Effective date: 11 August 2025
Controller: Asociatia Curaj Înainte
Registered address: Str. Hagi Ghiță 17, Sector 1, Bucharest, 011501, Romania
Contact: contact@realromania.info

1) Scope

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit realromania.info, subscribe to updates, contact us, or otherwise interact with us. It applies to all visitors and users in the EEA/UK and globally, where local law so requires.

2) Data we process

• Identification & contact data: name, email address, phone (if provided), organization/role (if provided).
• Account/profile data: username, preferences (if we offer accounts).
• Content you submit: messages, forms, comments, uploads.
• Technical & usage data: IP address, device identifiers, browser type, pages viewed, timestamps, referral URLs, approximate location (country/region), error logs.
• Cookies & similar tech: pixels, tags, local storage—see Cookie Policy.
• Marketing preferences: newsletter opt-in/opt-out, topics of interest.
• Third-party integrations (optional): analytics, embeds (e.g., maps, video), social sharing. Exact partners are listed in the Cookie Policy.

Sources: data you provide directly; data collected automatically via the site; data from third parties (e.g., analytics or social platforms) where you have permitted sharing.

3) Purposes & legal bases (GDPR Art. 6)

• Site operation & security (serve pages, prevent abuse, debug): Legitimate interests (running a secure, reliable site).
• Analytics & performance (understand traffic, improve content): Consent (via cookie banner) where required.
• Communications (respond to messages/requests): Legitimate interests; contract if we have agreed services.
• Newsletters & marketing: Consent; you may withdraw at any time.
• Compliance (legal requests, record-keeping): Legal obligation; legitimate interests (establish, exercise or defend legal claims).

4) Children

Our services are not directed to children under 16 in Romania for information society services relying on consent. If we learn we processed children’s data without appropriate consent, we will delete it. (Romania keeps the GDPR default age of 16.) GDPRhub

5) Retention

We keep personal data only as long as necessary for the purposes above:

• Contact/communication records: up to 2 years after last contact (unless required longer for legal reasons).
• Newsletter data: until you unsubscribe or we prune inactive lists.
• Technical logs: up to 12 months (security/debug).
• Cookies: per cookie lifetime (see Cookie Policy).

6) Sharing & recipients

We share data with:

• Service providers/processors (hosting, security, email, analytics, cookie consent, customer support).
• Public authorities where legally required.
  Processors are bound by contracts that meet GDPR requirements (Art. 28). Up-to-date categories and vendors appear in our Cookie Policy and/or consent manager.

7) International transfers

If data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and supplementary measures, or adequacy decisions, and we assess risk where relevant.

8) Your rights (GDPR Arts. 12–22)

You can request:

• Access, rectification, erasure (“right to be forgotten”), restriction, portability, and objection to processing based on legitimate interests; and withdraw consent at any time (without affecting prior processing).
  To exercise rights, email contact@realromania.info. We may seek verification and respond within one month (extendable by two months for complex requests).

You also have the right to lodge a complaint with the Romanian supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 București, Romania, anspdcp@dataprotection.ro, +40 318 059 211, dataprotection.ro.

9) Security

We implement technical and organizational measures appropriate to risk (TLS encryption in transit, access controls, least-privilege, backups and monitoring). No method of transmission or storage is completely secure.

10) Cookies & trackers

See our Cookie Policy for details, including how to manage consent.

11) Legal bases specific to Romania

We comply with Law no. 190/2018 (national GDPR implementation) and Law no. 506/2004 (privacy in electronic communications).

12) Changes

We may update this Policy occasionally. We will revise the “Effective date” and, where changes are material, we will provide a prominent notice.

13) Contact

For privacy queries: contact@realromania.info.