1. LEGAL BASIS FOR PROCESSING 1.1 In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR), the Cluj Cultural Center Association is obliged to process personal data collected through the online platform www.contemporar.ro in a secure manner and only for the purposes specified below.

2. PURPOSE OF PROCESSING 

2.1 The Cluj Cultural Center Association processes personal data collected directly from users/visitors through automated means. 

2.2 Personal data will be processed for the following purposes:

• Obtaining necessary information for the registration of applicants in various programs developed/exhibited/promoted by CCC through the website www.contemporar.ro;
• Making communications through the provided email address or phone number, including administrative communications or messages containing information about the Contemporar program and activities within this program;
• Verifying the validity and correctness of data entered in the application for participation in the program.

3. PROCESSED DATA 

3.1 By accessing and using the website www.contemporar.ro, the device used to access the site may automatically send information to the server hosting the web platform. In this way, the following personal data may be automatically collected:

The IP address of the device used to access the site;

The date and time of access;

The website that redirected to the page www.contemporar.ro;

The browser used, the operating system of the device used, as well as the name of the internet service provider; 3.2 Personal data may also be collected directly from users/visitors when they use the application forms for programs/events or the contact form found on the platform www.contemporar.ro. In this way, the following personal data may be collected:

Name and surname;

Email address;

Phone number;

Address;

Data and information regarding ideas, concepts, services, products, affiliated persons, etc.; Additionally, in case the applicant provides one or more links to specialized websites (e.g., Facebook, LinkedIn) where details about their activities can be viewed, the Organizer will also obtain this type of personal data.

4. TRANSMISSION OF PERSONAL DATA 

4.1 The information processed in the manners mentioned above is intended for use by the Cluj Cultural Center Association for the purposes specified in point 2 and may only be communicated to the following recipients and under the following circumstances: 

4.1.1 Public or private entities involved in verifying, monitoring, coordinating the Organizer’s activity, as well as public entities with control and oversight duties that may request access according to the law; 

4.1.2 The Organizer’s partners involved in implementing the programs/events promoted through the website; 

4.1.3 The IT service provider ensuring the functionality of the website www.contemporar.ro; 

4.1.4 When you have explicitly given your consent, according to Article 6(1)(a) of the General Data Protection Regulation (EU) No. 2016/679; 

4.1.5 When necessary to fulfill a legal obligation of the Cluj Cultural Center; 

4.1.6 When necessary to defend the legitimate interests pursued by the Cluj Cultural Center, except where the interests or fundamental rights and freedoms of the data subject prevail, particularly when the data subject is a child.

5. RIGHTS 

5.1 The General Data Protection Regulation recognizes a number of rights regarding personal data, including:

The right to information – you can request information about the activities related to the processing of personal data, the identity of the data controller and their representative, or the recipients of the collected data;

The right to rectification – inaccurate personal data can be corrected or completed;

The right to erasure – you can request the deletion of personal data if their processing was not lawful or in other cases provided by law;

The right to restrict processing – you can request the restriction of processing if the accuracy of the data is contested, as well as in other cases provided by law;

The right to object – you can object to data processing based on the legitimate interest of the Controller;

The right to data portability – you can request the personal data you provided in a format that can be automatically read or request that the data be transmitted to another operator;

The right to lodge a complaint and to address the courts – a complaint can be made to the National Supervisory Authority for Personal Data Processing and/or a legal action can be filed before the competent courts regarding the processing of personal data;

The right to withdraw consent – when processing is based on consent, you can withdraw it at any time. Withdrawal of consent will only affect future processing, while processing that occurred prior to the withdrawal remains valid;

The right not to be subject to automated decisions or profiling related to automated decisions – you can request human intervention concerning the processing or express your point of view regarding this type of processing.

6. FINAL PROVISIONS 

6.1 Access to personal data is granted only to authorized personnel and only for fulfilling specific tasks to meet the purposes mentioned, with the obligation to maintain confidentiality. 

6.2 The Organizer, together with the server owner supporting the platform www.contemporar.ro, implements physical, electronic, and administrative procedures to protect the personal information collected according to this policy. The website owner ensures that all personal data is accessible only with a password. Additionally, the website owner ensures that methods are in place to increase the website’s security (e.g., brute force attacks, SSL certificates, strong passwords, etc.). 

6.3 In case of a personal data security breach, the Organizer is obliged to comply with applicable legislation and notify both the affected individuals and the National Supervisory Authority for Personal Data Processing within 72 hours of the breach occurring. 

6.4 For more details about this Personal Data Processing Policy and to exercise any rights mentioned in point 5, you can send a written notice to the email address office@cccluj.ro or the physical address Str. Fluierașului nr. 3, Cluj-Napoca.