Privacy Policy

1. Data Controller

Controller: Romanian Association for Smart City (ARSC). For questions about data processing or to exercise the rights described below, contact us at:

• Email: info@arsc.ro
• Phone: +4031 425 4263
• Website: arsc.ro

2. Categories of Data

We only process data strictly necessary to respond to you and for the proper functioning of the website:

• Voluntarily provided contact data (name, email, phone, organisation, message) when you use the contact form or write to us.
• Minimal technical data (browser, OS, IP address, visited pages) collected via server logs for security and troubleshooting.
• Accessibility preferences stored locally in your browser, not on our servers.

We do not collect sensitive data and do not use third-party marketing or tracking cookies.

3. Purposes and Legal Basis (Art. 6 GDPR)

• Responding to inquiries - legitimate interest (Art. 6(1)(f) GDPR).
• Event registration / project entry - performance of contract or pre-contractual steps (Art. 6(1)(b) GDPR).
• Site security & troubleshooting - legitimate interest (Art. 6(1)(f) GDPR).
• Legal obligations - compliance with law (Art. 6(1)(c) GDPR).

4. Retention

• Contact messages: 24 months, then deleted or anonymised.
• Project entry files: edition duration + 5 years for archival.
• Server logs: max 90 days.
• Accessibility preferences: as long as they exist in your browser.

5. Recipients

Your data stays with ARSC, with limited exceptions:

• Technical providers (hosting, email) under DPA contracts.
• Jury and evaluating partners, only in the context of evaluating a contest entry, under confidentiality agreements.
• Public authorities, only upon a justified legal request.

We do not sell data and do not use automated profiling with legal effects.

6. Your Rights (Art. 13-22 GDPR)

• Access - obtain a copy of your data.
• Rectification - correct inaccurate data.
• Erasure (right to be forgotten).
• Restriction of processing.
• Data portability.
• Objection to processing based on legitimate interest.
• Withdraw consent at any time.
• Lodge a complaint with ANSPDCP (the Romanian DPA, anspdcp.ro).

For any request, email us at info@arsc.ro. We reply within 30 days.

7. Cookies

The site uses strictly necessary technical cookies only (session, language preference, accessibility preferences). No marketing, retargeting, or third-party analytics cookies. If analytics are added in the future, this policy will be updated and a consent banner will be shown.

8. Embedded External Content (YouTube)

The SCIA X archive page may embed YouTube video in “no-cookie” mode (youtube-nocookie.com), which sets no cookies until you press Play. If you play the video, YouTube/Google may collect data according to their privacy policy.

9. International Transfers

All main processing takes place in the EU/EEA. If a service provider processes data outside the EEA, transfers rely on Standard Contractual Clauses adopted by the European Commission.

10. Policy Changes

We may update this policy to reflect technical or legal changes. The current version shows the last update date above. Material changes will be highlighted on the site.