Privacy Policy

Last updated: 23.07.2026

This policy explains how Kónya Ádám Cultural Centre (Casa de Cultură Kónya Ádám) (hereinafter the “Organiser”, “we” or the “controller”) collects, uses and protects the personal data of users of the www.mindformers.ro website, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller information

Data controller: Kónya Ádám Cultural Centre (Casa de Cultură Kónya Ádám)
Address: 13 Kossuth Lajos Street, 520009 Sfântu Gheorghe, Covasna County, Romania
Tax ID (CIF): 4925603
Email: [email protected]
Phone: 0267 352 460

2. Categories of data collected

We collect the following personal data through the registration forms available on the website:

  • Full name
  • Email address
  • Phone number
  • Status: student / teacher
  • Educational institution
  • Class/grade
  • Student ID / record book number (to validate student status)
  • Days of attendance
  • Other voluntarily provided notes

3. Purpose and legal basis of processing

We process the data for the following purposes:

  • registration and organisation of attendance at the MindFormers event — basis: your consent [Art. 6(1)(a) GDPR];
  • administrative and informational communications strictly related to the event — basis: the Organiser’s legitimate interest in ensuring the smooth running of the event [Art. 6(1)(f) GDPR];
  • anonymised participation statistics and analytics cookies — basis: your consent [Art. 6(1)(a) GDPR], given through the cookie banner.

4. Mandatory nature of providing data

The data marked as mandatory in the registration forms are necessary for registration and attendance at the event. Providing this data is a condition for processing the registration. If you do not provide the mandatory data, we will not be able to register your attendance at the event. Data marked as optional may be provided voluntarily, and not providing it does not affect the registration.

5. Children’s privacy

The event is also aimed at students, so some of the collected data concerns minors. For minors under the age of 16, consent-based processing is carried out only with the consent of the holder of parental responsibility (parent or legal guardian), in accordance with Art. 8 GDPR. By registering a minor, the person completing the form confirms that they have the legal right to provide this data. We treat data concerning minors with increased care and use it exclusively for the purposes described above.

6. Recipients and data transfers

The data may be shared, to the extent strictly necessary, with:

  • technical partners involved in operating the website and organising the event (hosting/IT providers, the Eventim ticketing platform);
  • web analytics service providers — Google (Google Analytics), only if you have consented to analytics cookies;
  • public authorities, under the conditions and within the limits provided by law.

Certain providers (e.g. Google) may process data on servers located outside the European Economic Area (in particular the USA). In such cases, the transfer is carried out on the basis of appropriate safeguards, such as an adequacy decision of the European Commission (the EU–US Data Privacy Framework) or standard contractual clauses [Art. 45–46 GDPR]. A copy of the safeguards applied can be obtained on request by contacting us at the email address indicated in point 1. We do not transfer data outside the EEA without such safeguards.

7. Data retention period

We retain personal data:

  • for the period necessary to organise and hold the event;
  • for a maximum of 1 year after the end of the event, unless a legal obligation requires a longer period.

8. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure — for example: encrypted transmission via HTTPS, restricted access to data based on the “need-to-know” principle, and access logging.

9. Rights of data subjects

Under the GDPR, you have the following rights:

  • the right of access;
  • the right to rectification and erasure (the “right to be forgotten”);
  • the right to restriction of processing;
  • the right to object to processing;
  • the right to data portability;
  • the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
  • the right to lodge a complaint with the supervisory authority.

How to exercise your rights

To exercise any of the above rights, you can contact us in writing at the email address [email protected] or at the postal address 13 Kossuth Lajos Street, 520009 Sfântu Gheorghe, Covasna County, Romania. We will respond within one month at most of receiving the request; this period may be extended by two months for complex requests, in which case you will be informed.

You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) — B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest; email: [email protected]; web: www.dataprotection.ro.

10. Automated decision-making and profiling

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you, within the meaning of Art. 22 GDPR. The analytics cookies described below are used solely for aggregated statistics on the use of the website, not for individual profiling with effects on you.

11. Cookies

The website uses cookies for functionality and for statistical analysis. Analytics cookies are only placed after obtaining your consent, expressed through the cookie banner. For full details — including the list of cookies, their providers and durations — please see the Cookie Policy.

12. Changes to this policy

This policy may be updated periodically. The current version is always available on the website, with the date of the last update indicated.