interests.

 

  •  Processing is necessary to comply with a legal obligation. In certain situations, data processing is required to fulfill a legal obligation, such as retaining financial records for a period of 10 years.

Processing is necessary to pursue our legitimate interests, but only where our interest outweighs your rights and interests—such as in the case of CCTV video surveillance. When relying on legitimate interest, we conduct a legitimate interest assessment (balancing test) to weigh our interest against yours. If our interests prevail, we will rely on legitimate interest. If your interests prevail, we will not rely on legitimate interest, and unless we can identify another valid legal basis, we will not carry out the processing activity in question.

  1. How long do we keep personal information?
    • We store personal data only for the period necessary to fulfill the purposes, but for no longer than 5 years following the termination of the contract or the last interaction with us. Upon the expiration of this period, the personal data will be destroyed or deleted from our IT systems or anonymized for use in scientific, historical, or statistical research.
    • Please note that in certain specifically regulated situations, we store data for the period mandated by law—for instance, the retention of accounting records for a period of 10 years.
  2. How do we transmit your information?

11.1 We make continuous, reasonable efforts to ensure that these third parties have implemented appropriate protection and security measures. We have contractual clauses in place with these third parties to ensure your data is protected. We will inform you of the identity of these companies prior to the transfer or within a reasonable timeframe, and we will ensure that any transfer is lawful, based on your consent or another legal ground.

11.2. We may also transmit data to other parties with your consent or in accordance with your instructions.

11.3. We may also provide your personal data to the public prosecutor’s office, the police, courts of law, and other competent state authorities, in accordance with and within the limits of legal provisions and in response to specific requests.

11.4. We will take reasonable steps to ensure that your data does not leave the European Economic Area; however, should we transfer data to countries outside the EEA, we will ensure in all cases that the transfers are lawful, based on your explicit consent or another legal ground.

  1. What are your rights?

Your rights under the GDPR are as follows:

  • The right to withdraw consent
  • The right to be informed about the processing of your data
  • The right of access to data

You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed and, where that is the case, access to that data and the information specified in Art. 15 para. (1) of the GDPR.

  • The right to rectify inaccurate or incomplete data

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you.

  • The right to erasure (“right to be forgotten”)

In the situations provided for in Art. 17 of the GDPR, you have the right to request and obtain the erasure of personal data.

  • The right to restriction of processing
  • In the cases provided for in Art. 18 of the GDPR, you have the right to request and obtain the restriction of processing.
  • The right to transmit the data we hold about you to another controller

In the cases provided for in Art. 20 of the GDPR, you have the right to request and obtain data portability.

  • The right to object to data processing

In the cases provided for in Art. 21 of the GDPR, you have the right to object to data processing. • The right not to be subject to a decision based solely on automated processing, including profiling

  • The right to seek judicial remedy
  • The right to lodge a complaint with a supervisory authority

 

Please note that:

  • If you wish to exercise your rights, you may do so by submitting a written, signed, and dated request to the email address: [email protected]
  • The rights listed above are not absolute. Exceptions exist; therefore, each request received will be analyzed to determine whether it is well-founded. If the request is well-founded, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to lodge a complaint with the Supervisory Authority and to seek judicial recourse.
  • We will endeavor to respond to the request within 30 days. However, this timeframe may be extended depending on various factors, such as the complexity of the request, a high volume of requests received, or the inability to identify you within a reasonable timeframe.
  • If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable such identification, we are not obliged to comply with the request.
  1. Questions, requests and exercise of rights

If you have any questions or concerns about the processing of your information or wish to exercise your legal rights or have any other concerns about privacy, you can write to us at: [email protected]

 

Done on 01.10.2026