PRIVACY POLICY

 

www.culturaft.ro
Version: 11 September 2026

1. Data controller

 

CULTURAFT ASSOCIATION, headquartered in Corbeanca Village, Corbeanca Commune, 43B Viitorului Street, 1st floor, room no. 3, Ilfov County, registered in the Register of Associations and Foundations under no. 35/28.10.2013, tax identification number 28664343, intra-Community VAT identification number RO 29609304, represented by Henriques dos Santos Nelson Jose, Vice-President is the controller of personal data processed through www.culturaft.ro within the meaning of Regulation (EU) 2016/679 (“GDPR”).

Contact for data-protection matters: office@culturaft.ro.

2. Processing principles

 

CULTURAFT processes personal data lawfully, fairly and transparently, for specified and legitimate purposes, limits data to what is necessary and retains it only for as long as justified by the processing purpose and applicable legal obligations.

3. Data processed through the contact form

 

When you use the contact form, we may process the information you provide directly, such as your name, email address, contact details included in your message and the content of your request.

Please do not submit special categories of personal data or other sensitive information unless strictly necessary.

4. Purposes and legal bases

 

• Responding to questions, requests, proposals or messages submitted through the form — steps taken at the data subject’s request prior to a possible contractual relationship, where applicable, and/or the Association’s legitimate interest in communicating and managing correspondence.
• Managing requests concerning collaborations, projects, partnerships or CULTURAFT activities — depending on context, pre-contractual steps, performance of a contractual relationship or legitimate interest.
• Compliance with legal obligations and protection of the Association’s rights — legal obligation and/or legitimate interest, as applicable.
• Website security and prevention of abusive use — the Association’s legitimate interest in protecting the Website and its infrastructure.

5. Data not used for marketing

 

As of the date of this Policy, CULTURAFT does not use Google Analytics, Meta Pixel or a newsletter service on the Website. Data submitted through the contact form is not automatically used to enrol users in a marketing database or newsletter.

6. Recipients

 

Personal data may be accessed by authorised persons within CULTURAFT who need it to handle the relevant request and, where necessary, by technical providers supporting hosting, maintenance, security or email services. Such providers must process data only as permitted by applicable law.

Data may also be disclosed to public authorities, courts or other entities where legally required or where necessary for the establishment, exercise or defence of legal claims.

7. International transfers

 

CULTURAFT does not intend to transfer data submitted through the contact form outside the European Economic Area. However, certain technical services used by Website or email providers may involve international infrastructure. Where such a transfer occurs, it must rely on a transfer mechanism permitted under the GDPR.

8. Retention

 

Messages received through the contact form are retained for the period necessary to handle the request and thereafter only where a legitimate reason or legal obligation justifies further retention. Correspondence relevant to a contractual relationship, project, financial or accounting obligation, or dispute may be retained for periods required or permitted by applicable law.

9. Your rights

 

Subject to the conditions set out in the GDPR, you may request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability where the legal conditions are met, and you may object to processing based on legitimate interests.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to office@culturaft.ro. CULTURAFT may request reasonable information to verify the identity of the person making the request.

10. Right to lodge a complaint

 

If you believe your personal data is being processed in breach of applicable law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), without prejudice to any other administrative or judicial remedy.

11. Provision of data

 

Providing data through the contact form is voluntary. However, if you do not provide the information necessary to identify and handle your request, we may be unable to respond.

12. Automated decision-making

 

CULTURAFT does not use the Website to make solely automated decisions that produce legal effects or similarly significant effects on users.

13. Data security

 

CULTURAFT applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unlawful disclosure. No electronic transmission or storage method can, however, guarantee absolute security.

14. Updates

 

This Policy may be updated to reflect changes to the Website, processing activities or the legal framework. The updated version will be published on the Website.